The protection of your personal data is very important to us. That is why we process your personal data in accordance with the legal provisions governing data protection.
Below, we provide information about how we process your personal data, the rights you have under the General Data Protection Regulation (GDPR), and the services used on our website.
Note on Email Communication and the Secure Exchange of Data
First, we would like to point out that emails sent without end-to-end encryption may be read or altered by unauthorized parties during transmission without your knowledge. We therefore recommend that you do not send us any sensitive information via unencrypted email. Emails containing personal data and/or confidential information should be sent using at least transport encryption. If you need further information about encryption options or secure data exchange in general, please contact us. Together, we will find a practical solution to make the exchange of data as secure as possible.
For encrypted email correspondence, please use attorney Florian Daniel’s public key:
PGP Public Key
Data Controller
The controller responsible for the processing of your personal data within the meaning of the GDPR is:
Attorney Florian Daniel, LL.M. (Media Law)
Zöllmersdorfer Dorfstraße 14
15926 Luckau (Zöllmersdorf)
Phone: +49 151 4310 4590
Email:daniel@ip-it.lawyer
Processing of Personal Data
Personal data is processed in various contexts:
Personal data from customers and other business contacts, suppliers, and service providers is processed to carry out tasks, for invoicing and subsequent bookkeeping, as well as for administrative purposes and to establish contact. This includes:
- Master data (last name, first name, address, contact information, tax details, payment details, status, and identification of business contacts)
- Communication and engagement data (times and content of conversations, instructions given)
- Data regarding the client relationship and/or task completion (date of instruction, service details, cost estimate or invoice, information on task execution, deadlines, etc.)
Purposes and Legal Bases for Data Processing
We process your personal data in accordance with the provisions of the GDPR and the Federal Data Protection Act (BDSG), as well as other relevant laws.
The legal basis for processing your data is Article 6(1)(b) of the GDPR, insofar as the processing is necessary for the performance of a contract or a pre-contractual legal relationship.
If special categories of personal data are required for this purpose, we will first request your consent in accordance with Article 9(2)(a) of the GDPR in conjunction with Article 7 of the GDPR.
In addition, we process your data when it is necessary under Article 6(1)(f) of the GDPR to protect our legitimate interests or those of third parties. This may be the case, in particular:
- to ensure the security of our systems;
- to prevent and investigate criminal offenses, in particular through data analysis to identify indications that may point to misuse;
- to advertise our own comparable services.
In addition, we process your personal data to the extent necessary to comply with legal obligations, such as regulatory requirements or tax-related retention obligations. The legal basis for this is the respective statutory provision in conjunction with Article 6(1)(c) of the GDPR.
To the extent that you have provided us with consent—for example, for advertising and marketing purposes—data processing will be carried out exclusively for the purposes specified in the consent. The legal basis for this data processing is Article 6(1)(a) of the GDPR. You may revoke your consent at any time. The lawfulness of the processing carried out prior to revocation remains unaffected.
Should we wish to further process your personal data for any other purpose not mentioned above, we will inform you of this separately in advance.
Recipients of Your Data
If necessary for contract processing, your data will be transferred to other service providers, such as payment service providers, to collect payments and receive invoicing services used by clients. Within the scope of certain service relationships, your data may be forwarded, for example, to tax authorities, banks, or tax advisors to carry out financial transactions; to credit agencies to obtain information; to collection agencies for debt collection; to attorneys; to waste disposal companies for the disposal of physical files and data storage media; and to postal and package service providers to carry out mailings.
Duration of Data Retention
Your personal data will be deleted as soon as it is no longer required for the purposes mentioned above and existing statutory retention periods have expired.
The Federal Lawyers’ Act, the Fiscal Code, and the Money Laundering Act, among other laws, require the presentation of evidence and the retention of documents. The retention periods may be up to ten years.
If claims can be asserted against the data controller, we retain the data until the expiration of the applicable statutory limitation periods. We retain personal data relevant to an existing legal dispute until the dispute is resolved.
Processing of Personal Data in Connection with the Use of This Website
We process your personal data as a user of our website in compliance with the relevant data protection regulations as well as the principles of data minimization and data avoidance. This means that your data is processed only if there is a legal basis for doing so, if it is required by law, or if you have given us your consent. This applies in particular when the data is necessary for the provision of our contractual services and online services.
We implement state-of-the-art organizational, contractual, and technical security measures to ensure compliance with data protection laws and to protect the data we process against accidental or intentional manipulation, loss, destruction, or unauthorized access.
