Data protection and privacy

  1. Name and contact information of the data controller as well as of the firm’s data protection officer

This data protection information applies to the processing of data by:

Controller: HFK Rechtsanwälte Heiermann Franke Knipp und Partner mbB (hereinafter: HFK), Knesebeckstraße 1, 10623 Berlin, Germany, e-mail:, telephone: +49 (0)30 318675-0 fax: +49 (0)30 318675-29

HFK’s data protection officer can be reached by sending a letter to Dr. Benjamin Klein at the above address or an e-mail to

  1. Collection and storage of personal data as well as nature and purpose of use

When you call up our website at, the browser used on your computer or mobile device automatically sends information to our website’s server. This information is stored temporarily in a so-called log file. In the process, the following information is collected and stored until it is automatically deleted:

  • IP address of the computer accessing the site;
  • date and time of the access;
  • name and URL of the file accessed;
  • website from which our site is accessed (referrer URL);
  • the browser used as well as, possibly, your computer’s operating system and your access provider’s name;

The aforementioned data are processed by us for the following purposes:

  • to ensure a smooth establishment of a connection to our website;
  • to ensure a comfortable use of website;
  • to analyse system safety and stability, as well as
  • for other administrative purposes.

We are processing your data lawfully based on Art. 6(1)(f) of the General Data Processing Regulation (GDPR). Our legitimate interest follows from the data collection purposes listed above. Under no circumstances will be using the data collected for the purpose of drawing conclusions as to your identity.

Moreover, we are using cookies and analytics services when you use our website. For further explanations here on, please see sections 4 and 5 of this privacy policy.

  1. Disclosure of data

You personal data are not transmitted to any third parties for any purposes other than those stated below:

We do not disclose your personal data to any third parties unless:

  • you have given your express consent to the processing of your personal data pursuant to Art. 6(1)(a) GDPR;
  • the disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims and we have no grounds to assume that you have an overriding legitimate interest in the non-disclosure of your data;
  • such a disclosure is required by law under Art. 6(1)(c) GDPR, and
  • such a disclosure is permitted by law and necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contract with you, or
  • the disclosure is made and justified in connection with the website analysis referred to in section 5 of this privacy policy.
  1. Cookies

We use cookies on our website. Cookies are small files generated automatically by your browser and stored on your computing device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your computing device, they do not contain any viruses, trojans or other malware.

The cookie stores information generated in connection with the specific computing device being used. This, however, does not mean that we are thereby gaining direct knowledge of your identity.

The use of cookies allows us, on the one hand, to make the use of our website more pleasant for you. For this purpose, we are using so-called session cookies that allow us to detect that you have already visited certain pages on our website. These cookies are deleted automatically once you leave our website.

In addition, we also use temporary cookies for optimized user-friendliness. These are stored on your computing device for a predetermined period of time. When you visit our website again in order to use our services, the system automatically detects that you have already visited us before and remembers your inputs and settings, so that you do not have to re-enter them again.

Moreover, we use cookies in order to collect statistics about the use of our website, which we then analyse in order to optimize our offerings for you (cf. section 5 below). When you come back to our website, these cookies enable us to automatically recognize that you have already visited us before. These cookies are deleted automatically after a predefined period of time.

The data processed with the aid of cookies are required for the purpose of protecting our legitimate interests along with those of third parties pursuant to Art. 6(1)(f) GDPR.

Most browsers accept cookies automatically. However, you can also configure your browser such that no cookies are stored on your computer or that you are always notified before a new cookie is created. Fully deactivating cookies may, however, prevent you from being able to use all functions of our website.

  1. Analysis tool

We are employing the tracking measures listed below. These measures are performed on the basis of Art. 6(1)(f) GDPR. By using these tracking measures, we want to ensure that our website is designed to meet your needs and optimized on an ongoing basis. Moreover, we use tracking measures in order to collect statistics about the use of our website, which we then analyse in order to optimize our offerings for you. These interests must be deemed legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories are described under the respective tracking tools.

Google Analytics

For the purpose of designing our website to meet your needs and update our pages on an ongoing basis, we use Google Analytics, a web analytics service by Google Inc. (; 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google). In this context, pseudonymised user profiles are created and cookies (cf. section 4) are used. The information about your use of this website generated by the cookie, such as

  • browser type/version,
  • operating system used,
  • referrer URL (the site visited immediately prior),
  • host name of the accessing computer (IP address),
  • time of the server query,

is transferred to a Google server in the US and stored there. The information is used in order to analyse the use of the website, generate reports on website activities and provide other services in connection with the use of the website and Internet for the purpose of conducting market research and designing these web pages to meet your needs. Moreover, the information may also be transmitted to third parties if required by law or where the data is processed by third parties on our behalf. Under no circumstances is your IP addresses combined with other Google data. IP addresses are anonymised so that they cannot be associated with a specific user (IP masking).

You can prevent installation of cookies through settings in your browser; however, please note that if you do so, you may not be able to fully use all functions of this website.

Moreover, you can prevent the collection of any data relating to your use of our website generated by the cookie (including your IP address) as well as the processing of such data by Google by downloading and installing a browser add-on (

Further information on data privacy and security in connection with Google Analytics is available on the Internet, for instance at Google Analytics Help (

  1. Data subject rights

You have the right,

  • under Art. 15 GDPR, to demand information about any personal data of yours processed by us. In particular, you have the right to demand information about the purposes of the processing, the categories of the personal data, the categories of recipients to whom your personal data have been or will be disclosed, the envisaged periods for which your personal data will be stored, the existence of the right to request rectification, erasure or restriction of processing of your personal data or to object to such processing, the existence of the right to lodge a complaint, the source of your personal data where the data were not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about the details thereof.
  • under Art 16 GDPR, to demand without undue delay the rectification of any accurate personal data concerning you or the completion of your personal data stored by us;
  • under Art. 17 GDPR, to demand the erasure of any personal data concerning you stored by us unless the processing is required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
  • under Art. 18 GDPR, to demand the restriction of processing of your personal data where the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the personal data, and we no longer need the data but you require them for the establishment, exercise or defence of legal claims, or if you have objected to the processing pursuant to Art. 21 GDPR;
  • under Art. 20 GDPR, to receive your personal data provided to us in a structured, commonly used and machine-readable format, or to demand transmission thereof to another controller;
  • under Art. 7(3) GDPR, to notify us at any time that you are withdrawing the consent you have given us. This means that from then on forward we are no longer allowed to continue processing data based on that consent, and
  • under Art. 77 GDPR, to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority at your habitual residence or place of work, or where our firm is located.
  1. Right to object

Where your personal data are processed based on legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will comply with without you needing to specify a particular situation.

If you would like to exercise your right to object or to withdraw your consent, please email us at

  1. Data security

When you visit our website, we use the widespread SSL (secure socket layer) method in conjunction with the highest level of encryption supported by your browser. Usually, this is a 256 bit encryption. If your browser does not support 256 bit encryption, we will use 128 bit v3 technology instead. Whether a specific page of our website is transmitted in encrypted form is indicated by the closed lock or key symbol in your browser’s status bar.

We also take appropriate technical and organizational security measures in order to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological progress.

  1. Currentness of and changes to this privacy policy

This privacy policy is currently in effect and was last updated in May 2018.

As we continue to develop our website and its contents, or due to changes in statutory or regulatory requirements, this privacy policy may need to be amended. The most current version of the privacy policy can be viewed and printed at any time on our website at