We are pleased that you are visiting our website. In the following, we inform you about which personal data we process when you visit our website, for which purposes and on which legal basis this is done, and which rights you are entitled to.

1        Controller

The controller within the meaning of the GDPR is:

NOTOS Partnerschaft von Rechtsanwälten mbB

Senckenberganlage 10-12

60325 Frankfurt am Main

Deutschland

E-Mail: info@notos.de   

2        Contact for data protection enquiries

For questions regarding data protection and the exercise of your rights as a data subject, you can reach us at any time at: datenschutz@notos.de

NOTOS is not under an obligation to appoint a data protection officer. Nevertheless, our qualified contact persons for data protection enquiries can be reached at any time at the e-mail address stated above.

3        General website processes

When you access our website, our system automatically collects data and information from the accessing device. This includes, among other things, the browser type, the operating system, the IP address, the date and time of access, the pages accessed, the previously visited website (referrer) as well as similar technical information. This data is processed for the purpose of delivering the website, for system security and stability, and for averting threats - for example in the event of a cyber attack. No personal evaluation takes place; the data is analysed statistically in anonymised form. The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in achieving the purposes stated above.

The data is deleted after seven days at the latest; any longer storage takes place only in anonymised form. As the collection of this data is mandatory for the operation of the website, no right to object exists.

4        Getting in touch

4.1      Contact enquiries

On our website you have the option to get in touch with us - for example via a contact form provided, by e-mail or by telephone. We process the data transmitted in this context exclusively for the purpose of handling your enquiry. The legal basis is our legitimate interest in answering enquiries in accordance with Art. 6 (1) lit. f GDPR as well as the performance of pre-contractual measures in accordance with Art. 6 (1) lit. b GDPR. The data is deleted as soon as it is no longer required for the purposes of the communication, unless statutory retention obligations prevent deletion.

If you request an appointment as the contact person of a prospective client, we process your personal data on the basis of our legitimate interest (Art. 6 (1) lit. f GDPR) in the efficient organisation of appointments with prospects and potential clients.

4.2      Contact within existing client relationships

As part of ongoing client relationships, we regularly get in touch with our clients, for example to coordinate content, to clarify open questions, in connection with changes to the contractual conditions or to transmit relevant information. The processing of personal data takes place in order to perform the contractual relationship where the person addressed is themselves a party to the contract, or otherwise on the basis of our legitimate interest in efficient communication (Art. 6 (1) lit. f GDPR). We delete the data of clients and contact persons as soon as the data is no longer required for the stated purposes. This is generally the case upon termination of the cooperation, after three years at the latest.

4.3      Job applications

If you apply to us via our application form, we process the personal data you transmit for the purpose of carrying out the application procedure. This includes in particular your contact details, CV, references and any other information that you provide to us in connection with your application. The information marked as mandatory is required in order to be able to process your application and consider it in the selection procedure.

The legal basis for the processing of your application data is the initiation of an employment relationship pursuant to Section 26 BDSG (German Federal Data Protection Act) as well as - where necessary - our legitimate interest in defending against legal claims within the scope of the AGG (General Equal Treatment Act) (Art. 6 (1) lit. f GDPR).

If, in the course of your application, you provide us with special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on status as a severely disabled person), the processing takes place on the basis of Section 26 (3) BDSG in conjunction with Art. 9 (2) lit. b GDPR in order to exercise rights and fulfil obligations arising from employment law as well as from social security and social protection law.

In certain cases, the processing of special categories of personal data may also be based on Art. 9 (2) lit. h GDPR, for example if your information is required to assess your ability to work or if it is required in the context of occupational health examinations, pre-employment examinations or the performance of health-related measures.

If no employment relationship is entered into, your data will be deleted no later than six months after conclusion of the application procedure, unless you have expressly consented to longer storage. In the event of employment, your data will be transferred to the personnel file.

5        Cookies

Our web offering uses so-called cookies. These are small text files that can be stored on and read from the user's device by the browser used. Cookies can either be stored only for the duration of a session and then automatically deleted (session cookies) or remain on the device permanently (persistent cookies).

