1. Information about the collection of personal data
(1) Below, I provide information about the processing of personal data when using my website. Personal data is any data that can be related to you personally, e.g., name, address, email addresses, user behavior. In doing so, I would like to inform you about processing operations and at the same time comply with legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).
(2) The controller pursuant to Art. 4 (7) GDPR is Attorney Tarek Alexander Issa, M.Sc. Drakestraße 58 12205 Berlin Phone: 030 897 19 90 Fax: 030 897 19 920 Email: mail@issa-legal.de 2. Data processing in the context of mandate processing
(1) If you engage me, I will process the following personal data in the context of my consulting activities: – Master data (e.g., name, address, contact information such as email, telephone number, and Internet address), – Mandate-related data (e.g., contracts, communication, delivery notes, evidence, witness data), – Consulting data (e.g., content of inquiries, consulting documentation, documents, file notes, legal opinions, and legal assessments), – Activity data (e.g., consulting documentation, performance records, invoices, and other information necessary for asserting and defending your rights within the scope of the mandate), – as well as other data that you voluntarily provide to me within the scope of the client relationship. Insofar as the scope of application of the Money Laundering Act applies, I am obliged to process further information, Section 2 (1) No. 10 GwG. The scope of application applies if I
a) assist the client in the planning or execution of the following transactions: aa) purchase and sale of real estate or commercial enterprises, bb) management of money, securities, or other assets, cc) opening or management of bank, savings, or securities accounts, dd) procuring the funds necessary for the establishment, operation, or management of companies, ee) establishing, operating, or managing trust companies, companies, or similar structures,
b) carry out financial or real estate transactions on behalf of and for the account of the client, c) advise the client on its capital structure, industrial strategy, or related matters, d) providing advice or services in connection with mergers or acquisitions, or e) providing business assistance in tax matters.
This includes, among other things, information about your identity, the beneficial owners, the purpose and nature of the business relationship and the transactions carried out, as well as the money laundering risk. In the case of natural persons, I also make a copy of an official identification document of the client in order to fulfill my obligations under the Money Laundering Act pursuant to Section 8 (2) sentence 1 GwG. In the case of legal entities, the information on the beneficial owners within the meaning of Section 3 GwG required by the Money Laundering Act is also collected.
(2) Unless otherwise specified, I process your personal data in order to fulfill my obligations under the underlying attorney-client agreements. The legal basis for this is Art. 6 (1) (b) GDPR. This includes, in particular, providing appropriate out-of-court legal advice, corresponding with contractual partners, courts, and opposing parties, invoicing, handling any liability claims that may arise, and asserting any claims against you. Furthermore, I process your personal data if this is necessary for the fulfillment of a legal obligation to which I am subject, e.g., under the Money Laundering Act (Art. 6 (1) (c) in conjunction with Sections 10, 11, 12 (1) and (2) GwG). Furthermore, I may process your personal data for the following purposes:
a) Contact: When you contact me by email, I will store the data you provide (your email address, your name, telephone number, and other details, if applicable) in order to process and respond to your questions; if a client relationship exists, the legal basis is Art. 6 (1) (b) GDPR.
b) In the event that no client relationship exists, my legitimate interests in responding to the contact request are the legal basis pursuant to Art. 6 (1) (f) GDPR.
c) Client letters: From time to time, I may inform my clients about current developments in the legal profession and case law. In long-term client relationships, this is done in the performance of the existing client relationship pursuant to Art. 6 (1) (b) GDPR; otherwise, it is based on my legitimate interests pursuant to Art. 6 (1) (f) GDPR in order to inform my clients about current developments that are relevant to them.
d) Christmas and other greeting cards: If I know you personally and/or you are a client of our law firm, I may send you greeting cards on special occasions, such as Christmas, based on my legitimate interests pursuant to Art. 6 (1) (f) GDPR. I assume that the recipients will appreciate the greetings on special occasions. If this is not the case, you can object to the sending of greeting cards in accordance with Art. 21 GDPR (see below).
(3) I will disclose your data to third parties within the scope of fulfilling my obligations under the underlying contracts pursuant to Art. 6 (1) (b) GDPR, insofar as this is necessary for the execution of the client relationship. This applies in particular to the disclosure of data to opposing parties and their representatives, as well as to courts and other public authorities for the purpose of correspondence and to assert and defend your rights. In addition, data is disclosed to banking institutions for payment processing, for example.
Furthermore, I use external technical service providers as processors in accordance with Art. 28 GDPR, who are carefully selected and monitored by me. Data may also be disclosed to the competent authority on the basis of legal provisions, for example for the reporting of suspicious cases in accordance with Section 43 GwG. The legal basis for the disclosure is Art. 6 (1) sentence 1 lit. c GDPR in conjunction with Section 43 GwG.
