Skip to main content
Back to previous page

Privacy Policy

Protecting your personal data is important to us. Below, we explain the nature, scope, and purposes of the processing of personal data when you use our website, as well as your rights under the General Data Protection Regulation (GDPR).


1. Data Controller


The controller responsible for processing personal data on this website is:

JB Rechtsanwaltsgesellschaft mbH


Registered office:
Brückenstraße 1
66809 Nalbach


Branch offices:
Alfred-Herrhausen-Allee 3–5
65760 Eschborn


St. Johanner Straße 41–43
66111 Saarbrücken


Phone: +49 6196 58655603
Email: info@berg-legal.com
Website: www.berg-legal.com


The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.


2. General Information on Data Processing


We process personal data exclusively in accordance with applicable law, in particular the GDPR and the German Federal Data Protection Act (BDSG).


Personal data means any information relating to an identified or identifiable natural person. This includes, for example, names, contact details, IP addresses, and information you provide to us in connection with an inquiry or job application.


In particular, we process personal data to the extent necessary to operate our website, respond to inquiries, establish or perform a client engagement, or comply with legal obligations.


3. Legal Bases for Data Processing


Depending on the purpose of processing, we rely in particular on the following legal bases:

  • Article 6(1)(a) GDPR: Processing based on your consent.
  • Article 6(1)(b) GDPR: Processing necessary for the performance of a contract or to take steps prior to entering into a contract.
  • Article 6(1)(c) GDPR: Processing necessary to comply with legal obligations.
  • Article 6(1)(f) GDPR: Processing necessary for the purposes of legitimate interests, unless those interests are overridden by your interests or fundamental rights and freedoms.


Accessing information on your device and storing information on it are also subject to the requirements of § 25 TDDDG.


4. Hosting and Technical Services


We use the technical services of a hosting provider to make our website available.


Operating the website may involve processing IP addresses, technical connection data, browser information, and details of the operating system used.


This processing serves to ensure the secure and functional operation of our website.


The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide our website securely, reliably, and without disruption.


Where the hosting provider processes personal data on our behalf, this is governed by a data processing agreement pursuant to Article 28 GDPR.


5. Server Log Files


When you access our website, the web server may automatically collect information in server log files.


This may include, in particular:

  • IP address of the device accessing the website
  • Date and time of access
  • Pages and files accessed
  • Browser type and version
  • Operating system used
  • Referrer URL
  • Volume of data transferred
  • HTTP status code


This data is processed to ensure the website’s technical functionality, analyze errors, and detect and prevent misuse and security attacks.


The legal basis is Article 6(1)(f) GDPR. The data is retained only for as long as necessary for these purposes.


6. SSL or TLS Encryption


Our website uses SSL or TLS encryption to protect the transmission of confidential content.


You can generally recognize an encrypted connection by the address in your browser’s address bar beginning with “https://”.


Encryption is intended to prevent unauthorized third parties from reading data during transmission.


Nevertheless, absolute protection cannot be guaranteed when transmitting data over the internet.


7. Cookies and Similar Technologies


Our website may use cookies and similar technologies. Cookies are small files or pieces of information that are stored on your device or can be accessed through your browser.


Technically necessary cookies and technologies may be used to provide basic website functions and ensure the security of our website.


Where cookies or similar technologies are not strictly necessary for the operation of the website, they are generally used only after you have provided your consent pursuant to § 25(1) TDDDG.


Where personal data is processed in this context, the legal basis is determined in accordance with Article 6 GDPR.


You can manage or delete cookies through your browser settings. You can withdraw consent previously given through the consent settings available on the website, provided that a corresponding consent management function has been implemented.


Disabling technically necessary functions may limit the usability of our website.


8. Contacting Us by Email or Phone


If you contact us by email or phone, we process the personal data you provide to the extent necessary to handle your inquiry.


This may include, in particular, your name, contact details, the content of your message, and any other information you voluntarily provide.


We process this data to respond to your inquiry and, where applicable, to take steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR.


For general inquiries, processing may also be based on our legitimate interest in appropriate communication pursuant to Article 6(1)(f) GDPR.


Your data will be deleted once it is no longer needed for the purpose of processing, unless statutory retention obligations require us to retain it.


9. Contact Form


If our website contains a contact form and you use such contact form, we process the personal data you enter to respond to your inquiry.


This includes, in particular, the contact details requested in the form and the content of your message.


Information is mandatory only to the extent necessary to handle your inquiry.


The legal basis is Article 6(1)(b) GDPR for contract-related inquiries and Article 6(1)(f) GDPR for other inquiries.


Where separate consent is obtained, the relevant processing is based on Article 6(1)(a) GDPR.


We retain the data for as long as necessary to handle your inquiry, subject to applicable statutory retention periods.


10. Online Appointment Scheduling


If our website allows you to schedule a consultation online, the following applies:


When you book an appointment, we may process your name, email address, phone number where applicable, preferred appointment date and time, and any information you voluntarily provide about the purpose of the consultation.


