Privacy Policy
Protecting your personal data matters to us – and as lawyers we are also bound by professional secrecy (Section 43a(2) BRAO, Section 2 BORA, Section 203 German Criminal Code). Below we inform you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), about the data we process. The German version is legally binding.
1. Controllers
The following are joint controllers for this website (Art. 26 GDPR):
- Rechtsanwältin Seda Başay-Yıldız, Fellnerstraße 7–9, 60322 Frankfurt am Main, Germany, e-mail: basay@rechtffm.de
- Rechtsanwalt Dr. Mehmet Gürcan Daimagüler, Fellnerstraße 7–9, 60322 Frankfurt am Main, Germany, e-mail: daimagueler@rechtffm.de
For the handling of a mandate, only the lawyer you instruct is the controller. You may exercise your rights against either of them. There is no obligation to appoint a data protection officer.
2. Visiting this website (server log files)
When you visit the website, our hosting provider processes technically necessary data: IP address, date and time, page requested, amount of data transferred, referrer URL, browser and operating system. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR). Log files are deleted after no more than [7] days unless they are needed to investigate a security incident.
Hosting provider: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement (Art. 28 GDPR) is in place.
The connection is encrypted via TLS/SSL (“https://” in the address bar).
3. No cookies, no tracking
This website does not set cookies, does not use analytics or tracking tools and does not embed third-party content (such as maps, videos or fonts from external servers). A cookie banner is therefore not required.
4. Links to other websites
The website contains links to external sites, for example press reports or Google Maps for directions. Data is only transferred to the respective provider once you click such a link; that provider is responsible for its own processing.
5. Contacting us
If you contact us by e-mail, phone, fax or post, we process your details (e.g. name, contact details, description of your matter) to answer your enquiry and, where applicable, to prepare or carry out a mandate (Art. 6(1)(b) GDPR). Where you provide special categories of personal data (e.g. health data), processing is based on Art. 9(2)(f) GDPR for the establishment, exercise or defence of legal claims.
Unencrypted e-mails may be read by third parties in transit. For confidential documents, please ask us about a secure transmission channel.
6. Handling of mandates and retention
Within a mandate we process the data required to handle it (Art. 6(1)(b) and (c) GDPR; in criminal matters also Art. 10 GDPR in conjunction with professional regulations). Data is passed to courts, authorities, opposing parties or experts only where necessary for the mandate. We retain case files for six years after the end of the mandate (Section 50 BRAO); retention obligations under tax and commercial law (up to ten years) remain unaffected. Enquiries that do not lead to a mandate are deleted once dealt with.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)). Where processing is based on Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Art. 21 GDPR). Professional secrecy may limit the right of access of third parties (Section 29(1) German Federal Data Protection Act).
8. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority. The authority competent for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.
Last updated: September 2026