DATA PRIVACY

Privacy policy

As a law firm, protecting your data is a matter of course for us. Here you can find out which personal data we process when you visit this website and contact us, for what purposes and on what legal basis.

1. Controller

KODEX Legal Rechtsanwaltsgesellschaft mbH
Villa Quistorp, Hegelallee 1, 14467 Potsdam, Germany
Phone: +49 331 9680 9320
E-mail: info@kodex.legal
Further details can be found in the Imprint.

2. Data protection officer

You can reach our data protection officer at the above address marked “For the attention of the data protection officer” or by e-mail at datenschutz@kodex.legal.

3. Hosting and server log files

This website is operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When the website is accessed, the server automatically processes data transmitted by your browser: IP address, date and time of access, page accessed, amount of data transferred, the previously visited page (referrer), browser type and operating system. These data are technically necessary to display the website and to ensure its security and stability (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the host.

4. Cookies, consent management and Google Ads

We use technically necessary cookies to store your language setting (German/English) and your choice in the cookie banner. The legal basis is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(c) and (f) GDPR.

Consent management (Borlabs Cookie): We manage your consents with the Borlabs Cookie plugin, which runs on our own server. It stores your choice and a random identifier in the cookie “borlabs-cookie” so that we can demonstrate your consent (Art. 7(1) GDPR). No data is transmitted to the manufacturer. You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page.

Google Ads and conversion measurement: Only if you consent in the cookie banner do we use Google Ads, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to measure whether visitors submit an enquiry via a form after clicking on one of our ads. For this purpose, cookies (such as “_gcl_aw”, “_gcl_au”) are set and data such as IP address, device and browser information, time of visit and a click identifier are transmitted to Google. Without your consent, the Google script is not loaded. A transfer to the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future. Further information: policies.google.com/privacy.

We do not use analytics services such as Google Analytics.

5. Contact forms, severance calculator and whitepaper

If you contact us via a form on this website, we process the information you provide there – depending on the form, for example your name, company, e-mail address, phone number, your message and details of your matter (such as length of service and salary in the severance calculator or details of your securities for ADR conversion).

The information is stored in our website system and forwarded to our law firm by e-mail. We use it to answer your enquiry and to prepare a possible mandate. If a mandate is concluded, we transfer the information to our law firm software. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and otherwise our legitimate interest in processing enquiries (Art. 6(1)(f) GDPR).

For the severance calculator and when requesting the whitepaper, we additionally ask for your consent to inform you about current legal topics by e-mail or phone (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with effect for the future, for example by e-mail to info@kodex.legal.

If you access our website via a link with campaign parameters (for example from an online advertisement: utm parameters, gclid, msclkid, fbclid), we store these parameters together with a form enquiry. This allows us to see through which channel enquiries reach us (Art. 6(1)(f) GDPR). No cookies are set for this purpose.

Enquiries that do not lead to a mandate are deleted as soon as they have been fully processed, at the latest after 12 months, unless statutory retention obligations apply.

6. Contact by e-mail or phone

If you contact us by e-mail or phone, we process your information to deal with your matter (Art. 6(1)(b) and (f) GDPR). For our e-mail communication we use Microsoft 365 (Microsoft Ireland Operations Limited, Dublin, Ireland), with which a data processing agreement is in place. A transfer to the USA cannot be ruled out; Microsoft is certified under the EU-US Data Privacy Framework.

7. Online appointment booking (Microsoft Bookings)

For KODEX Collect and KODEX Counsel we offer online appointment booking via Microsoft Bookings. Only when you click the “Book an appointment” link are you taken to a Microsoft page (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). There Microsoft processes the data you provide for the booking (such as name, e-mail address, phone number, preferred appointment) on our behalf. A transfer to the USA cannot be ruled out; Microsoft is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR.

8. Website security

To protect against attacks, we use the security plugin Wordfence (Defiant, Inc., USA). In particular, IP addresses and access data are processed in order to detect and block malicious access. The legal basis is our legitimate interest in a secure website (Art. 6(1)(f) GDPR). All data are transmitted in encrypted form (TLS).

9. Data backup

To protect against data loss, we regularly create backups of the website. These are stored via our IT service provider with Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg). Insofar as a transfer to the USA cannot be ruled out, Amazon is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR; data processing agreements are in place with the service providers involved.

10. Disclosure of data

We only disclose your data where this is necessary:

in the context of a mandate to courts, authorities, opposing parties and their representatives (Art. 6(1)(b) GDPR),
to carefully selected service providers who support us as processors bound by our instructions (such as hosting, IT, e-mail),
where we are legally obliged to do so (Art. 6(1)(c) GDPR).

Our professional duty of confidentiality as lawyers always remains unaffected.

11. Storage period

We store personal data only for as long as is necessary for the respective purpose. In accordance with professional regulations (Section 50 BRAO), we generally retain client files for six years after the end of the mandate; retention periods under commercial and tax law remain unaffected.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

For any requests, simply send an e-mail to datenschutz@kodex.legal.

13. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (Brandenburg Data Protection Commissioner), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany, www.lda.brandenburg.de.

Last updated: October 2026

This English version is provided for convenience. In case of doubt, the German version of the privacy policy shall prevail.