Lawyer / Compliance Berlin

Commercial law firm in Mitte


1. Name and contact data of the persons responsible for data processing

This data privacy information is provided in relation to data processing by:
MÜNCH. Kanzlei für Zivil- und Wirtschaftsrecht
Schützenstrasse 18
10117 Berlin

Rechtsanwalt Dr. Joël B. Münch
Schützenstrasse 18
10117 Berlin

Tel.: +49 (0) 30 206 13 73 – 0
Fax: +49 (0) 30 206 13 73 – 29

2. Collection and storage of personal data and nature and purpose of their use

We take the protection of your personal data very seriously and treat your personal data in confidence and in compliance with statutory data protection requirements and this Privacy Policy.
When you access our website, information is automatically sent to our website’s server by the browser you are using on your end device. This information is temporarily stored in what is known as a log file.
The following information is collected without any action on your part and stored until it is automatically erased:
  •  IP address of your accessing computer; data and time of your access,
  •  name and URL of the file you are accessing,
  •  website from which you access our website (referrer URL),
  •  the browser you are using and, if applicable, your computer’s operating system, as well as the name of your access provider.

The purposes for which we process these data are
  •  to ensure that the connection to our website can be established smoothly,
  •  to ensure comfortable use of our website,
  •  to enable us to analyse system security and stability and
for other administrative purposes.
The legal basis for processing your data is Art. 6(1)(f) of the EU General Data Protection Regulation (GDPR). Our legitimate interest follows from the purposes for which we collect data as mentioned above. Under no circumstances do we use the data we have collected for the purpose of identifying you in person.

3. Transmission of data

Your personal data will not be transmitted to third parties for any purposes other than those listed below.
We only transmit your personal data to third parties if
you have given us your explicit consent for this in accordance with Art. 6(1)(a) GDPR, transmission is necessary in accordance with Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims and no grounds exist for assuming that you have an overriding interest which requires protection in your personal data not being transmitted, in the event that a legal obligation exists in accordance with Art. 6(1)(c) for the transmission of your personal data and this is legally permissible and necessary in accordance with Art. 6(1)(b) for the performance of a contract with you.

4. Rights of the data subject

You have the right
in accordance with Art. 15 GDPR to obtain information about your personal data, which we are processing. In particular, you may obtain information about the purposes of the processing, the categories of personal data concerned, the categories of recipient to whom your personal data have been or will be disclosed, the envisaged period for which your personal data will be stored, the existence of a right to rectification, erasure or restriction of processing or to object to the processing of your data, the existence of the right to lodge a complaint, the source of your personal data and the existence of any automated decisionmaking, including profiling, and, if this is the case, meaningful information about the details of this;

under Art. 16 GDPR to obtain without undue delay the rectification of inaccurate personal data concerning you or to have incomplete personal data completed;

under Art. 17 GDPR to obtain the erasure of personal data concerning you unless the processing is necessary for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

under Art. 18 GDPR to obtain the restriction of processing of personal data concerning you if you contest the accuracy of the data, the processing is unlawful but you oppose the erasure of your personal data and if we no longer need your personal data but you require them for the establishment, exercise or defence of legal claims, or if you have objected to the processing under Art. 21 GDPR;

under Art. 20 GDPR to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machinereadable format and to transmit those data to another controller;

under Art. 7(3) GDPR to withdraw the consent you have given us at any time. The consequence of this is that we will no longer be permitted to continue processing based on this consent in the future and

under Art. 77 GDPR to lodge a complaint with a supervisory authority. For this purpose, you may normally lodge such a complaint with the supervisory authority in the place of your habitual residence or place of work or of our firm’s registered office.

5. Right to object

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data if grounds exist relating to your particular situation or if you object to processing for direct marketing purposes. In the latter case, you have a general right to object, which we will implement without you needing to give details of your particular situation.
If you wish to exercise your right to withdraw consent or to object, an email to will suffice.

6. Right to lodge a complaint with the responsible supervisory authority

In the event of infringements of data protection regulations, the data subject has the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority in data protection matters is the data protection officer of the federal state in which our firm has its registered office.

Berlin Officer for Data Protection and Freedom of Information
Mr Volker Brozio (permanent representative)
Friedrichstrasse 219
Visitors’ entrance: Puttkamer Strasse 16 – 18 (5th floor)
10969 Berlin
Telephone: 030/138 89-0

7. Data security

For your visit to our website we use the widespread SSL (Secure Socket Layer) process in conjunction with the highest level of encryption supported by your browser. This is normally 256 bit encryption. If your browser does not support 256 bit encryption, we use 128 bit v3 technology instead. You can tell whether transmission of any individual page of our Internet presence is encrypted by the closed key or lock symbol in the lower status bar of your browser.
We also take appropriate technical and organisational steps to ensure the security of your data and their protection against accidental or deliberate manipulation, full or partial loss or destruction and against unauthorised access by third parties. Our security measures are constantly being improved in line with technical advances.

