Privacy Policy

Privacy Policy of Weitnauer Attorneys


The protection of your data is a top priority for our team at Weitnauer Attorneys. We therefore exclusively process your personal data in compliance with the terms of this Privacy Policy as well as the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).


1. Name and contact details of Controller and Company Data Protection Officer


This privacy information pertains to data processing by all office locations of our law firm by:


Weitnauer Rechtsanwälte Partnerschaftsgesellschaft
mit beschränkter Berufshaftung (mbB),
Ohmstrasse 22, 80802 Munich, Germany
Phone number: +49 (0)89 - 383995-0
Fax number: +49 (0)89 - 383995-99


The Company Data Protection Officer of Weitnauer Attorneys can be contacted at the above address, attn. Ms. Marion Barowski, or at


2. Collection, storage and deletion of personal data as well as type and purpose and data use


If you retain us to provide legal services or are acting on behalf of a company or another organization that retains us to provide legal services, or if we contact you based on a client relationship, we will collect the following information:


  • Title, first name, last name
  • Valid email address
  • Postal address
  • Phone number (landline and/or mobile phone)
  • If applicable, position in the company / organization, signatory powers, power of attorney
  • If applicable, information required for establishing and defending your rights within the scope of your case.


This data is collected in order to:


  • identify you as our client or as a natural person acting on behalf of a client or as our contact person on the opposite side;
  • appropriately advise and legally represent you as our client;
  • correspond with you;
  • invoice you;
  • process any applicable liability claims and assert any claims against you.


Data is processed in response to your request and processing is required pursuant to Art. 6 (1), sentence 1, lit. b, GDPR for the above-listed purposes to ensure adequate client service and for the mutual fulfillment of obligations arising from the client contract.


We will also process your data if and to the extent necessary to comply with our legal obligations, such as duties arising from legislation on tracing profits from serious criminal offenses (German Anti-Money Laundering Act). The legal basis for this processing of personal data is Art. 6 (1), sentence 1, lit. c, GDPR.


If, in the course of a client-lawyer relationship, it should become necessary to defend ourselves against liability claims, or if we need to follow up with one of our clients with regard to any outstanding invoices, the associated necessary processing of personal data is based on our legitimate interest in the adequate defense of our legal position pursuant to Art. 6 (1), sentence 1, lit. f, GDPR.


The personal data we collect in the context of client-lawyer relationships will be stored until the end of the legally mandated retention period for attorneys (6 years after the end of the calendar year, in which the client relationship ended) and will then be deleted, unless we are obligated to comply with longer storage requirements due to retention and documentation duties based on tax and trade law (from the German Commercial Code (HGB), German Value Added Tax Code (UStG) or German Revenue Code (AO)) pursuant to Art. 6 (1), sentence 1, lit. c, GDPR, if further processing is required due to ongoing legal disputes, or if you have consented to further storage pursuant to Art. 6 (1), sentence 1, lit. a, GDPR.


3. Visiting our website


When you access our website, the browser deployed on your terminal device will automatically send information to our website server. This information is temporarily saved in a so-called log file. In this process, the following information will be collected without any action on your part and stored until its automated deletion, usually after one week:


  • IP address of the computer sending the request,
  • Date and time of website access,
  • Name and URL of the retrieved file,
  • Website from which our site was accessed (referral URL),
  • Browser used and, if applicable, your computer’s operating system as well as the name of your access provider.


The above-listed data will be processed by us for the following purposes:


  • Ensuring a smooth connection setup to the website,
  • Ensuring easy use of our website,
  • Evaluation of system security and stability,
  • Clarification of any improper page access (DoS/DDoS attacks, etc.), as well as
  • Further administrative purposes.


The legal basis for the processing of personal data is Art. 6 (1), sentence 1, lit. f, GDPR. Our legitimate interest is derived from the above-listed purposes for data collection. We generally do not use collected data for the purpose of drawing conclusions about your person. However, we reserve the right to do so if required to investigate improper page access.


We may offer links to third-party services on our website. However, we are not responsible for the processing of your data by these services.


