Data Protection

We are pleased that you are visiting our website. Data protection and data security when using this website is very important to us. We would therefore like to take this opportunity to inform you which of your personal data is collected when you visit this website and for what purposes it is used. As changes in the law or changes to the website may make it necessary to adapt this data protection declaration, we ask you to read this data privacy policy regularly.

Controller

Dilling Rechtsanwälte Partnerschaftsgesellschaft mbB
Landgrafenstrasse 49
50931 Köln, Germany
E-mail address: info@ra-dilling.de
Imprint: https://www.ra-dilling.de/impressum/

General information on data processing

On this website, personal user data is only collected and used insofar as this is necessary to provide a functional website and the content and services offered.
Personal data is information that can be linked to you individually. This includes, for example, your name, e-mail address, home address, gender, date of birth, telephone number or age. Non-personal data is information such as the number of users of a website.

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Personal data is collected via this website if you provide it voluntarily, e.g. by filling out forms such as the contact form. This data is used for the purposes stated in each case or resulting from the request, e.g. your e-mail address to answer your contact request. Data will only be transmitted to third parties if this is expressly permitted by law or if you have consented to the transmission in the course of an active business relationship. Otherwise, you can use the general information on this website without disclosing your personal data.

Legal basis for the processing of personal data

The collection and use of users' personal data only takes place generally with the user's consent. Insofar as the consent of the data subject is obtained for the processing of personal data, Art. 6 para. 1 lit. a) GDPR is the legal basis. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law. In the processing of personal data necessary for the performance of a contract to which the data subject is a contracting party, Art. 6 para. 1 lit. b) GDPR is the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c) GDPR is the legal basis. If the processing is necessary to ensure a legitimate interest and the interests, fundamental rights and freedoms of the data subject do not outweigh this interest, Art. 6 para. 1 lit. f) GDPR is the legal basis.

Retention period

Your personal data will be deleted as soon as the respective purpose for processing has been achieved or subsequently ceases to apply, unless there are further legal obligations for processing.
In addition, personal data required for the assertion, exercise or defense of legal claims will be stored. This data will be deleted at the latest when the limitation period expires (usually 3 years).
Informational use of the website

You can visit this website without providing any personal data. If you use this website for information purposes only, i.e. if you do not provide any personal information, no personal data will be processed, with the exception of the data that your browser transmits to enable you to visit the website. For the purpose of the technical provision of this website, it is necessary to process certain automatically transmitted information from you so that your browser can display this website and you can use the website. This information is automatically collected each time you visit this website and stored in so-called server log files. This information relates to the computer system of the accessing computer. The following information is processed:

    • Host
    • IP address of the user,
    • (if applicable) also name,
    • Date and time of access,
    • Method of access (Get/Post),
    • Request,
    • Protocol (e.g. http),
    • Status (e.g. error messages),
    • Amount of data retrieved,
    • Referrer,
    • Browser and operating system of the user

Active use of this website

In addition to the purely informational use of this website, you can also actively use this website, for example to contact us. In this case, we process additional personal data from you in addition to the aforementioned processing.

If you make use of the option to send us inquiries using our contact form, we will process your name and contact details (e.g. e-mail address or telephone number). You can also enter your individual message to us in the message field. You are free to decide whether to provide us with this data. Without this information, however, we will not be able to fulfill your contact request in full or at all. It is also possible to send us files via the contact form. When using the contact form, your personal data will not be passed on to third parties.

The data processing described above for the purpose of contacting and contact processing is carried out in accordance with Art. 6 para. 1 lit. b) or f) GDPR.

Processing of personal data in the context of a client/order relationship (business contact)

We process personal data that we receive from you directly in connection with our contractual relationship, for example in the context of an inquiry and the specific mandate/order placement as well as for the provision of our services. This regularly involves, for example, contact and address data, records of business transactions and correspondence with you.

Data processing is carried out for the purpose of carrying out and processing all processes relating to the controller, clients, interested parties, business partners or other contractual or pre-contractual relationships between the aforementioned groups or legal obligations of the controller.

The processing of your personal data for these purposes is based on Art. 6 para. 1 lit. b) GDPR or Art. 6 para. 1 lit. c) GDPR.

Whistleblower system and whistleblowing hotline

As an external service provider, we provide whistleblowing hotlines on behalf of our contractual partners. These are understood to be offers made by companies to their employees to report, for example, non-compliant behavior by other employees to the company. As part of our law firm's services, we offer corresponding whistleblowing services as an external person of trust (ombudsman).

