SITUATION LAW®
Privacy Policy
Information on the processing of personal data and the use of cookies.
Controller
The controller responsible for data processing on this website is:
Barber Odenbach Rechtsanwaltsgesellschaft mbH
Kantstraße 164
10623 Berlin
Germany
Telephone: +49 (0) 30 40 366 0000
Email: [email]
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data, such as names, email addresses or similar information.
Principles
We process personal data only to the extent necessary for the operation of this website, communication with users, compliance with legal obligations or the protection of legitimate interests.
The legal bases are, in particular, Article 6(1)(a) GDPR in the case of consent, Article 6(1)(b) GDPR for pre-contractual or contractual measures, Article 6(1)(c) GDPR for legal obligations and Article 6(1)(f) GDPR for legitimate interests.
Any consent given may be withdrawn at any time with effect for the future.
Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified. Detailed information on data protection can be found in the privacy policy set out below this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Controller” in this privacy policy.
How do we collect your data?
Some of your data is collected when you provide it to us. This may include, for example, data that you enter into a form.
Other data is collected automatically or after your consent when you visit the website by our IT systems. This is primarily technical data, such as internet browser, operating system or time of page access. This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected in order to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time, free of charge, to receive information about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You may contact us at any time regarding this and any other questions relating to data protection.
Analytics tools and third-party tools
This website uses locally operated, cookieless reach measurement. No analytics cookies are set and no data is transmitted to external analytics platforms such as Google Analytics.
Data Protection Officer
No Data Protection Officer has been appointed, as according to the current assessment there is no statutory obligation to appoint one.
Hosting & Server Logs
This website is hosted by Hetzner Online GmbH.
When the website is accessed, technically necessary access data is processed, in particular IP address, date and time of access, page accessed, referrer URL, browser type, operating system and amount of data transferred.
The processing is carried out for the secure and stable provision of the website, error analysis and defence against attacks. The legal basis is Article 6(1)(f) GDPR.
Storage period for server log files: 7 days, unless longer storage is necessary to investigate security-related incidents.
Processing on behalf of the controller
We have concluded a data processing agreement with the above provider. This is a contract required under data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Email communication
Email communication with us takes place via mail infrastructure operated by Hetzner Online GmbH. When emails are transmitted and processed, sender and recipient addresses, times of communication, technical transmission data, subject lines, message content and, where applicable, attachments may be processed. The processing is carried out to handle your enquiry, to initiate or perform a mandate and to fulfil legal and professional obligations. The legal bases are Article 6(1)(b) GDPR, Article 6(1)(c) GDPR and Article 6(1)(f) GDPR.
Where Hetzner Online GmbH acts as a technical service provider, processing is carried out on the basis of a data processing agreement pursuant to Article 28 GDPR.
Contacting Us
If you contact us by email or telephone, we process the information transmitted, in particular name, contact details, the content of the enquiry and technical metadata.
The processing is carried out to handle your enquiry. The legal basis is Article 6(1)(b) GDPR if the enquiry concerns the initiation of a mandate or a contract; otherwise, Article 6(1)(f) GDPR applies.
Contact enquiries are deleted as soon as they are no longer required, unless statutory retention obligations or legitimate documentation interests prevent deletion.
If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it, such as name and enquiry, will be stored and processed by us for the purpose of dealing with your matter. We do not pass this data on without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR if your enquiry is connected with the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested.
The data sent to us by you in contact enquiries remains with us until you ask us to delete it, withdraw your consent to storage or the purpose for data storage no longer applies, for example after your matter has been fully processed. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
Mandate-Related Data
Where a mandate is initiated via this website, professional and mandate-related data may be processed. This may include identity data, contact details, facts of the matter, documents, communication content and billing data.
The processing is carried out for the review, initiation, performance and documentation of a mandate relationship and for compliance with statutory and professional obligations. The legal bases are, in particular, Article 6(1)(b) and (c) GDPR.
Where special categories of personal data within the meaning of Article 9 GDPR or data relating to criminal convictions and offences within the meaning of Article 10 GDPR are processed in the context of initiating or handling a mandate, this is done only to the extent necessary for the establishment, exercise or defence of legal claims, mandate handling or compliance with statutory and professional obligations.
Professional duties of confidentiality remain unaffected.
