I. Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU member states, as well as other data protection regulations, is:
www.anwalt-hoff.de

Friederike Haiser
William-Zipperer-Str. 45
04177 Leipzig
Germany

Email: friederike.haiser(at)posteo.de

II. General Information on Data Processing

Scope of Processing of Personal Data
We process personal data of our users only to the extent necessary to provide a functional website and our content and services. The processing of personal data is generally only carried out with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing is permitted by legal provisions.
Legal Basis for Processing Personal Data

If we obtain consent for processing personal data, the legal basis is Art. 6(1)(a) GDPR.
For the processing of personal data necessary to fulfill a contract with the data subject, the legal basis is Art. 6(1)(b) GDPR.
The same applies to processing required to carry out pre-contractual measures.
If the processing is necessary to fulfill a legal obligation, the legal basis is Art. 6(1)(c) GDPR.
If processing is necessary to protect a legitimate interest and the interests or fundamental rights of the data subject do not override this interest, the legal basis is Art. 6(1)(f) GDPR.

Data Deletion and Storage Period
Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may be stored if provided for by European or national legislation in EU regulations, laws, or other provisions. Data will also be deleted or blocked when a legally mandated storage period expires, unless there is a necessity to retain the data for contract conclusion or fulfillment.

III. Provision of the Website and Creation of Log Files

Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the accessing computer system. The provider automatically stores this information in so-called server log files, which your browser transmits to us. This includes:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of server request

These data cannot be assigned to specific individuals. This data is not merged with other data sources. We reserve the right to subsequently review this data if concrete indications of unlawful use become known.

Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR.
Purpose of Data Processing
Temporary storage of the IP address is necessary to deliver the website to the user's computer. For this, the IP address must remain stored for the duration of the session. This is also our legitimate interest under Art. 6(1)(f) GDPR.
Duration of Storage
The data will be deleted as soon as they are no longer needed for their collection purpose. For data collected for website provision, this is the case when the session ends.
Right to Object and Removal Option
The collection of data for website provision and the storage of data in log files is essential for the operation of the website. Therefore, there is no option for the user to object.
This website does not use cookies, social plugins, or tracking tools.

IV. Email Contact

Description and Scope of Data Processing
It is possible to contact us via the provided email address or contact form. In this case, the personal data transmitted by the user will be stored. These data are not passed on to third parties and are used exclusively for processing the conversation.
Legal Basis for Data Processing
The legal basis is Art. 6(1)(f) GDPR. If the contact aims to conclude a contract, Art. 6(1)(b) GDPR also applies.
Duration of Storage
Data will be deleted once they are no longer necessary for the purpose they were collected. For personal data sent by email, this is the case when the conversation has ended—i.e., when it can be inferred that the matter has been conclusively resolved.
Right to Object
Users may revoke their consent to the processing of personal data at any time. If contact is made by email, users may object to storage at any time. In such cases, the conversation cannot continue. All personal data stored in the course of contact will then be deleted.

V. Rights of the Data Subject
If your personal data is processed, you are considered a data subject under the GDPR and have the following rights:

Right of Access
You may request confirmation of whether your personal data is being processed. If so, you have the right to receive information as specified in Art. 13 GDPR.
Right to Rectification
You have the right to request the correction or completion of inaccurate or incomplete personal data. The controller must make corrections without delay.
Right to Restriction of Processing
Under the conditions of Art. 18 GDPR, you can request the restriction of processing. If the restriction is lifted, you will be informed.
Right to Erasure ("Right to be Forgotten")
You may request immediate deletion of your personal data if one of the following reasons applies:
- The data is no longer necessary.
- You withdraw consent and no other legal basis exists.
- You object to the processing (Art. 21 GDPR).
- The data has been unlawfully processed.
- Deletion is required to fulfill a legal obligation.
Right to Notification
If you have asserted your right to rectification, deletion, or restriction, the controller must notify all recipients to whom your data was disclosed—unless this is impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to Data Portability
You have the right to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller if the processing is based on consent or a contract and is carried out by automated means. This right may not adversely affect others' rights.
Right to Object
You have the right to object at any time to the processing of personal data concerning you based on Art. 6(1)(e) or (f) GDPR. This also applies to profiling.
If your data is processed for direct marketing purposes, you can object at any time, including profiling related to direct marketing. In this case, your data will no longer be processed for such purposes.
Right to Withdraw Consent
You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of prior processing.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority, especially in the member state of your residence, place of work, or place of the alleged violation, if you believe that the processing of your personal data violates the GDPR. The supervisory authority will inform you about the outcome and any available legal remedies.

Status: May 2018