Privacy Policy
The protection of your personal data is important to us. With this Privacy Policy, we inform you about how we process personal data when you visit our website and in connection with our online presences. Processing is carried out in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and, where applicable, the German Telecommunications Digital Services Data Protection Act (TDDDG).
1. Controller
The controller responsible for data processing on this website is:
Bruski Smeets & Lange Rechtsanwälte Partnerschaft mbBBerliner Str. 27
60311 Frankfurt am Main
Germany
Email: info@bruskismeetslange.com
Telephone: +49 (0)69 – 400 50 13 0
Fax: +49 (0)69 – 400 50 13 99
2. Data Protection Officer
You can contact the Data Protection Officer at:
Bruski Smeets & Lange Rechtsanwälte Partnerschaft mbBAttn. Mr Yannick Thoma
Berliner Str. 27
60311 Frankfurt am Main
Germany
Email: datenschutz@bruskismeetslange.com
3. Accessing the Website and Server Log Files
When you access our website, information is automatically transmitted by the browser on your device to the server hosting our website. This information is temporarily processed in so-called server log files.
In particular, the following data is processed:
- IP address of the requesting device
- Date and time of access
- Name and URL of the requested file
- Referrer URL
- Browser used and, where applicable, the operating system of your device
- Name of your access provider
The processing is carried out in order to enable delivery of the website, ensure the stability and security of our systems, and administer the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and functional operation of the website.
The server log files are stored for a period of 14 days and subsequently deleted unless further retention is exceptionally required for the investigation of misuse or security incidents.
4. Hosting
Our website is hosted by the following provider:
IONOS SEElgendorfer Str. 57
56410 Montabaur
Germany
For the purpose of providing the website, IONOS processes, on our behalf, connection data and server log files in particular. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.
The hosting service is used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast and reliable provision of our online services.
Further information on data processing by IONOS can be found in the IONOS Privacy Policy at: https://www.ionos.de/terms-gtc/datenschutzerklaerung
6. Consent Management with Cookiebot
We use the consent management platform Cookiebot by Usercentrics on our website, provided by:
Usercentrics A/SHavnegade 39
1058 Copenhagen
Denmark
Cookiebot assists us in obtaining, managing and documenting consent for the use of cookies and technologies requiring consent. In this context, your consent decision, the time at which the decision was made, browser information, a truncated IP address and information regarding the device used may in particular be processed.
Cookiebot is used in order to comply with our legal obligations to obtain and document valid consent. The legal basis for this is Art. 6(1)(c) GDPR in conjunction with Section 25 TDDDG.
Data processed by Cookiebot is generally stored until you request that we delete it, delete the stored cookies yourself, or the purpose for which the data was stored ceases to apply. Statutory retention obligations remain unaffected.
A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.
Further information can be found at: https://www.cookiebot.com/de/privacy-policy/
7. Google Analytics
Where you have given your consent, we use Google Analytics on this website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables us to statistically evaluate user behaviour on our website and improve our online services.
Google Analytics uses cookies and comparable technologies through which information is stored on or read from your device. The information collected in this context may include, in particular, truncated IP addresses, information relating to your browser and device, usage data, page views, duration of visits and interactions with the website.
We use Google Analytics only with IP anonymisation enabled. This means that your IP address is normally truncated by Google within the European Union or the European Economic Area before any further processing takes place. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there.
Google Analytics is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via our consent management tool.
The retention period for user data associated with Google Analytics is generally up to 14 months, unless a shorter retention period has been configured in the specific settings.
Third-Country Transfers (Google Analytics)
In connection with the use of Google Analytics, personal data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework; where data is transferred to Google LLC, we therefore rely on the European Commission’s adequacy decision regarding the EU-U.S. Data Privacy Framework. Where, in individual cases, additional recipients are involved that are not covered by the adequacy decision, the transfer may additionally be based on the Standard Contractual Clauses approved by the European Commission.
