Privacy policy

§ 1 Information on the collection of personal data

Below, we provide information about the processing of personal data when you use our website. Personal data is any data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. In doing so, we wish to inform you about our processing operations and, at the same time, comply with our statutory obligations, in particular under the EU General Data Protection Regulation (GDPR). With regard to the other terms used below, such as “controller” or “processor”, we refer to the definitions in Art. 4 GDPR.

§ 2 Controller

The controller pursuant to Art. 4(7) GDPR is:

Dr. Roth & Kollegen Rechtsanwälte Partnerschaft mbB
Gewürzmühlstraße 5, 80538 Munich
E-mail: info@copyroth.de
Telephone: +49 (0)89 55 26 26 0
Fax: +49 (0)89 55 26 26 55

§ 3 Type of data processed

(1) When you use our website, we process the personal data that your browser transmits to our server. This comprises the following data:

• IP address of the requesting computer,
• date and time of the request,
• time zone difference from Greenwich Mean Time (GMT),
• name and URL of the file retrieved,
• content of the request (page visited),
• access status/HTTP status code,
• amount of data transferred in each case,
• website from which access is made (referrer URL),
• previously visited page,
• browser,
• operating system,
• language and version of the browser software.

(2) When you contact us by e-mail, we process the data you provide (your e-mail address and, where applicable, your name and telephone number).

§ 4 Purposes of processing

(1) Unless otherwise stated, we process your personal data under § 3(1) to ensure a smooth connection to the website, to ensure convenient use of our website, to evaluate system security and stability and for other administrative purposes. The legal basis is Art. 6(1)(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

(2) Unless otherwise stated, we process your personal data under § 3(2) in order to handle and respond to your enquiry; where a client relationship exists, the legal basis is Art. 6(1)(1)(b) GDPR. Where no client relationship exists, the legal basis is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(1)(f) GDPR.

§ 5 Disclosure to third parties, categories of recipients of data

We disclose your data to third parties pursuant to Art. 6(1)(1)(f) GDPR where this is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed.

In addition, we use external technical service providers as processors pursuant to Art. 28 GDPR, who are carefully selected and monitored by us.

Beyond this, we disclose your data to third parties only if you have given your express consent to this pursuant to Art. 6(1)(1)(a) GDPR.

§ 6 Rights of data subjects

In principle, you have the right:

• pursuant to Art. 7(3) GDPR, to withdraw consent once given to us at any time. As a result, we may no longer continue the data processing based on your consent in the future. Withdrawal does not affect the lawfulness of processing carried out prior to it;
• pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about (1) the purposes of processing, (2) the category of personal data, (3) the categories of recipients to whom your data has been or will be disclosed, (4) the planned storage period, (5) the existence of a right to rectification, erasure, restriction of or objection to processing, (6) the existence of a right to lodge a complaint, (7) the source of your data, if it was not collected from you, and (8) the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details;
• pursuant to Art. 16 GDPR, to request the rectification of inaccurate personal data stored by us or the completion of such data;
• pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• pursuant to Art. 18 GDPR, to request the restriction of processing of your personal data where (1) you contest the accuracy of the data, (2) the processing is unlawful but you oppose its erasure, or (3) we no longer need the data but you require it for the establishment, exercise or defence of legal claims;
• pursuant to Art. 21 GDPR, to object to processing (see below);
• pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller; and
• pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual place of residence or place of work or of our firm's registered office for this purpose.

§ 7 Duration of storage of personal data and criteria for the storage period

We erase personal data once and to the extent that storage is no longer necessary for handling or performing the mandate and no legitimate interests or legal obligations on our part, such as the obligation to carry out a conflict of interest check under § 43a(4) BRAO, or statutory retention obligations (e.g. § 147 AO, § 257 HGB, § 14b UStG) preclude erasure. Accordingly, erasure generally takes place 5 to 10 years after the end of the client relationship, or after 30 years in the case of claims established by an enforceable title.

§ 8 Cookies, fonts and external services

(1) Our website itself does not set any cookies and does not use any analytics or tracking services.

(2) The fonts used on our website are stored on our own server and are loaded from there. No connection is established to third-party servers, such as those of Google.

(3) The deadline calculator and the severance calculator on our pages work exclusively in your browser. Your entries are neither transmitted to us nor to third parties and are not stored.

(4) For online enquiries we use the “Online-Mandat” form of our software supplier RA-MICRO. Program code from RA-MICRO is only loaded when you click “Online enquiry” in the contact section; the form itself then opens on a page operated by RA-MICRO. Your IP address and the usual technical connection data are transmitted to RA-MICRO in the process. The details you enter in the form and any uploaded files are transmitted to RA-MICRO and from there transferred into our practice management software. RA-MICRO processes these data solely on our behalf and on our instructions; a data processing agreement pursuant to Art. 28 GDPR is in place. The legal basis is Art. 6(1)(b) GDPR (initiation of a mandate) and otherwise our legitimate interest in secure online communication (Art. 6(1)(f) GDPR). Where the form stores information on your device that is technically necessary for its operation, this is based on § 25(2) no. 2 TDDDG. If you prefer not to use the form, you can reach us at any time by e-mail or telephone.

This privacy policy is current as of October 2026. We reserve the right to update this policy in due course in order to improve and/or adapt data protection.