8. Email contact

1. Description and scope of data processing
You may contact us via our Internet site using the email address we provide there. When you do so, we store the personal data you transmit with your email.
The data are used exclusively for processing the conversation.
2. Purpose of data processing
If you contact us by email, this provides the necessary legitimate interest in processing you data.
3. Legal basis for data processing
The legal basis for processing data transmitted to us when an email is sent is Art. 6 (1)(f) GDPR. If the email contact is initiated with the aim of entering into a contract, an additional legal basis for the processing is provided by Art. 6 (1)(b) GDPR.
4. Duration of storage
The data will be erased once they are no longer necessary in relation to the purpose for which they were collected. In the case of personal data which have been sent by email, this is when the conversation with the user has ended. The conversation is ended when it can be assumed from the relevant circumstances that the matter has been conclusively dealt with.
The personal data which are additionally collected during the process of sending the email will be erased by no later than seven days after the email is sent.
5. Right to object and possibility of removal
If you contact us by email, you may object at any time to the storage by us of your personal data. In this case, the conversation cannot be continued.
If you wish to exercise your right to object, an email to will suffice.
In this case, all personal data which have been stored when you contact us will be erased.
If you wish to exercise your right to withdraw consent or to object, an email to will suffice.

9. Use of corporate presences in professional networks

1. Scope of data processing
We take advantage of the opportunity for corporate presences in professional networks. We maintain a corporate presence in the following professional networks:
LinkedIn: LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland
We provide information on our site and offer users the opportunity for communication.
We use this corporate presence for job applications, information and PR and Active Sourcing.
We have no information in relation to the processing of your personal data by the companies jointly responsible for the corporate presence. You can find more information about this in the Privacy Policy of
If you undertake an activity on our corporate presence, such as commenting, posting, likes, etc., it may be that when you do so you make personal data such as your real name or your photo public.
Data may also be transmitted to the servers of LinkedIn in the USA. Parts of the conditions of use of LinkedIn are socalled EU standard data protection clauses (Art. 46 (2)(c) GDPR). These can be classified as appropriate safeguards for the transfer and processing of personal data outside the EU.
2. Legal basis for data processing
The legal basis for the processing of your personal data in connection with the use of our corporate presence is Art. 6 (1)(f) GDPR and, additionally for the job application process, section 26 (1) sentence 1 of the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
3. Purpose of the data processing
We use our corporate presence to inform users about the services we offer. When using it, each user is free to post personal data by means of activities.
4. Duration of storage
We store your activities and personal data posted via our corporate presence until you withdraw your consent. In addition, we comply with statutory safekeeping periods.
5. Right to object and possibility of removal
You may at any time object to the processing of your personal data which we collect when you use our corporate presence and exercise your rights as a data subject. To do so, just send us an informal email to the email address given in this Privacy Policy.
For further information about ways to object and have data removed please go to

10. Hosting

The website is hosted on servers of a service provider commissioned by us.
Our service provider is
1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany
The servers automatically collect and store information in what are known as server log files, which your browser automatically sends when you visit our website. The data which are stored are
  •  your browser type and version
  •  the operating system you are using
  •  the referrer URL
  •  the host name of the accessing computer
  •  the date and time of the server request
  •  your IP address

These data are not combined with other data. These data are collected on the basis of Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in displaying the website without any technical errors and in optimising it. This is why the log files need to be recorded.
The website’s server is located geographically in Germany.

11. Updating and amending this Privacy Policy

This Privacy Policy is currently valid and was last amended in March 2022.
The continued development of our website and the services we offer as well as changes in the law or official requirements may make it necessary to amend this Privacy Policy from time to time. You can access and print out the currently valid Privacy Policy at any time on our website at

12. Use of Webfonts by Monotype GmbH

To ensure a uniform display of fonts on our Internet pages, we use external fonts from the provider ““, a fonts service by Monotype GmbH, 61352 Bad Homburg, Werner-Reimers-Strasse 2-4. Every time you access a page, your browser loads the necessary web fonts into your browser cache so that texts and fonts can be displayed correctly. Under the licensing conditions of, a page view tracking is carried out for every access, which involves “visits” being counted for statistical purposes and transmitted to Monotype GmbH, also if necessary via JavaScript code in your browser.
For this purpose, the browser you use needs to connect with the Monotype GmbH servers. The web fonts are used in the interests of a uniform and informative display of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1)(f) GDPR. For more information about fonts please go to