Privacy Policy
1. Controller
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:
Law Office Christoph Nattermann
Brüsseler Platz 5–7
50674 Cologne, Germany
Tel: +49 221 297 654 6
E-Mail: info@kanzlei-nattermann.de
2. Scope of Data Processing
We process personal data of our clients, users of our website, and persons contacting us only to the extent necessary to provide a functional website, our legal services, and to respond to inquiries. Processing takes place only with a legal basis under the GDPR.
3. Legal Basis for Processing
The legal bases for processing personal data are:
Art. 6(1)(a) GDPR – Consent (e.g., when using our contact form).
Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures.
Art. 6(1)(c) GDPR – Compliance with legal obligations (e.g., retention periods under tax law).
Art. 6(1)(f) GDPR – Legitimate interests (e.g., ensuring IT security, preventing misuse).
As a law firm, we are additionally bound by statutory professional confidentiality obligations (§ 43a (2) BRAO, § 203 German Criminal Code).
4. Collection and Use of Personal Data
a) Contact via Contact Form / E-Mail / Phone
If you contact us via the contact form, e-mail, or telephone, we process the personal data you provide (e.g., name, address, telephone number, e-mail address, date of birth, details of your request). The processing is carried out exclusively for the purpose of responding to your inquiry and for the subsequent mandate relationship, if applicable.
b) Website Usage Data
When visiting our website, the following data are automatically collected and stored temporarily in server log files:
IP address of the requesting device
Date and time of access
Name and URL of the file accessed
Website from which access is made
Browser and operating system
These data are processed for the purposes of ensuring a secure and stable website operation (Art. 6(1)(f) GDPR).
5. Data Storage and Retention
We store personal data only as long as necessary for the purposes for which they were collected or as required by statutory retention obligations. Once the purpose ceases to apply and no legal retention obligations exist, the data will be deleted.
6. Data Transfer to Third Parties
Personal data will not be transferred to third parties without your consent, unless:
it is required for the fulfillment of our legal or contractual obligations (Art. 6(1)(b) and (c) GDPR),
you have expressly consented to the transfer (Art. 6(1)(a) GDPR),
it is necessary for the assertion, exercise, or defense of legal claims (Art. 6(1)(f) GDPR).
In particular, data are never sold or shared with unauthorized third parties.
7. Rights of Data Subjects
You have the following rights under the GDPR:
Right of access (Art. 15 GDPR) – You may request information about your stored personal data.
Right to rectification (Art. 16 GDPR) – You may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR) – You may request deletion of your data if no legal obligations prevent it.
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR).
Right to object (Art. 21 GDPR) – You may object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3) GDPR) – You may withdraw your consent at any time with effect for the future.
To exercise your rights, please contact: info@kanzlei-nattermann.de
8. Data Security
We use technical and organizational security measures (SSL encryption, restricted access, secure storage systems) to protect personal data against manipulation, loss, destruction, or unauthorized access.
9. Supervisory Authority
You have the right to lodge a complaint with the competent supervisory authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
Website: https://www.ldi.nrw.de
10. Updates
We reserve the right to amend this Privacy Policy at any time to comply with changing legal requirements or to reflect modifications in our services.