Privacy Policy | Rechtsanwälte

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

SLB Rechtsanwaltsgesellschaft mbH
Leopoldstr. 175
80804 Munich
Germany

represented by its Managing Directors:

Dr. Christian Straßberger, Rechtsanwalt
Dr. Oliver Baumann, Rechtsanwalt
Dr. Louis Rönsberg, Rechtsanwalt
Sandra Bendler-Pepy, Rechtsanwältin

Telephone: +49 89 512427 0
Fax: +49 89 512427 25
Email: info@slb-law.de

2. Data Protection Contact

If you have any questions regarding data protection or wish to exercise your rights under the GDPR, you may contact us using the contact details provided above.

Contact person:

Dr. Louis Rönsberg
SLB Rechtsanwaltsgesellschaft mbH
Leopoldstr. 175
80804 Munich
Germany
Email: info@slb-law.de

3. General Information on the Processing of Personal Data

We process personal data only to the extent necessary to provide this website, communicate with users, respond to enquiries or provide our legal services.

The applicable legal basis depends on the purpose of the respective processing activity.

Where processing is necessary in order to take steps at your request prior to entering into a contract or for the performance of a contract, the processing is based on Art. 6(1)(b) GDPR.

Where processing is necessary for compliance with a legal obligation, it is based on Art. 6(1)(c) GDPR.

Where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests, fundamental rights and freedoms do not override those interests, the processing is based on Art. 6(1)(f) GDPR.

Where we obtain your consent, the processing is based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

4. Accessing Our Website and Server Log Files

When you access our website, the browser used on your device automatically transmits information to the server hosting our website.

The data processed may include, in particular:

the IP address of the device accessing the website,
the date and time of access,
the name and URL of the file or page accessed,
the referrer URL,
the browser used and browser version,
the operating system, and
where applicable, information relating to your internet service provider.

These data are processed in order to ensure the technically error-free provision of the website and the security and stability of our systems.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, reliable and technically functional website and in preventing and investigating misuse and attacks.

Server log files are deleted as soon as they are no longer required for the purposes stated above, unless longer retention is necessary for security reasons or due to statutory obligations.

5. Contact by Email, Telephone or Contact Form

You may contact us by email, telephone or – where available on the website – by using a contact form.

In doing so, we process the personal data that you provide to us. These may include, in particular:

your name,
contact details,
the content of your enquiry,
information concerning the underlying matter, and
documents and other information provided by you.

The data are processed for the purpose of handling your enquiry, determining whether we are able to accept an engagement and, where applicable, preparing or performing a client engagement.

Where your enquiry is intended to establish a lawyer-client relationship or relates to an existing engagement, the legal basis is Art. 6(1)(b) GDPR.

In other cases, processing may be based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the appropriate handling of and response to enquiries.

Where statutory retention or documentation obligations apply, processing is additionally based on Art. 6(1)(c) GDPR.

Confidentiality of Lawyer-Client Communications

As a German law firm, we treat information provided to us as confidential in accordance with the applicable statutory and professional duties of confidentiality.

Please note, however, that the transmission of information via the internet may involve security risks. Particularly sensitive or extensive confidential documents should not be transmitted via unsecured communication channels without further consideration. Where necessary, appropriate means for the secure transmission of documents can be arranged.

Merely sending us an enquiry does not establish a lawyer-client relationship. A lawyer-client relationship is established only once we have expressly accepted the engagement.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small files or pieces of information that may be stored on or accessed from your device.

Where storing information on your device or accessing information already stored on your device is strictly necessary in order to provide a digital service expressly requested by you, this is carried out on the basis of Section 25(2) of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG). Where personal data are processed in this context, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and technically functional provision of our website.

In addition, we use cookies and similar technologies for statistical, analytical and marketing purposes only with your consent. In these cases, the legal basis for storing information on your device or accessing information stored on it is Section 25(1) TDDDG. Where personal data are processed in this context, the processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

Your consent is voluntary and may be withdrawn or modified at any time with effect for the future via the cookie settings provided on our website.

Consent Management with Complianz

We use the consent management solution “Complianz – GDPR/CCPA Cookie Consent”, provided by Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, the Netherlands, to manage consent relating to cookies and similar technologies.

Complianz enables you to decide, when visiting our website, whether you consent to the use of cookies and services that require consent and to modify or withdraw your previous choices at a later time.

For this purpose, technically necessary cookies and similar storage technologies are used to store, in particular, your consent decision and the settings you have selected. This enables the website to determine which services you have consented to or rejected and to take your choices into account when you subsequently access the website.

The processing serves to manage and document your consent decisions and to comply with our statutory obligations to demonstrate and document consent. The legal basis for the processing of personal data is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR. To the extent that storing information on your device or accessing such information is technically necessary to manage your consent decision, this is carried out on the basis of Section 25(2) no. 2 TDDDG.

You may modify or withdraw your consent decision at any time with effect for the future via the cookie settings provided on our website.

7. Google Analytics and Google Ads Conversion Tracking

7.1 Google Analytics

We use Google Analytics, a web analytics service provided by Google, on this website. Google Analytics enables us to statistically analyse the use of our website and to improve our online services.

In particular, information concerning page views and interactions with our website, technical information concerning the device and browser used, referrer information, approximate location information and online identifiers may be processed.

Google Analytics is used only if you have given your consent via our consent management system.

The legal basis for storing information on your device or accessing information stored on it is Section 25(1) TDDDG. The associated processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw or modify your consent at any time with effect for the future via the cookie settings on our website.

7.2 Google Ads Conversion Tracking

We use Google Ads and the associated conversion tracking technology in order to measure the effectiveness of advertisements placed by us through Google and to optimise our advertising campaigns.