Services & Plugins
Technically necessary cookies and comparable technologies: This website uses technically necessary cookies and comparable technologies. They serve, in particular, to provide and secure the website, manage sessions, store consent decisions and protect against misuse, attacks and automated requests through security and web application firewall functions. Technically necessary cookies may include, in particular, session cookies, consent cookies, security/firewall cookies and temporary verification or blocking identifiers. The specific cookie names may change depending on system status, security configuration, plugin version and threat situation. Technically necessary cookies and comparable technologies are used on the basis of Section 25(2) TDDDG. The subsequent processing of personal data is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and legally compliant operation of this website. Session-related cookies are generally deleted at the end of the session. Consent decisions are stored for 365 days. Security and firewall cookies are stored only for as long as necessary for technical verification, attack detection or prevention of misuse.
A contact form is currently not offered on these pages. Purpose: handling enquiries and protection against misuse. Legal basis: Article 6(1)(b) or (f) GDPR.
Spam and security functions: See above, “Technically necessary cookies and comparable technologies”. Purpose: protection of the website against misuse, attacks and automated submissions. Legal basis: Article 6(1)(f) GDPR.
Analytics / statistics: This website uses Burst Statistics, a locally operated statistics plugin for WordPress. The purpose of processing is privacy-friendly, local evaluation of the use of this website, in particular the recording of page views, visitor numbers, sessions, dwell time, referrer information and accessed content. The evaluation serves the technical and editorial optimisation of the website. Burst Statistics is operated cookieless on this website. No analytics cookies are set and no comparable information is stored or read in the browser or on the user’s device for analytics purposes. The statistical data collected by Burst Statistics is stored locally in the WordPress database of this website. It is not transmitted to Google Analytics or comparable external analytics platforms. Processing is carried out on the basis of our legitimate interest in data-minimised, local and technically controlled reach measurement pursuant to Article 6(1)(f) GDPR. Storage period: Non-anonymised statistical data is stored for 24 months. Anonymised aggregate data may remain stored permanently, provided that no personal reference can be re-established. If Burst Statistics is configured in the future in such a way that cookies or comparable technologies are used or information is stored or read on the end device, this will take place only after prior consent pursuant to Section 25(1) TDDDG. Subsequent processing of personal data in that case will be based on Article 6(1)(a) GDPR.
External content: No external content is currently embedded on this website. If external content, such as maps, videos, external fonts or comparable third-party content, is embedded in the future, it will be loaded only after prior consent where legally required.
Fonts / local fonts
This website uses locally embedded fonts. Fonts are not loaded from Google Fonts servers or other external font providers. When the fonts are loaded, no personal data, in particular no IP addresses, is transmitted to Google or any other external font provider.
Recipients & Third-Country Transfers
Personal data may be transferred to technical service providers, hosting providers, IT service providers, communication service providers, tax advisers, legal advisers or authorities, insofar as this is necessary or required by law.
A transfer to third countries takes place only where there is an appropriate legal basis, in particular an adequacy decision, standard contractual clauses or explicit consent.
To the best of our knowledge, no services are currently integrated which, merely by visiting this website, transfer personal data to providers in third countries outside the EU/EEA. Should such a service be used in the future, this will take place only on the basis of an appropriate legal basis and, where required, after prior consent.
If such services are active, your personal data may be transferred to and processed in those third countries. We point out that a level of data protection comparable to that in the EU cannot be guaranteed in those countries. For example, US companies may be obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It cannot therefore be ruled out that US authorities, such as intelligence services, may process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.
Data Subject Rights
Data subjects have, in accordance with the GDPR, in particular the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests and withdrawal of consent given.
Many data processing operations are possible only with your explicit consent. You may withdraw consent already given at any time. The lawfulness of data processing carried out before withdrawal remains unaffected.
You also have the right to lodge a complaint with a data protection supervisory authority.
Competent data protection supervisory authority
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Website: www.datenschutz-berlin.de
Right to object to data collection in special cases and to direct marketing (Article 21 GDPR)
WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEREAFTER NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request direct transfer of the data to another controller, this will be done only where technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Access, erasure and rectification
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing and, where applicable, a right to rectification or erasure of this data. You may contact us at any time regarding this and any other questions relating to personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.
If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of erasure.
If we no longer need your personal data but you need it for the exercise, defence or establishment of legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
If you have lodged an objection pursuant to Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
If you have restricted the processing of your personal data, such data may, apart from being stored, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
Objection to advertising emails
We hereby object to the use of contact data published within the scope of the legal notice obligation for the purpose of sending advertising and information material not expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam email.
Last updated: May 2026