DATA PRIVACY POLICY

Privacy Policy

The protection of your personal data is important to us. With this Privacy Policy, we inform you about how we process personal data when you visit our website and in connection with our online presences. Processing is carried out in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and, where applicable, the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

The controller responsible for data processing on this website is:

Bruski Smeets & Lange Rechtsanwälte Partnerschaft mbB
Berliner Str. 27
60311 Frankfurt am Main
Germany
Email: info@bruskismeetslange.com
Telephone: +49 (0)69 – 400 50 13 0
Fax: +49 (0)69 – 400 50 13 99

2. Data Protection Officer

You can contact the Data Protection Officer at:

Bruski Smeets & Lange Rechtsanwälte Partnerschaft mbB
Attn. Mr Yannick Thoma
Berliner Str. 27
60311 Frankfurt am Main
Germany
Email: datenschutz@bruskismeetslange.com

3. Accessing the Website and Server Log Files

When you access our website, information is automatically transmitted by the browser on your device to the server hosting our website. This information is temporarily processed in so-called server log files.

In particular, the following data is processed:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the requested file
  • Referrer URL
  • Browser used and, where applicable, the operating system of your device
  • Name of your access provider

The processing is carried out in order to enable delivery of the website, ensure the stability and security of our systems, and administer the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and functional operation of the website.

The server log files are stored for a period of 14 days and subsequently deleted unless further retention is exceptionally required for the investigation of misuse or security incidents.

4. Hosting

Our website is hosted by the following provider:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

For the purpose of providing the website, IONOS processes, on our behalf, connection data and server log files in particular. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.

The hosting service is used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast and reliable provision of our online services.

Further information on data processing by IONOS can be found in the IONOS Privacy Policy at: https://www.ionos.de/terms-gtc/datenschutzerklaerung

5. Cookies and Similar Technologies

We use cookies and comparable technologies on our website. These consist of information that can be stored on or read from your device. In Germany, Section 25 TDDDG is applicable to the use of such technologies.

We distinguish between:

  • technically necessary technologies that are required in order to provide the website or functions expressly requested by you
  • technologies requiring consent, in particular for statistical, analytical or marketing purposes

Where the use of a technology is not strictly necessary, information is stored on or read from your device only with your prior consent pursuant to Section 25(1) TDDDG. In such cases, the subsequent processing of personal data is carried out on the basis of Art. 6(1)(a) GDPR.

We use technically necessary cookies and comparable technologies on the basis of Section 25(2) TDDDG. Where personal data is processed in this context, such processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free and user-friendly provision of the website.

You may withdraw or adjust any consent you have given at any time with effect for the future via our consent management tool. Details regarding the cookies and comparable technologies used, their respective storage periods, providers and purposes can be viewed at any time in our consent management tool.

7. Google Analytics

Where you have given your consent, we use Google Analytics on this website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables us to statistically evaluate user behaviour on our website and improve our online services.

Google Analytics uses cookies and comparable technologies through which information is stored on or read from your device. The information collected in this context may include, in particular, truncated IP addresses, information relating to your browser and device, usage data, page views, duration of visits and interactions with the website.

We use Google Analytics only with IP anonymisation enabled. This means that your IP address is normally truncated by Google within the European Union or the European Economic Area before any further processing takes place. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there.

Google Analytics is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via our consent management tool.

The retention period for user data associated with Google Analytics is generally up to 14 months, unless a shorter retention period has been configured in the specific settings.

Third-Country Transfers (Google Analytics)

In connection with the use of Google Analytics, personal data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework; where data is transferred to Google LLC, we therefore rely on the European Commission’s adequacy decision regarding the EU-U.S. Data Privacy Framework. Where, in individual cases, additional recipients are involved that are not covered by the adequacy decision, the transfer may additionally be based on the Standard Contractual Clauses approved by the European Commission.

Despite these measures, it cannot be completely ruled out that U.S. authorities may gain access to personal data without effective legal remedies under European data protection law being available.

Further information can be found at:

Opt-Out Options

You can prevent your data from being collected by Google Analytics by declining your consent via our consent management tool or by subsequently withdrawing it. In addition, you may install the browser add-on for disabling Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=de.

Where an additional opt-out mechanism is technically provided on the website, it applies only to the respective device and browser being used.

8. Disclosure of Data

Your personal data is transferred to third parties only where this is permitted under data protection law. Data may in particular be disclosed:

  • where you have given your explicit consent pursuant to Art. 6(1)(a) GDPR,
  • where disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims,
  • where we are legally obliged to disclose the data pursuant to Art. 6(1)(c) GDPR,
  • where this is necessary pursuant to Art. 6(1)(b) GDPR for taking steps prior to entering into a contract or for the performance of a contract,
  • or where we use external service providers as processors pursuant to Art. 28 GDPR.

9. Online Presence on LinkedIn

We maintain a company page on LinkedIn. When you visit our LinkedIn page, personal data is processed both by LinkedIn and by us, including, in particular, usage data, interaction data, communications and statistical analyses regarding the use of our company page (so-called “Page Insights”).

Where LinkedIn provides us with such Page Insights, the associated processing of personal data is carried out under joint controllership with LinkedIn within the meaning of Art. 26 GDPR. The respective roles and responsibilities of LinkedIn and us are set out in the “Page Insights Joint Controller Addendum” provided by LinkedIn, available at: https://www.linkedin.com/legal/l/page-joint-controller-addendum.

Processing is carried out for the purposes of presenting our firm to the public, communicating with interested parties and clients, and analysing the reach of our company profile. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing up-to-date information and communication via digital channels.

It is possible that, in connection with the use of LinkedIn, data may also be processed outside the European Union, in particular in the United States. Further information regarding data processing by LinkedIn, including the contact details of LinkedIn’s Data Protection Officer and a description of the joint controllership arrangement between LinkedIn and us, can be found at: https://www.linkedin.com/legal/privacy-policy?l=de_DE.

10. Data Subject Rights

Under the GDPR, you have the following rights in particular:

  • pursuant to Art. 15 GDPR, to request information regarding your personal data processed by us,
  • pursuant to Art. 16 GDPR, to request without undue delay the rectification of inaccurate personal data or completion of incomplete personal data stored by us,
  • pursuant to Art. 17 GDPR, to request the deletion of your personal data, provided that no statutory exceptions apply,
  • pursuant to Art. 18 GDPR, to request restriction of processing,
  • pursuant to Art. 20 GDPR, to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller,
  • pursuant to Art. 7(3) GDPR, to withdraw any consent you have given at any time with effect for the future,
  • pursuant to Art. 21 GDPR, to object to processing based on Art. 6(1)(f) GDPR.

To exercise your rights, it is sufficient to contact us at datenschutz@bruskismeetslange.com.

11. Right to Lodge a Complaint

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law. In particular, the competent supervisory authority may be that of your place of residence, your place of work or the location of our law firm.

For our law firm, the competent authority is, in particular:

The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden

12. Right to Object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to such processing. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing purposes.

To exercise your right to object, it is sufficient to send an email to datenschutz@bruskismeetslange.com.

13. Data Security

We use appropriate technical and organisational security measures to protect your data against loss, manipulation and unauthorised access. Our website uses TLS encryption to protect transmitted content.

Our security measures are continuously adapted in line with technological developments.

14. Current Version of this Privacy Policy

This Privacy Policy is current as of June 2026. Due to the further development of our website or changes in statutory or regulatory requirements, it may become necessary to amend this Privacy Policy.

The current version is available at https://bruskismeetslange.com/datenschutzhinweise.html.

Admin Login