Privacy Policy
1. Controller
Attorney Ulrich Rattay
Neue Straße 11, 49808 Lingen (Ems)
Phone: +49 (0) 591 / 966 52 98
Email: info@rattay.legal
2. Principles of data processing
This website processes personal data only to the extent necessary to operate the site, handle contact requests and schedule appointments. No tracking cookies are set, no personal usage profiles are created and no advertising or marketing trackers are used. A technically necessary session cookie is set only on the request page to protect the contact form against abuse (CSRF protection). Legal basis: Art. 6(1)(f) GDPR in conjunction with Section 25(2) no. 2 TDDDG.
3. Hosting & server data (Strato AG)
Hosting provider: Strato AG, Pascalstrasse 10, 10587 Berlin. When visiting the site, technical server data is automatically collected (e.g., IP address, browser type, timestamp, accessed page). This data is not combined with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Strato privacy policy: https://www.strato.de/datenschutz/
Audience measurement (GoatCounter)
This website uses GoatCounter, an analytics service provided by Netnea ApS, Denmark. When a page is opened, the GoatCounter script is loaded from gc.zgo.at and a page view is sent to rattay.goatcounter.com; your IP address is transmitted for technical reasons but, according to the provider, not stored. No cookies are set and no personal usage profiles are created. Only aggregated page views are recorded (page visited, referring page, browser, screen size, approximate country). No measurement takes place if your browser sends "Do Not Track" or "Global Privacy Control" or if you object below. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in data-minimising audience measurement).
You can object to audience measurement at any time. Your objection is stored without a cookie in the local storage (localStorage) of this browser. If you delete your browser data or use another browser, you will need to object again.
4. Contact form
Data: name, email, phone (optional), legal area, reference/official file number (optional), opposing party (optional), description of the matter, urgency, availability, and if applicable federal state, legal expenses insurance, information on how you became aware of the firm (optional), and uploaded document (optional). For abuse prevention, technical form protection data is also processed (timestamp, session token, honeypot fields and IP-based rate limits). Purpose: processing your request, scheduling an appointment and protecting the form from automated spam. Transfer: none, except where technically required for email delivery. Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (secure operation of the form). Deletion: after completion of processing, unless statutory retention obligations apply. In addition, the language of the website from which the request was sent is transmitted.
5. Email communication
If you contact me by email, transmitted data is stored for processing your request. Legal basis: Art. 6(1)(b) and (f) GDPR.
6. Video communication (online consultation)
For consultations by video call, a GDPR-compliant service without data transfer to third countries is used. Details are provided with appointment confirmation. Legal basis: Art. 6(1)(b) GDPR.
7. Local storage in the browser (localStorage)
The language is selected via the page address (for example /en/) and is not stored in your browser. If you activate the optional draft function in the contact form, your entries are stored locally in this browser on this device for up to 24 hours; attachments and consent fields are not stored, and these data are not transmitted to the server before you submit the form. If you object to audience measurement, this objection is also stored locally. Legal basis: Section 25(2) no. 2 TDDDG (function expressly requested by you). If you choose a language or dismiss the language notice, that is also stored locally so the notice does not appear again.
Map excerpt
The map on the "Contact" and "Request" pages is an image stored on this server (map data © OpenStreetMap contributors). Displaying it does not connect to OpenStreetMap or any other map service. Only when you click the map or a map link do you leave this website; the privacy policy of the respective provider then applies.
8. Attorney confidentiality
All information obtained within an attorney-client relationship is subject to professional confidentiality under Section 43a BRAO.
9. Your rights (GDPR Art. 15-21)
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdraw consent at any time with effect for the future
Contact for privacy requests: info@rattay.legal
Supervisory authority: State Commissioner for Data Protection of Lower Saxony, Prinzenstrasse 5, 30159 Hanover,
https://www.lfd.niedersachsen.de
In the event of any discrepancy between language versions, the German version shall prevail.