Data protection declaration according to DSGVO and BDSG


1. Data protection at a glance

Thank you for visiting our website and for your interest in our company and our services. The protection of the personal data we receive from you is of particular concern to us. According to Art. 4 No. 1 DSGVO, personal data is any information relating to a directly or indirectly identified or identifiable natural person, such as name, address and/ or IP address.


2. Basic information

2.1 Legal basis

We process (in the sense of Art. 4 No. 2 DSGVO) personal data only on the basis of the legally regulated permissible circumstances of Art. 6 (1) DSGVO, in particular

  • with your consent (Art. 6 para. 1 letter a) DSGVO),
  • for the performance of a contract to which you are a party, or at your request to carry out pre-contractual measures (Art. 6 (1) (b) DSGVO),
  • for the fulfillment of a legal obligation (Art. 6 para. 1 letter c) DSGVO)
  • if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data override (Art. 6 (1) (f) DSGVO).

In doing so, we observe the applicable data protection regulations, in particular the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG) and the EU’s General Data Protection Regulation (DSGVO).


2.2 Storage and deletion of personal data

2.2.1 Storage

Unless otherwise stated in the following notes, we store the data only for as long as is necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such legal retention obligations may arise in particular from commercial or tax law regulations.


2.2.2 Deletion

After the end of the retention period, the stored personal data is destroyed in a documented deletion process by us and/or a certified specialist company.


2.3 Responsible party within the meaning of Art. 4 No. 7 DSGVO (and service provider according to TMG):

LEADS Partnerschaft mbB Attorneys Hipp Schwara Vogel
represented by the partners
Thomas Hipp, attorney at law, Dr. Matthias Schwara, attorney at law Prof. Dr. Jochen Vogel
Erbrpinzenstrasse 2a

79098 Freiburg i. Br.

Phone: +49 761 45891-336


The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).


2.4 Data protection officer

Please direct any questions regarding data protection to the above contact details or by e-mail to


2.5 Supervisory authority

If you believe that we are not processing your personal data lawfully, you may lodge a complaint with any data protection supervisory authority. The competent supervisory authority pursuant to Art. 55 DSGVO is

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg

Corporation under public law

Represented by the State Representative Dr. Stefan Brink

Königstrasse 10 a

70173 Stuttgart


Postal address:

Postfach 10 29 32

70025 Stuttgart

Tel.: 0711/615541-0

FAX: 0711/615541-15


Contact via:


3. Purpose and scope of data processing on our website

3.1 Internet presence – processing of server log files

During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes by default:

  • a description of the type of Internet viewing program used (e.g. Mozilla Firefox, Google Chrome or Microsoft Internetexplorer, Apple Safari, Opera, etc.),
  • the operating system used,
  • the page accessed,
  • previously visited pages (referrer URL),
  • IP address,
  • Date and time of the request (so-called “time stamp”),
  • HTTP status code.

The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) f) DSGVO. This processing serves the technical administration and security of the website. The stored data is deleted after seven days, unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject on the basis of the stored information. Articles 15 to 22 of the GDPR therefore do not apply pursuant to Article 11 (2) of the GDPR, unless you provide additional information that enables us to identify you in order to exercise your rights set out in these articles.


3.2 Processing of content data (when you contact us by telephone, use our contact form and/or e-mail)

You have the option of contacting us via our e-mail address and/or our contact form and/or by telephone. We will use the personal data transmitted to us in this way for the creation of the contract, fulfillment of the contract, execution of the contract, contract maintenance, contract analysis, as well as for market research. The transfer of your data is encrypted (recognizable by the “https” in the address line of the browser). If you provide us with personal and/or business data (first name, last name, registration address, e-mail address, telephone number, description of facts), the disclosure of this data by you is expressly on a voluntary basis in accordance with Art. 6 para. 1 lit. a DSGVO. Of course, this data will be treated confidentially and will not be passed on to third parties without your consent. A link with the above-mentioned server log files does not take place.

We expressly point out that in the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems.


3.3 Disclosure of personal data to third parties

For individual processing activities, we commission external service providers, e.g. for hosting our IT, our e-mail system, maintenance and support of the IT systems, marketing measures or file and data carrier destruction. These service providers only process the data according to explicit instructions and are contractually obligated to ensure appropriate technical and organizational measures for data protection according to DSGVO and BDSG. In addition, we may transfer personal data of our customers to bodies such as postal and delivery services, house bank, tax advisor/auditor or the tax authorities. Those employees who come into contact with your data are, like ourselves, subject to a strict confidentiality obligation, compliance with which we constantly monitor.


