Privacy Policy / Datenschutzerklärung

1. General Information

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data in connection with:

  • the use of the website of SePavlov&Professionals;
  • contacting us via electronic means;
  • the preparation, conclusion, and performance of contracts for legal (attorney-at-law) services;
  • the fulfilment of statutory and professional obligations of a German attorney-at-law.

Personal data are processed in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
  • the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG);
  • the German Federal Lawyers’ Act (Bundesrechtsanwaltsordnung – BRAO);
  • the Professional Code of Conduct for Lawyers (Berufsordnung für Rechtsanwälte – BORA);
  • the German Telecommunications and Telemedia Data Protection Act (TTDSG).

⚠️ Contacting us via this website, contact forms or email does not in itself establish an attorney-client relationship (mandate), unless expressly confirmed by the attorney.

The protection of confidentiality and attorney-client privilege constitutes a fundamental principle of our professional activity.

2. Data Controller

«SePavlov&Professionals»®, Owner: Attorney-at-law (Advokat) Serhii Pavlov

Kressenstein 16

95326 Kulmbach

Germany

Email: office@marsser.com

The data controller within the meaning of Article 4(7) GDPR is Attorney-at-law Serhii Pavlov.

3. Data Protection Contact

Pursuant to Article 37 GDPR in conjunction with Section 38 BDSG, the appointment of a separate data protection officer is not required.

For all matters relating to data protection, you may contact us directly using the contact details provided above.

4. Processing of Personal Data When Visiting the Website

Each time the website is accessed, the following data are automatically processed (server log files):

  • IP address;
  • date and time of access;
  • browser type and version;
  • operating system;
  • host name;
  • accessed pages;
  • referrer URL;
  • amount of data transferred;
  • access status / HTTP status code.

Legal basis: Article 6(1)(f) GDPR (legitimate interest).

Purpose of processing: Ensuring the proper operation, security, and technical optimisation of the website.

Storage period: Log data are stored for up to three months and are then automatically deleted unless further storage is required for security or evidentiary purposes.

5. Contact, Forms and Electronic Communication

When contacting us via contact forms, email or other communication channels, the personal data provided by the user (such as name, contact details and content of the enquiry) are processed.

Legal bases:

  • Article 6(1)(a) GDPR – consent;
  • Article 6(1)(b) GDPR – performance of or steps prior to entering into a contract;
  • Article 6(1)(f) GDPR – legitimate interest in responding to enquiries.

⚠️ Please note that communication by email may involve security risks. Upon request, a secure communication channel can be arranged.

Storage period: The data are stored for as long as necessary to process the enquiry or in accordance with statutory retention obligations.

6. Processing of Personal Data in the Provision of Legal Services

In the course of providing legal services, personal data of clients, contractual partners, authorities and other third parties are processed insofar as this is necessary for:

  • the establishment and performance of the attorney-client mandate;
  • legal advice and representation;
  • compliance with statutory and professional obligations.
  • Legal bases:
  • with regard to special categories of personal data: Article 9(2)(f) GDPR.
  • Article 6(1)(b) GDPR;
  • Article 6(1)(c) GDPR;
  • Article 6(1)(f) GDPR;

All information obtained within the scope of a legal mandate is subject to attorney-client privilege pursuant to Section 43a BRAO and Section 2 BORA.

Storage period: Data relating to attorney-client mandates are retained for at least six years after completion of the mandate in accordance with Section 50 BRAO, unless longer statutory retention periods apply.

7. Payments and Payment Service Providers

Where payments are processed via payment service providers (e.g. PayPal), the necessary payment data are transmitted directly to the respective provider.

Legal basis: Article 6(1)(b) GDPR.

The processing of data by payment service providers is governed by their respective privacy policies.

8. Cookies

This website uses cookies that are necessary for its operation, security and technical optimisation.

Legal basis: Article 6(1)(f) GDPR or, where required, Article 6(1)(a) GDPR in conjunction with Section 25 TTDSG.

Cookies may be:

  • session cookies (deleted after the browser session ends);
  • persistent cookies (stored until deleted by the user).

Users may restrict or disable cookies via their browser settings.

9. Disclosure of Data to Third Parties and Transfers Outside the EU

Personal data are disclosed to third parties only:

  • where a legal basis exists;
  • where necessary for the performance of a contract;
  • to comply with statutory or professional obligations.

Transfers of personal data to third countries take place only in compliance with Articles 44–49 GDPR.

10. Data Security

Appropriate technical and organisational measures pursuant to Article 32 GDPR are implemented to protect personal data against loss, destruction, unauthorised access, alteration or disclosure.

11. Rights of Data Subjects

You have the right:

  • to access your personal data (Article 15 GDPR);
  • to rectification (Article 16 GDPR);
  • to erasure (Article 17 GDPR);
  • to restriction of processing (Article 18 GDPR);
  • to data portability (Article 20 GDPR);
  • to object to processing (Article 21 GDPR);
  • to withdraw consent at any time (Article 7 GDPR);
  • to lodge a complaint with a supervisory authority (Article 77 GDPR).

Competent supervisory authority: Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht – BayLDA)

12. Contact for Exercising Data Subject Rights

Advokat Serhii Pavlov

Kressenstein 16

95326 Kulmbach

Germany

Email: office@marsser.com

13. Validity and Amendments

This Privacy Policy is valid as of the date of publication.

It may be amended as a result of changes in legislation or the functionality of the website.