Privacy policy / Data Protection Information

The responsible party within the meaning of DSGVO is the

Streitbörger PartGmbB 
Adenauerplatz 4
33602 Bielefeld

Contact details of the data protection officer:

Nora Loof
Adenauerplatz 4
33602 Bielefeld

Phone: +49 (0)521 / 9141462
E-Mail: n.loof@streitboerger.de

With this data protection information, we inform you, hereinafter also referred to as the “user” or “data subject”, about our general data processing activities, data processing when you visit our website, and data processing when you contact us by email or telephone. We also inform you about your rights in relation to the processing of your data. The term “data processing” always refers to the processing of personal data.

 

———————–

1. General information on data processing

 

1.1 Categories of personal data

We process the following categories of personal data:

  • Master data, such as names, addresses, functions and organisational affiliations;
  • Contact data, such as email addresses and telephone or fax numbers;
  • Content data, such as text entries, image files and videos;
  • Usage data, such as access data;
  • Meta and communication data, such as IP addresses.

Data processed in connection with the use of AI-supported applications may include entries in the form of texts, documents and files, as well as the outputs generated from them.

 

1.2 Recipients and categories of recipients

Recipients also include the providers of the AI-supported applications we use. These providers act exclusively as processors on our behalf pursuant to Article 28 GDPR and on the basis of our documented instructions.

 

1.3 Storage period

Inputs and outputs relating to the use of AI applications are stored only for as long as necessary to process the relevant mandate or request. These data are not used to train the providers’ AI models.

 

1.4 Transfers to third countries

Where the use of AI applications involves processing outside the European Union or the European Economic Area, this takes place exclusively in compliance with Articles 44 et seq. GDPR, in particular on the basis of standard contractual clauses together with supplementary protective measures. Where services are provided abroad, we also ensure that the protection of professional secrecy is comparable to the protection provided in Germany pursuant to Section 43e (4) of the Federal Lawyers’ Act.

 

———————–

2. Data processing when visiting our website

 

2.1 Log files

Whenever a data subject accesses our website, general data and information are stored in the log files of our system:

  • Date and time of access (timestamp);
  • Request details and destination address, including the protocol version, HTTP method, referrer and user-agent string;
  • Name of the requested file and amount of data transferred, including the requested URL and query string and the size in bytes;
  • Information on whether the request was successful (HTTP status code).

When using this general data and information, we do not draw any conclusions about the data subject. The data are not evaluated for personal purposes, marketing purposes or profiling. The IP address is not stored in this context.

The legal basis for the temporary storage of the data is Article 6(1)(f) GDPR. The collection of the data for the provision of the website and the storage of the data in log files are essential for the secure operation of our website. Consequently, the data subject has no right to object to this processing.

 

2.2 Malware detection and analysis of log data

We collect log data generated during the operation of communication technology and analyse it automatically where this is necessary to detect, limit or remedy disruptions or errors affecting the communication technology, to defend against attacks on our information technology or to detect and prevent malware.

The legal basis for the temporary storage and analysis of the data is Article 6(1)(f) GDPR. The storage and analysis of the data are essential for providing the website and ensuring its secure operation. Consequently, the data subject has no right to object to this processing.

 

2.3 Cookies and tracking

Our website uses cookies. Cookies are small text files exchanged between the web browser and the hosting server. Cookies are stored on the user’s computer and transmitted from there to our website.

You can restrict or generally prevent the use of cookies by changing the relevant settings in your web browser. Cookies that have already been stored can be deleted at any time. If cookies are disabled for our website, this may mean that the website cannot be displayed or used in its full functionality.

The legal basis for the use of necessary cookies is Article 6(1)(f) GDPR.

 

2.4 Integration of third-party services

2.4.1 Google Maps

We integrate maps from the “Google Maps” service. In the European region, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for all Google services.

Further information can be found in the privacy policy of the third-party provider.

If you have consented to the use of Google Maps, the legal basis for the processing of your data is Article 6(1)(a) GDPR. We also have a legitimate interest in optimising our online services pursuant to Article 6(1)(f) GDPR.

2.4.2 Google Fonts

We integrate fonts provided by Google. In the European region, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for all Google services.

Further information can be found in the privacy policy of the third-party provider.

If you have consented to the use of Google Fonts, the legal basis for the processing of your data is Article 6(1)(a) GDPR. We also have a legitimate interest in optimising our online services pursuant to Article 6(1)(f) GDPR.

2.4.3 YouTube

We use YouTube videos on our website. YouTube is a subsidiary of Google. The video platform is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. In the European region, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for all Google services.