The cookies used on our web offering are strictly necessary for the technical operation and provision of our web offering as well as for the optimised use of our services. Access to data already stored on your device and the storage of cookies on your device is accordingly based on the necessity for a service requested by you (Section 25 (2) no. 2 TDDDG) and your consent is not required.

The processing of personal data associated with this is based on our legitimate interest (Art. 6 (1) lit. f GDPR). Our legitimate interest in this case lies in the functional, law-compliant, secure and user-friendly provision of our web offering.

6        Our presence on LinkedIn

We maintain a company profile on the social network LinkedIn in order to inform there about our services, events and job offers and to get in touch with prospects, clients and applicants.

The operator of the LinkedIn platform is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter „LinkedIn“).

On our website we merely refer to our LinkedIn profile in the form of a simple hyperlink. No plugin or other active integration of LinkedIn content into our website takes place. Processing of data by LinkedIn therefore only occurs once you actively click on the link and access the LinkedIn platform.

When you visit our LinkedIn profile, LinkedIn processes your personal data (e.g. IP address, device information, interactions with content) under its own responsibility in accordance with the LinkedIn privacy policy.

For the processing of personal data in connection with the Page Insights provided by LinkedIn (statistics on the use of our profile), LinkedIn and NOTOS are joint controllers pursuant to Art. 26 GDPR. The essential content of the joint controllership agreement can be viewed at the following link:

https://www.linkedin.com/legal/pages-joint-controller-addendum

The legal basis for the operation of our LinkedIn profile is our legitimate interest in an effective external presentation as well as in communication with prospects, clients and applicants pursuant to Art. 6 (1) lit. f GDPR.

Insofar as you send us a message or contact enquiry via LinkedIn, we process the data contained therein to respond to your enquiry pursuant to Art. 6 (1) lit. b or lit. f GDPR.

Further information on data processing by LinkedIn can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

7        Recipients and transfer of personal data

In order to fulfil our contractual and legal obligations as well as to provide our services, it may be necessary to pass on personal data to third parties. This concerns in particular public authorities, government offices, parties to proceedings (e.g. opponents, data subjects, participants), tax authorities, banks and insurance companies.

To support our operational processes, we also use external service providers to whom personal data may be transmitted in the course of their activities. Insofar as these service providers process personal data on our behalf, this takes place on the basis of a data processing agreement in accordance with Art. 28 GDPR. The processing takes place exclusively within the EU or the EEA or in compliance with appropriate safeguards within the meaning of Art. 44 et seq. GDPR.

8        Storage period of your data

Personal data is deleted as soon as the respective purpose of its processing no longer applies, provided that no statutory retention obligations - in particular under commercial and tax law - prevent deletion.

Where specific deletion periods are stated in this privacy notice, these shall take precedence.

9        Your rights as a data subject

You have the following rights:

1      Right of access: You can request information from us as to whether and which personal data we process about you (Art. 15 GDPR).

2      Right to rectification: If data that we process about you is inaccurate, you can inform us of this and you have the right to have this data corrected (Art. 16 GDPR).

3      Right to erasure / right to be forgotten: If personal data is no longer necessary for our processing purposes or if the legal basis ceases to apply due to another circumstance, you have the right to have your personal data erased (Art. 17 GDPR).

4      Right to restriction of processing: Under certain conditions you may require us to restrict the processing of your data (Art. 18 GDPR).

5      Right to data portability: You can request a copy of your data from us in a commonly used machine-readable format or that we make the data directly available to a provider of your choice (Art. 20 GDPR).

6      Right to object: You may object to the processing if it is based on our legitimate interests (Art. 21 GDPR).

7      Automated decisions: You have the right not to be subject solely to an automated decision (Art. 22 GDPR).

8      Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us if you do not agree with the way your data is handled (Art. 77 GDPR).

To exercise your rights vis-à-vis us, you are welcome to contact us at any time using the contact details for data protection enquiries stated above.

As of: June 2026