3. Processing of personal data when visiting my website
(1) When using the website for informational purposes, i.e., simply viewing it without registering and without otherwise providing me with information, I process the personal data that your browser transmits to my server. The data described below is technically necessary to display my website to you and to ensure stability and security, and must therefore be processed by us. The legal basis is Art. 6 (1) (f) GDPR:
– IP address – Date and time of the request – Time zone difference to Greenwich Mean Time (GMT) – Content of the request (page visited) – Access status/HTTP status code – Amount of data transferred in each case – Previously visited page – Browser – Operating system – Language and version of the browser software.
(2) In addition to the above data, technical tools for various functions are used when you use my website, which may be stored on your device. These technical tools are primarily cookies, but may also include other means such as AdvertisingID or Authentication Cache. When you visit my website and at any time thereafter, you have the option of generally allowing the use of individual or all additional functions. You can make changes in your browser settings or via my consent manager. The technical functions are described below (3)), before I go into more detail about your individual options by describing technically necessary functions (4)) and functions that you can voluntarily select or deselect (5)).
(3) I use technical functions that provide you with additional services, mainly cookies. Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can be sent to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer, but primarily serve to make the website faster and more user-friendly and to recognize you on a subsequent visit. You can view the cookies set and their duration at any time in your browser settings and delete the cookies manually.
This website uses the following types of cookies:
• Transient cookies, in particular session cookies, are automatically deleted when you close your browser or log out. They contain a so-called session ID and allow various requests from your browser to be assigned to the shared session. • Persistent cookies are automatically deleted after a specified period, which varies depending on the cookie.
(4) Mandatory functions that are technically necessary for displaying the website: The technical structure of the website requires the use of technologies, in particular cookies. Without these technologies, the website cannot be displayed (completely correctly) or the support functions cannot be enabled. These are generally transient cookies that are deleted at the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you want to use my website. The individual cookies can be viewed in the consent manager. The legal basis for this processing is Art. 6 (1) (f) GDPR.
(5) Optional functions: I only use various cookies or other technologies with your consent, which you can select via the consent manager. The functions are only activated if you give your consent and can be used in particular to analyze and improve visits to the website, to make it easier for you to use different browsers or end devices, to recognize you when you visit, or to display advertising (if necessary, also to tailor advertising to your interests, to measure the effectiveness of ads, or to display interest-based advertising). The legal basis for this processing is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing until withdrawal.
The functions I use, which you can select and revoke individually via the consent manager, are described below. - Analysis and customization cookies: These cookies collect information that is either used in aggregate form to help understand how the website is used or how effective marketing campaigns are, or to help customize the website to your interests. Name: s7 Purpose: Analysis of data about website usage and user behavior on the website Service: Adobe Analytics Type: persistent; html_local_storage
– In accordance with Art. 7 (3) GDPR, you have the right to revoke your consent at any time. As a result, I will no longer be allowed to continue processing data based on your consent in the future. A revocation has no influence on the permissibility of the previous processing; – pursuant to Art. 15 GDPR, to request information about your personal data processed by me; – pursuant to Art. 16 GDPR, to request the correction of incorrect or incomplete personal data stored by me; – pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by me, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims; – pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, (1) if you dispute the accuracy of the data, (2) if the processing is unlawful but you oppose its erasure, (3) if we no longer need the data but you need it for the establishment, exercise, or defense of legal claims;
– pursuant to Art. 21 GDPR, to object to the processing: Insofar as I base the processing of your personal data on the balancing of interests pursuant to Art. 6 (1) (f) GDPR, you may object to the processing. When exercising such an objection, I ask you to explain the reasons why I should not process your personal data as we have done. In the event of your justified objection, I will examine the situation and either stop or adjust the data processing or point out to you my compelling legitimate reasons for continuing the processing.
– pursuant to Art. 20 GDPR, to receive your personal data that you have provided to me in a structured, commonly used, and machine-readable format or to request its transfer to another controller, and – pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or my law firm's registered office for this purpose.
5. Duration of storage of personal data or criteria for the storage period
I delete personal data after and to the extent that storage is no longer necessary for the processing of the mandate or its execution and there are no legitimate interests or legal obligations on my part, such as the obligation to carry out a conflict of interest check in accordance with § 43a (4) BRAO, or legal retention obligations (§ 147 AO, § 257 HGB, § 14b UStG). Deletion therefore generally takes place five to ten years after the end of the client relationship, or after 30 years in the case of titled claims. 6. Current status and changes to this privacy policy
This privacy policy is currently valid and was last updated in December 2025. Due to the further development of this website and the offers it contains, or due to changes in legal or regulatory requirements, it may be necessary to amend this privacy policy. You can access and print out the current privacy policy at any time on the website at www.issa-legal.de.
