Information on the processing of personal data pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR; German: DSGVO).
This English translation is provided for convenience. Only the German version is legally binding.
In brief: This website sets no analytics or marketing cookies, embeds no fonts, maps or videos from third-party providers and does not measure user behaviour. That is why there is no cookie banner here — there is nothing to consent to.
Brandes the lawyers UG (haftungsbeschränkt)
Neuer Wall 10, 20354 Hamburg
Telephone +49 40 822 153 154 · Email info@brandes-thelawyers.de
Contact person for data protection: Ronald Brandes, Rechtsanwalt (German lawyer), reachable via the contact details above.
No data protection officer within the meaning of Art. 37 GDPR and § 38 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) has been appointed; the conditions for a mandatory appointment are not met.
As lawyers, we are subject to the professional duty of confidentiality under § 43a Abs. 2 of the Federal Lawyers' Act (Bundesrechtsanwaltsordnung, BRAO) and § 203 of the German Criminal Code (Strafgesetzbuch, StGB). This duty takes precedence over data protection claims by third parties: rights of access, information and notification do not exist to the extent that fulfilling them would disclose information protected by client confidentiality. For you as a client, this means additional protection, not a restriction of your own rights.
When you access this website, your browser transmits technically necessary data, which our hosting provider stores in server log files: IP address, date and time of access, page accessed, amount of data transferred, notification of successful retrieval, browser type and version, operating system and, where applicable, the previously visited page.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and trouble-free operation of the website and in defending against attacks. These data are not combined with other data sources.
The log files are retained by our hosting provider for no more than eight weeks and are then deleted automatically. They are stored for longer only where this is necessary to investigate a specific security incident; in that case, the data concerned are retained until the matter has been fully resolved and then deleted.
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur. The hosting provider processes the data mentioned above on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Processing takes place on servers within the European Union.
This website does not use cookies for analytics, profiling or marketing purposes. There is no audience measurement, no retargeting and no creation of user profiles. Consent under § 25 Abs. 1 of the Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG) is therefore not required.
Fonts, images, stylesheets and scripts are delivered exclusively from our own server. In particular, there is no connection to:
Your IP address is therefore not transmitted to any third-party provider when you visit this site.
If you contact us via the contact form, by email, by telephone or by fax, we process the data you provide in order to handle your enquiry and in case of follow-up questions.
The legal basis is Art. 6(1)(b) GDPR where the enquiry is directed at initiating or carrying out an engagement; otherwise Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR (legitimate interest in responding).
We delete enquiries that do not lead to an engagement once they have been dealt with, provided no statutory retention obligations prevent this. You may withdraw any consent you have given at any time with effect for the future.
Note on email security. Unencrypted email does not offer adequate protection for confidential content. Please do not send sensitive documents or descriptions of your matter unencrypted. On request, we will agree a secure means of transmission with you.
In the course of an engagement, we process the data required to carry out the instruction — including special categories of personal data under Art. 9 GDPR, such as health data in family law or employment law matters.
The legal bases are Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (legal obligations, for example under the Geldwäschegesetz (German Money Laundering Act)) and Art. 9(2)(f) GDPR (establishment, exercise or defence of legal claims).
In accordance with § 50 BRAO, we retain client files for six years after the engagement has ended. Retention periods under tax and commercial law remain unaffected and may be longer.
Data are only disclosed where this is necessary to carry out the engagement or required by law — in particular to courts, authorities, the opposing party and their representatives, experts or legal expenses insurers, the latter only with your approval.
Service providers who process data on our behalf (hosting, IT support, file destruction) are contractually bound under Art. 28 GDPR and obliged to observe lawyers' professional secrecy.
No data are transferred to third countries outside the EU or the EEA.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to withdraw any consent you have given at any time with effect for the future (Art. 7(3)).
Right to object under Art. 21 GDPR: You may object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR.
These rights apply insofar as they are not precluded by lawyers' professional duty of confidentiality or by statutory retention obligations. To exercise them, simply contact us informally using the contact details above.
You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Straße 22, 20459 Hamburg
datenschutz-hamburg.de
You are not required by law or contract to provide your data. Without the information marked as required in the contact form, however, we cannot respond to your enquiry. No automated decision-making, including profiling, takes place.
This website is delivered exclusively over an encrypted connection (TLS), recognisable by the padlock symbol in your browser. In addition, we take technical and organisational measures pursuant to Art. 32 GDPR to protect your data against loss, destruction and unauthorised access.
We update this policy when the processing or the legal situation changes. The version available here applies in each case.
As of: 29 July 2026
