1. I. Privacy policy for the use of the website
2. II. Information regarding data processing as part of the activity as a trusted lawyer
3. III. Information regarding data processing as part of a client relationship

I. Privacy policy for the use of the website
The privacy policy at hand refers to the use of the www.kanzlei-ostrop.de website. For the structuring of the technical conditions, importance has been placed on fulfilling the data protection standards; in particular, the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) were implemented, as amended. The website is particularly structured in compliance with the principles of data economy and transparency. Therefore, I dispense with the collection of personal data when accessing the website.

1. Name and contact details of the data controller
Dr. Markus H. Ostrop
Rösslinweg 4
70184 Stuttgart
T +49 711 248 484 8
M +49 173 986 745 1
F +49 711 322 241 959 12
dr.ostrop@kanzlei-ostrop.de
2. Collection and storage of personal data and the purpose of its use

(1) When visiting the website
When accessing my website www.kanzlei-ostrop.de, information will automatically be sent to the server of my website by the browser used on your terminal device. This information is temporarily stored in a so-called logfile. The following information is recorded without your involvement and is stored until it is deleted automatically:

1. date of access,
2. name and URL of the retrieved file,
3. website from which the access occurs (referrer URL),,
4. websites, which have been accessed from the user’s system via me website,
5. the browser used and the operating system of your computer, if applicable

The data referred to are processed by me for the following purposes:

1. guaranteeing smooth-running connection establishment to the website,
2. guaranteeing convenient use of my website,
3. evaluation of the system security and stability, as well as
4. for additional administrative purposes.

These data do not involve personal data. Furthermore, I use cookies when visiting the website (refer to Point 4 below).

(2) For enquiries to my e-mail addresses published on the website For questions of any type, I offer you the opportunity to contact me via-e-mail. In doing so, I receive information about the e-mail account, from which the enquiry is made. Further details can be provided voluntarily. With such enquiries, please consider that unencrypted e-mails do not offer any protection against unauthorised access by third parties. You can contact me and discuss the encrypted sending of confidential data. Data processing for the purpose of establishing contact with me via e-mail occurs in accordance with Art. 6 Para. 1 S. 1 Letter a GDPR on the basis of your voluntarily issued consent. The personal data collected by my are deleted after your enquiry has been settled.

3. Disclosure of data
When accessing the website, no personal data are already collected. If personal data are nevertheless generated in relation to the operation of the website, such as because data have been sent to the e-mail addresses specified on the website, the following principles apply: Sending of your personal data to third parties does not occur for purposes other than those listed below. We only disclose your personal data to third parties, if:

1. you have granted your express consent in accordance with Art. 6 Para. 1 S. 1 Letter a GDPR,
2. disclosure is necessary in accordance with Art. 6 Para. 1 S. 1 Letter f GDPR to exercise and defend legal claims and no reason exists for assuming that you have an overriding legitimate interest in the non-disclosure of your data,
3. in the event that a legal obligation exists for disclosure in accordance with Art. 6 Para. 1 S. 1 Letter c GDPR, and
4. this is legally admissible and necessary for processing the contractual relationships, in accordance with Art. 6 Para. 1 S. 1 Letter b GDPR.

4. Google Fonts
I integrate fonts (“Google fonts”) of provider, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Your IP address is transferred to Google as part of this. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

5. Social Media Plug-ins
I do not currently use any social media plug-ins.

6. Rights of data subjects
You have the right,

1. in accordance with Art. 15 GDPR, to request information from me about your personal data, which I process. In particular, you can request information about the processing purposes, the category of the personal data, the categories of recipients, to whom your data have been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of the processing or contradiction, the existence of a right of complaint, the origin of your data, if these have not been collected from you, as well as about the existence of automated decision-making, including profiling and possibly significant information about their details;
2. in accordance with Art. 16 GDPR, you may immediately request the correction of inaccurate or completion of your personal data stored with me;
3. in accordance with Art. 17 GDPR, request the deletion of our personal data stored with me, if the processing is not required to exercise the right of free expression of opinion and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
4. in accordance with Art. 18 GDPR, request the restriction of processing your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject the deletion and I no longer require the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against processing in accordance with Art. 21 GDPR;
5. in accordance with Art. 20 GDPR, you can obtain your personal data, which you have provided to me, in a structured, commonly-used and machine-readable format or request that it be transmitted to another controller;
6. in accordance with Art. 7 Para. 3 GDPR, you have the right to withdraw your given consent at any time. The consequence of this is that I can no longer continue the data processing, which was based on this consent, for the future;
7. in accordance with Art. 77 GDPR, you can lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual abode or workplace or my law firm registered office.

7. Right to object
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to lodge an objection against the processing of your personal data, in accordance with Art. 21 GDPR, insofar as reasons exist for this, which arise from your specific situation or if the objection is aimed against direct marketing. In the latter case, you have a general right to object, which will be implemented by me, without indicating a specific situation. If you intend to exercise your right of revocation or objection, an e-mail is sufficient to info@kanzlei-ostrop.de.