4. Making contact


If you have questions of any kind, we offer you the option to contact us by telephone or via email. If you make personal data available to us via these routes or through our website (e.g. via a contact form), we will only save and use this data on the basis of Art. 6 (1), sentence 1, lit. a, GDPR, to process your inquiries or on the basis of Art. 6 (1), sentence 1, lit. b, GDPR if the subject of your inquiry relates to (pre-) contractual information. You may revoke your consent to the processing of the provided data at any time by sending an email to In this case, we will delete your data, unless we have a legal retention obligation (for example, if you send us a pre-contractual message via the contact form which then becomes the basis of a contractual relationship or if your message refers to existing contractual relationships).


5. Newsletter


If you provide us with your email address to subscribe to our newsletter, we will use this email address based on your consent according to Art. 6 (1), sentence 1, lit. a, GDPR, for the purpose of sending you the newsletter. You may object to this use of your email address at any time by sending an email to In this case, we will stop sending you the newsletter and will delete your email address, unless we have a legal retention obligation.


6. Data disclosure to third parties


Your personal data will not be disclosed to third parties except for the purposes listed below.


Your personal data will be disclosed to third parties to the extent required for processing the client-lawyer relationship with you pursuant to Art. 6 (1), sentence 1, lit. b, GDPR. This includes, in particular, disclosure to opponents and their representatives (especially their attorneys) as well as courts and other government authorities for the purpose of correspondence as well as to establish and defend your rights.


As far as required for fulfilling a client agreement or to establish, exercise or defend legal claims, we will also transmit personal data to countries outside of the European Union or other signatory state of the European Economic Area (third country), or to an international organization. This may particularly be the case in matters with a substantive reference to a third country or an international organization (e.g. negotiations with a party established in a third country). Such data transmissions will occur on the basis of Art. 49 (1), sentence 1, lit. b or lit. e, GDPR, unless there are other guarantees for maintaining an adequate data protection level (for example, an adequacy decision of the EU Commission).


In addition, we maintain contracts with IT service providers as well as infrastructure and platform service providers to process your data. This data processing occurs within the European Union. Our legitimate interest is to guarantee reliable and safe data processing for the performance of our activities and the management of our law firm with the support of professional service providers.


The attorney-client privilege will not be affected. To the extent data are subject to the attorney-client privilege, transmission to third parties will only be made to carefully selected service providers who have entered into a non-disclosure agreement and confidentiality obligation with us pursuant to Sec. 43e, Federal Lawyers’ Act (BRAO) and have received instructions about the criminal nature of breaching attorney-client privilege.


7. Rights of data subjects


You have the following rights:


  • To obtain information from us about the personal data we process according to Art. 15 GDPR. In particular, you may request information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing or to object, the right to lodge a complaint, the source of your data if they were not collected by us, as well as the existence of automated decision-making, including profiling, as well as meaningful information about the associated details;


  • To request without delay the rectification of incorrect or incomplete personal data stored by us according to Art. 16 GDPR;


  • To request, according to Art. 17 GDPR, the erasure of personal data stored with us, unless the processing is necessary for exercising the right of freedom of expression and information, full compliance with legal obligations, for reasons of public interest, or for the establishment, exercise or defense of legal claims;


  • To request restriction of processing your personal data according to Art. 18 GDPR, if you contest the accuracy of the data, if the processing is unlawful but you oppose the erasure of the data, and if we no longer need the personal data but you require them for the establishment, exercise or defense of legal claims, or if you exercised your right to object to processing according to Art. 21 GDPR;


  • To request your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to demand the transmission to another controller according to Art. 20 GDPR; and


  • To lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. You can generally contact the supervisory authority at your usual place of residence or workplace or at our seat for this purpose.


8. Right to object


To the extent your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1), sentence 1, lit. f, GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21, GDPR on grounds relating to your particular situation.To exercise this right to object, it is sufficient to send an email to


You can view our privacy policy here.


Diese Webseite verwendet Cookies. Weitere Informationen, auch wie Sie die Nutzung von Cookies verhindern können, finden Sie hier.

This website uses cookies. Please find more information about cookies and how to disable them here.