Data Protection Information

Herfurtner Rechtsanwaltsgesellschaft mbH attaches great importance to the protection of your personal data and collects, processes and uses your personal data exclusively in compliance with the Basic Data Protection Regulation (DSGVO) and the national regulations on data protection law

1. Your personal data

According to Art. 4 No. 1 DPA, “personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes, for example, your name, your telephone number and your postal and e-mail address.

2. The name and contact details of the controller and the company data protection officer

This privacy information applies to data processing by:

Responsible: Herfurtner Rechtsanwaltsgesellschaft mbH
Alter Wall 32, 20457 Hamburg, Germany
Telefon: + +49 (0)40 – 228 597 960
Fax: +49 (0)40 – 228 597 961

The company data protection officer of Herfurtner Rechtsanwaltsgesellschaft mbH can be reached at the above address or at

3. The nature and purpose of their use

a. When visiting the website

When you call up our website, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which the access takes place (referrer URL),
  • the browser used and, if applicable, the operating system of your computer and the name of your access provider.

The aforementioned data will be processed by us for the following purposes:

  • Ensure a smooth connection of the website,
  • Guarantee a comfortable use of our website,
  • Evaluation of system security and stability and
  • for other administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 sentence 1 letter f DSGVO. Our legitimate interest follows from the above-mentioned purposes for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. Furthermore, we use cookies and analysis services when you visit our website. You will find more detailed explanations in sections 5 and 7 of this privacy policy.

b. Use of contact forms

For questions of any kind, we offer you the possibility to contact us via a contact form or a client questionnaire. Your details, including the contact details you provide there, will be deleted as soon as they are no longer required for the purpose of their collection. The data is only required to answer your contact requests.

These data are at the contact form:

  • Name,
  • e-mail address,
  • Phone number,
  • if applicable, your personal data in the input mask under “Subject”, “Amount of the damage or investment (EURO)” and “Message

And the client questionnaire:

  • Name (mandatory field)
  • E-mail address (mandatory field)
  • Street, house number (mandatory field)
  • Postcode (mandatory field)
  • Date of birth
  • Marital status
  • Telephone (mandatory field)
  • Fax
  • Mobile phone
  • Legal expenses insurance and related legal expenses insurance
  • if applicable, your personal details in the input mask under “Subject”, “Amount of damage or investment” and “Message.

Mandatory and voluntary information will be treated equally by us. It is necessary to differentiate between mandatory and voluntary information, as mandatory information is necessary for the proper use of the client questionnaire.

At the time the messages are sent, the following data is also stored:

  • IP address of the calling computer,
  • Date and time of registration.

The data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO on the basis of your voluntarily given consent. Both the contact form and the client questionnaire cannot be sent without this consent. Insofar as your contact is aimed at the conclusion of a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.

c. Comments on blog posts

You have the possibility to leave a comment at the end of a blog text via the input mask “write comment”. To do so, select a user name under which the comment will be published. This user name is visible to third parties within the framework of our internet presence, as is the optional specification of a website. Furthermore, we need your email address. On the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO, this will be used exclusively for any queries in connection with your comment and will under no circumstances be passed on to third parties or used for other purposes.

The IP address assigned to you at the time of the comment will also be saved. This serves our security as website operator. In the event that your comment violates applicable law, we can be prosecuted as the website operator. Accordingly, we have a legitimate interest in the identity of the author in accordance with Art. 6 para. 1 lit. f DSGVO.

4. Information disclosure

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

  • you have given your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO
  • the transfer in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume this,

that you have an overriding interest worthy of protection in not disclosing your data,

  • in the event that there is a legal obligation to pass on the data in accordance with Art. 6 para. 1 sentence 1 lit. c DSGVO, and
    this is legally permissible and required for the processing of contractual relationships with you in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO.

Transfer of data to a third country or international organisation

Data is only transferred to countries outside the EU or the EEA (so-called third country) if this is necessary for the execution of the client relationship.

5. Cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your terminal device, do not contain viruses, Trojans or other malware.

The cookie stores information that is related to the specific terminal device used. This does not mean, however, that we obtain direct knowledge of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our site. In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain defined period of time. If you visit our site again to make use of our services, it is automatically recognised that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies in order to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see item 7). These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is required for the above-mentioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO. Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

6. Embedded contents

On our website we also use the embedded content (videos) of the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you visit a website with such content, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser.

