1. Introduction

Steinwalt Legal Group (“Steinwalt”, “we”, “us”, or “our”) takes the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store, and safeguard your data when you visit our website, contact us, or engage our legal services. We comply with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Data Controller

The responsible party for data processing is:
Steinwalt Legal Group
28th Street, New York City, USA
Email: [email protected]

3. Data We Collect

We collect personal data only to the extent necessary. This may include:

• Name, company, position

• Email address, phone number, postal address

• Information related to legal cases

• Billing and payment data

• IP address, browser and device information when using our website

• Communication data (email history, contact forms, phone notes)

4. Legal Basis for Processing

Your data is processed on the following legal bases:

• Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures

• Article 6(1)(c) GDPR – compliance with legal obligations

• Article 6(1)(f) GDPR – legitimate interests in efficient legal service delivery

• Article 6(1)(a) GDPR – your consent, if applicable

5. Purpose of Data Processing

We use your data to:

• Provide legal consultation and representation

• Communicate with you and respond to inquiries

• Fulfill our contractual and statutory obligations

• Invoice and manage payments

• Improve service quality and website functionality

• Protect our rights and fulfill regulatory requirements

6. Data Retention

We store personal data only as long as necessary:

• Legal case files: typically 6 years (§ 50 BRAO)

• Billing data: 10 years (§ 147 AO, § 257 HGB)

• Website inquiries: up to 1 year
  After these periods, your data will be deleted or anonymized in compliance with legal standards.

7. Data Sharing

We treat your data confidentially. Data may be shared with:

• Courts, authorities, or opposing parties in the context of legal services

• Service providers such as IT vendors and accountants, bound by confidentiality agreements

• Legal insurance providers, if applicable
  We do not sell or rent personal data. Data is only transferred to third countries if permitted by law and with appropriate safeguards.

8. Data Security

We implement appropriate technical and organizational security measures to protect your data. These include access control, encryption, secure data storage, and continuous monitoring of systems.

9. Your Rights

You have the following rights under GDPR:

• Access your data (Art. 15 GDPR)

• Rectify inaccurate or incomplete data (Art. 16 GDPR)

• Request erasure (Art. 17 GDPR)

• Restrict processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Object to processing (Art. 21 GDPR)

• Withdraw consent at any time (Art. 7(3) GDPR)
  To exercise your rights, contact us at the details above. You also have the right to lodge a complaint with a data protection authority.

10. Cookies and Tracking

Our website uses essential cookies for functionality. We do not use third-party tracking or marketing cookies without your explicit consent. You can manage cookies in your browser settings. For more, see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. The latest version is always available on our website. Continued use of our services constitutes acceptance of the updated policy.

12. Contact

For all data protection matters, contact:
Steinwalt Legal Group – Data Protection Officer
Dr. Henry Walters
28th Street, New York City, USA
Email: [email protected]