This data is processed to organize and conduct the requested consultation.


The legal basis is generally Article 6(1)(b) GDPR, insofar as scheduling the appointment serves to take steps prior to entering into a contract or to perform an existing contractual relationship.


For other appointments, Article 6(1)(f) GDPR may apply.


If an external service provider is used for online appointment scheduling, the data required for the booking may be transferred to that provider.


Further information about processing by the specific booking service provider must be added before publication to reflect how that provider is actually integrated.


11. Establishing and Handling Client Engagements


If you use our legal or tax services or submit a related inquiry, we process personal data to the extent necessary to assess, establish, perform, and conclude the client engagement.


This may include, in particular, identification and contact details, contract data, the content of communications, financial information, and documents relating to the engagement.


Processing is based in particular on Article 6(1)(b) GDPR.


Where legal obligations apply, particularly under tax law, professional regulations, or anti-money laundering legislation, processing is based on Article 6(1)(c) GDPR.


Special categories of personal data are processed only where an appropriate legal basis exists, for example under Article 9(2) GDPR.


Statutory duties of confidentiality and professional requirements are observed.


12. Job Applications and Careers


If you apply for a position with us, we process the personal data you provide to conduct the recruitment process.


This includes, in particular, your name, contact details, résumé, evidence of qualifications, certificates, and other application documents.


The legal basis is Article 6(1)(b) GDPR in conjunction with § 26 BDSG, where its requirements are met.


Where application data is retained to defend against potential legal claims, processing may be based on Article 6(1)(f) GDPR.


If no employment relationship is established, application documents are generally deleted once they are no longer required for the recruitment process or to defend against potential legal claims.


Any further retention for future vacancies requires an appropriate legal basis, in particular your consent.


13. Recipients of Personal Data


Personal data is disclosed only where there is a legal basis for doing so.


Recipients may include, in particular, technical service providers, hosting providers, IT service providers, appointment scheduling providers, and other service providers necessary to deliver our services.


Where external service providers process personal data on our behalf, data processing agreements pursuant to Article 28 GDPR are entered into where required.


Data is disclosed to authorities or other public bodies where required by law.


14. Data Transfers to Third Countries


The use of certain technical services may involve processing personal data outside the European Union or the European Economic Area.


Where such a transfer takes place, it is carried out only in compliance with the requirements of Articles 44 et seq. GDPR.


These may include, in particular, adequacy decisions adopted by the European Commission or appropriate safeguards, such as EU Standard Contractual Clauses.


15. Retention Periods


We generally retain personal data only for as long as necessary for the relevant processing purposes.


Data may be retained for longer where statutory retention periods or other legal obligations apply.


Once the relevant processing purpose no longer applies or the statutory retention periods have expired, personal data will be deleted unless another legal basis exists for its processing.


16. Your Rights as a Data Subject


Subject to applicable law, you have the following rights in particular:

  • Right of access pursuant to Article 15 GDPR.
  • Right to rectification pursuant to Article 16 GDPR.
  • Right to erasure pursuant to Article 17 GDPR.
  • Right to restriction of processing pursuant to Article 18 GDPR.
  • Right to data portability pursuant to Article 20 GDPR.
  • Right to object pursuant to Article 21 GDPR.
  • Right to withdraw consent pursuant to Article 7(3) GDPR.


To exercise your rights, you may contact us at any time at info@berg-legal.com.


17. Withdrawal of Consent


Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.


Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.


18. Right to Object


Where personal data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right under Article 21 GDPR to object to the processing at any time on grounds relating to your particular situation.


Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your data for such marketing.


19. Right to Lodge a Complaint with a Supervisory Authority


If you believe that the processing of your personal data violates data protection law, you have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority.


In particular, you may lodge a complaint with the supervisory authority in the place of your habitual residence, place of work, or the place of the alleged infringement.


20. No Decisions Based Solely on Automated Processing


No decisions based solely on automated processing, including profiling within the meaning of Article 22 GDPR, are made in connection with the contact, job application, and appointment scheduling options available through this website.


21. Updates to This Privacy Policy


We reserve the right to amend this Privacy Policy where necessary due to legal, technical, or organizational changes.


The version currently published on our website applies.


22. Web Analytics with Matomo


We may use Matomo web analytics software to statistically analyze the use of our website.


Matomo helps us understand how our website is used so that we can improve its usability, technical functionality, and content.


This may involve processing information about pages accessed, visit times, browsers and operating systems used, and technical usage data.


Where Matomo uses cookies or similar technologies that require consent, these are used only after the relevant consent has been obtained pursuant to § 25(1) TDDDG.


In that case, the processing of personal analytics data is based on Article 6(1)(a) GDPR.


You may withdraw your consent at any time with effect for the future.


You may also use the setting below to opt out of having your visit tracked by Matomo, provided that this function is supported by the Matomo configuration in use.


Back to previous page