Data Protection
1. Data protection at a glance
The following information provides an overview of which personal data is processed when you visit this website and for what purposes this is done. Personal data means any data with which you can be personally identified. Detailed information can be found in the following sections of this privacy policy.
2. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Marcel Ruhlmann, LL.M. (UCT)
Attorney (Rechtsanwalt)
Fontanestraße 3
14193 Berlin
Telephone: +49 (0)30 896 45 855
E-mail: ruhlmann@ruhlmann-law.de
3. Hosting
This website is hosted by an external service provider. The provider is:
united-domains AG
Gautinger Straße 10
82319 Starnberg
Germany
The personal data collected in the course of using this website is processed on the servers of the host. This may include in particular IP addresses, metadata and communication data, log data and other data that arise when the website is accessed and used. Processing by the host is carried out on the basis of Art. 6 (1) (b) GDPR (provision of the website for the initiation and performance of client relationships) and Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient provision of the online offering).
A data processing agreement pursuant to Art. 28 GDPR has been concluded with the host.
4. Data collection when visiting the website
4.1 Server log files
When you access this website, the provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are in particular:
– browser type and browser version
– operating system used
– referrer URL
– hostname of the accessing computer
– date and time of the server request
– IP address
This data is not merged with other data sources.
The processing of this data is based on Art. 6 (1) (f) GDPR. The legitimate interest lies in the technical provision of the website, ensuring system security and stability, and error analysis. Insofar as information on your terminal device is accessed in this context, this is done on the basis of Section 25 (2) no. 2 TTDSG, as this is absolutely necessary in order to enable the use of the website expressly requested by you.
4.2 Cookies and similar technologies
This website uses cookies and similar technologies (e.g. local storage) to provide certain functions and to store your settings.
a) Technically necessary cookies
We use only technically necessary cookies that are required for the operation and functionality of the website (e.g. to display the website, to store your cookie settings, for IT security). The storage of and access to this information is based on Section 25 (2) no. 2 TTDSG. The subsequent processing of personal data is carried out on the basis of Art. 6 (1) (f) GDPR. The legitimate interest lies in providing a functional and secure website.
b) Consent tool (consent banner)
When you first access the website, you will be shown a notice regarding the use of cookies. Via this consent tool, you can set your preferences for the use of non-essential cookies. Currently, no tracking or analytics tools are used; the consent tool is used in particular to document your decision and to enable you to manage your settings. The use of the consent tool is based on Art. 6 (1) (f) GDPR (legitimate interest in a data protection-compliant documentation of consent) and Section 25 (2) no. 2 TTDSG (strictly necessary storage of your selection).
c) Storage period and control
Cookies are sometimes stored only for the duration of the session (“session cookies”), and sometimes beyond that. You can configure your browser settings so that cookies are deleted or rejected. In that case, not all functions of the website may be available.
5. Contact
5.1 Contact by e-mail or telephone
If you contact me by e-mail or telephone, the personal data you transmit (e.g. name, contact details, content of the enquiry) will be processed for the purpose of dealing with your request.
The legal basis is Art. 6 (1) (b) GDPR, insofar as the contact is related to the initiation or performance of a client relationship. Otherwise, processing is carried out on the basis of Art. 6 (1) (f) GDPR. The legitimate interest lies in responding to enquiries and communicating with (potential) clients.
The data will be erased as soon as it is no longer required for the purpose for which it was collected and there are no statutory retention obligations to the contrary.
5.2 Contact via WhatsApp
A WhatsApp symbol is integrated on this website, via which you can contact me directly using WhatsApp. The provider of WhatsApp is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you click on the WhatsApp symbol, WhatsApp will open in a separate application or in the browser. Only from that point in time does data processing by WhatsApp take place. WhatsApp is responsible for this processing. In this context, I receive the data you transmit via WhatsApp and process it in order to handle your enquiry.
Processing by me is carried out on the basis of Art. 6 (1) (b) GDPR, insofar as the communication serves the initiation or performance of a client relationship, or on the basis of Art. 6 (1) (f) GDPR (legitimate interest in fast and user-friendly communication). Please note that WhatsApp processes its own data for its own purposes. For details, please refer to WhatsApp’s privacy policy.
If you do not wish to communicate via WhatsApp, you can alternatively contact me at any time by telephone or e-mail.
