Privacy Policy

1. Controller

Telephone: +49 (0) 6452 9394767
Email: info@kanzlei-cordt.de

2. Provision of the website and server log data

When this website is accessed, the hosting provider processes data required to deliver the website and maintain the security of its operation. This may include:

• the IP address of the requesting device,
• the date and time of access,
• the page or file requested,
• the volume of data transferred,
• the referrer URL,
• browser type and browser version,
• the operating system and
• the HTTP status code.

The data is processed to provide the website securely and without technical errors. The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and economically efficient operation of the website.

Server log data is generally deleted after no more than seven days unless longer retention is necessary to investigate a security-related incident.

3. Contact enquiries

When you contact the law firm by email or telephone, the information you provide is processed to the extent required to handle and respond to your enquiry.

For pre-contractual or mandate-related enquiries, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR. The legitimate interest lies in the proper handling of the enquiry.

A non-binding enquiry does not establish a lawyer-client relationship. Please send particularly sensitive or extensive documents only through a secure communication channel that has been expressly agreed with the law firm.

Communication data is deleted when it is no longer required for the relevant purpose, provided that statutory retention obligations or legitimate interests do not prevent deletion.

4. Cookies, analytics and external content

Based on its current technical configuration, this website does not use analytics or marketing services or cookies intended for such purposes. External fonts, maps, videos and social-media plugins are not embedded directly from third-party providers.

A consent banner is therefore not currently provided. Should the technical scope of the website change, the privacy information and, where necessary, the consent-management system will be adjusted accordingly.

5. Recipients and processors

Personal data may be transferred to technical service providers where they are used for hosting, maintenance or secure communication. Such providers are involved only to the extent necessary and, where legally required, are bound by a data processing agreement.

Data is otherwise disclosed only where this is permitted or required by law or where valid consent has been given.

6. Rights of data subjects

Subject to the applicable statutory requirements, data subjects have the following rights in particular:

• access under Article 15 GDPR,
• rectification under Article 16 GDPR,
• erasure under Article 17 GDPR,
• restriction of processing under Article 18 GDPR,
• data portability under Article 20 GDPR and
• objection under Article 21 GDPR.

Consent may be withdrawn at any time with effect for the future.

7. Objection to processing based on legitimate interests

Where personal data is processed on the basis of Article 6(1)(f) GDPR, the data subject has the right to object under Article 21 GDPR on grounds relating to their particular situation.

8. Right to lodge a complaint

Data subjects may lodge a complaint with a data-protection supervisory authority, particularly the authority responsible for their habitual residence, place of work or the place of the alleged infringement.

9. Data security

The website is delivered through an encrypted HTTPS connection. Technical and organisational measures are aligned with the relevant risks and the current state of technology. Nevertheless, data transmission over the internet cannot be protected entirely against every possible risk.

10. Updates to this Privacy Policy

This Privacy Policy will be updated if the website, the technical services used or the applicable legal requirements change.

Last updated: July 2026