Data protection

Data protection notice

1. Name and contact details of the controller responsible for data processing and the
company data protection officer

This data protection information is applicable to the processing of data by:

STENGER Rechtsanwälte Partnerschaftsgesellschaft mbB
Englische Planke 2
20459 Hamburg, Germany

Tel.: +49 (0)40 3609 860
Fax: +49 (0)40 3609 8636

Stenger Rechtsanwälte Rechstanwälte’s company data protection officer is Mr Christian Kneisner, who is available at the above address and via email at

2. Collection and storage of personal data and the nature and purpose of its use

Whenever you access our website the browser being used on your terminal device automatically sends information to our website’s server. This information is stored temporarily in a so-called “log file”. The following information shall be stored, without any action taking place on your part, until it is automatically erased:

  • the IP address of the computer making the request
  • the date and time of access
  • the name and URL of the file retrieved
  • the website from which the site was accessed (referrer URL)
  • the professional code of conduct for European lawyers
  • the browser being used and, if necessary, the operating system on your computer as well as the name of your access provider.

We shall process the aforementioned data for the following purposes:

  • to ensure the connection to the website is established smoothly
  • to ensure our website is convenient to use
  • to evaluate system security and stability, as well as
  • for other administrative purposes

Point f of Art. 6(1)(1) of the GDPR provides the legal basis for the data processing. Our legitimate interest is based on the data processing purposes listed above. We shall not use the data we have collected to identify you under any circumstances.

In addition, we use cookies when a person visits our website.

3. Cookies

Our website uses cookies. These are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone or similar device) whenever you visit our website. Cookies do not cause any harm to your terminal device and do not contain any viruses, Trojans or any other kind of malware.

Cookies store information that arises in connection with the specific terminal device being used. However, this does not allow us to directly identify you.

For one thing, cookies help make it more convenient for you to use our services. We therefore use session cookies to detect if you have already visited certain pages of our website. These are automatically deleted after you leave our website.

In addition, we also use temporary cookies to improve user friendliness. These are stored for a certain specified period of time on your terminal device. If you access our website again to make use of our services, the fact that you have previously visited, as well as the entries you made and your settings, will automatically be recognised without you having to re-enter them.

The data processed by cookies for the aforementioned purposes is necessary to protect our legitimate interests and those of third parties, in accordance with point f of Art. 6(1)(1) of the GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that you always receive a notification before a new cookie is created. Nevertheless, completely deactivating cookies may mean that you will not be able to use all the functions of our website.

4. Rights of data subjects

You have the right:

  • under Art. 15 of the GDPR, to obtain access to the personal data belonging to you that is being processed by us. In particular, you may obtain access to information relating to the purposes of the processing, the category of the personal data, the categories of recipients to whom personal data has been or will be disclosed, the envisaged storage period, the existence of a right to obtain rectification, erasure, restriction of the processing or to object to it, the existence of a right to lodge a complaint, to be informed of the source of the data belonging to you (if it has been collected by someone other than us), as well as the existence of automated decision-making, including profiling and, if necessary, meaningful information on the details of this;
  • under Art. 16 of the GPDR, to obtain from us without undue delay the rectification or completion of the personal data belonging to you that is stored by us;
  • under Art. 17 of the GDPR, to obtain the erasure of the personal data belonging to you that is being stored by us, unless this processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of the public interest or for the establishment, exercise or defence of legal claims;
  • under Art. 18 of the GDPR, to obtain the restriction of processing of the personal data belonging to you, if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure and if we no longer need the data, but you require them for the establishment, exercise or defence of legal claims, or, alternatively, if you have lodged an objection to the processing under Art. 21 of the GDPR;
  • under Art. 20 of the GDPR, to receive personal data belonging to you in a structured, commonly used, machine readable format or obtain their transfer to another controller;
  • under Art. 7(3) of the GDPR, to withdraw the consent you have conferred upon us. As a result, we will not be able to continue processing the data to which the consent related and
  • to lodge a complaint to with a supervisory authority under Art. 77 of the GDPR. Generally, you can do this by contacting the supervisory authority in your place of habitual residence, workplace or the location where this law firm is situated.

5. Right to object

If your data have been processed on the basis of legitimate interests, in accordance with point f of Art. 6(1)(1) of the GDPR, you have the right, in accordance with Art. 21 of the GDPR, to object to the processing of your personal data if there are reasons for this which relate to your particular situation or an objection to direct marketing. In the latter case, you have a general right to object, to which we will give effect regardless of whether a particular situation has been specified.

If you would like to exercise your right to withdraw or to object, simply send an email to

6. Data security

For visits to the website we use the popular SSL (Secure Socket Layer) process, along with the highest level of encryption supported by your browser. This usually takes the form of a 256-bit encryption. If your browser does not support a 256-bit encryption, we will resort to using 128-bit v3 technology instead. The key or lock symbol displayed in the lower status bar of your browser will allow you to determine if a specific page of our website is being transmitted with an encryption.

As well as this, we employ suitable technological and organisational security measures to protect your data from accidental or intentional manipulation, partial or complete loss, destruction, and unauthorised access by third parties. Our security measures continue to improve in line with technological developments.

7. Validity of and amendments to the data protection statement

This data protection statement is currently valid and is dated May 2018.

Maintaining our website and the services on it and changes to statutory or official regulations may make it necessary to amend this data protection statement. You can access and print the current data protection statement at any time via our website, at