Note: This is an English translation of our privacy policy (Datenschutzerklärung) provided for convenience. The German version is legally binding: Datenschutzerklärung (Deutsche Fassung).
Privacy policy of horak Rechtsanwälte Partnerschaft mbB
We take the protection of the personal data of visitors to our website seriously. This privacy policy informs you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), about the nature, scope, purpose and legal basis of the processing of personal data on this website and about your rights.
Overview:
- Controller
- Data protection officer
- Hosting and server log files
- Cookies
- Jetpack and Jetpack Stats (Automattic)
- Fonts and other embedded content
- Contact by email or telephone
- Enquiries and legal professional privilege
- Recipients and disclosure to third parties
- Storage period
- Your rights
- Right to object
- Right to lodge a complaint with a supervisory authority
- Data security
I. Controller
The controller within the meaning of Article 4(7) GDPR is:
horak Rechtsanwälte Partnerschaft mbB
Georgstr. 48
30159 Hannover (head office)
Germany
Phone: +49 (0) 511 357 356 0
Fax: +49 (0) 511 357 356 29
Email: info@dieurheberrechtler.de
II. Data protection officer
The data protection officer of horak Rechtsanwälte can be contacted at:
horak Rechtsanwälte
Attn. Data Protection Officer, Rechtsanwältin Julia Ziegeler
Georgstr. 48
30159 Hannover
Germany
Email: ziegeler@bwlh.de
III. Hosting and server log files
This website is operated using the WordPress content management system, which we have installed and manage ourselves. The website is hosted on servers of Mittwald CM Service GmbH & Co. KG, Espelkamp (Germany). The hosting provider processes the data listed below exclusively on our behalf and in accordance with our instructions (Article 28 GDPR).
Each time our website is accessed, the web server automatically records access data and stores it in server log files. This may include: the IP address of the requesting device, date and time of access, name and URL of the page or file accessed, amount of data transferred, notification of successful retrieval (HTTP status code), referrer URL (the previously visited page), and browser type, browser version and operating system.
The processing is necessary to deliver the website, to ensure its stability and security and to detect and prevent attacks or misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in the purposes stated. We do not use this data to draw conclusions about you personally. The log files are automatically deleted after a limited period unless further retention is required in an individual case to investigate a security incident.
IV. Cookies
Cookies are small text files stored in the browser on your device. When you merely visit our website, WordPress generally does not set any cookies. Cookies are set only when authorised persons (e.g. editors) log in to the protected administration area of the website; these cookies are strictly necessary for logging in (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), Article 6(1)(f) GDPR). This website does not offer a comment function, contact form or newsletter.
V. Jetpack and Jetpack Stats (Automattic)
Our website uses the WordPress plugin Jetpack, through which the website is connected to the WordPress.com platform. For users in the European Economic Area, the provider is Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland, a company of the Automattic group (Automattic Inc., USA). The connection serves to manage and secure the website.
We also use the statistics function Jetpack Stats. When a page is accessed, a script from the server stats.wp.com is loaded into and executed in your browser. In particular, the following data is transmitted to Automattic: IP address, browser identifier (user agent), URL accessed, referrer URL, time of access, browser language and the country derived from the IP address; clicks on outbound links and page loading times are also recorded. We receive only aggregated statistics (e.g. page views, referring pages, countries) and cannot identify individual visitors. According to Automattic, logs containing IP addresses are stored for 28 days. Based on our review, Jetpack Stats does not store any cookies on your device when you visit the website.
The purpose is the statistical analysis of the use of our website in order to improve our information offering. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in knowing, in aggregated form, how our website is used.
It cannot be ruled out that data will be transferred to and processed by Automattic Inc. in the USA. According to its own information, Automattic bases such transfers on standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR). Further information can be found in Automattic’s privacy policy at automattic.com/privacy and at jetpack.com/support/jetpack-stats.
VI. Fonts and other embedded content
The fonts used on this website are loaded from our own server. No connection is made to external font providers (such as Google Fonts).
