Privacy Policy

We are pleased about your visit to our website www.brs-rechtsanwaelte.de and your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data, which we collect when you visit our website. Our data protection practices are in accordance with the legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations arising from the GDPR. These can be found in Articles 13 and 14 et seq. of the GDPR.

A. Person responsible

The controller within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the controller is:

BETHGE.REIMANN.STARI Attorneys at Law Partnership mbBKurfürstendamm 6710707 Berlin Germany E-Mail: brs@brs-rechtsanwaelte.de Tel.: 030 8904920 Fax: 030 89049210

B. Provision of the website and creation of log files

Each time you access our website, our system automatically records data and information from the device you are using (e.g. computer, mobile phone, tablet, etc.).

I. What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used; (2) The operating system of the accessing device; (3) Host name of the accessing computer; (4) The IP address of the accessing device; (5) Date and time of access; (6) Websites and resources (images, files, other page content) accessed on our website; (7) Websites from which the user's system accessed our website (referrer tracking); (8) Notification as to whether the retrieval was successful; (9) Amount of data transferred

This data is stored in our system's log files. This data is not stored together with a specific user's personal data, so individual site visitors cannot be identified.

II. Legal basis for the processing of personal data

Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in ensuring the achievement of the purpose described below.

III. Purpose of data processing

The temporary (automated) storage of data is necessary for the duration of a website visit to enable delivery of the website. Personal data is also stored and processed to maintain the compatibility of our website for as many visitors as possible, and to combat misuse and troubleshoot problems. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to respond as quickly as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. Furthermore, the data helps us optimize the website and generally ensure the security of our information technology systems.

IV. Duration of storage

The aforementioned technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than three months after accessing our website.

V. Disclosure

We assure you that we will not share your personal data with third parties unless we are legally obligated to do so or you have expressly consented in advance. To the extent that we use third-party services to carry out and process data processing, we have concluded data processing agreements with them or have obligated them to comply with data protection regulations.

VI. Protection of minors

Persons under the age of 18 should not submit any personal data to us without the consent of their parents or guardians. We do not actively request personal data from children and young people. We do not knowingly collect such data and do not share it with third parties.

VII. Possibility of objection and deletion

You can object to the processing of your data at any time in accordance with Art. 21 GDPR and request the deletion of your data in accordance with Art. 17 GDPR. You can find information about your rights and how to exercise them at the bottom of this privacy policy.

C. Special features of the website

Our site offers you various features, which involve collecting, processing, and storing personal data. Below, we explain what happens to this data:

Contact form(s)

• What personal data is collected and to what extent is it processed? We will process the data you enter in our contact forms, which you have entered into the input mask of the contact form, to fulfill the purpose stated below.
• Legal basis for the processing of personal data: Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent through a clear affirmative action or behavior or explicit consent)
• Purpose of data processingWe will only use the data collected via our contact form(s) to process the specific contact request received through the contact form.

• Duration of storageAfter your request has been processed, the data collected will be deleted immediately, unless there are statutory retention periods.
• Right of revocation and deletionThe revocation and deletion options are governed by the general provisions on the right of revocation and deletion under data protection law described below in this data protection declaration.
• Necessity of providing personal data: The use of contact forms is voluntary and is neither contractually nor legally required. You are not obligated to contact us via the contact form; you can also use the other contact options provided on our website. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not provide the required information in the contact form, you will either not be able to send the request, or we will unfortunately not be able to process your request.

D. Statistical analysis of visits to this website - Webtracker

When you access this website or individual files on the website, we collect, process, and store the following data: IP address, website from which the file was accessed, file name, date and time of access, data volume transferred, and notification of the success of the access (so-called web log). We use this access data exclusively in a non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