If you have consented to the use of YouTube, the legal basis for the processing of your data is Article 6(1)(a) GDPR. We also have a legitimate interest in optimising our online services pursuant to Article 6(1)(f) GDPR.

 

2.5 Hosting

The hosting services we use provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services. We use these services to operate our website.

In this context, we or our processor process master data, contact data, content data, contractual data, usage data, and meta and communication data of users of our website on the basis of our legitimate interest in providing this online service efficiently and securely pursuant to Article 6(1)(f) GDPR in conjunction with Article 28 GDPR, including the conclusion of a data processing agreement.

 

———————–

3. Data processing when contacting us

 

3.1 Contact by email or telephone

You can contact us using the email address or telephone number published on our website.

If you use one of these contact methods, the data you provide, such as your first name, surname, address and telephone number, together with any personal data contained in your message, will be stored for the purpose of contacting you and processing your request.

When you contact us by email, our system also collects the following data:

  • IP address of the computer from which the email is sent;
  • Date and time of the email.

The legal basis for processing personal data contained in emails or provided by telephone is Article 6(1)(b) or Article 6(1)(f) GDPR.

 

3.2 Contact by letter

If you send us a letter, the data you provide, such as your first name, surname and address, the information contained in the letter and any other personal data you provide will be stored for the purpose of contacting you and processing your request.

The legal basis for processing personal data contained in letters and faxes sent to us is Article 6(1)(b) or Article 6(1)(f) GDPR.

 

3.3 Contact via the contact form

If you contact us via the contact form, we will store the information you provide in the form, including the contact details you enter there, for the purpose of processing your request and in case you have any follow-up questions.

We will not disclose these data without your consent.

The legal basis for processing personal data contained in letters and faxes sent to us is Article 6(1)(b) or Article 6(1)(f) GDPR.

 

3.4 Newsletter

3.4.1 Subscribing to the newsletter

You can subscribe to our free newsletter on our website at any time and thereby consent to receiving it.

You can subscribe to our newsletter using a double opt-in procedure. After registering, you will receive an email asking you to confirm your registration. This step is necessary to prevent someone from registering using another person’s email address.

We record the registration in order to demonstrate compliance with the relevant legal requirements and to prevent misuse. For this purpose, we process the date and time of registration and confirmation, as well as your IP address.

In addition, the personal data entered in the registration form will be transmitted to us. Providing an email address is sufficient to subscribe to the newsletter. You may also optionally provide your first name, surname and form of address. These details are used to address you personally in the newsletter.

Your personal data will be stored for as long as you are subscribed to the newsletter. These data will generally not be passed on to third parties and will be used exclusively to send the newsletter.

If you have given your consent, we will use your email address to send you our newsletter regularly. The legal basis is Article 6(1)(a) GDPR.

3.4.2 Unsubscribing from the newsletter

You can unsubscribe from our newsletter at any time and withdraw your consent to receive it. You can unsubscribe using the link at the end of each newsletter.

Alternatively, you can unsubscribe via the newsletter registration page on our website or send your request to unsubscribe by email to info@streitboerger.de.

 

———————–

4. Your rights

As a data subject, you have the following rights in relation to the processing of your personal data:

 

4.1 Right of access

The data subject has the right to obtain confirmation from the controller as to whether personal data concerning them are being processed. If this is the case, the data subject has the right to access those personal data and the following information:

  • The purposes of the processing;
  • The categories of personal data concerned;
  • The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • Where possible, the envisaged period for which the personal data will be stored or, where this is not possible, the criteria used to determine that period;
  • The existence of a right to request rectification or erasure of personal data, restriction of processing by the controller or to object to such processing;
  • The existence of a right to lodge a complaint with a supervisory authority;
  • Where the personal data are not collected from the data subject, any available information as to their source;
  • The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved and the significance and envisaged consequences of such processing for the data subject.

Where personal data are transferred to a third country or an international organisation, the data subject has the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

 

4.2 Right to rectification

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.

Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

 

4.3 Right to erasure

The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay. The controller is obliged to erase personal data without undue delay where one of the following grounds applies:

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • The data subject withdraws their consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal ground for the processing;
  • The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR;
  • The personal data have been unlawfully processed;
  • The personal data have to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject;
  • The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where the controller has made the personal data public and is obliged to erase them, the controller shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

The above provisions do not apply to the extent that processing is necessary:

  • For exercising the right of freedom of expression and information;
  • For compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • For reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR;
  • For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, where the right referred to above is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • For the establishment, exercise or defence of legal claims.
  •  

4.4 Right to restriction of processing

The data subject has the right to obtain restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
  • The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  • The controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or
  • The data subject has objected to processing pursuant to Article 21(1) GDPR, pending the verification of whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted, the personal data may, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

 

4.5 Right to data portability

The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format. The data subject also has the right to transmit those data to another controller without hindrance from the controller to which the personal data were provided, where:

  • The processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR; and
  • The processing is carried out by automated means.

In exercising the right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible.

This right must not adversely affect the rights and freedoms of others.

This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

 

4.6 Right to object

The data subject has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them which is based on Article 6(1)(e) or Article 6(1)(f) GDPR. This also applies to profiling based on those provisions.

The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.

In connection with the use of information society services, the data subject may exercise their right to object by automated means using technical specifications, notwithstanding Directive 2002/58/EC.

 

4.7 Right to withdraw consent

The data subject has the right to withdraw their consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

 

4.8 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if they consider that the processing of personal data relating to them infringes the GDPR.

The competent supervisory authority is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
Kavalleriestr. 2–4
40213 Düsseldorf
Germany

 

———————–

5. Real Cookie Banner

To manage the cookies and similar technologies used on our website, such as tracking pixels and web beacons, and the related consents, we use the consent management tool “Real Cookie Banner”.

Further information on how “Real Cookie Banner” works can be found in the provider’s information on data processing.

The legal bases for processing personal data in this context are Article 6(1)(c) GDPR and Article 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

Providing personal data is neither required by law or contract nor necessary for entering into a contract. You are not obliged to provide personal data. If you do not provide personal data, we will not be able to manage your consents.

 

———————–

6. Use of AI applications, “Libra” and “Beck Noxtua”

 

6.1 General information and purposes

To support our legal work and internal workflows, we use AI-supported applications, in particular the “Libra” application provided by Libra Technology GmbH and the “Noxtua” application provided by Verlag C.H.Beck GmbH & Co. KG.

The applications support us, among other things, with legal research, the analysis, summarisation and structuring of documents, the preparation of draft texts and organisational tasks.

In this context, personal data may be processed that are entered into the applications, such as master data, contact data and content data contained in documents, pleadings and correspondence, as well as the outputs generated by the applications.

 

6.2 Legal bases

The legal basis for the processing is Article 6(1)(b) GDPR where the processing is necessary for the performance of the mandate or for pre-contractual measures, and Article 6(1)(f) GDPR.

Our legitimate interest consists in the efficient, quality-assured and cost-effective handling of mandates and internal processes.

Where special categories of personal data within the meaning of Article 9 GDPR are processed, this takes place only on the basis of Article 9(2) GDPR, in particular for the establishment, exercise or defence of legal claims pursuant to Article 9(2)(f) GDPR, or on the basis of explicit consent pursuant to Article 9(2)(a) GDPR.

 

6.3 No automated decision-making; human oversight

The AI applications are used exclusively to provide support. Their results are always reviewed and approved by a qualified lawyer who assumes responsibility for them.

No decision based solely on automated processing within the meaning of Article 22(1) GDPR is made that produces legal effects concerning you or similarly significantly affects you. No profiling takes place.

 

6.4 Data processing agreements, professional secrecy and no model training

The providers of the AI applications we use act as processors on our behalf within the meaning of Article 28 GDPR. Appropriate data processing agreements have been concluded with them.

The providers have also been carefully selected as service providers within the meaning of Section 43e of the Federal Lawyers’ Act and have been obliged in writing to maintain confidentiality. They have been instructed to obtain knowledge of third-party secrets only to the extent necessary to perform the contract.

The applications are configured so that inputs and outputs are not used to train the providers’ or third parties’ AI models.

 

6.5 Technical and organisational measures; AI literacy

We have implemented appropriate technical and organisational measures pursuant to Article 32 GDPR, including encryption, restrictive access rights and operation in a closed environment.

The use of the applications is governed by binding internal AI policies. Our employees receive training to ensure the AI literacy required under Article 4 of Regulation (EU) 2024/1689, the Artificial Intelligence Act.

The processing activities are documented in our record of processing activities pursuant to Article 30 GDPR. Where necessary, a data protection impact assessment pursuant to Article 35 GDPR has been carried out.

 

6.6 Right to object

Where processing is based on Article 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation pursuant to Article 21(1) GDPR; see Section 4.6.

To exercise this right, please contact us using the contact details stated above.