Privacy Policy

Controller: Hucke & Sanker Partnerschaft

Address: Zusestraße 40, 50858 Cologne, Germany

Phone: +49 221 650 88 272

Email: privacy@huckesanker.com

At Hucke & Sanker, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or interact with our services.

As a law firm, we are bound by professional confidentiality obligations and data protection laws including the GDPR (EU General Data Protection Regulation) and other applicable privacy regulations.

Data Minimization

We only collect personal data that is necessary for specific, explicit, and legitimate purposes. We avoid collecting unnecessary information.

Purpose Limitation

Your data is only processed for the purposes we have disclosed to you. We will not use your data for unrelated purposes without your consent.

Storage Limitation

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law and professional regulations.

Accuracy

We take reasonable steps to ensure your personal data is accurate and up-to-date.

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Server Logs

Our web server automatically collects basic technical information for security and operational purposes:

• IP address (anonymized after 7 days)
• Timestamp and duration of visit
• Pages accessed and files downloaded
• Browser type and version
• Referring website

This data is processed on a legitimate interest basis for website security, availability, and optimization.

Cookies

Our website uses essential cookies only for technical functionality. We do not use tracking cookies or third-party analytics without your explicit consent.

When you contact us via email, contact form, or phone, we collect:

• Your name and contact information
• The content of your inquiry or message
• Communication history
• Any documents you provide

This data is processed based on your consent and our legitimate interest in responding to your inquiry. If you become a client, this data becomes part of your client file and is subject to attorney-client privilege.

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Performance of a Contract: When we have an engagement agreement with you
• Legal Obligation: When required by law, court order, or professional regulations
• Legitimate Interest: When we have a legitimate interest that is not overridden by your privacy rights

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share your data only in the following circumstances:

• Service Providers: With trusted IT service providers who assist in operating our website and services (subject to data processing agreements)
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Professional Obligations: When necessary to provide legal services or protect your interests

As a transnational law firm, we may transfer your data outside the European Economic Area (EEA). Such transfers are protected by:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Appropriate technical and organizational security measures

Under the GDPR and applicable privacy laws, you have the right to:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal and professional obligations)
• Portability: Request transfer of your data to another controller
• Objection: Object to processing of your data
• Restriction: Request restriction of processing
• Complaint: Lodge a complaint with a supervisory authority

To exercise these rights, please contact us at privacy@huckesanker.com.

We retain personal data according to the following periods:

• Website logs: 7 days (IP addresses anonymized after this period)
• Contact inquiries: 6 months from last contact, unless retained as potential client
• Client files: 10 years after engagement completion, as required by professional regulations
• Accounting records: 10 years as required by tax law

We implement appropriate technical and organizational security measures including:

• SSL/TLS encryption for data transmission
• Secure authentication and access controls
• Regular security audits and updates
• Employee training on data protection
• Secure data storage and backup systems

Our website is not directed to children under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website with a new effective date.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Email: privacy@huckesanker.com
Phone: +49 221 650 88 272
Address: Zusestraße 40, 50858 Cologne, Germany

You also have the right to lodge a complaint with the relevant supervisory authority:

Rechtsanwaltskammer Köln
Christophstraße 2
50670 Köln, Germany