Privacy policy

1. Controller

The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

2. General information

We treat your personal data confidentially and in accordance with statutory data protection regulations and this data protection declaration. Personal data is any data that can be used to personally identify you.

As a lawyer, we are also subject to the legal obligation of confidentiality (§ 43a para. 2 BRAO, § 2 BORA). Information that you provide to us in connection with an inquiry or a mandate is therefore additionally protected.

Depending on the process, the legal basis for processing is - Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit interests, such as the secure and trouble-free operation of this website).

3. Hosting and server log files

This website is hosted by an external service provider. The personal data that is generated when you access the website is processed on the hosting provider's servers. The hosting provider processes this data on our behalf on the basis of a contract for order processing (Article 28 GDPR). In addition, the website is delivered via Cloudflare's content delivery network (see the following section).

Every time you access the website, the server automatically records information that your browser transmits (server log files):

• IP address of the calling device
• Date and time of access
• Page or file accessed and amount of data transferred
• Website from which access is made (referrer URL)
• browser and operating system used

This data is not merged with other data sources. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR; Our legitimate interest lies in the technically error-free presentation and security of the website. The log files are deleted after a short time unless they are no longer needed to resolve a security incident.

4. Content delivery network and security service (Cloudflare)

We use the services of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (representative in the EU: Cloudflare Germany GmbH, Rosental 7, 80331 Munich) for the entire website. Cloudflare operates a globally distributed content delivery network and provides security features such as protection against attacks and automated access. Every visit to this website is routed via Cloudflare's servers; Cloudflare processes in particular the IP address, the address accessed, time and technical information about the browser.

The legal basis is Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in the secure, stable and fast provision of the website. Cloudflare processes the data on our behalf (Article 28 GDPR). A transfer to the USA cannot be ruled out; Cloudflare is certified under the EU-U.S. Data Privacy Framework certified, and the European Commission’s standard contractual clauses also apply. For more information, please see Cloudflare's privacy policy at www.cloudflare.com/privacypolicy/.

The form data is also forwarded to our inquiry management system via a service we operate on the Cloudflare infrastructure (see section “Contact form and case review”).

5. Contact by email and telephone

If you contact us by email or telephone, we will process the data you provide (such as your name, contact details and the content of your message) to process your request. The legal basis is Art. 6 Para. 1 lit. b GDPR, insofar as your request is directed to a contract (mandate), otherwise Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in answering inquiries.

Please note that unencrypted emails can be viewed by third parties during transmission. For particularly sensitive information, we recommend telephone, postal mail or prior arrangement.

The data will remain with us until you request us to delete it, revoke your consent or the purpose of storage no longer applies. Mandatory statutory retention periods remain unaffected (see section “Storage period”).

6. Contact form and case review

A contact form and a multi-stage case review are available on this website. Using the contact form we process your name, email address, optionally your telephone number, the subject, the selected topic and your message. Through the case assessment, we process additional information about your case: the type of damage, the approximate amount of damage, the provider or bank involved, the time period and your description of the process.

We only use this information to classify your request, make an initial assessment and get in touch with you. The legal basis is Article 6 Paragraph 1 Letter b GDPR (pre-contractual measures at your request). The transmission is encrypted (TLS).

To receive and manage inquiries, we use an inquiry management system from a service provider who processes the data on our behalf (Article 28 GDPR). The forwarding takes place via a service operated by us on the Cloudflare infrastructure (see section “Content delivery network and security service”), which only forwards the form data and does not store it permanently. No further transfer to third parties will take place unless you commission us and the transfer is necessary to process the mandate.

Fraud narratives may contain sensitive financial information. Please only provide the information that is necessary for an initial classification; You can submit documents later after consultation.

To protect against automated entries, the forms contain a hidden control field (honeypot) that is not filled out by normal users. No additional personal data is collected.

We delete inquiries that do not lead to a mandate as soon as they have been processed and there are no storage obligations to the contrary. If your request leads to a mandate, the data will become part of the file (see section “Storage period”).

7. Cookies and local storage

This website sets a single, technically necessary cookie and stores two technically necessary entries exclusively in your browser's memory:

• Your language selection (cookie “mk-lang”, duration one year) as soon as you select a language using the language changer. The cookie only contains the language abbreviation and ensures that the website is displayed in the selected language. Without this cookie, the language is determined based on the browser setting and the country from which the website is accessed (country code from the Cloudflare header, not stored).
• Your selection in the consent management (localStorage, key “mk-consent”) so that the cookie settings do not have to be queried again each time you visit.
• Case review inputs that have not yet been submitted (sessionStorage, mk-case-draft key) so that they are retained when moving back and forth between steps. This entry will be deleted when you close the browser tab or after sending.

This storage is absolutely necessary for the functions you expressly request (Section 25 Paragraph 2 No. 2 TDDDG) and does not require your consent. You can delete the cookie and entries at any time via your browser settings.

8. Consent management

The website has its own consent management with the categories “Necessary”, “Statistics”, “Marketing” and “External Media”. An external consent service is not integrated. There are currently no services stored in the Statistics, Marketing and External Media categories; If services are added in the future, they will only be loaded with your consent (Art. 6 Para. 1 lit. a GDPR, Section 25 Para. 1 TDDDG).

You can change or revoke your selection at any time with future effect via the “Cookie Settings” link in the footer of the website.

9. No web analytics, no advertising services

There are no analysis, tracking, advertising or remarketing services integrated into this website. The fonts used are delivered from our own server; There is no retrieval from external font providers. Likewise, no map services, video platforms or social media plugins are integrated. When you simply access the website, data is transmitted exclusively to the hosting provider and Cloudflare, who provide the website on our behalf (see the sections “Hosting and server log files” and “Content delivery network and security service”). A transmission to our inquiry management system only takes place when you submit a form yourself.

10. Your rights

You have the following rights with regard to personal data concerning you:

• Right to information (Art. 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to deletion (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Article 6 Paragraph 1 Letter e or f GDPR (Article 21 GDPR)

You can revoke your consent at any time with effect for the future (Art. 7 Para. 3 GDPR). The lawfulness of the processing carried out until the revocation remains unaffected. To exercise your rights, an informal message to the contact details mentioned above is sufficient. The lawyer's duty of confidentiality can restrict third parties' rights to information (Section 29 Paragraph 1 Sentence 2 BDSG).

11. Storage period

Unless a specific storage period is specified in this data protection declaration, your personal data will remain with us until the purpose of processing no longer applies. If you make a legitimate request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing it.

In particular, the professional obligation to retain the files for six years after the end of the mandate (Section 50 Paragraph 1 BRAO) as well as the commercial and tax law retention periods (Section 257 HGB, Section 147 AO) apply to mandates. After these periods have expired, the data will be deleted.

12. Right to lodge a complaint with the supervisory authority

Without prejudice to other legal remedies, you have the right to complain to a data protection supervisory authority (Article 77 GDPR), in particular in the Member State of your residence, your place of work or the place of the alleged violation. The supervisory authority responsible for us is the State Commissioner for Data Protection of Saxony-Anhalt, Leiterstrasse 9, 39104 Magdeburg, datenschutz.sachsen-anhalt.de.

13. Language versions

This privacy policy is provided in multiple languages. The translations are for informational purposes; In the event of deviations, the German version prevails.

14. Changes to this privacy policy

We will adapt this data protection declaration if the legal situation or the technologies used on this website change. The version published on this page applies. As of: September 2026.