Taunusanlage 8, 60329 Frankfurt am Main, Germany
EN / DE

Privacy Policy

Last updated: August 2026

This Privacy Policy describes how Steinmark Rechtsberatung ("we," "us," or "our") collects, uses, and protects your personal data in accordance with the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Responsible Party (Data Controller)

Steinmark Rechtsberatung
Taunusanlage 8
60329 Frankfurt am Main
Germany
Email: info@steinmark-rechtsberatung.de

Our attorneys are subject to attorney-client confidentiality (anwaltliche Schweigepflicht) pursuant to § 203 of the German Criminal Code (StGB). Personal data shared within an attorney-client relationship is processed in accordance with this obligation.

2. Data We Collect

We collect the following categories of personal data:

  • Contact data: name, email address, phone number, company name — provided voluntarily via our contact or consultation forms.
  • Communication data: the content of inquiries and correspondence you send to us.
  • Technical data: IP address, browser type, and usage data collected automatically when you visit our website.
Consultation form notice: When enabled, the form sends the fields you choose to provide to a Vercel-hosted server function and then to the firm’s configured email delivery provider so the firm can respond. Do not submit confidential, sensitive, or case-document information through the initial form. Before enabling delivery, the firm must update this policy to identify its actual processors, legal basis, retention period, transfer safeguards, and data-processing agreements.

3. Purposes of Processing

We process your personal data for the following purposes:

  • To respond to your inquiries and consultation requests.
  • To establish and maintain consulting engagements.
  • To improve and maintain our website and services.
  • To comply with legal obligations.

4. Legal Basis

Our processing of your data is based on the following legal grounds under Article 6 of the GDPR:

  • Consent (Art. 6(1)(a)) — where you provide it for a voluntary inquiry.
  • Contractual necessity (Art. 6(1)(b)) — for processing related to consulting engagements.
  • Legitimate interests (Art. 6(1)(f)) — for website operation and business communication.
  • Legal obligation (Art. 6(1)(c)) — where we are required to retain data by law.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal retention periods. Once data is no longer needed, it is deleted or anonymized.

6. Data Sharing

We do not sell your personal data. We may share data with service providers who act on our behalf (e.g., hosting, email) under contractual data protection obligations. Where required to coordinate with licensed attorneys on your behalf, we share only what is necessary and with your consent.

7. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure ("right to be forgotten") (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time (Art. 7)
  • Lodge a complaint with a supervisory authority (Art. 77)

To exercise these rights, contact us at info@steinmark-rechtsberatung.de.

8. Cookies

Our website uses only essential technical cookies required for basic functionality. We do not use tracking or advertising cookies without your consent. You can manage cookies through your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, in accordance with Art. 32 GDPR.

10. Contact

For any questions regarding this Privacy Policy or your personal data, please contact us at info@steinmark-rechtsberatung.de.

Note: This is a template privacy policy provided for demonstration purposes. Before going live, have it reviewed by a qualified data protection professional or attorney to ensure it accurately reflects your actual data processing and complies with current legal requirements.