Data protection

The following privacy policy applies to the use of our online offer


We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR). We collect and process your personal data in order to offer you the above-mentioned portal. This statement describes how and for what purpose your data is collected and used and what options you have in relation to personal data.


By using this site, you consent to the collection, use and transfer of your information in accordance with this Privacy Policy.


1. Name and contact details of the responsible person
This Privacy Policy provides information on the processing of personal data on the law office website of (responsible person):


Kruhl von Strenge Partnerschaft von Rechtsanwälten mbB
Jungfernstieg 50
20354 Hamburg

Telephone: + 49 (40) 300 39 19 – 0
Fax: + 49 (40) 300 39 19 – 29



2. Scope and purpose of the processing of personal data


2.1 Visitting the website
When this website is accessed, the Internet browser used by the visitor automatically sends data to the server of this website and stores it for a limited time in a log file. Until the automatic deletion, the following data is stored without further input of the visitor:
Name and URL of the retrieved file
Date and time of retrieval
transferred amount of data
Message about successful retrieval (HTTP response code)
Browser type and browser version
operating system
Referer URL (i.e. the previously visited page)
Websites that are accessed by the user's system through our website
Internet service provider of the user
IP address and the requesting provider


The processing of this personal data is in accordance with Article 6 (1) (1) (f) of the GDPR. The law firm has a legitimate interest in the processing of data for the purpose of building up the connection to the website of the law firm swiftly, enabling a user-friendly application of the website detecting and ensuring the safety and stability of the systems and facilitating and improving the administration of the website. The processing is explicitly not for the purpose of obtaining knowledge about the person of the visitor of the website.


2.2 Client information
By registering for the receipt of client information (eg newsletter), the visitor expressly agrees to the processing of the transmitted personal data. To register for the client information, you only need to enter an e-mail address of the visitor. Legal basis for the processing of the personal data of the visitor for the purpose of sending client information is the consent acc. Article 6 (1) (1) (a) GDPR.


The visitor can at any time unsubscribe from receiving future client information. This can be done by using a special link at the end of the client information or by sending an e-mail to .


3. Disclosure of data
Personal data will be transmitted to third parties if the data subject has expressly consented to disclosure under Article 6 (1) (1) (a) of the GDPR, the disclosure acc. Article 6 (1) (1) (f) GDPR is necessary for the assertation, exercise or defense of legal claims and there is no reason to assume that the data subject has a predominantly protected interest in the non-disclosure of their data, for the transfer of data under Article 6 (1) (1) (c) GDPR exists a legal obligation , and / or this is required by Article 6 (1) (1) (b) of the GDPR to fulfill a contractual relationship with the data subject. In other cases, personal data will not be disclosed to third parties.


4. Cookies
Cookies are used on the website. These are data packets that are exchanged between the server of the law firm's website and the visitor's browser. They are stored when visiting the website with the devices used in each case (PC, notebook, tablet, smartphone, etc.). Cookies can cause no damage to the equipment used. In particular, they contain no viruses or other malicious software. In the cookies, information is stored, each resulting in connection with the specific terminal used. The law firm can by no means immediately obtain knowledge of the identity of the visitor to the website.


Cookies are largely accepted according to the basic settings of the browser. The browser settings can be set up so that cookies are either not accepted on the devices used, or that a special note is made before a new cookie is created. It should be noted, that disabling cookies may result in the failure to use all features of the website in the best possible way.


The use of cookies serves to make the use of the website of the law firm more comfortable. For example, session cookies can be used to track whether the visitor has already visited individual pages of the website. After leaving the website, these session cookies are automatically deleted.


To improve usability, temporary cookies are used. They are stored on the visitor's device for a temporary period. When the website is visited again, it automatically recognizes that the visitor has already visited the site at an earlier point in time and what inputs and settings have been made so that they do not have to be repeated. The use of cookies also takes place in order to analyze the website's views for statistical purposes and for the purpose of improving the offer. These cookies make it possible to automatically recognize on re-visit that the website has already been called by the visitor. An automatic deletion of cookies takes place here after a specified time.


The data processed by cookies is for the above mentioned purposes of safeguarding the legitimate interests of the law firm under Article 6 (1) (1) (f) GDPR justified.


5. Website analysis services
We use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google has submitted to the Privacy Shield Agreement between the European Union and the United States and certified itself. As a result, Google agrees to comply with the standards and regulations of European data protection law. Further information can be found in the following linked entry:
Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about the use of this website by the site visitors are usually transmitted to a Google server in the USA and stored there.


This is also our legitimate interest in accordance with Article 6 (1) (1) (f) GDPR. If IP anonymization is activated on this website, your IP address will be truncated by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. IP anonymization is active on this website. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage.


The transmitted IP address as part of Google Analytics will not be merged with other Google information. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the features of this website.