• Facebook Connect. We use the Facebook Connect service on our site provided by Meta Platforms Ireland Ltd., Merrion Road, D04 X2K5 Dublin 4, Ireland. Email: impressum-support@support.facebook.com, Website: http://www.facebook.com/. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision regarding the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection of the GDPR applies to the transmission. The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, which you have given on our website. Via Facebook Connect, users can use their Facebook profile to simplify registration with other web services. You can access the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list. You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this data protection declaration. Further information on the handling of the transmitted data can be found in the provider's data protection declaration at https://www.facebook.com/privacy/policy/. The provider also offers an opt-out option at https://www.facebook.com/privacy/policy/.
• Friendly Captcha We use the Friendly Captcha service on our website provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany, email: hello@friendlycaptcha.com, website: https://friendlycaptcha.com/. Personal data is transmitted exclusively to servers in the European Union. The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in achieving the purpose described below. Through the Friendly Captcha service, we protect our website, and in particular the input options on our website, such as contact forms, from bots and cyber attacks. To do so, the customer must solve a captcha to verify their authenticity before using our input options. With regard to processing, you have the right of objection set out in Art. 21. Further information can be found at the end of this privacy policy. Further information on the handling of the transmitted data can be found in the provider's privacy policy at https://friendlycaptcha.com/legal/privacy-end-users/.
• E. LinkedInWe use the technical platform and services of LinkedIn Ireland Unlimited Community, Wilton Place, Dublin 2, Ireland, to provide the information service offered.Please note that you use this LinkedIn page and its functions at your own risk. This particularly applies to interactive functions such as commenting or rating. Details about which data is processed by LinkedIn and for what purposes can be found in LinkedIn's privacy policy (https://de.linkedin.com/legal/privacy-policy?).When you visit our company page on LinkedIn, LinkedIn records, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the operator of the LinkedIn page, with statistical data on the use of the LinkedIn page.The data collected in this context is processed by LinkedIn Ireland Unlimited Community and may also be transferred to countries outside the European Union. Further information on this can be found in the LinkedIn help section (https://www.linkedin.com/help/linkedin/answer/a1343190/). What information LinkedIn receives and how this information is used is generally described in LinkedIn's privacy policy. You can also find contact options for LinkedIn there. How LinkedIn uses the data from visits to LinkedIn pages for its own purposes, to what extent activities on the LinkedIn page are assigned to individual users, how long LinkedIn stores this data and whether data from a visit to the LinkedIn page is passed on to third parties is not stated conclusively and clearly by LinkedIn and is not known to us. How LinkedIn uses the data from visits to LinkedIn pages for its own purposes, to what extent activities on the LinkedIn page are assigned to individual users, how long LinkedIn stores this data and whether data from a visit to the LinkedIn page is passed on to third parties is not stated conclusively and clearly by LinkedIn and is not known to us. As the provider of a LinkedIn company page, we do not collect or process any other data from your use of our service.

F. Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, so-called web services. When you access our website, these external providers may receive personal information about your visit to our website. This may involve processing data outside the EU. You can prevent this by installing an appropriate browser plug-in or disabling scripts in your browser. This may result in functional limitations on the websites you visit. We use the following external web services:

• Amazon CloudFront (CDN) We use the Amazon CloudFront (CDN) service on our website provided by Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg, Luxembourg, email: privacyshield@amazon.com, website: https://aws.amazon.com/de/cloudfront/. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision regarding the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to transmission. The legal basis for processing personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in achieving the purpose described below. Amazon CloudFront CDN is a content delivery network that mirrors our content across various servers to ensure optimal accessibility worldwide. You can find the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list. With regard to processing, you have the right of objection listed in Art. 21. Further information can be found at the end of this privacy policy. Further information on the handling of transferred data can be found in the provider's privacy policy at https://aws.amazon.com/de/privacy/?nc1=f_pr.
• Filestack. We use the Filestack service on our website, provided by Filestack Inc., 122 E Houston St, 2nd Floor, 78205 San Antonio, USA, email: privacy@filestack.com, website: https://www.filestack.com/. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision regarding the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the transmission. The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, which you have given on our website. Filestack is an API and content management system that allows us to upload files to our website. You can find the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list. You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy. Further information on the handling of transferred data can be found in the provider's privacy policy at https://www.filestack.com/privacy/.
• JsdelivrWe use the Jsdelivr service provided by Prospect One Sp., Krolweska 65A, 30-081 Krakow, Poland, email: hello@prospectone.io, website: https://prospectone.io/. Personal data is transmitted exclusively to servers in the European Union. The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in achieving the purpose described below. JSDelivr is a content delivery network that mirrors our content across various servers to ensure optimal accessibility worldwide. With regard to processing, you have the right to object as set out in Art. 21. Further information can be found at the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.jsdelivr.com/privacy-policy-jsdelivr-com.
• Mapbox: We use the Mapbox service on our website from Mapbox, Inc., 740 15th Street NW, 5th Floor, 20005 Washington DC, United States, email: copyright@mapbox.com, website: https://www.mapbox.com/. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision regarding the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service provider is certified under the DPF, meaning that the usual level of protection under the GDPR applies to transmission. The legal basis for processing personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in achieving the purpose described below. A map service is integrated into our website via Mapbox, which enables navigation and the display of our business locations. With regard to processing, you have the right of objection set out in Art. 21. Further information can be found at the end of this privacy policy. Further information on the handling of transferred data can be found in the provider's privacy policy at https://www.mapbox.com/legal/privacy/.
• Multiscreensite - Duda We use the Multiscreensite - Duda service on our website from Duda Inc., 577 College Avenue, 94306 Palo Alto, United States, email: privacy@duda.com, website: http://www.duda.com/. Data may also be transferred to a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection required by the GDPR cannot be guaranteed during transfer, as it cannot be ruled out that authorities in the third country, for example, may access the data collected. The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in achieving the purpose described below. This service is the technical system behind our website for operating it. We require the integration so that we can display our website to you. The host of our website has concluded a data processing agreement with Duda Inc. and transmits the data based on standard contractual clauses. With regard to processing, you have the right to object as set out in Art. 21. Further information can be found at the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.duda.co/legal/privacy.
• Legal text snippets and modules. We use the Legal Text Snippet and Module service provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: https://www.website-check.de/. Personal data is transmitted exclusively to servers in the European Union. The legal basis for processing is Art. 6 (1) (c) GDPR. The use of this service helps us comply with our legal obligations. The service reloads the content of our legal texts on our website. The integration on our site ensures that the most up-to-date legal texts are reloaded. This integration may also allow additional technical modules to be loaded with regard to legal texts or legally required elements. You can find your rights with regard to processing at the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.
• Website-Check Seal We use the Website-Check Seal service on our website provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: https://www.website-check.de/. Personal data is transmitted exclusively to servers in the European Union. The legal basis for processing personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in achieving the purpose described below. The Website-Check GmbH script is the technical integration of the Website-Check Seal. With this seal, we want to demonstrate that we take data protection very seriously. Data is transmitted to Website-Check GmbH for the delivery and display of the seal on our website. With regard to processing, you have the right of objection set out in Art. 21. Further information can be found at the end of this privacy policy. Further information on the handling of transferred data can be found in the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.
• website.comWe use the website.com service provided by Website.com Solutions Inc., PO Box 43083 Cascade, BC V5G 4S2 Burnaby, Canada, on our website. Data is also transferred to a third country outside the EU. An adequacy decision by the Commission exists for this third country. You can find a current list of all adequacy decisions on the EU Commission website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de). The legal basis for processing personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in achieving the purpose described below. This service is the technical system behind our website for operating our website. We require the integration so that we can display our website to you. With regard to processing, you have the right to object as set out in Art. 21. Further information can be found at the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.website.com/privacy-policy/.

G. Special data protection information

For the processing of personal data in the client relationship, for contact outside of this website and for application procedures, our special data protection information also applies:

• Special data protection information when concluding contracts
• Special data protection information in the notary's office
• Special data protection information for contacts
• Special data protection information for application procedures

H. Data security and data protection, communication by email

Your personal data is protected by technical and organizational measures during collection, storage, and processing to ensure that it is not accessible to third parties. We cannot guarantee complete data security during transmission to our IT systems if you communicate unencrypted via email. Therefore, we recommend encrypted communication or sending information with a high level of confidentiality by post.

I. Right to information and requests for correction – Deletion & restriction of data – Revocation of consent – Right of objection

I. Right to information

You have the right to request confirmation as to whether we process your personal data. If so, you have the right to information about the information specified in Art. 15 (1) GDPR, provided that the rights and freedoms of others are not adversely affected (see Art. 15 (4) GDPR). We will also be happy to provide you with a copy of the data.

II. Right to rectification

According to Art. 16 GDPR, you have the right to have any personal data we have stored that is incorrect (such as address, name, etc.) corrected at any time. You can also request that the data we have stored be completed at any time. The corresponding adjustment will be made immediately.

III. Right to erasure

According to Art. 17 (1) GDPR, you have the right to have us delete the personal data collected about you if

• the data is either no longer needed;
• due to the withdrawal of your consent, the legal basis for processing no longer applies;
• you have objected to the processing and there are no legitimate grounds for the processing;
• your data is processed unlawfully;
• a legal obligation requires this or a collection has taken place in accordance with Art. 8 (1) GDPR.