If you access our website via a Google advertisement and have consented to the use of the relevant technologies, Google and we may determine whether certain actions on our website have taken place following an interaction with or click on an advertisement. For this purpose, cookies or similar technologies and online identifiers may be used, and technical information concerning the device used and access to our website may be processed.

The processing is carried out solely for the purpose of measuring and optimising our advertising activities. We do not receive information through this process that enables us to identify you directly by name.

Google Ads Conversion Tracking is used only if you have given your consent via our consent management system.

7.3 Conversion Tracking for Telephone Calls

As part of Google Ads, we also use conversion tracking for telephone calls made via our website.

If you visit our website after clicking on one of our Google advertisements and have consented to marketing tracking, the telephone number displayed on our website may be replaced by a Google forwarding number. Calls made using this number can be attributed to the preceding Google advertisement or advertising campaign.

In particular, information concerning the preceding interaction with the advertisement, the time of the call, the duration of the call and technical information may be processed. We use this information to determine which advertisements result in telephone enquiries and to assess the effectiveness of our Google Ads campaigns.

For our conversion measurement, a telephone call is currently counted as a conversion if it reaches the specified minimum call duration of 60 seconds.

Telephone call conversion tracking is used only if you have previously consented to the processing required for this purpose.

You may withdraw or modify your consent at any time with effect for the future via the cookie settings on our website.

7.4 Google Consent Mode

We use Google Consent Mode. This communicates the consent status selected by you through our consent management system to the Google services used on our website and controls the behaviour of Google tags in accordance with your selection.

In this context, consent information and technical information may in particular be transmitted to Google. Depending on the technical configuration of the Google services used, limited technical signals may also be processed where consent has not been given, to the extent permitted under the applicable data protection requirements.

You may modify the selection made in our consent management system at any time with effect for the future.

7.5 Provider and Further Information

For users in the European Economic Area, the provider of the Google services used is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

In connection with the use of Google services, personal data may also be processed by Google LLC and other Google companies outside the European Economic Area. Further information concerning transfers to third countries is provided in Section 9 of this Privacy Policy.

Further information on the processing of personal data by Google is available in Google’s Privacy Policy:

https://policies.google.com/privacy?hl=en

8. Disclosure and Recipients of Personal Data

We disclose personal data only to the extent permitted or required by law.

Recipients or categories of recipients may include, in particular:

IT and hosting service providers,
providers of email and communication services,
service providers supporting us in the operation and maintenance of our website,
providers of analytics, statistics and marketing services, where you have consented to their use,
experts, correspondent lawyers or other advisers engaged in connection with a client matter, where this is necessary and legally permissible,
courts, authorities and other public bodies where disclosure is required by law or necessary for the establishment, exercise or defence of legal claims.

Where service providers process personal data on our behalf, we enter into data processing agreements pursuant to Art. 28 GDPR where required by law.

9. Transfers of Data to Third Countries

In connection with the use of certain services on our website, personal data may be transferred to recipients in countries outside the European Union (EU) or the European Economic Area (EEA).

Any such transfer will take place only in accordance with the requirements of Art. 44 et seq. GDPR. Where the European Commission has adopted an adequacy decision pursuant to Art. 45 GDPR for the relevant third country, personal data may be transferred on that basis. Otherwise, personal data will be transferred only where appropriate safeguards within the meaning of Art. 46 GDPR are in place, in particular the standard contractual clauses approved by the European Commission, or where another statutory basis for the transfer applies.

When Google services are used, personal data may also be processed in the United States. The European Commission has adopted an adequacy decision concerning the United States under the EU-U.S. Data Privacy Framework to the extent that the relevant U.S. recipient is duly certified under that framework. Where a transfer cannot be based on that adequacy decision, appropriate safeguards such as the European Commission’s standard contractual clauses may in particular be used.

Further information concerning any transfers to third countries in connection with the services we use can be found in the information relating to the respective services in this Privacy Policy.

10. Retention Period

We retain personal data only for as long as necessary for the respective purpose of processing.

Where statutory retention requirements apply, the relevant data will be retained for the duration of those requirements.

Data relating to enquiries or client matters may also be retained to the extent necessary to comply with professional or statutory documentation and retention obligations or for the establishment, exercise or defence of legal claims.

Once the purpose of processing no longer applies and any applicable statutory retention periods have expired, the data will be deleted unless another legal basis permits or requires further retention.

11. Your Rights

Subject to the applicable statutory requirements, you have, in particular, the following rights:

the right of access to personal data processed by us pursuant to Art. 15 GDPR,
the right to rectification of inaccurate or completion of incomplete personal data pursuant to Art. 16 GDPR,
the right to erasure of your personal data pursuant to Art. 17 GDPR,
the right to restriction of processing pursuant to Art. 18 GDPR,
the right to data portability pursuant to Art. 20 GDPR,
the right to object to processing pursuant to Art. 21 GDPR, and
the right to withdraw consent pursuant to Art. 7(3) GDPR.

To exercise your rights, you may contact us at:

info@slb-law.de

12. Right to Object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to such processing at any time on grounds relating to your particular situation.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing purposes without having to state any reasons.

13. Right to Lodge a Complaint

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.

You may in particular lodge a complaint with the supervisory authority responsible for your habitual residence, your place of work or the place of the alleged infringement.

14. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

Our security measures are reviewed and adapted in accordance with technological developments and taking into account the risks associated with the processing.

Data transmitted to and from this website are encrypted using TLS/SSL where technically supported.

15. Automated Decision-Making and Profiling

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place in connection with this website.

16. Updates and Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy where changes to our website, the technical services used or the applicable legal framework make such amendments necessary.

Last updated: October 2026