R  E  C  H  T  S  A  N  W  A  L  T Jörg-Henning von Winterfeld Privacy Policy                             (EU - General Data Protection Regulation, in the following EU-GDPR, and Federal Data Protection Act, in the following BDSG) Notice valid starting May 2018  (The right to update the notice remains reserved.) The website of the law office can be visited without disclosing any personal data by which the visitor may be directly identified (e.g. name, address, e- mail). The website does not use Cookies, tools for analysis (eg Google Analytics or similar tools) or Social Media Plug-Ins. 1. The following information on data protection applies to processing     of personal data by the law office of Rechtsanwalt Jörg-Henning von Winterfeld Deutschherrenstraße 46, 53177 Bonn Phone: 0228 / 902 99 785 Internet: www.vonwinterfeld-ius.de E-Mail: anwalt [at] vonwinterfeld-ius.de 2.  Information on collection and recording of personal data  (Art. 4      § 1 EU-GDPR) and on type of personal data and purpose of their      utilization a)  Personal data, especially such suited to directly identify you as the data      subject,              name  |  address  |  telephone numbers  |  e-mail               voluntarily and by your own doing disclosed to the law firm in the con-      text of  either a  request for legal advice or  representation or an  already      issued or accepted mandate will be processed in accordance with Art. 6      § 1 sentence 1 lit a u. b EU-GDPR for the following purposes:              to correspond with you              to assure adequate legal counseling and representation              to submit the invoice for our legal services              to handle possibly existing liabilty claims,              to assert possibly existing claims against you.       The data will be deleted after expiry of the retention period, which is de-       fined by § 50 of the  Federal Lawyers Act (BRAO), who  provides,  that       lawyers keep the files  of the mandate for  6  years, starting with the end       of the year in which the mandate was terminated. However, the retention       period can exceed the  aforementioned time-limit,  if  tax or  commercial       law storage and  documentation obligations or the  necessity to  preserve       evidence demand a longer storage, or you have consented to such.       If no mandate is issued or accepted,  the  data, as far  as this is  necessary       for  the  preservation  of  evidence, will  be  stored in  the context  of  the       statutory statute of limitations, whereby currently the statutory limitation       period is 3 years (§ 195 BGB) and  the  maximum  limitation  period  30       years.              b) Data, that is automatically generated without your own doing by the     browser used when you visit the website or call of a file            Date and time (incl. zone) of the request  |  Information about the            method used by the requesting  client, the resource requested and the            protocoll used  |  Information about the success of the request  |             Information about the volume of data transmitted to the requesting            client  |  The Referer URL (the site that the client reports having            been referred from)  | Information that the client browser reports            about itself: - type of browser and version used, - type of operating            system used  |  IP address of the requesting client      is sent to the server of  the website, recorded and temporarily stored  in      one or more  server-logfiles  and  deleted  automatically after 48 hours.      Such data is processed by the law firm for the purposes of:      safeguarding a smooth connection to and comfortable use of the      website;      evaluating system security and system stability;      fullfilling administrative obligations and needs.       Processing of automatically generated data is lawful according to Art. 6 § 1       sentence 1 lit. f  EU- GDPR. Our legitimate interest  results  from the  before       mentioned purposes. Under no circumstances will such data be processed by       us in order to draw conclusions about you. 3. Disclosure of data      Personal data will not be disclosed by transmission, dissemination  or  made      otherwise available for purposes other than the following. Personal data will      be transfered to third parties by the law office, if                a) you have given us your consent to  do  so  (Art. 6 § 1 sentence 1 lit a  EU-           GDPR),       b) it is necessary for the assertion, exercise or defense of legal rights and  no           grounds for the assumption exist, that you have a predominantly legitmate           interest in the non-disclosure of your data (Art. 6 § 1 sentence 1 lit. f  EU-           GDPR)       c) we are legally obliged to transfer data (Art. 6 § 1 sentence 1 lit. c EU-           GDPR)       d) this is legally required and according to Art. 6  § 1 sentence 1 lit. b   EU-           GDPR necessary for the settlement of contractual relationships with you.     As far as personal data are subject to professional secrecy and/or privi-     leged confidentiality,  it will only  be  passed  on or  made available  to     third parties after consultations with you.   4. Rights of the data subject    You have the right:       a) in accordance with Art. 7 § 3 EU-GDPR, to revoke at any time the consent          once granted.          As a result, data processing, that  was  based on this consent, will be  discon-          tinued in the future.      b)  according to Art. 15 EU-GDPR, to demand information about your           personal data processed by the law firm.            In particular, you can demand from the law office to provide information on           the purposes of the processing, the category of personal data, the categories           of recipients  to  whom your  information has been disclosed, the  retention           period, the existence of a right  of  rectification, cancellation,  limitation of           processing or opposition, the  existence of a complaint right, the source  of           your data, if not collected from us, and the existence of automated decision-           making, including profiling  and, if necessary, meaningful  information  on           their details;       c) in accordance  with  Article 16 EU-GDPR,  to  demand  without  delay            correction of inaccurate or completion of your personal data stored       d) according to Art. 17 EU-GDPR, to demand deletion of your personal           data stored at the law office,           unless processing is necessary for the purpose of exercising the Right to           freedom of expression and information, to fulfill a legal obligation,  for           reasons of public interest or for the purposes of the creation, exercise or           defense of legal rights;       e) in accordance with Art. 18 EU-GDPR, to demand restricting the           processing of your personal data           if you have  contested the  accuracy of the data, or when the processing  is           unlawful, but you opposed erasure and when the law firm no longer  needs           the data, but they are required by you for asserting, exercising or defending           legal claims and at last when you objected to the processing in accordance           with Art. 21 EU-GDPR;       f) in accordance with Art. 20 EU-GDPR to demand, that your personal data           is provided to you by the law firm in a structured, common and machine-           readable format  or  that  it  shall be  transmitted to  another  person in           charge; g) and in accordance with Art. 77 EU-GDPR, to  complain  to a  supervisory     authority.     In general, you can contact the supervisor of your usual Residence or work-     place or our office. 5. Right to object      If processing your personal data is based on legitimate interests in accordance      with Art. 6 § 1 sentence 1 lit. f EU-GDPR, you have the right to object to  the      processing of  your personal  data in   accordance with Art. 21 EU-GDPR  on      grounds  arising  from  your  particular situation or if the objection is  directed      against direct mail. In the latter case you have a general right to object, which      will be honored and  implemented by us without asking for justification  by a      particular situation.      If you wish to exercise your right to revoke given consent or to object, send an      e-mail to:                                                  anwalt [at] vonwinterfeld-ius.de 6. Data security     The law office uses a SSL-procedure (Secure Socket Layer) during your visit to     the website in connection with a 256 Bit encryption. Wether or not the  visited     page of the  website is  encrypted  or not,  can be determined by looking  for a     closed key or lock icon, usually placed either in status-bar or address-bar.