8. Data security
Within the website visit, I use the widely prevalent SSL procedure (secure socket layer) in conjunction with the respective highest encryption level, which is supported by your browser. As a rule, this involves 256-bit encryption. If your browser does not support 256-bit encryption, I resort to 128-bit v3 technology instead. You can identify whether an individual page of my Internet presence has been transferred using encryption, you can recognize this by the closed illustration of the key/lock symbol in the bottom status bar of your browser. I also use appropriate technical and organizational security measures, in order to protect your data from accidental or malicious manipulation, partial or complete loss, destruction of from unauthorized access by third parties. My security measures are continuously improved in accordance with technological developments.

II. Information regarding data processing as part of the activity as a trusted

1. Name and contact details of the data controller
Dr. Markus H. Ostrop
Rösslinweg 4
70184 Stuttgart
T +49 711 248 484 8
M +49 173 986 745 1
F +49 711 322 241 959 12
dr.ostrop@kanzlei-ostrop.de

2. Collection and storage of personal data and the nature and purpose of its use If you contact me, I will only collect personal data to the extent that you disclose it to me, ceteris paribus, data will be processed anonymously without a personal reference.

1. Form of address, first name, surname of the informant or pseudonym
2. A valid e-mail address of the informant,
3. Telephone number (landline and/or mobile communication)
4. First name, surname of the accused, if disclosed

The collection of these data occurs,
1. for contacting you;
2. for correspondence with you;
3. in order to be able to adequately assess the subject matter, which you have described;
4. to facilitate further investigations of the subject matter.

The data processing occurs upon your request and is necessary in accordance with Art. 6 Para. 1 S. 1 Letter b, Art. 6 Para. 1 S. 1 Letter f and/or Art. 6 S. 1 Para. 1 Letter a GDPR for the purposes referred to, for the appropriate processing of the tip and for the fulfilment of obligations from the mandate agreement, with the respective company, which mandates me. The data with a personal reference, which are collected by us during the course of receiving tips, insofar as I receive the approval for disclosure to the company mandating me, will be stored until the expiration of the statutory retention obligation (6 years after the calendar year has elapsed, in which the mandate was terminated) and deleted thereafter, unless I am obligated to store the data for longer according to Article 6 Para. 1 Sentence 1 Letter c GDPR on the basis of tax-law and commercial code retention and documentation obligations (from HGB [German Commercial Code], StGB [German Penal Code] or AO [German Fiscal Code]). I only forward your data to the company mandating me with express consent in text form, otherwise, all tips are forwarded anonymously.

If you insist on being named, as an informant, and it involves personal information of third parties, which I forwarded to the company mandating me, in principle, the persons accused by you must be informed no later than one month after the notification to the company about the situation (storage, type of data, designated purpose of the processing and identity of the controller, including the identity of the informant) (Art. 14 Para. 3 Letter a GDPR) and/or one month after the completion of the investigations. If you decide, after initial contact, that the circumstances, which you have notified should not be forwarded to the company mandating me, all data will be destroyed at once.

3. Forwarding data to third parties
Sending of your personal data to third parties does not occur for purposes other than those listed below. If this is necessary for processing the tips, which you have provided, according to Art. 6 Para. 1 S. 1 Letter b GDPR and you have issued an approval to me for this, your personal data will be forwarded to the company mandating me. The attorney-client privilege remains unaffected, I guarantee secure confidentiality. If it involves data, which are subject to attorney-client privilege, forwarding to third parties will only take place in consultation with you. I will protect the confidentiality, where it is legally possible for me. I draw the boundary where the tip represents a planned criminal offence in accordance with Sections 138, 139 of the German Criminal Code (e.g. murder, manslaughter, kidnapping or criminal offences by a terrorist organisation). In these cases, even a lawyer is obligated to notify the criminal prosecution authorities, even me, as a trusted lawyer. The access opportunities of the state criminal prosecution authorities as part of possible criminal proceedings also cannot be influenced by me or the company, nor can promises be made about impunity by criminal prosecution authorities. They will decide independently.

4. Rights of data subjects
You have the right:

1. in accordance with Art. 7 Para. 3 GDPR, you have the right to withdraw your given consent at any time. The consequence of this is that I can no longer continue the data processing, which was based on this consent, for the future;
2. in accordance with Art. 15 GDPR, to request information from me about your personal data, which I process. In particular, you can request information about the processing purposes, the category of the personal data, the categories of recipients, to whom your data have been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of the processing or contradiction, the existence of a right of complaint, the origin of your data, if these have not been collected from you, as well as about the existence of automated decision-making, including profiling and possibly significant information about their details;
3. in accordance with Art. 16 GDPR, you may immediately request the correction of inaccurate or completion of your personal data stored with me;
4. in accordance with Art. 17 GDPR, request the deletion of our personal data stored with us, if the processing is not required to exercise the right of free expression of opinion and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
5. in accordance with Art. 18 GDPR, request the restriction of processing your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject the deletion and I no longer require the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against processing in accordance with Art. 21 GDPR;
6. in accordance with Art. 20 GDPR, you can obtain your personal data, which you have provided to us, in a structured, commonly-used and machine-readable format or request that it be transmitted to another controller and
7. in accordance with Art. 77 GDPR, you can lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual abode or workplace or my law firm registered office.

