1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (“GDPR”) is:
SLB Rechtsanwaltsgesellschaft mbH
Leopoldstr. 175
80804 Munich
Germany
Represented by its Managing Directors:
Dr. Christian Straßberger, Rechtsanwalt
Dr. Oliver Baumann, Rechtsanwalt
Dr. Louis Rönsberg, Rechtsanwalt
Sandra Bendler-Pepy, Rechtsanwältin
Telephone: +49 89 512427 0
Fax: +49 89 512427 25
Email: info@slb-law.de
2. Data Protection Contact
For questions concerning data protection or the exercise of your rights under the GDPR, you may contact us using the contact details above.
Our data protection contact can be reached at:
SLB Rechtsanwaltsgesellschaft mbH
Attn. Dr. Louis Rönsberg
Leopoldstr. 175
80804 Munich
Germany
Email: info@slb-law.de
3. General Information on the Processing of Personal Data
We process personal data only to the extent necessary to provide this website, communicate with users, process enquiries and provide our legal services.
The legal basis for processing depends on the particular purpose.
Where processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR.
Where processing is necessary for compliance with a legal obligation, the legal basis is Article 6(1)(c) GDPR.
Where processing is necessary for the purposes of our legitimate interests or those of a third party and such interests are not overridden by your interests or fundamental rights and freedoms, the legal basis is Article 6(1)(f) GDPR.
Where we request your consent, processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
4. Accessing Our Website and Server Log Files
When you access this website, certain information is automatically transmitted by your browser to the server hosting our website.
This information may include:
- your IP address,
- date and time of access,
- the requested page or file,
- referrer URL,
- browser type and browser version,
- operating system, and
- information concerning your internet service provider.
The processing of these data is necessary to ensure the technical operation, security and stability of our website.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient operation of our website and the prevention and investigation of misuse and technical attacks.
Server log files are deleted when they are no longer required for these purposes, unless longer storage is necessary for security reasons or to comply with legal obligations.
5. Contacting Us
You may contact us by email, telephone or through a contact form provided on this website.
When you contact us, we process the personal data you provide, such as your name, contact details, the content of your enquiry and any documents you submit.
The purpose of the processing is to respond to your enquiry, assess whether we can accept a mandate and, where applicable, prepare or perform a lawyer-client relationship.
Depending on the circumstances, processing is based on Article 6(1)(b) GDPR, where it is necessary in connection with steps taken at your request before entering into a contract or for the performance of a mandate, and/or Article 6(1)(f) GDPR, based on our legitimate interest in processing and responding to enquiries.
Where we are legally required to retain information, processing may additionally be based on Article 6(1)(c) GDPR.
Please note that sending an enquiry does not in itself establish a lawyer-client relationship.
Confidential Information
As a law firm, we treat information provided to us confidentially in accordance with the applicable professional rules.
Nevertheless, please do not send highly sensitive or confidential information through unsecured communication channels unless necessary. If appropriate, we can arrange a suitable method for the secure transmission of documents.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies are small data files stored on or accessed from your device when you visit a website.
Technically Necessary Cookies
Cookies and similar technologies that are strictly necessary for the operation of the website may be used without your consent where the statutory requirements are met.
The processing of personal data associated with such technologies is based, where applicable, on Article 6(1)(f) GDPR. Our legitimate interest is the technically reliable and secure provision of our website.
Optional Cookies and Services
We use non-essential cookies and comparable technologies for analytics, marketing or other optional functions only where you have given your prior consent.
The storage of information on your device or access to information already stored on your device is then based on your consent in accordance with Section 25(1) of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).
Where personal data are processed in connection with such technologies, the legal basis is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through the cookie/privacy settings provided on this website.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
7. Consent Management
Where we use a consent management platform, your selection regarding optional cookies and services is stored in order to comply with your privacy preferences and to document consent where legally required.
This may involve processing information such as:
- your consent status,
- date and time of your selection,
- consent identifier, and
- technical information necessary to assign your preferences to your browser or device.
The legal basis for processing necessary to comply with our statutory obligations is Article 6(1)(c) GDPR. Where applicable, additional processing may be based on Article 6(1)(f) GDPR.
You can change or withdraw your choices at any time through the privacy or cookie settings available on this website.
8. Recipients of Personal Data
We disclose personal data only where this is necessary and legally permissible.
Recipients may include, in particular:
- IT and hosting service providers,
- providers supporting the operation and maintenance of our website,
- communications and email service providers,
- analytics or marketing providers where you have consented to their use,
- professional advisers and other service providers involved in the handling of a mandate, where necessary,
- courts, public authorities and other bodies where disclosure is required or permitted by law.
Where service providers process personal data on our behalf, appropriate data processing agreements are concluded where required by Article 28 GDPR.
9. International Data Transfers
Some service providers may process personal data in countries outside the European Union or the European Economic Area.
Where personal data are transferred to a third country, we ensure that the requirements of Chapter V of the GDPR are met.
A transfer may in particular be based on an adequacy decision of the European Commission pursuant to Article 45 GDPR or appropriate safeguards pursuant to Article 46 GDPR, such as the European Commission’s Standard Contractual Clauses.
Where applicable, further information about the relevant transfer mechanism is provided in the section concerning the respective service provider.
10. Storage Period
We store personal data only for as long as necessary for the respective processing purpose.
Where statutory retention obligations apply, data may be retained for the duration of those obligations.
Data relating to enquiries or mandates may also be retained where necessary to comply with professional obligations or for the establishment, exercise or defence of legal claims.
Where processing is based on consent, data are processed until the consent is withdrawn or the purpose of processing ceases to apply, unless continued storage is permitted or required by law.
11. Your Rights under the GDPR
Subject to the statutory requirements, you have the following rights in relation to your personal data:
- Right of access pursuant to Article 15 GDPR;
- Right to rectification pursuant to Article 16 GDPR;
- Right to erasure pursuant to Article 17 GDPR;
- Right to restriction of processing pursuant to Article 18 GDPR;
- Right to data portability pursuant to Article 20 GDPR;
- Right to object pursuant to Article 21 GDPR; and
- Right to withdraw consent pursuant to Article 7(3) GDPR.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
12. Right to Object
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation in accordance with Article 21 GDPR.
Where personal data are processed for direct marketing purposes, you have the right to object to such processing at any time.
You may exercise your rights by contacting:
13. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority pursuant to Article 77 GDPR.
You may in particular contact the supervisory authority responsible for your habitual residence, place of work or the place of the alleged infringement.
You may also contact the data protection supervisory authority competent for our registered office in Bavaria.
14. Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Our security measures are reviewed and adapted as appropriate in light of technological developments and the risks associated with processing.
15. Automated Decision-Making
We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR in connection with the operation of this website, unless expressly stated otherwise.
16. Changes to this Privacy Policy
We may update this Privacy Policy where changes to our website, the services used on it or applicable legal requirements make this necessary.
Last updated: September 2026