6. Integration of Instagram
This website integrates functions and content of the “Instagram” service in order to automatically display current images from my Instagram profile. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).
When you access a page on which Instagram content is integrated, a connection to Meta’s servers is established. In this process, personal data, in particular IP address, date and time of access, technical information about the browser and terminal device and, where applicable, further usage data may be transmitted to Meta. If you are logged in to Instagram or Facebook, Meta can associate this visit with your account there.
Meta and I are jointly responsible for the collection of your data and its transmission to Meta in connection with the integration of Instagram content (Art. 26 GDPR), in accordance with the case law of the Court of Justice of the European Union on joint controllership in relation to social media offerings. Further processing of the data by Meta is the sole responsibility of Meta.
The integration of Instagram is carried out for the purpose of presenting my law firm and my content in a contemporary manner and for communication with (potential) clients and interested parties. The legal basis for processing by me is Art. 6 (1) (f) GDPR. The legitimate interest lies in the external presentation of the firm and interaction with users. Insofar as Meta uses cookies or similar technologies and consent is required for this under Section 25 (1) TTDSG, Art. 6 (1) (a) GDPR, processing will only take place if you have given this consent in your device or account settings or via appropriate consent mechanisms.
Information on data processing by Meta, the underlying legal bases, the categories of data processed, storage periods and the joint controllership under Art. 26 GDPR can be found in Meta’s data policy for Instagram.
You can exercise your rights (e.g. access, erasure, objection) both vis-à-vis me and vis-à-vis Meta. I will forward requests that concern processing by Meta to Meta, insofar as this is necessary.
7. Integration of anwalt.de widgets
This website integrates functions and content of the portal anwalt.de (e.g. review widgets, profile or article extracts). The provider is anwalt.de services AG, Rechtsanwaltsgesellschaft, Rauchstraße 9, 81679 Munich.
When you access a page on which an anwalt.de widget is integrated, a connection to the servers of anwalt.de is established. In this process, personal data, in particular IP address, date and time of access, technical information about the browser and terminal device and, where applicable, further usage data may be transmitted to anwalt.de.
The integration of anwalt.de widgets is carried out for the purpose of the external presentation of my law firm, in particular to display profile information, reviews and specialist articles. The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest lies in the transparent presentation of my services and the provision of information to (potential) clients. Insofar as anwalt.de uses cookies or similar technologies and consent is required for this under Section 25 (1) TTDSG, Art. 6 (1) (a) GDPR, processing by anwalt.de is carried out on the basis of your consent.
Further information on data processing by anwalt.de can be found in the privacy policy of anwalt.de.
8. External links
This website contains links to external websites, in particular to my profile page and to articles on anwalt.de as well as to my Instagram presence. If you click on an external link, you will be redirected to the website of the respective provider. From that point in time, data processing is carried out under the sole responsibility of the respective provider. Please refer to the respective providers’ privacy policies.
9. Storage period
Unless a more specific storage period is stated in this privacy policy, personal data will be erased as soon as the purpose of processing ceases to apply and there are no statutory retention obligations (in particular under commercial and tax law) to the contrary. In the case of statutory retention obligations, erasure takes place after expiry of the respective periods.
10. Your rights as a data subject
Within the framework of the applicable legal provisions, you have the following rights:
– right of access to the data stored about you (Art. 15 GDPR)
– right to rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
– right to erasure (Art. 17 GDPR), insofar as there are no statutory retention obligations to the contrary
– right to restriction of processing (Art. 18 GDPR)
– right to data portability (Art. 20 GDPR)
– right to object to the processing of your personal data (Art. 21 GDPR)
– right to withdraw consent given at any time with effect for the future (Art. 7 (3) GDPR)
To exercise your rights, you can contact me at any time using the contact details given above.
11. Right to object under Art. 21 GDPR
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data which is based on Art. 6 (1) (f) GDPR. I will then no longer process the personal data, unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is connected with such direct marketing. In the event of an objection, personal data will no longer be processed for direct marketing purposes.
12. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The competent authority for Berlin is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Telephone: +49 (0)30 13889-0
E-mail: mailbox@datenschutz-berlin.de
13. Up-to-dateness and amendment of this privacy policy
This privacy policy is currently valid. Due to the further development of the website or because of changed statutory or regulatory requirements, it may become necessary to amend this policy. The current version can be accessed on this website at any time.
