Data protection
Privacy policy
This is a courtesy translation. The German version is the legally authoritative one.
1. Controller
The controller for data processing on this website is AC Anlegerschutz, Steinhäuserstraße 20, 76135 Karlsruhe. Contact details are set out in the legal notice.
2. Hosting and server log files
This website is hosted in a data centre within the European Union.
When you visit the site, the server automatically records access data (IP address, date and time, requested page, referrer, browser and operating system). This processing is necessary to deliver the site securely and stably and is based on our legitimate interest under Art. 6(1)(f) GDPR.
3. Contact form and case description
When you submit the contact form we process the details you provide: name, e-mail address, optionally a phone number, the category of case, an approximate loss figure and your description of what happened.
Purpose: handling your enquiry and assessing a possible engagement. Legal basis: your consent under Art. 6(1)(a) GDPR and, where the enquiry concerns a prospective engagement, Art. 6(1)(b) GDPR.
Storage: your enquiry is stored on the server of this website and is accessible only to the firm, after signing in to the protected administration area.
You may withdraw your consent at any time with effect for the future.
Where your enquiry came from: together with your enquiry we also record which page of our website you reached the form from, which referrer brought you there and — if present — the identifier of an advertising click. These details serve only to attribute and evaluate our own website; they are not passed to third parties without your consent. The legal basis is our legitimate interest in measuring the performance of our own advertising (Art. 6(1)(f) GDPR).
Temporary storage in your browser: while you fill in the form, your browser keeps the entries you have already made on your own device (session storage). This is purely for your convenience, so your description is not lost if you open the privacy policy or navigate back in the meantime. The data never leaves your device, is deleted when the enquiry is sent and when you close the browser tab, and cannot be read by us at any point. The legal basis for storing it on your device is § 25(2) no. 2 TDDDG, as it is strictly necessary for the function you have expressly requested.
4. Cookies and consent
Technically necessary functions do not require consent. Optional services are loaded only after you have actively consented (Art. 6(1)(a) GDPR, section 25 TDDDG).
We do not currently use any services for audience measurement or advertising performance measurement. Should we use such services in future, they will load only after your consent; you can withdraw consent you have given at any time via “Cookie settings” in the footer. This policy will be updated beforehand in that case.
5. Recipients and transfers to third countries
Personal data is not transferred to countries outside the EU/EEA without appropriate safeguards within the meaning of the GDPR.
6. Retention
We retain personal data only as long as necessary for the purposes described or as required by statutory retention obligations, in particular professional and commercial or tax law retention periods.
7. Your rights
Under the GDPR you have the following rights:
- access to your personal data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing (Art. 21 GDPR)
- withdrawal of consent you have given, with effect for the future
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
8. Data security
This website uses TLS encryption for all transmissions. Your entries in the contact form are transmitted over an encrypted connection.