In addition, you may prevent the transmission of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link:


6. Your rights as an affected person
As far as your personal data are processed during the visit of our website, you have the following rights as "data subject" within the meaning of the GDPR:


6.1 Information
You can request information from us as to whether personal data is being processed by us. No right of access exists if the granting of the coveted information infringes the duty of confidentiality acc. § 57 (1) StBerG, or the information must be kept secret for other reasons, in particular because of a predominantly legitimate interest of a third party. Deviating from this, there may be an obligation to provide the information if, taking into account any imminent damage, your interests outweigh the interests of secrecy. The right of access is also excluded if the data are stored only because they may not be deleted due to legally or statutory retention periods or serve exclusively for purposes of data protection or data protection control, if the disclosure would require a disproportionate effort and processing for other purposes is excluded by appropriate technical and organizational measures. If in your case the right to information is not excluded and your personal data are processed by us, you can ask us for information about the following information:
Purposes of processing, categories of personal data processed by you, recipients or categories of recipients to whom your personal information is disclosed, in particular to recipients in third countries, if possible, the planned duration for which your personal information is stored or, if not possible the criteria for determining the retention period, the right of rectification or deletion or limitation of the processing of personal data concerning you or a right to object to such processing, the existence of a right of appeal to a data protection supervisory authority, if data has not been collected from you as the data subject, the information available about the origin of the data, if necessary the existence of automated decision-making, including profiling, and meaningful information about the involved logic, as well as the scope and intended effects of automated decision-making, if applicable, in the case of transmission to recipients in third countries, unless there is a decision by the EU Commission on the adequacy of the level of protection under Article 45 (3) GDPR, information on which suitable safeguards acc. Art. 46 (2) GDPR for the protection of personal data.


6.2 Correction and completion
If you discover that we have inaccurate personal information, you may require us to promptly correct this incorrect information. In the event of incomplete personal data concerning you, you may request the completion.


6.3 Deletion
You are entitled to deletetion ("right to be forgotten"), unless the processing is necessary for the exercise of the right to free expression, the right to information or to fulfill a legal obligation or to carry out a task of public interest and one of the following reasons apply:
The personal data are no longer necessary for the purposes for which they were processed. The justification for processing was only your consent, which you have revoked. You have objected to the processing of your personal data that we have made public. You have objected to the processing of personal data not disclosed to us and there are no legitimate reasons for the processing.
Your personal data has been processed unlawfully. The deletion of personal data is required to fulfill a legal obligation to which we are subject.


There is no claim for deletion if, in the case of legitimate non-automated data processing, deletion is not possible or only possible with disproportionately high outlay due to the special nature of the storage and your interest in deletion is low. In this case, the deletion is replaced by the restriction of processing.


6.4 Restriction of processing
You may require us to restrict processing if any of the following applies: You deny the accuracy of your personal information. The restriction may be required in this case for the duration that allows us to verify the accuracy of the data. The processing is unlawful and you require instead of deletion the restriction of the use of your personal data. Your personal information will no longer be needed by us for the purposes of processing that you may need to assert, exercise or defend your legal claims. You have enter an objection acc. Art. 21 (1) DSGVO. The restriction of processing may be required as long as it is not certain that our legitimate reasons outweigh your reasons.


Restriction of processing means that the personal data will be processed only with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest. Before we lift the restriction, we have a duty to inform you.


6.5 Data portability
You have a right to data portability, provided the processing is based on your consent (Article 6 (1) (1) (a) or Article 9 (2) (a) GDPR) or on a contract to which you are a party and the processing is done by automated methods. The right to data portability in this case includes the following rights, provided that this does not affect the rights and freedoms of others: You may require us to receive the personal information you provide to us in a structured, common and machine-readable format. You have the right to transmit this data to another person without hindrance on our part. As far as technically feasible, you may require us to transfer your personal information directly to another person in charge.


6.6 Opposition
Insofar as the processing is based on Article 6 (1) (1) (e) GDPR (exercise of a task in the public interest or in the exercise of official authority) or on Article 6 (1) (1) (f) GDPR (legitimate interest of the person responsible or a third party), you have the right, at any time, to object to the processing of the personal data concerning you, for reasons arising from your particular situation. This also applies to a profiling based on Art. 6 (1) (1) (e) or (f) of the GDPR. Upon exercise of the right of objection, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.


You may at any time object to the processing of your personal data for direct marketing purposes. This also applies to a profiling associated with such direct marketing. After exercising this right of objection, we will no longer use the personal data concerned for direct marketing purposes.


You have the option to use the right of objection informally, by telephone, by e-mail, by fax, or to our postal address listed at the beginning of this Privacy Policy.


6.7 Revocation of consent
You have the right to revoke your consent at any time with effect for the future. The revocation of the consent can be communicated informal by phone, by e-mail, by fax or to our postal address. The revocation does not affect the lawfulness of the data processing which has taken place on the basis of the consent until receipt of the revocation. Upon receipt of the revocation, the data processing, which was based solely on your consent, is discontinued.


6.8 Complaint
If you believe that the processing of your personal information is unlawful, you may lodge a complaint with a data protection supervisory authority that has jurisdiction over your place of residence or employment or the location of the alleged infringement.


7. Status and Update of this Privacy Policy
This Privacy Policy is dated May 25, 2018. We reserve the right to update our privacy policy in due course to improve privacy and / or adapt it to changes in regulatory practice or jurisdiction.