This privacy notice informs you about the nature, scope and purpose of the processing of personal data in connection with the use of this website.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) for the data processing in connection with this website is:
Wilko Bauer, Attorney at Law, Bölkendorfer Str. 36, 16278 Angermünde, Germany
E-mail: kanzlei@bauer.legal, phone: +49 (0)33365-784007, fax: +49 (0)33365-784008.
2. General information on data processing
I process personal data of visitors to this website only to the extent necessary to provide a functioning website and my content and services, or to the extent that you have consented to further processing. Processing of personal data regularly takes place only with consent (Art. 6(1)(a) GDPR, Section 25(1) of the German Telecommunications and Telemedia Data Protection Act, TDDDG), for the performance of a contract or the implementation of pre-contractual measures (Art. 6(1)(b) GDPR), to comply with a legal obligation (Art. 6(1)(c) GDPR), or on the basis of a legitimate interest (Art. 6(1)(f) GDPR), provided that the interests, fundamental rights and freedoms of the data subject do not override this. The relevant legal basis is stated for each individual processing operation described below.
3. Your rights as a data subject
You have the following rights against me, as the controller, with regard to the personal data concerning you:
- access to the personal data stored about you (Art. 15 GDPR),
- rectification of inaccurate personal data (Art. 16 GDPR),
- erasure of the data stored by me (Art. 17 GDPR),
- restriction of processing, insofar as statutory retention obligations do not yet preclude this (Art. 18 GDPR),
- objection to the processing of your data by me (Art. 21 GDPR),
- data portability, provided that you have consented to the processing or have concluded a contract with me (Art. 20 GDPR),
- withdrawal of any consent given at any time with effect for the future, without affecting the lawfulness of processing carried out prior to the withdrawal (Art. 7(3) GDPR).
You may lodge a complaint with the supervisory authority responsible for me at any time. This is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (State Commissioner for Data Protection and the Right of Access to Files of Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany, phone: +49 33203/356-0, fax: +49 33203/356-49, e-mail: Poststelle@LDA.Brandenburg.de.
4. Hosting and server log files
When you access this website, the browser used on your device automatically sends information to the website’s server, which is temporarily stored in so-called server log files. The following information is collected without any action on your part: the browser type and version used by your device, the operating system used, the previously visited page (referrer URL), the IP address of the accessing device, the date and time of the server request, and the host name of the accessing computer.
This processing takes place for the purpose of ensuring a smooth connection to the website, ensuring convenient use of the website, and ensuring system security and stability. The legal basis is Art. 6(1)(f) GDPR, with the legitimate interest arising from the purposes of data collection stated above. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS. Server log files are retained for a period of up to eight weeks and are then automatically deleted.
5. Cookies and consent management
This website uses cookies, i.e. small text files that are stored on your device. Insofar as individual cookies or comparable technologies used by me are not technically required to provide a function of the website that you have expressly requested, they are only set with your prior consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You may withdraw any consent already given at any time with effect for the future, for example via the corresponding setting in the cookie banner.
I use the plugin CookieYes to manage this consent. When you first visit the website, it displays a consent banner through which you can accept or reject individual cookie categories; scripts that are not strictly necessary are technically blocked until consent has been given. In order to be able to demonstrate the consent given or refused (obligation to demonstrate consent under Art. 7(1) GDPR), CookieYes keeps a log of this (consent log). The legal basis for this is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.
On your first visit to this website, you can choose whether to accept all cookies, allow only technically necessary cookies, or individually customise your consent for specific categories via the settings. Your choice is saved and taken into account on your next visit; you can revisit and change your consent at any time via the corresponding link in the footer of this website.
6. Web analytics and analysis tools
I use several analysis tools on this website to understand how the website is used and to continuously improve it. These are described individually below.
6.1 Google Site Kit (Google Analytics 4, Search Console, Tag Manager)
This website uses the „Site Kit by Google“ plugin, through which several Google services are integrated: Google Analytics 4 for web analytics, Google Tag Manager for managing tracking codes, and Google Search Console. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to and stored on a Google server in the USA. Google is certified under the EU-US Data Privacy Framework and thereby offers a guarantee to comply with European data protection law.
Google Analytics and Tag Manager are only used to the extent that you have given your consent via the cookie banner (Section 5). The legal basis is therefore Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Google Search Console itself, on the other hand, does not collect any personal data of visitors to this website and does not set any cookies on this website; the search and click data evaluated there is collected by Google independently as part of the Google search, regardless of the operation of this website. Consent is therefore not required for the use of Search Console.