In particular, we generally process the personal data of visitors to our website only to the extent necessary to provide a fully functional website and our services. In doing so, we process the personal data that we receive when you visit our website or when you contact us via email.
Transmission Security
By default, our websites use transport encryption (SSL/TLS) during data transfer to protect the transmitted data from manipulation, loss, destruction, or unauthorized access. The security measures in place are continuously updated in line with technological developments.
You can usually recognize an encrypted connection by a padlock icon or a corresponding indicator in your browser’s address bar.
Transmission of Browser Data and Settings
The following section describes what usage data is collected on this website and which services are used.
When you use the website purely for informational purposes—that is, when you do not transmit any information to us—we collect only the personal data that your browser transmits to our hosting provider. Connection data is processed for the purpose of providing and delivering the website. This data is used exclusively for the operation of the site and is not stored beyond the duration of your visit.
The legal basis for data processing is legitimate interest (an absolute technical necessity for providing and delivering the “website” service you have expressly requested by visiting the site), Article 6(1)(f) of the GDPR.
We log and store log files on the server side, particularly when errors occur, e.g., during logins. IP addresses may be stored for up to 365 days. The legal basis for this processing is Article 6(1)(f) of the GDPR, our legitimate interest in analyzing and resolving errors.
As part of the logging mentioned above and for display purposes, the following data is collected, which is technically necessary to display our website to you and to ensure its stability and security:
- IP address
- Date and time of the request
- Content of the request (specific page)
- Access status / HTTPS status code
- Amount of data transferred in each case
- Website from which the request originated (referrer)
- Browser used
- Operating system
- Language and version of the browser software
- Other technical parameters, e.g.,
- JavaScript support
- Number and type of installed plug-ins
- Browser window size
- Screen resolution
- Supported languages
- Installed fonts
To operate the website, connection data and other personal data are also processed in connection with specific features or services used. We provide detailed information about this in the relevant sections of this Privacy Policy.
Your Rights
As a data subject, you have various rights under the GDPR, including the right to access, rectification, erasure, restriction of processing, objection, data portability, withdrawal of consent, and the right to lodge a complaint with a supervisory authority.
Details regarding these rights and the respective legal bases are provided below:
Right of Access
You may at any time contact the controller using the contact information provided above to request information regarding whether and what personal data we process about you (Art. 15 GDPR). This includes, in particular, information on the purposes of processing, the categories of data processed, the recipients to whom data is disclosed, and the planned retention period.
Rectification, Restriction, and Erasure
You have the right to have inaccurate personal data rectified without delay (Art. 16 GDPR).
Subject to the legal requirements, you may also request the restriction of processing (Art. 18 GDPR) or the erasure of your personal data (Art. 17 GDPR).
______________________________
Objection: Information Regarding Your Right to Object Under Article 21 of the GDPR
CASE-BY-CASE RIGHT TO OBJECT
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) of the GDPR (data processing in the public interest) and Article 6(1)(f) of the GDPR (data processing based on a balancing of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
OBJECTION TO THE PROCESSING OF DATA FOR DIRECT MARKETING PURPOSES
In certain cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of your personal data for such marketing purposes.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection may be submitted in any form and should, if possible, be addressed to:
Attorney Florian Daniel, LL.M.
Zöllmersdorfer Dorfstraße 14
15926 Luckau (Zöllmersdorf)
Email:daniel@ip-it.lawyer
______________________________
Withdrawal of Consent
You may withdraw any consent you have provided at any time with future effect (Art. 7(3) GDPR).
This applies in particular to consents you have provided on this website, for example:
• Contact Form: You may revoke the storage of your data when using the contact form by sending an informal request to the contact information provided above. In this case, we at will no longer process your data, unless there are compelling legitimate grounds for further storage or the processing is necessary for the establishment, exercise, or defense of legal claims.
• Newsletter: For promotional emails, an unsubscribe link is provided in every email. In addition, you may revoke your consent at any time by contacting us using the contact information provided.
The lawfulness of the processing carried out on the basis of your consent up until its revocation remains unaffected by this.
Data Portability
Upon request, we will provide you with the data we have stored about you in a structured, commonly used, and machine-readable format that you can use for further processing (Art. 20 GDPR).
Please direct any inquiries regarding this matter to the data controller’s email address: daniel@ip-it.lawyer
Any transmission requires your unambiguous authentication as the data subject or can only be sent to an address already on file in your records.
Right to File a Complaint
You also have the right at any time to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR).
Exercising Your Rights
To exercise your rights, or for any other questions or complaints regarding data protection, you may contact the data controller at any time using the contact information provided.