According to Art. 17 (3) GDPR, this right does not exist if

• processing is necessary for exercising the right to freedom of expression and information;
• Your data has been collected on the basis of a legal obligation;
• processing is necessary for reasons of public interest;
• the data is necessary to assert, exercise or defend legal claims.

IV. Right to restriction of processing

According to Article 18 (1) GDPR, you have the right to request the restriction of the processing of your personal data in certain cases. This is the case if

• you contest the accuracy of the personal data;
• the processing is unlawful and you do not consent to erasure;
• the data are no longer required for the purpose of processing, but the data collected serve to assert, exercise or defend legal claims;
• an objection to the processing has been lodged pursuant to Art. 21 (1) GDPR and it is still unclear which interests prevail.

V. Right of revocation

If you have given us your express consent to process your personal data (Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR), you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of your consent until the revocation.

VI. Right to object

According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected based on Art. 6 (1) (f) GDPR (within the scope of a legitimate interest). You only have this right if there are specific circumstances that speak against the storage and processing.

VII. How do you exercise your rights?

You can exercise your rights at any time by contacting us using the contact details below:

BETHGE.REIMANN.STARI Rechtsanwälte Partnerschaft mbBKurfürstendamm 6710707 Berlin GermanyE-Mail: datenschutz@brs-rechtsanwaelte.de Tel.: 030 8904920 Fax: 030 89049210

VIII. Right to data portability

According to Art. 20 GDPR, you have the right to have your personal data transferred to us. We will provide this data in a structured, common, and machine-readable format. The data can be sent either to you or to a controller designated by you.

We will provide you with the following data upon request in accordance with Art. 20 (1) GDPR:

• Data collected on the basis of express consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR;
• Data that we have received from you in accordance with Art. 6 (1) (b) GDPR within the framework of existing contracts;
• Data that has been processed as part of an automated procedure.

We will transfer your personal data directly to a controller of your choice, provided this is technically feasible. Please note that, according to Art. 20 (4) GDPR, we are not permitted to transfer data that interferes with the freedoms and rights of other individuals.

IX. Right to lodge a complaint with the supervisory authority pursuant to Art. 77 (1) GDPR

If you suspect that your data is being processed unlawfully on our website, you can of course seek judicial clarification of the issue at any time. In addition, you have every other legal option open to you. Irrespective of this, you have the option of contacting a supervisory authority under Art. 77 (1) GDPR. You have the right to lodge a complaint under Art. 77 GDPR in the EU member state of your residence, place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority you want to contact from the locations listed above. The supervisory authority to which the complaint was submitted will then inform you of the status and outcome of your submission, including the possibility of a judicial remedy under Art. 78 GDPR.

J. Information about the use of cookies

• What personal data is collected and to what extent is it processed? We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. So-called "cookies" are small text files that your browser can store on your access device. These text files contain a characteristic character string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also referred to as "setting a cookie." Cookies can be set both by the website itself and by external web services. Cookies are set by our website or external web services to maintain the full functionality of our website, improve user-friendliness, or pursue the purpose specified with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, e.g., a unique or random ID, so that we can offer more personalized services. Details are listed in the table below.
• Legal basis for the processing of personal dataIf the cookies are processed on the basis of consent in accordance with Art. 6 (1) (a) GDPR, this consent also counts as consent within the meaning of Section 25 (1) TDDDG for the setting of the cookie on the user's device. If another legal basis is stated under the GDPR (e.g. for the performance of the contract or to comply with statutory obligations), the storage or setting takes place on the basis of an exception in accordance with Section 25 (2) TDDDG. This applies "if the sole purpose of storing information in the end user's terminal equipment or the sole purpose of accessing information already stored in the end user's terminal equipment is to carry out the transmission of a message over a public telecommunications network" or "if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary for the provider of a digital service to be able to provide a digital service expressly requested by the user". The applicable legal basis is set out in the cookie table listed later in this section.
• Purpose of data processing: Cookies are set by our website or external web services to maintain the full functionality of our website, improve user-friendliness, or to pursue the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, e.g., a unique or random ID, so we can offer more personalized services. Details are listed in the table below.
• Duration of storage: Our cookies are stored until they are deleted in your browser or, in the case of a session cookie, until the session expires. Details are listed in the table below.
• Right of objection and removalYou can set your browser to generally prevent cookies from being set. You can then decide on a case-by-case basis whether to accept cookies or to accept cookies in general. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.