Privacy Policy
Privacy Policy
Legal Garage takes the protection of personal data seriously. This Privacy Policy explains how personal data is collected and processed when this website is visited, when contact is made through this website, or when legal services are requested or discussed. Privacy notices should clearly explain the controller, the categories of data processed, the purposes, legal bases, retention, recipients, and the rights of data subjects.
1. Controller
The controller for the processing of personal data on this website is:
Legal Garage
Dr. Anja Raden
Untere Grasstraße 13a
81541 Munich
Germany
E-mail: raden@legal-garage.com
Telephone: 089 41115548
2. Data collected when visiting this website
When this website is accessed, certain information is automatically processed by the web server. This may include the IP address, date and time of access, browser type and version, operating system, referrer URL, and the page or file requested. Server log processing is commonly described in privacy notices as necessary for website operation, stability, and security.
The processing of this data is based on Article 6(1)(f) GDPR. The legitimate interest is the secure, stable, and technically proper operation of the website.
3. Contact by email
If contact is made by email, the information provided will be processed for the purpose of handling the inquiry and responding to the request. This may include a name, contact details, message content, and any additional information voluntarily submitted. Contact-form privacy notices usually describe this type of processing as communication and request handling.
The legal basis for this processing is Article 6(1)(b) GDPR where the inquiry relates to a potential or existing client relationship, and Article 6(1)(f) GDPR for general communication.
4. Legal services and professional communication
Where personal data is processed in connection with a request for legal services, a potential instruction, or an existing professional relationship, the data will be processed only to the extent necessary to review, establish, perform, or manage that relationship. Privacy notices for legal and professional services commonly distinguish ordinary website contact from client-related communication.
Depending on the circumstances, the legal basis may be Article 6(1)(b) GDPR, Article 6(1)(c) GDPR where legal obligations apply, and Article 6(1)(f) GDPR where processing is necessary for legitimate professional or legal interests.
5. Recipients of personal data
Personal data may be shared with external service providers where this is necessary for the operation of the website or the administration of the practice. This may include hosting providers, IT service providers, and other professional support providers where required. Privacy notices typically identify such categories of recipients where they are involved in processing.
Personal data will otherwise only be disclosed where there is a legal obligation to do so, where disclosure is necessary for the performance of a contract, or where consent has been given.
6. Retention period
Personal data is stored only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law. Server log data is usually retained for a limited period for security and technical purposes. Retention clauses in privacy notices generally tie the storage period to operational necessity and statutory retention duties.
Data relating to legal services or professional communications may be retained for longer where required by legal, regulatory, tax, or professional obligations.
7. Cookies and similar technologies
This website may use technically necessary cookies to ensure that the website functions properly. If no analytics, marketing, or other consent-based tools are used, technically necessary cookies may be processed on the basis of legitimate interests in the proper operation of the website. GDPR guidance and templates typically distinguish between necessary cookies and consent-based tracking technologies.
If analytics tools, embedded third-party content, or other technologies requiring consent are used, this Privacy Policy should be supplemented accordingly and consent should be obtained where required.
8. Data security
Legal Garage applies appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Privacy notices commonly include a short statement on data security and reasonable protective measures.
However, complete security of data transmission over the internet cannot be guaranteed in all cases.
9. Rights of data subjects
Under the GDPR, data subjects have the right to request access to their personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, and the right to object to processing, subject to the applicable legal requirements. Standard GDPR privacy notices consistently include these rights.
Where processing is based on consent, consent may be withdrawn at any time with effect for the future.
Data subjects also have the right to lodge a complaint with a competent supervisory authority.
10. Changes to this Privacy Policy
Legal Garage reserves the right to update this Privacy Policy where necessary to reflect legal, technical, or organisational changes. The version published on this website is the current version. Update clauses of this kind are standard in website privacy notices.