Despite these measures, it cannot be completely ruled out that U.S. authorities may gain access to personal data without effective legal remedies under European data protection law being available.
Further information can be found at:
Opt-Out Options
You can prevent your data from being collected by Google Analytics by declining your consent via our consent management tool or by subsequently withdrawing it. In addition, you may install the browser add-on for disabling Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=de.
Where an additional opt-out mechanism is technically provided on the website, it applies only to the respective device and browser being used.
8. Disclosure of Data
Your personal data is transferred to third parties only where this is permitted under data protection law. Data may in particular be disclosed:
- where you have given your explicit consent pursuant to Art. 6(1)(a) GDPR,
- where disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims,
- where we are legally obliged to disclose the data pursuant to Art. 6(1)(c) GDPR,
- where this is necessary pursuant to Art. 6(1)(b) GDPR for taking steps prior to entering into a contract or for the performance of a contract,
- or where we use external service providers as processors pursuant to Art. 28 GDPR.
9. Online Presence on LinkedIn
We maintain a company page on LinkedIn. When you visit our LinkedIn page, personal data is processed both by LinkedIn and by us, including, in particular, usage data, interaction data, communications and statistical analyses regarding the use of our company page (so-called “Page Insights”).
Where LinkedIn provides us with such Page Insights, the associated processing of personal data is carried out under joint controllership with LinkedIn within the meaning of Art. 26 GDPR. The respective roles and responsibilities of LinkedIn and us are set out in the “Page Insights Joint Controller Addendum” provided by LinkedIn, available at: https://www.linkedin.com/legal/l/page-joint-controller-addendum.
Processing is carried out for the purposes of presenting our firm to the public, communicating with interested parties and clients, and analysing the reach of our company profile. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing up-to-date information and communication via digital channels.
It is possible that, in connection with the use of LinkedIn, data may also be processed outside the European Union, in particular in the United States. Further information regarding data processing by LinkedIn, including the contact details of LinkedIn’s Data Protection Officer and a description of the joint controllership arrangement between LinkedIn and us, can be found at: https://www.linkedin.com/legal/privacy-policy?l=de_DE.
10. Data Subject Rights
Under the GDPR, you have the following rights in particular:
- pursuant to Art. 15 GDPR, to request information regarding your personal data processed by us,
- pursuant to Art. 16 GDPR, to request without undue delay the rectification of inaccurate personal data or completion of incomplete personal data stored by us,
- pursuant to Art. 17 GDPR, to request the deletion of your personal data, provided that no statutory exceptions apply,
- pursuant to Art. 18 GDPR, to request restriction of processing,
- pursuant to Art. 20 GDPR, to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller,
- pursuant to Art. 7(3) GDPR, to withdraw any consent you have given at any time with effect for the future,
- pursuant to Art. 21 GDPR, to object to processing based on Art. 6(1)(f) GDPR.
To exercise your rights, it is sufficient to contact us at datenschutz@bruskismeetslange.com.
11. Right to Lodge a Complaint
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law. In particular, the competent supervisory authority may be that of your place of residence, your place of work or the location of our law firm.
For our law firm, the competent authority is, in particular:
The Hessian Commissioner for Data Protection and Freedom of InformationGustav-Stresemann-Ring 1
65189 Wiesbaden
12. Right to Object
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to such processing. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing purposes.
To exercise your right to object, it is sufficient to send an email to datenschutz@bruskismeetslange.com.
13. Data Security
We use appropriate technical and organisational security measures to protect your data against loss, manipulation and unauthorised access. Our website uses TLS encryption to protect transmitted content.
Our security measures are continuously adapted in line with technological developments.
14. Current Version of this Privacy Policy
This Privacy Policy is current as of June 2026. Due to the further development of our website or changes in statutory or regulatory requirements, it may become necessary to amend this Privacy Policy.
The current version is available at https://bruskismeetslange.com/datenschutzhinweise.html.