Data protection notice

---

Controller and contact for data protection

The controller of this website is
Boris Arendt, Blücherstr. 19, 10961 Berlin. Requests regarding data protection can be sent to the e-mail contact@dataandlaw.com.

Data processing via this website is performed for the purposes stated here.

Purposes of data processing, Type of data processed and recipients

Presentation of the website

Data processing on these web pages is carried out for the purpose of presenting this website. The controller has a legitimate interest (Art. 6 para. 1 lit. f. GDPR) in providing this information to the user on access.

Only pseudonymized data such as the IP address is processed when the website is visited. No cookies are set. In addition to the controller, the only recipient of the data is the host of this website (Strato AG, Berlin). The data is processed and stored in data centers in Germany. They are deleted when they are no longer required for the purpose of processing, but at the latest after six weeks.

Website analysis

To improve our website, we analyze visitor behavior on our website in order to derive potential for optimization. For this purpose, we use the data protection-friendly analysis tool Matomo On-Premise which is installed directly on our web server. This ensures that no user or visitor data is sent to third parties. The website analysis is carried out without the use of cookies.

During a visit, 2 bytes of your IP address are masked (e.g. 192.168.xxx.xxx), which means that the IP address is anonymous in this form and cannot be traced back. In addition, anonymous information such as the number of visitors to the website, page views, length of stay or search terms used, web pages and sub-pages visited, as well as technical data such as the browser type or operating system used are stored during your visit. All data is deleted at regular intervals.

The legal basis for the processing of this data is our legitimate interest in gaining insights into the use and reach of our website (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Opt-out complete; your visits to this website will not be recorded by the Web Analytics tool. Note that if you clear your cookies, delete the opt-out cookie, or if you change computers or Web browsers, you will need to perform the opt-out procedure again.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

You are not opted out. Uncheck this box to opt-out. You are currently opted out. Check this box to opt-in.

The tracking opt-out feature requires cookies to be enabled.

Contacting us

If you contact us by e-mail or telephone, we will process your data in order to respond to your inquiry. The legal basis is our legitimate interest (Art. 6 para. 1 lit. f. GDPR) or the fulfillment or execution of a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR). The following data is processed by you for the purpose of responding to inquiries

• Your Name
• Your e-mail address
• Your phone number

This data will be deleted when it is no longer required for the purpose of processing your request.

Making an appointment via meetergo

You have the option of using the “Make an appointment” button to make appointments for a non-binding and free consultation via the meetergo appointment booking tool. The legal basis is our legitimate interest (Art. 6 para. 1 lit. f. GDPR) or the fulfillment or execution of a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR). 

The following data is processed by you via the appointment booking tool:

• Your Name
• Your e-mail address
• Your telephone number (optional)

The data processing takes place without the setting of cookies in data centers in Germany via the services of meetergo GmbH, Monheim am Rhein. An data processing agreement has been concluded with meetergo in accordance with Art. 28 (3) GDPR. Your appointment booking data will be deleted after three months at the latest.

Data processing for making contact or booking appointments is not required by law or contract, nor is it necessary for the conclusion of a contract. However, we cannot process your inquiries and appointment bookings without the provision of your data.

Online meetings via Zoom

For online meetings, we use the video platform Zoom. When you make an appointment, you will be sent an individual access link to the online meeting by e-mail. Your previously entered name and e-mail address will be processed.

All data will be deleted from Zoom after the meeting has been held.

We have concluded an data processing agreement with “Zoom” that includes the EU standard contractual clauses. Furthermore, the provider of “Zoom” is certified according to the so-called EU-U.S. Data Privacy Framework. This ensures an appropriate level of protection in accordance with the GDPR.

The legal basis for data processing is Art. 6 para. 1 lit. b GDPR (performance of a contract or pre-contractual measures).

Rights of data subjects

As a data subject, you have the following rights under the GDPR:

• Access to information on processing (Article 15 GDPR)
• Rectification of inaccurate data (Article 16 GDPR)
• Deletion of data that is no longer required (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to the processing (Article 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Update and changes to this privacy policy

This data protection notice was last updated in January 2025. We reserve the right to expand and amend this notice as the website develops.