Data processing in the context of the whistleblowing hotlines is carried out for the purpose of detecting and investigating criminal offenses and non-compliant employee behavior. The processing of personal data for this purpose is based on Art. 88 para. 1 GDPR, Section 26 para. 1 sentence 2 BDSG in conjunction with the obligation of the company/client under Art. 6 para. 1 lit. c) GDPR in conjunction with § Section 91 (2) AktG, Section 130 OWiG (compliance obligation incl. whistleblowing system). If the processing is carried out in the performance of the tasks of an internal reporting office within the meaning of the HinSchG, the processing is based on Art. 6 para. 1 sentence 1 lit. c) GDPR in conjunction with Sections 10 and 16 to 18 HinSchG.

In addition to the possibility for data subjects to contact us by telephone, email or proton mail, data subjects can also contact us via online-based applications. For this purpose, we use the messenger tools of the providers Signal Messer LLC, 650 Castro Street, Suite 120-233 Mountain View, CA 94041, USA and the provider Threema GmbH, Churerstrasse 82, 8808 Pfäffikon SZ, Switzerland. Further information can be found at https://signal.org/legal/ and https://threema.ch/de/privacy.

The personal data will be deleted as soon as the purpose for storing it no longer applies, i.e. in particular if it becomes apparent during the proceedings that the suspicion is unfounded, and generally after the investigations have been completed, unless we are required by law to store it for longer.

As a matter of principle, your personal data will not be transferred. Your personal data will only be passed on or otherwise transmitted to third parties if

    • we are legally obliged to do so by official or court order.
    • we are entitled to do so, e.g. because this is necessary to prosecute criminal offenses or to exercise and enforce our rights, or
    • if you have given your prior consent.

Cookies

    • Use of cookies

We use so-called "cookies". Cookies are small text files that are sent from our web server to your browser when you visit our website and are stored on your computer for later retrieval. Cookies enable us to store information such as your selection preferences, e.g. the rejection, approval or separate selection of individual cookies via our cookie banner. The use of cookies helps us to offer our website functionally and, if necessary, to adapt it to the individual needs of our end users.

Cookies can be divided into the categories of technically necessary and technically unnecessary cookies. Technically necessary cookies are used for the presentation and functionality of our website. Without the use of technically necessary cookies, it would not be possible for us to provide you with the functionality of our website when you call it up in your Internet browser. Technically unnecessary cookies are used, among other things, to collect information about the use of the website, e.g. for marketing purposes or to improve the website.

You can find more information about the cookies used here.

    • Legal basis

The legal basis for the processing in the course of the activation of technically necessary cookies is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in presenting you with a functional website that, among other things, saves your personal settings and makes it easier for you to visit our website.

The legal basis for the processing in the course of the activation of cookies that are not technically necessary is consent pursuant to Art. 6 para. 1 lit. a) GDPR. Your consent is obtained via the cookie banner that is displayed when you visit the website. Cookies that are not technically necessary are only used if you have previously given your consent voluntarily. You can revoke here your consent at any time.

External service providers

We use service providers to provide services and to process your data relating to our services. The service providers process the data exclusively in accordance with our instructions and are obliged to comply with the applicable data protection regulations. All processors have been carefully selected and are only given access to your data to the extent and for the period required to provide the services or to the extent to which you have consented to data processing and use. If your data is processed in a country outside the European Union or the European Economic Area that does not have a recognized high level of data protection like the European Union, we ensure that your personal data is adequately protected by means of contractual regulations or other recognized instruments.

Rights of data subjects

    • Right to information

You have the right to request information from us at any time about the personal data processed about you, its origin, recipients or categories of recipients to whom this data is disclosed and the purpose of the processing.

    • Right of withdrawal

If you have given your consent to the processing of personal data, you can revoke this at any time without giving reasons with effect for the future. An e-mail to info@ra-dilling.de or a written notification to Kanzlei Dilling, Landgrafenstrasse 49, 50931 Köln, Germany, is sufficient for this purpose.

    • Right of rectification

You can request the correction of incorrect or the completion of your personal data stored by us.

    • Right of deletion and blocking

You have the right to block and delete the personal data we have stored about you. If the deletion conflicts with statutory retention obligations or other statutory reasons, your data can only be blocked instead of deleted.

    • Data transfer right

If you request the personal data you have provided to us, we will provide or transfer the data to you or another controller in a structured, commonly used and machine-readable format, if this is technically possible and legally permissible.

    • Right of objection

You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation within the framework of the requirements of Art. 21 GDPR, provided that the data processing is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.

    • Contact for the assertion of data subject rights

When you contact us by e-mail at info@ra-dilling.de or by post at Kanzlei Dilling, Landgrafenstrasse 49, 50931 Köln, Germany, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions or respond to your request. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the competent supervisory authority against the processing of your personal data if you feel that your rights under the GDPR have been violated.

Automated decision making/profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

Status: 16.04.2025