Privacy Policy

Herfurtner Rechtsanwaltsgesellschaft mbH attaches great importance to the protection of your personal data and collects, processes and uses your personal data exclusively in compliance with the Data Protection Regulation (DSGVO) and the national regulations on data protection law.

1. your personal data

According to Art. 4 No. 1 GDPR, “personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes, for example, your name, telephone number, postal and email address.

2. name and contact details of the data controller and the company data protection officer.

This data protection information applies to the data processing by

Person responsible:

Herfurtner Rechtsanwaltsgesellschaft mbH
Alter Wall 32, 20457 Hamburg, Germany
Telephone: +49 (0)40 – 228 597 960
Fax: +49 (0)40 – 228 597 961

The company data protection officer of Herfurtner Rechtsanwaltsgesellschaft mbH can be contacted at the above address or at

3. the nature and purpose of their use

a. When visiting the website

When you visit our website, information is automatically sent to our website server by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • name and URL of the file accessed,
  • website from which the access was made (referrer URL),
  • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data is processed by us for the following purposes:

  • Ensuring a smooth connection set-up of the website,
  • Ensuring a comfortable use of our website,
  • evaluating system security and stability, and
  • for other administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

b. Use of contact forms

If you have any questions, we offer you the possibility to contact us via a contact form or a client questionnaire. Your data, including the contact details you provide there, will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The data is required solely to respond to your contact enquiries.

In the case of the contact form, this data is:

  • Name,
  • e-mail address,
  • telephone number,
  • if applicable, your personal details in the input mask under “Subject”, “Amount of the damage or investment (EURO)” and “Message”.

And for the client questionnaire:

  • Name (mandatory field)
  • E-mail address (mandatory field)
  • Street, house number (mandatory field)
  • Postcode (mandatory field)
  • Date of birth
  • Marital status
  • Telephone (mandatory field)
  • fax
  • Mobile phone
  • Legal expenses insurance and associated legal expenses insurance
  • If applicable, your personal details in the input mask under “Subject”, “Amount of damage or investment” and “Message.

We treat mandatory and voluntary information in the same way. The distinction between mandatory and voluntary information is necessary because the mandatory information is required for the proper use of the client questionnaire.

The following data is also stored at the time the messages are sent:

  • IP address of the calling computer
  • date and time of registration.

Data processing for the purpose of contacting us is based on your voluntarily given consent in accordance with Art. 6 (1) sentence 1 lit. a DSGVO. Both the contact form and the client questionnaire cannot be sent without this consent. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. We will store your personal data collected in this way for as long as it is necessary for the purposes stated in this data protection declaration, in particular for the fulfilment of our contractual and legal obligations

c. Commenting on blog posts

You have the option of leaving a comment via the “Write comment” input mask at the end of a blog text. To do this, you select a user name under which the comment will be published. This username is visible to third parties on our website, as is the optional entry of a website. In addition, we need your email address. This is used on the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f DSGVO exclusively for possible queries in connection with your comment and will under no circumstances be passed on to third parties or used for other purposes.

The IP address assigned to you at the time of commenting is also stored. This serves our security as website operator. In the event that your comment violates applicable law, we may be prosecuted as the website operator. Accordingly, we have a legitimate interest in the identity of the author pursuant to Art. 6 para. 1 lit. f DSGVO. We will store your personal data collected in this way for as long as is necessary for the purposes stated in this data protection declaration, in particular to fulfil our contractual and legal obligations.

4. passing on of data

We do not transfer your personal data to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO,
  • the disclosure is necessary for the assertion, exercise or defence of legal claims pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO and there is no reason to assume

that you have an overriding interest worthy of protection in the non-disclosure of your data,

  • in the event that there is a legal obligation for disclosure in accordance with Art. 6 Para. 1 Sentence 1 lit. c DSGVO, as well as
  • this is legally permissible and necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b DSGVO.

5. Cookies

Cookies are small text files that your browser automatically creates and that can be stored on your terminal device. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

a. Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to analyse and optimise our website. Cookies are used to enable us to analyse how visitors use the website.

Google Analytics uses cookies to collect and analyse information about the use of the website. The data collected is transmitted to Google and stored there. Google uses this data to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage.

The data collected by Google Analytics includes, but is not limited to, the user’s IP address, the pages visited, the time spent on the website and information about the operating system and browser used and other technical information.
This data is used by us to improve the website and provide users with a better experience on the website.

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time by deleting the cookies in your browser settings or by setting an opt-out cookie.

To do this, you can find a way to deactivate Google Analytics under the following link:

The data stored by Google Analytics is automatically deleted after 14 months.
For more information on how Google Analytics handles user data, please see Google’s privacy policy:

We would like to point out that deactivating Google Analytics may mean that not all functions of this website can be used in full.

b. Third-party cookies

Third-party cookies are set by websites other than For example, when you watch a video on our website, the cookies are set by the third-party websites that host our video content (e.g. YouTube).

If you watch a video on our website that is hosted on the YouTube platform, this cookie is used by YouTube to anonymously track the number of views for the video. You can disable YouTube cookies at

6. integrated contents

On our website we also use the embedded content (videos) of the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.

Normally, when you call up a page with embedded videos, your IP address is already sent to YouTube and cookies are installed on your computer. However, we have embedded our YouTube videos with the extended data protection mode (in this case, YouTube still contacts Google’s Double Klick service, but according to Google’s privacy policy, personal data is not evaluated). This means that YouTube no longer stores any information about visitors unless they watch the video. If you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have watched the video. If you are logged in to YouTube, this information is also assigned to your user account (you can prevent this by logging out of YouTube before viewing the video).

We have no knowledge of and no influence on the possible collection and use of your data by YouTube. You can find more information in YouTube’s privacy policy at In addition, we refer to our general presentation in this data protection declaration for the general handling and deactivation of cookies.

Within our online offer, we use content or service cookies on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. DSGVO), we use content or service offers from third-party providers in order to integrate their content and services, such as videos (hereinafter uniformly referred to as “content”).

This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content. We endeavour to use only such content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes.

The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offering, as well as being linked to such information from other sources.

7. data subject rights

You have the right:

  • To request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 DSGVO, to demand the immediate correction of inaccurate or incomplete personal data stored by us;
  • in accordance with Article 17 of the Regulation, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
  • to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims, or you require the data in accordance with Art. 18 DSGVO.
    legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
  • pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
  • revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This means that we will no longer process the data based on this consent in the future.
    consent, may no longer be continued in the future, and
  • complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

8. right of objection

Right of objection

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Article 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to

9. data security

We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser when visiting the website. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

10. topicality and amendment of this data protection declaration

This data protection declaration is currently valid and has the status May 2023.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at