Privacy Policy

Controller (Art. 4 (7) GDPR)

APOS Legal Rechtsanwaltsgesellschaft mbH & Co. KG
Am Paradeplatz 20, 69126 Heidelberg, Germany
Email: info@apos.legal
Phone: +49 6222 9599 2400

What data we collect

• Server log files (IP address, browser, referrer, time) on every request — legal basis Art. 6 (1) (f) GDPR (security & operation), kept for up to 7 days.
• Contact form / case enquiry — name, email, employer, phone, matter type, salary range, message. Legal basis Art. 6 (1) (b) GDPR (pre-mandate steps).
• Cookies for site operation (technically necessary, always set) and — only with your consent — Google Analytics (anonymised IP) and Brevo tracking. You can change consent at any time via the “Cookie settings” link in the footer.

Recipients

Our hosting provider Vercel Inc. (USA) processes site traffic under standard contractual clauses. Email sending is handled by Brevo (sendinblue.com, France/EU). Google Analytics is operated by Google Ireland Ltd. (Ireland) on the basis of your explicit consent.

Your rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority — competent for us: Der Landesbeauftragte für den Datenschutz Baden-Württemberg.

Retention

Contact-form data is retained as long as required to handle your enquiry and, if a mandate follows, within the statutory retention periods applicable to legal files. Otherwise data is deleted within 6 months unless a different period results from law.