DATA PROTECTION STATEMENT
We take the protection of your personal data seriously and adhere to the rules of the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), as well as this data protection statement. We only process personal data of our users insofar as this is necessary to provide a functional website and our content, services, offers etc.
Personal data is all information that relates to an identified or identifiable natural person.
This data protection statement gives you an overview of what type of personal data is processed for what purpose. This data protection statement also specifies how we ensure the protection of your personal data.
1. Name and contact details of the controller
This data protection information applies to data processing by:
Attorney-at-law Peter E. Windorfer (responsible)
Telephone: +49 211 882 502 70
Fax: +49 211 882 502 5
2. Collection and storage of personal data and the type and purpose of their use
a) When you visit our website
You can visit our website without having to provide us with information about yourself (who you are).
When using our website for purely informational purposes, i.e. if you do not otherwise provide us with information about yourself, we only collect the personal data that your browser transmits to our server. When you visit our website www.win-legal.com, the browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:
IP address of the requesting computer,
Date and time of access,
Name and URL of the file accessed,
Website from which access is made (referrer URL), and
Browser used and, if applicable, the operating system of your computer as well as the name of your access provider, language and version of the browser software.
We process the above data for the following purposes:
Ensuring a smooth connection to the website,
Ensuring a comfortable use of our website,
Evaluation of system security and stability, and
for further administrative purposes.
The legal basis for data processing is Art. 6 para. 1 clause 1 lit. f) GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
b) Contact via post, email, phone or fax
So that you can send us your inquiries, remarks and comments, we have provided our contact details on the website. If you contact us by post, e-mail, telephone or fax, we will save your personal data, insofar as their processing is required for the fulfilment of a contract to which you are a party or for the implementation of pre-contractual measures that take place at your request.
The legal basis for data processing in this case is Art. 6 para. 1 clause 1 lit. b) GDPR.
c) Contact via the contact form
So that you can send us your inquiries, remarks and comments, we also provide a contact form on our website. To use it, it is imperative to provide your first and last name and your email address so that we know who we have to respond to; you can provide further information voluntarily. The personal data we collect for the use of the contact form will be deleted after your request has been dealt with.
The legal basis for data processing is your voluntarily given consent (Art. 6 para. 1 clause 1 lit. a) GDPR).
d) Contact via live chat
So that you can communicate your questions to us live, we provide you with a live chat system on our website. For the course of the chat, the chat name you have chosen and the information you otherwise voluntarily provided in the course of the chat process are saved. At the end of chat communication, all information will be deleted. We store your personal data transmitted in this way only to the extent that its processing is necessary for the fulfilment of a contract to which you are a party or for the implementation of pre-contractual measures that are carried out at your request. Cookies are used to operate the chat function. Cookies are small text files that are stored locally in the cache of your browser. The cookies enable the recognition of your browser and thereby enable individual users of our chat function to be distinguished from one another. In order to avoid the storage of cookies, you can set your internet browser in such a way that no cookies will be stored on your computer in the future or cookies that have already been stored will be deleted. Disabling all cookies can mean that our chat function is no longer available to you.
The legal bases for data processing in this case are Art. 6 para. 1 clause 1 lit. b) GDPR and Art. 6 para. 1 clause 1 lit. f) GDPR.
e) Google Maps
Our website uses Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors to the website. You can find more information about data processing by Google in Google's data protection information. These can be accessed at the following link:
There you can also change your settings in the data protection centre so that you can manage and protect your data. You can find further instructions on how to manage your data in connection with Google products at the following link:
3. Disclosure of data to third parties
Your personal data will not be transmitted to third parties for purposes other than those listed below. In particular, it will not be passed on to third parties for advertising purposes without your explicit consent.
We only pass on your personal data to third parties if:
you have given your explicit consent according to Art. 6 para. 1 clause 1 lit. a) GDPR;
it is required according to Art. 6 para. 1 clause 1 lit. b) GDPR for the processing of contractual relationships with you, e.g. to banks for processing the contractually agreed payments, to postal services for the purpose of sending letters, in the event of non-fulfilment of contractually agreed payments for the purpose of legal enforcement to lawyers and legal services companies;
there is a legal obligation for the transfer according to Art. 6 para. 1 clause 1 lit. c) GDPR; or
the disclosure is required to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data (according to Art. 6 para. 1 clause 1 lit. f) GDPR).
4. Storage duration and data deletion
In particular, your personal data will be deleted as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed. After this, the data will be deleted, unless the storage is necessary to fulfil a legal obligation that the processing is governed by the law of the European Union or its Member States to which the controller is subject, or to assert, exercise or defend legal claims. The statutory retention requirements, e.g. 10 years for accounting data including payment data, are such a legal obligation. The data will be blocked for the duration of the retention obligations, after which they will be deleted.
5. Rights of the affected parties
You have the right,
to revoke your consent given to us at any time in accordance with Art. 7 para. 3 GDPR. As a result, we are no longer allowed to continue processing the data based on this consent in the future. The legality of the data processing carried out before the revocation remains unaffected by your revocation;
to request information about your personal data processed by us in accordance with Art. 15 GDPR. You can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, unless it was collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
in accordance with Art. 16 GDPR to immediately request the correction or completion of personal data stored by us;
according to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending of legal claims;
to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, provided that the accuracy of the data is disputed by you, the processing is unlawful, but you reject a deletion, and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us, in a structured, common and machine-readable format or to request the transfer to another person responsible;
to complain to a supervisory authority in accordance with Art. 77 GDPR. The responsible supervisory authority is the state data protection officer of the federal state in which our firm is based. An overview of the state data protection officers and their contact details can be found at
6. Right to object
If the processing of your personal data is based on legitimate interests in accordance with Art. 6 para. 1 clause 1 lit. f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this that arise from your particular situation. In the event of your justified objection, we will examine the situation and will either discontinue or adjust the data processing or show you (in writing or in text form) our compelling reasons worthy of protection, on the basis of which we will continue the processing.
If you would like to exercise your right of cancellation or objection, just submit an email to , a simple letter to Attorney-at-law Peter E. Windorfer, Dreischeibenhaus, 40211 Düsseldorf, a fax to +49 211 882 502 5 or a message via telephone at +49 211 882 502 70.
7. Data security
We use suitable technical and organizational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
8. Status and possible changes to this data protection statement
This data protection statement is dated July 2019.
Due to technical developments and / or changed legal or official requirements, it may be necessary to change this data protection statement. You can tell whether changes have been made when the status of the document has been updated in the first paragraph of this section 8.