Privacy Policy
This privacy policy informs you about the processing of personal data within our online offering kressin-law.de. Terms such as "processing" or "controller" are used within the meaning of Article 4 GDPR. This is a courtesy translation. In the event of any discrepancy, the German version shall prevail.
1. Controller
Dr. Roger Kressin, Attorney at Law, Grillparzerstraße 45, 60320 Frankfurt am Main.
E-mail: roger@kressin-law.de Telephone: +49 (0)69 95 96 45 14.
Legal Notice https://kressin-law.de/impressum
2. Competent supervisory authority
The Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden.
3. Data processed, purposes and legal bases
We process master and contact data (name, address, email, phone) in order to respond to enquiries and to initiate a mandate, content data (entries in the contact form), as well as usage and meta/communication data (IP address, access times, device/browser information) for the secure provision of the website. The legal bases are Article 6(1)(b) GDPR ((pre-)contractual communication), (f) GDPR (secure operation), (a) GDPR (consent) and (c) GDPR (legal obligations).
4. Hosting (Amazon Web Services)
Our website is hosted by Amazon Web Services. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Processing takes place in the Frankfurt region (eu-central-1), Germany. A data processing agreement pursuant to Article 28 GDPR is in place with the provider. The legal basis is Article 6(1)(f) GDPR.
Server log files: Access data (including IP address, date/time, file accessed, referrer, browser/operating system) is stored with every access. This data is stored for security reasons for a maximum of 7 days, after which it is deleted; exceptions apply in the case of incidents until the matter is resolved.
5. Cookies and consent
We use technically necessary cookies. For non-essential cookies and the integration of external content, we obtain your consent pursuant to Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR via a consent management tool (Complianz). You can withdraw your consent at any time with effect for the future. Details of the cookies and services used can be found in our Cookie Policy.
6. Contact form and email
If you contact us via the form or by email, we process your details in order to handle the enquiry (Article 6(1)(b) or (f) GDPR). For the technical dispatch of the emails triggered via the contact form, we use the service Brevo as a processor pursuant to Article 28 GDPR (operator: [insert the Brevo/Sendinblue entity and address named in the data processing agreement]). The data is deleted as soon as it is no longer required; statutory retention obligations remain unaffected.
7. Integrated services and content
Google Fonts (local): The fonts used are provided locally on our server (self-hosted). No connection is established to Google servers and no transmission of your IP address to Google takes place.
Map display: On our contact page we show a static map image (source: OpenStreetMap) stored locally on our server. No data is transmitted to an external map service. Only when you click the embedded link does the external map service (Google Maps) open in a new window – this happens through your own action; the privacy policy of the respective provider then applies.
Social media links: References to our profiles are provided as simple links; no social plugins with automatic data transfer are embedded.
8. Data transfer to third countries
Insofar as data is transferred to services with a US connection, this is based on the adequacy decision of the EU Commission under the EU-U.S. Data Privacy Framework (decision of 10 July 2023), provided the recipient is certified, otherwise on standard contractual clauses pursuant to Article 46 GDPR.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability, as well as the right to lodge a complaint with the supervisory authority. You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR; and to processing for direct marketing purposes at any time without giving reasons (Article 21 GDPR).
10. Status
This privacy policy will be updated as soon as changes to data processing require it. Status: 22 July 2026