Privacy Statement

1. Scope, Purposes and Legal Bases of our Processing on this Web Site

Whenever you visit our web site, our web server will log the below communication and usage data:

  • IP address of requesting terminal device
  • Time and date of access
  • Name and URL of the data accessed on our web server
  • Transferred data volume
  • Confirmation that request was processed successfully, or error status information
  • Header information identifying the requesting browser and operating system

Our web server is operated by a service provider based in Germany. The communication and usage data will normally be deleted within 7 days. In case of a suspected security incident, the relevant data will be retained until the incident is solved and will be transferred to the competent authorities.

We also use a session cookie. The cookie is a small text file that our web server provides to your terminal device. Our cookie is technically required to properly present our web site; it does not enable us to track you. The cookie will not be stored persistently but will be deleted automatically once you terminate your session or close your browser (at the latest). You may of course block cookies using the settings of your browser – however that may result in an incorrect presentation of this web site.

We process this data only to the extent required for the purposes of providing secure access to our web content (making connection, correct transmission and display of content, securing our systems). The legal basis of our processing is our legitimate interest in the public presentation of our firm, statutory and law society publication requirements and the legal requirement to protect visitors from potential security threats on our web site.

There is no further processing of your data by this web site. Any further processing will be in relation to client relationships and we will inform you about the details separately, as required from time to time. However, as a general information, we would like to point out that we process the personal data of our clients, their opponents and any other parties concerned in a matter only to the extent required under contract, as legally required, to pursue the legitimate interest of our clients in the enforcement of their legal positions, or as allowed pursuant to consent that may be withdrawn at any time with effect for the future.

2. Links to Web Sites of Third Parties

This privacy statement only applies to our web site. If and to the extent our web site contains links to third party web sites, we would like to point to the following: This web site does not automatically load any content from third party servers; neither is such content required to use our web site. The respective links indicate that they take you to third party web sites. You transfer your personal data to the third party web server, if you follow such a link. We do not have any influence whatsoever on such third party providers and do not control whether they comply to relevant regulations.

3. Controller, Contacts, Encryption

The controller as defined in the GDPR is:

Xenion Rechtsanwaltsgesellschaft mbH
Bürkleinstraße 10
80538 München
Germany

You may approach any of the lawyers mentioned under TEAMS and you will find our contact details in the left corner below on this webpage.

4. Your Rights

You have the following rights, each in accordance with applicable statutory law:

  • Access: You may request information on the data processed about you, and to obtain a copy thereof. For clarification, we will not be able to provide access or information to the extent the affected data is subject to our professional secrecy or must be kept secret due to another statutory provision or the nature of the data, in particular due to an overriding interest of an affected third party.
  • Rectification: Upon request, we will rectify inaccurate data and complete incomplete personal data.
  • Deletion and Restriction: Upon request, we delete your personal data or restrict our processing of it.
  • Data Portability: You may receive any personal data you provided to us under contract or consent in a structured, commonly used and machine-readable format.
  • Objection: To the extent we process your personal data based on a legitimate interest, you may object to such processing.
  • Consent withdrawal: You may withdraw your consents at any time without affecting the lawfulness of processing based on consent before its withdrawal. We will inform you on how to withdraw when we obtain your consent.
  • Automated decisions: We do not use any automated individual decision making processes pursuant to Art 22 GDPR.
  • Complaint: You may to lodge a complaint with a competent authority, e.g. at the place of your habitual residence.

Unless otherwise stated, to exercise your rights please contact us using the contact details given in point 3 above.