5. Right to object
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to lodge an objection against the processing of your personal data, in accordance with Art. 21 GDPR, insofar as reasons exist for this, which arise from your specific situation or if the objection is aimed against direct marketing. If you intend to exercise your right of revocation or objection, an e-mail is sufficient to info@kanzlei-ostrop.de.

III. Information regarding data processing as part of a mandate relationship

1. Name and contact details of the data controller
Dr. Markus H. Ostrop
Rösslinweg 4
70184 Stuttgart
T +49 711 248 484 8
M +49 173 986 745 1
F +49 711 322 241 959 12
dr.ostrop@kanzlei-ostrop.de

2. Collection and storage of personal data and the nature and purpose of its use If you mandate me, in addition to company data, I will usually also collect personal data of my clients and/or contact persons. In particular, I collect the following information with every mandate:

1. Form of address, first name, surname of the client, with companies, my contact person
2. a valid address of the client and/or the contact person,
3. address of the client,
4. Telephone number (landline and/or mobile communication)
5. Information, which is required for the assertion and defence of your rights as part of the mandate

The collection of these data occurs,

1. in order to be able to identify you as my client and - with companies - set up one or several concrete contact persons;
2. to be able to appropriately provide you with legal advice and representation;
3. for correspondence with you;
4. for invoicing;
5. for the settlement of possibly existing indemnity claims and the assertion of possible claims against you;

The data processing occurs upon your request and is necessary in accordance with Art. 6 Para. 1 S. 1 Letter b, for the purposes referred to, for the appropriate processing of the mandate and for the mutual fulfilment of obligations from the mandate agreement. The personal data, which I have collected for the mandate, will be stored until the statutory retention period for lawyers (6 years after the end of the calendar year, in which the mandate was terminated) has elapsed and thereafter, it will be deleted, unless I have committed to longer storage according to Article 6 Para. 1 S. 1 Letter c GDPR on the basis of the tax-law and commercial code retention and documentation duties (from HGB, StGB or AO) or you have consented to storage beyond this according to Art. 6 Para. 1 S. 1 Letter a GDPR.

3. Forwarding data to third parties
Sending of your personal data to third parties does not occur for purposes other than those listed below. If this is necessary according to Art. 6 Para. 1 S. 1 Letter b GDPR for processing mandate relationships with you, your personal data will be forwarded to third parties. This particularly includes forwarding to procedural opponents and their representatives (particularly their lawyers) and courts and other public authorities for the purpose of correspondence and the assertion and defence of your rights. The forwarded data can exclusively be used by the third party for the purposes referred to. The attorney-client privilege remains unaffected. If it involves data, which are subject to attorney-client privilege, forwarding to third parties will only take place in consultation with you.

4. Rights of data subjects
You have the right:

1. in accordance with Art. 7 Para. 3 GDPR, you have the right to withdraw your given consent at any time. The consequence of this is that I can no longer continue the data processing, which was based on this consent, for the future;
2. in accordance with Art. 15 GDPR, to request information from me about your personal data, which I process. In particular, you can request information about the processing purposes, the category of the personal data, the categories of recipients, to whom your data have been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of the processing or contradiction, the existence of a right of complaint, the origin of your data, if these have not been collected from you, as well as about the existence of automated decision-making, including profiling and possibly significant information about their details;
3. in accordance with Art. 16 GDPR, you may immediately request the correction of inaccurate or completion of your personal data stored with me;
4. in accordance with Art. 17 GDPR, request the deletion of our personal data stored with me, if the processing is not required to exercise the right of free expression of opinion and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
5. in accordance with Art. 18 GDPR, request the restriction of processing your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject the deletion and I no longer require the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against processing in accordance with Art. 21 GDPR;
6. in accordance with Art. 20 GDPR, you can obtain your personal data, which you have provided to us, in a structured, commonly-used and machine-readable format or request that it be transmitted to another controller and
7. in accordance with Art. 77 GDPR, you can lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual abode or workplace or my law firm registered office.

5. Right to object
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to lodge an objection against the processing of your personal data, in accordance with Art. 21 GDPR, insofar as reasons exist for this, which arise from your specific situation or if the objection is aimed against direct marketing. If you intend to exercise your right of revocation or objection, an e-mail is sufficient to info@kanzlei-ostrop.de.