Privacy Policy

Controller, contact

The controller within the meaning of Article 4 no. 7 of the General Data Protection Regulation (GDPR) for the data processing operations described in this privacy policy is

Dr. Amir Heydarinami
Rechtsanwalt
Marienstraße 24, 10117 Berlin, Germany
Email: berlin@nami.legal
Telephone: +49 30 629249-56

Data processing when visiting this website

To ensure a reliable and secure connection, information is temporarily collected when you visit this website for informational purposes, such as details about the browser and operating system you are using. This log data is automatically transmitted and stored temporarily and anonymously on the firm’s web server as log records (“server log files”). This data includes:

• The IP address of the device used to access this website;
• The URL of the website from which this website was accessed (referrer URL);
• The date, time, and duration of the visit;
• Time zone difference from Greenwich Mean Time (GMT);
• A message indicating whether the request was successful (access status/HTTP status code);
• The amount of data transferred;
• The device (PC, mobile phone), the operating system, and details about the web browser used;
• Language and version of the browser software.

The aforementioned log data is stored without the full IP address. The data is not merged with data from other sources and is deleted after two weeks at the latest. The legal basis for accessing this information is Section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). The legal basis for the subsequent processing is the firm’s legitimate interest in the reliable and secure provision of the website within the meaning of Article 6(1)(f) GDPR.

Inquiries via email

When the firm is contacted via email, the personal data transmitted with the email will be stored. This data will be processed solely for the purpose of responding to the inquiry. The legal basis for processing is the firm’s legitimate interest in responding to the inquiry pursuant to Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR, if the inquiry is aimed at concluding a contract or is linked to an existing contractual relationship. The data will be deleted once the purpose of the processing no longer applies, e.g. once the inquiry has been conclusively answered. If the inquiry leads to a client-attorney relationship, the data will be deleted no later than upon expiration of the statutory retention periods.

Data processing in the context of the client relationship

In connection with the initiation and performance of the client relationship, the following information is processed in particular: name or company name/designation, address, VAT identification number, contact person details (name, address, contact information, in particular phone number, email address), as well as information necessary for the performance of the client relationship.

The legal basis for the processing is Art. 6(1)(b) GDPR. Upon termination of the client relationship, your personal data will be blocked for any further use. Your personal data and client files will be deleted and/or destroyed upon expiration of the statutory retention period (six years after the end of the calendar year in which the client relationship ended), unless retention for a longer period is required by law (in particular tax law). In this case, your personal data and client files will be deleted no later than 10 years after the termination of the client relationship. The legal basis for such retention is the fulfillment of a legal obligation pursuant to Art. 6(1)(c) GDPR.

Duration of storage of personal data

Unless a shorter retention period is specified in this privacy notice, personal data is generally stored only for as long as necessary for the respective processing purpose; thereafter, the data is stored only if and to the extent required by a statutory retention obligation.

Recipients

For the hosting of the website and IT systems (in particular email and client management software), the firm engages service providers that process personal data on behalf of the firm and exclusively in accordance with its instructions (Art. 28(3) GDPR). Service providers that process client-related data on behalf of the firm are also bound by a duty of confidentiality.

In the course of handling client matters, it may be necessary to disclose personal data to third parties, in particular opposing parties and their representatives, corresponding counsel and sub-agents, courts and authorities, insurance companies, and research service providers.

In individual cases, personal data may also be transferred to recipients in a third country outside the European Union or the EEA. To the extent that no adequacy decision pursuant to Art. 45 GDPR exists for the respective third country, data is transferred only on the basis of appropriate safeguards (in particular standard contractual clauses, Art. 46(2) GDPR) or pursuant to an exception under Art. 49 GDPR.

Your rights as a data subject

Data subjects affected by the processing of personal data have the following rights:

• Right to access the personal data processed by the firm, the purposes of processing, categories of recipients, the duration of storage or the criteria for determining the storage period, the origin of the data, your rights as a data subject, the existence of automated decision-making including profiling, and the appropriate safeguards when transferring data to a third country, as well as the right to receive a copy of your personal data;
• Right to rectification of inaccurate or incomplete personal data;
• Right to erasure of personal data if the purpose of the processing no longer applies, consent is withdrawn, or there is no other legal basis, or the data has been processed unlawfully, or you have objected to the processing;
• Right to restriction of processing;
• Right to data portability if the data processing is based on consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) or on a contract pursuant to Art. 6(1)(b) GDPR;
• Right to object to processing if the processing is based on legitimate interests pursuant to Art. 6(1)(f) GDPR.

If you have consented to the processing of personal data, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.

You also have the right to lodge a complaint with a supervisory authority if you believe that the firm’s processing of your personal data is unlawful.