Privacy Policy.

[Template — to be reviewed and completed by the firm before publication.]

1. Controller

Dobski & Associates [Rechtsanwaltsgesellschaft mbH / Partnerschaft mbB], [Street and number], [10117 Berlin], Germany.
Email: [intake@dobski-associates.eu] · Telephone: [+49 (0)30 0000 0000]

Data protection officer: [Name / contact, if appointed]

2. Visiting this website

When you visit this website, our hosting provider automatically processes technically necessary data (IP address, date and time of access, requested page, browser type) in server log files. This is necessary to deliver the website and to ensure its security. Legal basis: Art. 6 (1)(f) GDPR. Log files are deleted after [7] days.

Hosting provider: [Name, address — processor under Art. 28 GDPR].

We do not use analytics, advertising, social media plugins or any third-party tracking. All fonts are served from our own server. No data is transmitted to Google or similar providers when you load this website.

3. Cookies

This website does not set any cookies and does not access information stored on your device beyond what is strictly necessary to display the page (§ 25 (2) No. 2 TDDDG). A consent banner is therefore not required.

4. Intake form

When you submit a report via our intake form, we process the data you provide (name, email, optional telephone number, country, the company concerned, the date and description of the incident, and the steps you have already taken) in order to assess your enquiry and contact you.

• Legal basis: Art. 6 (1)(b) GDPR (steps prior to entering into a contract at your request) and Art. 6 (1)(a) GDPR (your consent). Where you voluntarily provide special categories of data, Art. 9 (2)(a) GDPR.
• Processor: Form submissions are transmitted via [Formspree, Inc. — or your chosen EU-hosted form provider], acting as our processor under a data processing agreement (Art. 28 GDPR). [Where data is transferred outside the EU/EEA, state the safeguard relied on — e.g. EU–US Data Privacy Framework or Standard Contractual Clauses.]
• Retention: If no mandate results, your enquiry is deleted after [6 months]. If a mandate is entered into, data is retained in accordance with statutory retention periods for lawyers (§ 50 BRAO: 6 years after the end of the mandate).
• Confidentiality: All information is subject to legal professional secrecy (§ 43a (2) BRAO, § 203 StGB).

5. Contact by email or telephone

If you contact us by email or telephone, we process your data to handle your enquiry. Legal basis: Art. 6 (1)(b) or (f) GDPR. Please note that unencrypted email is not a fully secure channel; for sensitive material, ask us for a secure transfer method.

6. Your rights

You have the right to:

• access your personal data (Art. 15 GDPR);
• rectification (Art. 16) and erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on Art. 6 (1)(f) (Art. 21);
• withdraw consent at any time with effect for the future (Art. 7 (3));
• lodge a complaint with a supervisory authority (Art. 77) — for us: [competent Land data protection authority, e.g. Berliner Beauftragte für Datenschutz und Informationsfreiheit].

To exercise any of these rights, write to [intake@dobski-associates.eu]. We answer within the statutory deadline. Naturally.

7. Changes

We may update this policy to reflect changes in law or in our processing. Last updated: [date].