Privacy Information for the GLNS Website
General information on data protection at GLNS
Subject matter of this privacy notice
These privacy information explain how we process personal data in connection with the use and access of our website “glns.de.”
Controller and contact
The controller for processing personal data is GLNS Ege Graßl Gubitz Lindner Nikoleyczik Peitsmeyer Scheidle Schult Rechtsanwälte Steuerberater Partnerschaft mbB (“GLNS”). Please refer to the legal notice (Impressum) for our address and contact details. For any questions about data protection, you can contact us at any time by email at datenschutz@glns.de, which also reaches our Data Protection Officer.
Location of data processing
All personal data collected or processed via the website are stored on our own web servers. Where we rely on infrastructure provided by external service providers, we have ensured that such processing is always based on the required data processing agreements.
Changes to this privacy information
As data protection law and technological or organizational circumstances evolve, we regularly review these privacy information for any need to amend or supplement them and update them where necessary.
General data processing when accessing our website
Log files
When you access our web pages, our web server stores a log record (server log files), which includes, among other things, your IP address. These server log file data are required, inter alia, to correctly display the content of our web pages and to ensure secure operation of our IT infrastructure (Article 6(1)(f) GDPR; Section 25(2) TDDDG). The log files are deleted regularly and automatically. If you would like further information, please contact us at any time using the contact details provided above.
Tools and cookies
Beyond log files, no cookies are currently used when visiting our websites.
Matomo – Piwik Pro
We use the open-source software tool Matomo (formerly PIWIK) on our website to better understand user behavior and to optimize our offering based on the information collected. We use a version of the software hosted by Piwik PRO Sp. z o.o., ul. Św. Antoniego 2/4, 50-073 Wrocław, Poland. These tools are only activated or process data if you have given your prior consent (Article 6(1)(a) GDPR; Section 25(1) TDDDG). Where providers have access to personal data or tools are hosted with these providers, we have concluded the required data processing agreements. If you have questions about the providers or need further information about storage and deletion processes, please contact us at any time using the contact details provided above.
Cloudflare (Content Delivery Network)
Our website uses functions of Cloudflare (Cloudflare, Inc., 665 3rd St. #200, San Francisco, CA 94107, USA). On our website, Cloudflare acts as a Content Delivery Network (CDN) and helps to provide content of our online offering, in particular files such as graphics or scripts, more quickly via regionally or internationally distributed servers. Technically, information is transferred between your browser and our website through Cloudflare’s network. Cloudflare can analyze the data traffic between users and our websites to detect and defend against attacks on our services. In the course of using this tool, personal data (e.g., the IP address) may be transferred to third countries outside the European Economic Area, in particular the United States. The data transfer to the United States takes place pursuant to Article 45(1) GDPR on the basis of the European Commission’s adequacy decision. The U.S. company mentioned here and/or its U.S. subprocessors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF). The legal basis for the associated data processing is Article 6(1)(f) GDPR; Section 25(2)(2) TDDDG. Further information on Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/.
Other specific data processing activities
Contact form
We provide a contact form on our website to answer questions from interested parties and to exchange information with them. We process the inquiries and information addressed to us in this context solely to handle your request and to contact you (Article 6(1)(f) GDPR). We store your data for no longer than the duration of a resulting attorney-client relationship with you (Article 6(1)(b) GDPR). If no such relationship results from the inquiry, we delete your data at the latest twelve (12) months after the last contact with you. Your right to object to processing beforehand or to request deletion remains unaffected.[
Newsletter
If you sign up for our email newsletter, we process only your email address. The data are used exclusively to send you information about our firm and/or current court decisions at regular intervals. The data processing is based on your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing already carried out remains unaffected by the revocation.
Google Maps
We use Google Maps (API) on our website. The operator of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is a web service for displaying interactive (land) maps to visualize geographic information. When you access a page that integrates Google Maps, your browser loads the web fonts required to display Google Maps into your browser cache. For this purpose as well, the browser you use establishes a connection to Google’s servers. In doing so, Google becomes aware that our website was accessed via your IP address. Google stores your data (even for users not logged in) as usage profiles and evaluates them. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. These processing operations take place exclusively if explicit consent is given pursuant to Article 6(1)(a) GDPR. You can view Google Maps’ privacy policy here: Google Privacy Policy: https://www.google.de/intl/de/policies/privacy/.
Clients
Information on the nature and scope of data processing in the context of initiating, servicing, and managing (potential) clients is provided separately.
Applications
If you send us your application documents via the email address provided, you will receive information on the nature and scope of data processing without delay after receipt of your application.
Social media
We operate presences on online platforms and social networks to interact with potential or existing customers, communicate with interested parties and users, or promote offers and services. We operate our presences in so-called joint (data protection) responsibility with the providers. Data that you share or publish directly via the online platforms and networks (e.g., through comment and chat functions) are processed by us as controller in order to interact with you and to exchange information where appropriate. In the course of this interaction, we may also receive statistical data about the use of our “channels and fan pages” from the platform operators. This includes, for example, information on interactions, likes, comments, or aggregated information and statistics (e.g., IP address; origin of followers) that help us learn about interactions with our page. The legal basis for processing in our area of responsibility is Article 6(1)(f) GDPR.
The providers also process data under their own responsibility. We have no influence over data that are processed by the provider under its own responsibility according to its own terms of use and privacy policies. We point out that when accessing the aforementioned providers, additional data (e.g., from your usage and browsing behavior) may be collected and potentially transmitted to the provider. Please also note that, if you interact via the aforementioned media, data may be processed outside the European Union. In addition, user data are generally processed for market research and advertising purposes. For example, usage profiles may be created from user behavior and resulting interests. These usage profiles can in turn be used to display advertisements within and outside the platforms that are presumed to match users’ interests. For further information, please refer to the privacy information of the respective providers. If we have personal data about you in connection with the use of the online platforms and networks, please address your concerns to us. If you wish to assert rights against a particular provider, please contact the respective provider.
Your rights
You can assert your rights as a data subject concerning your processed personal data at any time by contacting us using the contact details provided at the beginning. In particular, you have the following rights:
Right of access (Article 15 GDPR): You have the right to obtain information about the data we process about you. This includes, in particular, information about processing purposes, data categories, categories of recipients to whom your data have been disclosed or will be disclosed, planned storage duration, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if not collected by us, as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details thereof.
Right to rectification (Article 16 GDPR): You have the right to request without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data.
Right to erasure (Article 17 GDPR): You have the right to request the erasure of personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay, for example where personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
Right to restriction of processing (Article 18 GDPR): This right may be relevant, for example, if you contest the accuracy of the personal data.
Right to data portability (Article 20 GDPR): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us.
Right to object (Article 21 GDPR): You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing.
Right to lodge a complaint (Article 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.
Status: 01.02.2026