3.4 Data transfer to the USA

Visiting our website may involve the transfer of certain personal data to the USA. The USA is a third country, i.e. not a country in which the GDPR applies. The European Commission has decided in accordance with Art. 45 of the GDPR that an adequate level of data protection is required with regard to companies certified under the EU-US Privacy Shield ( In these cases, the transfer to the USA takes place in a permissible manner. The list of certified companies is maintained by the U.S. Department of Commerce (


3.5 Cookies

We also use cookies on our website. These are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by our web server. If this use of cookies results in the processing of personal data, this is based on the legal basis of Art. 6 (1) f) DSGVO. This processing serves our legitimate interest in making our website more user-friendly, effective and secure. We use so-called “session cookies”, which are deleted again when the browser session is ended. Other cookies (“persistent cookies”) are automatically deleted again after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies through your browser settings in principle or for specific cases. Further information on this is available from the Federal Office for Information Security.


3.6 Integrated services and third-party content

We use services, services and content (hereinafter collectively referred to as “content”) provided by third-party providers on our website. For such integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to the respective third-party providers. This data processing is carried out in each case to protect our legitimate interests in the optimization and economic operation of our website and is based on the legal basis of Art. 6 (1) f) DSGVO. You can object to this data processing at any time via the settings of the browser you use or certain browser extensions. Please note that this may result in functional restrictions on the website.

Google Web Fonts, a service provided by Google Ireland Limited (Ireland/EU), is integrated into our website. Our site uses so-called web fonts for the uniform display of fonts that are provided by Google. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google’s servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

If your browser does not support web fonts, a default font is used by your computer. For more information about Google Web Fonts, see and Google’s privacy policy at


4. Your rights as a data subject (data subject rights)

In accordance with the aforementioned legal provisions, you have the following rights:


4.1 Right to information according to Art. 15 DSGVO

You can request information from us about your personal data processed by us. In particular, you can request information about

  • the purposes of the processing,
  • the categories of personal data which are or have been processed
  • the recipients or categories of recipients to whom your data are or have been disclosed,
  • the planned storage period, the existence of a right to rectification, erasure or restriction of processing or a right to object,
  • the existence of a right of appeal to a supervisory authority,
  • the origin of your data, if it was not collected by us,
  • the existence of automated decision-making, including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing for you.


4.2 Right of rectification according to Art. 16 DSGVO

You have the right to immediately request the correction of any inaccurate personal data concerning you or the completion of your personal data stored by us if it is incomplete.


4.3 Right of deletion according to Art. 17 DSGVO

You have the right to request the deletion of your personal data stored by us. This does not apply insofar as the processing of your data is required

  • to exercise the right to freedom of expression and information,
  • to fulfill a legal obligation,
  • for reasons of public interest in the field of public health,
  • for archival purposes in the public interest, scientific or historical research purposes, or for statistical purposes,
  • for the assertion, exercise or defense of legal claims.


4.4 Right to restriction of processing pursuant to Art. 18 DSGVO

You have the right to request the restriction of the processing of your personal data. This applies insofar as

  • the accuracy of the data is disputed by you,
  • the processing is unlawful, but you refuse to delete the data and instead request the restriction of data use,
  • we no longer need the data, but you need the data to assert, exercise or defend legal claims,
  • you have objected to the processing in accordance with Art. 21 (1) DSGVO.


4.5 Right to data portability according to Art. 20 DSGVO

You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.


4.6 Right of appeal pursuant to Art. 77 DSGVO

You have the right to complain to a supervisory authority, e.g. if you believe that we are processing your personal data in an unlawful manner. For this purpose, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters (see above 2.3, 2.4).


4.7 Right of objection according to Art. 21 DSGVO

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) DSGVO. If you wish to exercise your right to object, a notification in text form is sufficient. You are therefore welcome to write to us using our contact details above or contact us by e-mail (datenschutz@


4.8 “Right of withdrawal” pursuant to Art. 7 (3) DSGVO

You have the right to revoke your consent given to us once at any time. The revocation does not affect the lawfulness of the processing based on your previous consent. The only consequence of the revocation is that we may no longer continue the data processing based on this consent for the future.


5. Links to other websites

Our website contains links to the websites of other companies. and data sources. We have no influence on and do not control whether and to what extent the companies concerned comply with the applicable data protection provisions.


6. Changes to the privacy policy

The data protection declaration presented above is valid as of March 2021. We expressly reserve the right to change or adapt this data protection declaration at any time in compliance with the applicable data protection regulations.

© Copyright LEADS Partnerschaft mbB Attorneys Hipp Schwara Vogel