Controller
- Controller
- HÜNERMANN IKEN Rechtsanwälte GbR
Hochstraße 29, 60313 Frankfurt am Main, Germany - Contact
- office@hi-comply.de · +49 176 66809581
- Data Protection Officer
- If appointed: add name and contact details — otherwise remove this line
Information pursuant to Art. 13, 14 GDPR
How we process personal data when you visit this website and in the course of handling client matters — and what rights you have in this regard.
Last updated: 1 September 2026
highlighted = to be replaced with your details prior to publication
This website is hosted by name and address of the hosting provider . When you access our pages, the hosting provider automatically collects server log files on our behalf: IP address, date and time of access, file retrieved, amount of data transferred, referrer, and browser and operating system information.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website. We have entered into a data processing agreement with the hosting provider pursuant to Art. 28 GDPR. The log files are deleted after number days.
The fonts used on this website are loaded via currently Google Fonts — switch to local delivery before going live, or adapt this section . When fonts are delivered locally, no connection to third-party servers is established and your IP address is not transmitted to external font providers.
If you contact us by email or telephone, we process the data you provide in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry is aimed at the conclusion of an engagement agreement, and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding to enquiries.
Please note: unencrypted emails may be read by third parties during transmission. For confidential matters, we provide encrypted transmission upon request.
In the course of a client engagement, we process personal data of clients, opposing parties, witnesses and other parties involved, to the extent necessary for carrying out the engagement. The legal bases are Art. 6(1)(b) and (c) GDPR and, with regard to third-party data, Art. 6(1)(f) GDPR. Where special categories of personal data within the meaning of Art. 9 GDPR are concerned, we base the processing on Art. 9(2)(f) GDPR.
In order to fulfil our obligations under the German Anti-Money Laundering Act (Geldwäschegesetz, GwG), we collect and store identification data in connection with the transactions listed therein. The legal basis is Art. 6(1)(c) GDPR.
We are bound by professional confidentiality obligations pursuant to Section 43a(2) of the German Federal Lawyers' Act (BRAO) and Section 203 of the German Criminal Code (StGB). The rights of third parties to information and disclosure may therefore be restricted to the extent that they conflict with our duty of confidentiality (Section 29(1) sentence 2 of the German Federal Data Protection Act, BDSG).
We disclose your data only where necessary for carrying out an engagement or where required by law — for example to courts, authorities, opposing parties and their representatives. We also engage carefully selected processors, in particular for IT operations, file management and communication. List specific service providers.
A transfer of data to third countries does not take place / takes place only on the basis of Art. 44 et seq. GDPR — please specify.
We retain matter-related documents for six years after conclusion of the engagement pursuant to Section 50 BRAO. Further retention obligations under commercial and tax law — in particular under Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB) — as well as retention periods under the GwG remain unaffected. The data is deleted once these periods have expired.
Subject to the statutory requirements, you have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to withdraw any consent given at any time with effect for the future.
Right to object under Art. 21 GDPR: Insofar as we process data on the basis of legitimate interests, you may object to such processing on grounds relating to your particular situation. We will then no longer process the data unless there are compelling legitimate grounds that override your interests.
You may lodge a complaint with a data protection supervisory authority at any time. The authority responsible for us is: