Legal

Privacy

1. Controller

The controller for the processing of personal data in connection with this website is:

Rechtsanwalt Enes Durduoğlu
KURTS CONSULTED
Gottschalkstraße 39
34127 Kassel
Germany

Telephone: +49 561 82058876
Mobile/WhatsApp: +49 152 07737611
E-mail: info@kurtsconsulted.de

No data protection officer has been appointed.

2. Scope of this privacy policy

This privacy policy explains which personal data are processed when you visit this website and when you contact the firm.

Personal data are all information relating to an identified or identifiable natural person. This includes in particular names, contact details, IP addresses, communication content, documents and information about a legal matter.

Personal data are processed in particular on the basis of the General Data Protection Regulation, the German Federal Data Protection Act and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Using the website does not in itself constitute consent to data processing. Where processing requires consent, that consent is obtained separately.

3. General legal bases

We process personal data in particular on the following legal bases:

Art. 6 (1) (a) GDPR, where you have given consent;
Art. 6 (1) (b) GDPR, where processing is necessary for pre-contractual steps or for a contractual relationship;
Art. 6 (1) (c) GDPR, where processing is necessary to comply with a legal or professional obligation;
Art. 6 (1) (f) GDPR, where processing is necessary to protect our legitimate interests or those of a third party and no overriding interests of the data subject prevail.

Our legitimate interests include in particular the secure and reliable operation of the website, handling enquiries, preventing misuse, documenting business communication and establishing, exercising or defending legal claims.

4. Hosting and provision of the website

This website is hosted by the following service provider:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur, Germany

When the website is accessed, the hosting provider processes technically necessary connection data. This may include in particular:

the IP address of the requesting device,
date and time of access,
the address or file requested,
the volume of data transferred,
the referrer address,
browser type and version,
operating system,
the host name of the accessing device,
messages about successful or failed requests.

This processing is necessary in order to deliver the website, ensure the stability and security of the service, analyse technical faults and prevent abusive access.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable and technically faultless provision of the website.

Where required under data protection law, a data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

5. Encrypted data transmission

This website uses an encrypted HTTPS connection. Data transmitted between your browser and the server are therefore protected against unauthorised interception while in transit.

Transport encryption does not, however, provide complete protection against all risks of electronic communication. In particular, subsequent forwarding or storage in an e-mail system may be subject to different technical security conditions.

6. Technically necessary cookies and local storage

The website uses only technically necessary cookies or comparable storage technologies, insofar as these are required to provide basic website functions or to store your privacy choice.

Storage or access takes place on the basis of § 25 (2) no. 2 TDDDG. The subsequent processing of personal data takes place on the basis of Art. 6 (1) (c) and (f) GDPR. Our legitimate interest lies in respecting your privacy choice and being able to demonstrate compliance with statutory requirements.

If optional services that store or read information on your device are integrated in future, they will only be activated after your prior consent. In that case the legal bases are § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.

Consent given may be withdrawn at any time with effect for the future via the privacy settings available on the website.

7. Analytics, marketing and tracking services

As matters currently stand, no analytics, marketing or profiling tracking services are used on the present pages of this website.

Should such services be used in future, they will only be activated after prior consent and will be described in this privacy policy together with the provider, purpose, data categories, legal basis, storage period and any transfers to third countries.

8. Contact by e-mail and telephone

If you contact us by e-mail or telephone, we process the data you provide. This may include in particular:

name,
e-mail address,
telephone number,
time of contact,
communication content,
information about your legal matter,
names of other parties involved,
file reference,
documents submitted.

The data are processed in order to handle your enquiry, communicate with you, check our competence and capacity, and check for possible conflicts of interest.

Insofar as your enquiry is directed at establishing or performing a lawyer–client engagement, processing takes place on the basis of Art. 6 (1) (b) GDPR.

Processing may also be based on Art. 6 (1) (c) GDPR in conjunction with professional and documentation duties for lawyers, and on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the proper handling and documentation of incoming enquiries and in avoiding professional conflicts of interest.

9. Contact and appointment request form

The contact and appointment request form offered on the website may process in particular the following data:

first and last name,
telephone number,
e-mail address,
type of matter,
preferred communication channel,
preferred day and time,
free-text message,
where applicable, file reference and information about parties involved,
where applicable, uploaded documents,
technical connection and security data.

The data are processed in order to:

receive and assign your enquiry,
coordinate a call-back or appointment,
check professional competence and capacity,
identify possible conflicts of interest,
raise follow-up questions,
carry out pre-contractual steps,
prevent misuse and automated form submissions.

The legal bases are Art. 6 (1) (b), (c) and (f) GDPR.

The information marked as mandatory is required in order to process the enquiry and enable a response. Without this information the form cannot be submitted, or the enquiry may not be capable of being processed.

Merely submitting an enquiry does not create a lawyer–client engagement. Legal review, advice and deadline monitoring only begin once the engagement has been expressly accepted.

10. File and document upload

Documents and files can be transmitted to the firm via the appointment page and the digital service area.

The following may in particular be processed:

name and contact details,
file reference or subject,
message text,
file name and file type,
content of the uploaded documents,
technical connection data.

The transmission serves to prepare an appointment request, to handle an existing engagement or to submit documents previously agreed upon.

Transmission between your browser and the server is transport-encrypted via HTTPS. There is no end-to-end encryption. Forwarding to the firm takes place via ordinary e-mail transmission; the files are not permanently stored on the web server. Short-term technical processing during transmission is necessary.

Insofar as the provider processes personal data on our behalf, a data processing agreement pursuant to Art. 28 GDPR is in place.

The legal bases are Art. 6 (1) (b), (c) and (f) GDPR.

Please do not submit original documents via the website, and do not submit content whose electronic transmission involves particular risk without agreeing this with us in advance.

Uploading documents does not create a lawyer–client engagement and does not automatically result in deadline monitoring.

11. Special categories of personal data

Legal enquiries and documents submitted may contain special categories of personal data within the meaning of Art. 9 GDPR. These include, for example:

health data,
information about disabilities,
religious or philosophical beliefs,
political opinions,
information about sexual orientation,
genetic or biometric data.

Information on criminal offences, criminal allegations or convictions within the meaning of Art. 10 GDPR may also be affected.

We ask that you only submit such information insofar as it is necessary for handling the legal matter.

Where processing is necessary for the establishment, exercise or defence of legal claims, it takes place in particular on the basis of Art. 9 (2) (f) GDPR. Where necessary, processing may also be based on express consent pursuant to Art. 9 (2) (a) GDPR or on other statutory grounds.

Data on criminal convictions and offences are processed only insofar as this is permissible and necessary for the practice of law.

12. Processing within a lawyer–client engagement

If an engagement is accepted, the data required to handle it are transferred to the lawyer's case file and to the firm's systems.

Processing takes place in particular:

for legal advice and representation,
for communication with clients, opposing parties, courts, authorities and other parties involved,
to check and observe deadlines,
to invoice legal services,
to fulfil statutory and professional obligations,
to establish, exercise or defend legal claims.

The legal bases are in particular Art. 6 (1) (b) and (c) GDPR. Where necessary, processing is also based on Art. 6 (1) (f), Art. 9 (2) (f) and Art. 10 GDPR in conjunction with the applicable national provisions.

Lawyers and their staff are subject to statutory and professional duties of confidentiality.

13. Storage periods for enquiries and engagements

Personal data are stored only for as long as is necessary for the respective purpose or as long as statutory or professional retention obligations exist.

For enquiries that do not lead to an engagement, the following generally applies:

the data are regularly deleted no later than six months after the enquiry has been finally dealt with;
longer storage may take place where this is necessary to document a conflict-of-interest check, to defend against possible claims or for other legal reasons;
in such cases, storage generally lasts at most until the relevant statutory limitation periods expire.

If a lawyer–client engagement is established, the data forming part of the case file are generally retained for six years pursuant to § 50 BRAO. The period begins at the end of the calendar year in which the engagement ended.

Longer or different retention periods may apply to documents relevant under tax or commercial law. Accounting vouchers may in particular have to be retained for eight years, and certain books, records or financial statements for ten years.

Once the relevant periods have expired, the data are deleted unless there is another legal basis for storage.

14. WhatsApp

The website contains a link for making contact via WhatsApp. The provider for users in the European Economic Area is:

WhatsApp Ireland Limited
Attn: Privacy Policy
Merrion Road
Dublin 4
D04 X2K5
Ireland

Merely visiting our website does not in principle establish a connection to WhatsApp via the external link. Only when you activate the link or use WhatsApp to communicate with us does WhatsApp process personal data under its own responsibility.

This may include in particular:

telephone number,
profile name and profile picture,
communication and metadata,
device and connection information,
time and duration of communication,
content transmitted when using WhatsApp.

We process the data you transmit via WhatsApp in order to answer your enquiry and for organisational communication.

The legal basis is Art. 6 (1) (b) GDPR insofar as the communication serves pre-contractual steps or a lawyer–client engagement. Otherwise, processing takes place on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing a communication channel that many users prefer.

WhatsApp and companies of the Meta group may also process data outside the European Union or the European Economic Area. Further information can be found in WhatsApp's privacy policy.

Please use WhatsApp only for brief organisational arrangements. Do not transmit time-critical, particularly confidential or particularly sensitive information via WhatsApp. A WhatsApp message does not create a lawyer–client engagement or trigger deadline monitoring.

15. Google Maps and external route links

The website contains external links to Google Maps. Under the current design the map is not automatically embedded in the website. Merely visiting our website therefore does not in principle establish a connection to Google Maps via the route link.

Only when you click the link do you leave our website. Data may then be transmitted to Google, in particular:

IP address,
time of access,
the address requested,
referrer information,
browser and device information,
location data, where applicable,
data from a logged-in Google account, where applicable.

Google Maps is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. For certain services and users in the European Economic Area, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is also responsible.

We have no influence over the subsequent processing by Google. Google's privacy provisions apply.

The provision of the external link is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in offering you a voluntary way to plan your route to the firm.

16. Downloads and external links

The website offers documents for download as well as links to external websites.

When a file stored on our server is retrieved, the connection data described in the section "Hosting and provision of the website" are processed.

When you click an external link you leave our website. The external provider concerned may then process personal data in accordance with its own privacy provisions. The respective provider is generally responsible for the data processing of external providers.

17. Recipients of personal data

Within the firm, only those persons who need the data to perform their tasks are given access to personal data.

Data may also be transmitted to the following categories of recipients, insofar as this is necessary and permissible:

hosting, IT, e-mail and telecommunications service providers,
providers of law firm software and document management systems,
courts, authorities and other public bodies,
opposing parties and their representatives,
insurers and legal expenses insurers,
experts, translators, interpreters and other specialists involved,
tax advisers, accounting and payment service providers,
other recipients where you have consented to the transfer or where it is permitted by law.

Service providers processing personal data on our behalf are contractually bound in accordance with Art. 28 GDPR.

The lawyer's duty of confidentiality is taken into account when selecting and engaging recipients.

18. Transfers to third countries

With individual communication or external services it cannot be ruled out that personal data are processed in countries outside the European Union or the European Economic Area.

Such a transfer only takes place where the statutory requirements of Art. 44 et seq. GDPR are met. It may in particular be based on:

an adequacy decision of the European Commission,
appropriate safeguards such as standard contractual clauses,
express consent,
necessity for the performance of a contract or for the establishment, exercise or defence of legal claims,
another statutory ground for transfer.

19. Withdrawal of consent

Insofar as processing is based on your consent, you may withdraw that consent at any time with effect for the future.

The lawfulness of processing carried out up to the point of withdrawal remains unaffected.

Withdrawal can be declared via the privacy settings of the website or by sending a message to info@kurtsconsulted.de.

20. Right to object

Insofar as personal data are processed on the basis of Art. 6 (1) (f) GDPR, you have the right under Art. 21 GDPR to object to the processing on grounds relating to your particular situation.

Where personal data are processed for direct marketing, you may object at any time without giving specific reasons.

21. Rights of data subjects

Subject to the statutory requirements, you have in particular the following rights:

right of access pursuant to Art. 15 GDPR,
right to rectification pursuant to Art. 16 GDPR,
right to erasure pursuant to Art. 17 GDPR,
right to restriction of processing pursuant to Art. 18 GDPR,
right to data portability pursuant to Art. 20 GDPR,
right to object pursuant to Art. 21 GDPR,
right to withdraw consent pursuant to Art. 7 (3) GDPR.

These rights may be restricted by statutory provisions. This may apply in particular where a lawyer's duties of confidentiality, third-party rights, statutory retention obligations or the establishment, exercise or defence of legal claims stand in the way.

To exercise your rights, a message to the following address is sufficient: info@kurtsconsulted.de

22. Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority.

The authority responsible for the firm's place of business is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany

Postal address:
Postfach 3163
65021 Wiesbaden

Telephone: +49 611 1408-0
E-mail: poststelle@datenschutz.hessen.de
Website: datenschutz.hessen.de

You may also contact another supervisory authority competent under Art. 77 GDPR.

23. No automated decision-making

Solely automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place in connection with this website.

In particular, enquiries are not assessed legally, accepted or rejected on an automated basis.

24. Data security

We take appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access and other unlawful processing.

These measures are reviewed and adapted regularly, taking into account the state of the art, the nature and scope of processing and the risks involved.

Despite appropriate security measures, complete protection cannot be guaranteed for data transmissions over the internet. For particularly confidential or sensitive content, suitable secure channels should be agreed in advance.

25. Updates to this privacy policy

This privacy policy will be amended if the website, the services used, the actual processing operations or the legal situation change.

The version published on this website at the relevant time applies.

Last updated: 27 July 2026