The retention period for Analytics event data is set to the standard default of two months applicable to newly created Google Analytics properties.
6.2 Jetpack Stats
In addition, I use the Jetpack plugin, provided by Automattic Inc., which, alongside the statistics function described below, also provides search engine optimisation and security features (e.g. protection against automated login attempts) for this website.
For the statistics function, the following data is collected, among other things: IP address (anonymised prior to storage), browser type, device identifier, preferred language, time of access, operating system, and mobile network information. Jetpack sets, among others, the cookies „tk_ai“ and „tk_tc“ (each for the duration of the session) as well as a cookie to store the consent status. Server logs are deleted after approximately 30 days. As Automattic Inc. is based in the USA, a transfer to a third country takes place; this is based on standard contractual clauses pursuant to Art. 46 GDPR and, where applicable, the EU-US Data Privacy Framework. This is only used with your consent given via the cookie banner. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
6.3 WP Statistics
I additionally use the WP Statistics plugin. This runs entirely locally on my own server, hosted by IONOS SE in Germany, and does not embed any external scripts or third-party servers; accordingly, no data is transferred to third-party providers. Data collected includes, among other things, page views and device types used. The IP address of the visitor is anonymised and additionally stored in hashed form, so that it is not possible to draw conclusions about individual persons; the browser’s Do-Not-Track (DNT) setting is also respected. As re-identification is thus practically excluded, this processing is based on my legitimate interest in data-efficient web analytics (Art. 6(1)(f) GDPR); separate consent is not required for this.
7. Contact form
For enquiries via this website, a contact form is available, implemented using the WPForms plugin (free „Lite“ version). If you use it, the data you enter there (generally your name, e-mail address and message) is transmitted to me and stored in order to process your enquiry. The Lite version used does not set any cookies of its own and does not transmit form data to servers of the provider in the USA. This processing is carried out on the basis of Art. 6(1)(b) GDPR to the extent that the enquiry relates to the initiation of a mandate, and otherwise on the basis of my legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR).
If your enquiry does not result in a mandate, I generally delete the data submitted via the contact form no later than six months after the end of the communication. If the enquiry leads to a mandate, further retention is governed by the statutory retention obligations applicable to attorneys (including Section 50 of the German Federal Lawyers’ Act, BRAO).
8. Appointment requests and booking calendar
For appointment requests, I use the WP Booking Calendar plugin. When you submit an appointment request via this form, I collect the data you provide there, generally your name, e-mail address, telephone number and details of the requested appointment. According to the plugin provider, this data is stored locally on my own server and is not passed on to external third-party servers; the form also triggers an automatic e-mail notification to me. This processing is carried out for the purpose of handling and coordinating your appointment request as a pre-contractual measure (Art. 6(1)(b) GDPR).
I generally delete the data submitted as part of an appointment request no later than six months after the appointment took place or was cancelled, provided this does not result in a mandate with further retention obligations.
9. Fonts used
This website uses so-called Google Fonts for the consistent display of typefaces. The font files are not embedded from Google, but hosted locally on this website’s own server. Accordingly, no connection to Google servers is established when the website is accessed, and no data is transmitted to Google in this respect. Consent is not required for this.
10. Multilingualism of this website
This website is provided in several language versions (German, English, Spanish) using the WPML plugin. The plugin exclusively manages the multilingual content of the website and does not process any personal data of visitors beyond the data collection described in Section 4.
11. Data backup
To protect against data loss and to ensure the availability of my systems (Art. 32(1)(b) GDPR), I use the UpdraftPlus plugin to create backup copies of the website database and website files. These backup copies may also contain personal data arising from the other processing operations described in this notice, such as form entries. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest follows from the need to be able to restore the website in the event of damage.
Backup copies are created according to a regular, weekly schedule for files and the database, with the two most recent backups retained at any time. The backup copies are stored on the hosting server itself.
12. Telephone contact
On mobile devices, the Call Now Button plugin displays a button that allows you to place a phone call to me directly. The button merely links to a standard phone link on your device; the plugin itself does not collect or transmit any personal data to third parties.
13. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, such as enquiries you send to me as the website operator, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from „http“ to „https“ and by the padlock symbol in your browser bar.
14. Currency and amendment of this privacy notice
Due to the further development of my website and the tools used, or as a result of changed legal or regulatory requirements, it may become necessary to amend this privacy notice. The current version of this privacy notice can be accessed on this website at any time.