WordPress includes a function for displaying emojis. Only if a page contains an emoji that your browser cannot display itself is the corresponding graphic loaded from a WordPress.org server (s.w.org); for technical reasons your IP address is transmitted to this server. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in the correct display of content.
We do not use social media plug-ins, Google analytics services, or advertising or conversion tracking. Links to other websites (e.g. to our English-language site copylawyers.com) are simple links; data is transmitted to the operator of the linked site only when you click the link.
VII. Contact by email or telephone
If you contact us by email or telephone, we process the data you provide (e.g. name, email address, telephone number, content of your enquiry) in order to handle and respond to your request. The legal basis is Article 6(1)(b) GDPR insofar as your enquiry is aimed at concluding or performing a contract, in particular an engagement agreement, and otherwise Article 6(1)(f) GDPR; our legitimate interest lies in responding to your enquiry.
Please note that unencrypted emails can in principle be read by third parties in transit. If you wish to transmit confidential information, please contact us to agree on a suitable means of communication.
VIII. Enquiries and legal professional privilege
As lawyers and patent attorneys, we are subject to a statutory duty of confidentiality (in particular Section 43a(2) BRAO, Section 2 BORA, Section 39a PAO and Section 203 of the German Criminal Code). This duty already applies to information you entrust to us in the course of an enquiry, regardless of whether an engagement subsequently follows. We use your information solely to review and handle your enquiry, including the conflict check required under professional rules. Disclosure to third parties takes place only with your consent or where there is a legal obligation or authorisation to do so.
IX. Recipients and disclosure to third parties
Recipients of personal data in connection with this website are our hosting provider (Section III) and Automattic (Section V). Beyond this, we disclose personal data to third parties only if you have expressly consented, if disclosure is necessary to perform a contractual relationship with you, if we are legally obliged to do so, or if disclosure is necessary to establish, exercise or defend legal claims and our professional duty of confidentiality does not prevent it.
X. Storage period
We store personal data only for as long as necessary for the respective purpose. Enquiries by email or telephone that do not lead to an engagement are deleted once they have been finally dealt with and no further retention is required, for example to document a conflict check or to defend against claims. If an engagement is concluded, the statutory retention periods apply, in particular for the client file (Section 50 BRAO) and the retention periods under commercial and tax law (Section 257 German Commercial Code, Section 147 German Fiscal Code). For the storage period of server log files and Jetpack Stats data, see Sections III and V.
XI. Your rights
You have the right:
- under Article 15 GDPR, to request information about your personal data processed by us, in particular the purposes of processing, the categories of personal data, the categories of recipients, the planned storage period, the existence of the rights to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint and the source of your data if it was not collected from you;
- under Article 16 GDPR, to request without undue delay the rectification of inaccurate or the completion of your personal data stored by us;
- under Article 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- under Article 18 GDPR, to request the restriction of the processing of your personal data;
- under Article 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
- under Article 7(3) GDPR, to withdraw consent once given at any time with effect for the future; the lawfulness of processing carried out before the withdrawal remains unaffected.
Where data is subject to our statutory duty of confidentiality, individual rights may be restricted by law (e.g. Section 29 of the German Federal Data Protection Act, BDSG). To exercise your rights, a message to info@dieurheberrechtler.de or to our data protection officer is sufficient.
XII. Right to object
Where your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right under Article 21 GDPR to object to this processing at any time on grounds relating to your particular situation. If the objection concerns processing for direct marketing purposes, you have a general right to object, which we will implement without you having to state a particular situation. An email to info@dieurheberrechtler.de is sufficient.
XIII. Right to lodge a complaint with a supervisory authority
Under Article 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover, Germany
XIV. Data security
This website is delivered exclusively in encrypted form via HTTPS (SSL/TLS). You can recognise an encrypted connection by “https://” in the address bar and the padlock symbol in your browser. In addition, we take appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access, and we continuously adapt these measures to technological developments.
As of: November 2026
Questions about data protection? Call +49 511 35 73 56-0, email info@dieurheberrechtler.de or visit copylawyers.com. See also our Legal notice.
The German version is legally binding. Deutsche Fassung: Datenschutzerklärung