Privacy Policy | Lawyer Oliver Langner
Controller
The controller responsible for processing on this website is Attorney at Law Oliver Langner, Berliner Allee 57, 40212 Düsseldorf, Germany, e-mail: langner(at)juraco.de, telephone: +49 (0) 211 - 6916879011, fax: +49 (0) 211 - 69168 79019.
Hosting and server logs
When the website is accessed, technically necessary connection and log data is processed. This may include the IP address, date and time, requested URL or file, transferred data volume, HTTP status, referrer and browser or operating-system information. Processing is used to provide the website securely and reliably and to prevent abuse. Where applicable, the legal basis is Article 6(1)(f) GDPR. The exact logging and retention period depends on the hosting configuration and must correspond to the information supplied by the hosting provider.
Contact form
If you use the contact form, we process the contact details you provide, the selected area of law, your message and the information about how you heard about us in order to review and answer your enquiry. For mandate-related enquiries, processing may be necessary to take steps prior to entering into a contract; otherwise it is used to handle your communication. Please do not send confidential documents unsolicited through the form or by replying to unencrypted e-mail.
Incoming form enquiries are stored as non-public records in the WordPress back end and are sent by e-mail to the recipients configured for the selected area of law. Retention depends on what is necessary to handle the enquiry, any applicable statutory retention duties and the need to establish, exercise or defend legal claims. If the enquiry results in a client relationship, the retention and documentation duties applicable to that mandate also apply.
To protect the form from automated abuse, the website uses server-side rate limits, single-use form tokens, plausibility checks and pseudonymised security characteristics. Enquiries assessed as higher risk may require verification of the e-mail address with a one-time code. Until verification, the submitted form data is encrypted on the server and expires automatically after a short period. Pseudonymised anti-abuse fingerprints are retained for no more than 30 days.
Reviews and external Google links
If enabled and authorised by the administrator, review data is retrieved server-side through the Google Business Profile API. API credentials remain on the server and are not sent to visitor browsers. To avoid an API request on every page view, the supplied review data is stored in a time-limited server cache; the configurable cache duration is technically capped at 30 days. Merely reading the embedded review presentation does not create an additional browser connection to Google. You leave this website only when you open an external Google Maps, Google reviews or review-writing link.
Google Maps and external media
The default configuration uses a local location preview without an embedded Google map. If the consent-based Google Maps mode is enabled by the administrator, the map is technically blocked at first. The Google Maps iframe is loaded only after you allow “External media” or select the map-load button. Your browser may then transmit your IP address and technical connection or browser information to Google. Google may process data outside the European Union or European Economic Area.
Your external-media preference is stored in your browser’s local storage under the key juracoConsentV2 for no more than 180 days and can be changed or withdrawn at any time via “Privacy settings”. Where consent is required for access to information on your device or for loading the external service, the service is loaded only after your selection under Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG. Selecting the external route link opens Google Maps only as a result of your own navigation.
Analytics, tracking and social-media plug-ins
This JURACO package does not include web analytics, advertising trackers or social-media plug-ins by default. If additional external services are added later, the privacy notice and the technical consent controls must be reviewed before activation.
Data processed for a mandate
Data processed as part of a client relationship is subject to the applicable professional, tax and commercial-law retention and documentation duties and to legal professional secrecy. These obligations must be distinguished from the processing carried out merely to operate this website.
Your rights
Subject to the statutory requirements, you have rights including access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20) and objection to processing based on legitimate interests (Article 21). Consent may be withdrawn at any time with effect for the future under Article 7(3) GDPR.
You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR.