This tells the YouTube server which of our websites you have visited. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account for this platform. You can prevent such assignment by logging out of your user account before visiting our website.

Within our online offer, we set the following priorities on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO), we use content or service offers from third parties in order to integrate their content and services, such as videos (hereinafter uniformly referred to as “content”).

This always presupposes that the third-party providers of such content are aware of the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore necessary for the display of this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. Third party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain technical information on the browser and operating system, referring web pages, visiting time and other details on the use of our online offer, as well as being linked to such information from other sources.

The following presentation offers an overview of third party providers and their contents, together with links to their data protection declarations, which contain further information on the processing of data and the possibility of objection (so-called opt-out):

a. Youtube
Videos from the “YouTube” platform of the third-party provider Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy:, Opt-Out:

b. Google Maps
Maps provided by the “Google Maps” service of the third party provider Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy:, Opt-Out:

7. Tracking-Tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f DSGVO. With the tracking measures used, we want to ensure that our website is designed to meet the needs of our customers and is continuously optimised. On the other hand, we use the tracking measures to record the use of our website statistically and evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as justified in the sense of the aforementioned regulation. The respective data processing purposes and data categories can be taken from the corresponding tracking tools. For reasons arising from your particular situation, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) f DSGVO. To do so, you can prevent the storage of cookies by selecting the appropriate technical settings in your browser software.

Use of Google Adwords Conversion Tracking

We use the online advertising program “Google AdWords” on our website and, in this context, conversion tracking (analysis of visits). Google Conversion Tracking is an analysis service of the company Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer. These cookies are valid for a limited period of time, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not expired, we and the Company may recognize that you clicked on the ad and were redirected to that page. Each Google AdWords customer receives a different cookie. Therefore, there is no way that cookies can be tracked across the websites of AdWords customers.

The information collected using the conversion cookie is used for the purpose of compiling statistics. This tells us the total number of users who have clicked on one of our ads and been redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. The processing is based on Art. 6 (1) lit. f DSGVO from the legitimate interest in targeted advertising and the analysis of the impact and efficiency of this advertising.

You can disable personalised advertising for you in Google’s advertising settings. You can find instructions on how to do this under:

In addition, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative’s opt-out page at and implement the further information on the opt-out mentioned there. You can find more detailed information as well as the Google Privacy Policy at

8. Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). The use of this website is based on Art. 6 para. 1 sentence 1 lit. f. DSGVO. Google Analytics uses so-called “cookies”, text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of the website such as

  • Browser type/version,
  • the operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

are usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. We have also added the code “anonymizeIP” to Google Analytics on this website. This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being passed on to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this [google_analytics_optout]LINK[/google_analytics_optout]. An opt-out cookie will be set to prevent future collection of your information when you visit this site. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

The terms of use and privacy policy of Google and Google Analytics can be found at and

Further information on Google Analytics’ privacy policy can be found at

9. Rights of data subjects

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you may request information on the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details thereof;
  • in accordance with Art. 16 DSGVO to immediately request the correction of incorrect or incomplete personal data stored by us;
  • in accordance with Art. 17 DSGVO to request the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims
  • in accordance with Art. 18 DSGVO, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer require the data, but you use it to assert, exercise or defend

legal claims or you have lodged an objection to the processing in accordance with Art. 21 DSGVO;

  • in accordance with Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transmission to another responsible party
  • in accordance with Art. 7 Para. 3 DSGVO to revoke your once given consent to us at any time. This has the consequence that we will not be able to process the data based on this consent.

for the future, and

  • to complain to a supervisory authority in accordance with Art. 77 DSGVO As a rule, you can turn to the supervisory authority of your usual place of residence or workplace or to our office.

10. Right of objection

Right of objection

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, if there are reasons for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without indicating a special situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to

11. Data security

We use the common SSL (Secure Socket Layer) method in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser. We also use suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

12. Actuality and change of this privacy policy

This data protection declaration is currently valid and is dated February 2020.

It may become necessary to amend this data protection declaration as a result of the further development of our website and offers above or due to changes in legal or official requirements. The current data protection declaration can be called up and printed out at any time on the website at

Status: February 2020