Koch, Schatz & Kollegen – Rechtsanwaltskanzlei

Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws and other data protection provisions is:

Rechtsanwaltskanzlei Koch, Schatz & Kollegen
Rechtsanwalt Peter Koch & Rechtsanwalt Andreas Schatz
Tulpenhofstr. 1
63067 Offenbach am Main
Phone: 069 / 999 99 33-10
E-Mail: info@anwalt-offenbach.de

2. General Information on Data Processing

We generally collect and process personal data of our users only insofar as this is necessary to provide a functional website and our content and services. The collection and use of personal data of our users is regularly carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by law.

3. Hosting

This website is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Strato processes access data (IP address, date and time of access, page accessed, browser type and version, operating system). This data is required to deliver the website and is automatically deleted after a maximum of 30 days.

The servers are located in Germany. We have concluded a data processing agreement (DPA) with Strato AG. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable and secure website delivery).

4. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser's address bar changing from "http://" to "https://" and the lock symbol in your browser bar.

5. Server Log Files

Each time our website is accessed, the hosting system automatically collects data and information. The following data is collected:

  • Browser type and version
  • Operating system used
  • Referrer URL (previously visited page)
  • IP address of the accessing device
  • Date and time of access

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the trouble-free operation of our website and improving our services. The data is not merged with other data sources.

To prevent automated bulk submissions (spam) via our forms, your IP address is additionally held in the server's memory for a maximum of 15 minutes in order to limit the number of submissions per sender. The data is not stored permanently and is not merged with other data. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security and availability of our forms).

6. Cookies and Local Storage

This website does not use any cookies for analytics, reach measurement, advertising or tracking purposes. Only technically necessary entries required for the operation of the website are used. Under § 25(2) no. 2 TDDDG, no consent is required for these; we therefore deliberately do not use a cookie banner.

The following entries are set:

  • NEXT_LOCALE (cookie) — stores the language you selected or that was detected from your browser settings (German, English, Italian), so that you are not redirected again on subsequent page views. The entry contains only the language code.
  • cw-lang (session storage) — stores the language selected in the chat assistant for the duration of the browser tab.
  • cw-hint (session storage) — records that the chat assistant's one-time hint has already been shown.

Both session storage entries are deleted automatically as soon as you close the browser tab. You can delete or block cookies and local storage entries at any time via your browser settings; the website remains usable, but will no longer remember your language choice. The legal basis for the processing is Art. 6(1)(f) GDPR (legitimate interest in a functional website displayed in the correct language).

7. Contact Form

When you contact us via the contact form, the following data is collected:

  • Name
  • Email address
  • Phone number (optional)
  • Selected practice area
  • Your message

The data is used exclusively to process your enquiry. Transmission is encrypted. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

The technical delivery of the email is handled via our own mail server hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. No data is transmitted to third-party providers. The data will be deleted after your enquiry has been processed, unless statutory retention obligations apply.

8. Online Appointment Booking

On the "Book Appointment" page, you can request a consultation appointment online. The following data is collected:

  • Name
  • Email address
  • Phone number
  • Preferred lawyer, appointment type and time slot
  • Case reference (for client appointments)
  • Brief description of the matter (optional)

The data is stored in a database on our server at Strato AG in Germany. Email delivery (confirmation of receipt, appointment confirmation, appointment reminder) is handled via our own mail server at Strato AG in Germany. No data is transmitted to third-party providers.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).

The appointment booking system is not an archive: your data is retained in the database only for as long as it is needed to handle the appointment, and is then deleted automatically and completely. An hourly deletion routine removes

  • rejected appointment requests, and those not confirmed within 24 hours, immediately after you have been informed by email,
  • confirmed appointments on the day after the appointment date.

Until the appointment takes place, the entry is retained because it is required for the appointment reminder and to block the booked time slot against other requests. No data is stored beyond that for statistical or analytical purposes. If a mandate arises, the data required for the case file is kept separately in our practice management software; the retention periods under professional and commercial law apply to that data, in particular § 50 BRAO.

9. Accident Report (Form and Chat Assistant)

On the "Report an Accident" page, you can submit accident data to prepare for a consultation. Two options are available: a complete accident form and a guided chat assistant that walks you through the key questions step by step. The chat assistant does not use artificial intelligence — it is a rule-based dialog with fixed questions. No data is transmitted to external AI services.

Depending on the chosen method, the following data may be collected:

  • Personal details (first name, surname, address, email, phone)
  • Bank details (IBAN) and information on entitlement to deduct input tax — for the settlement of your claim
  • Accident data (date, time, location, circumstances; details of the police accident report including station and reference number)
  • Vehicle data (license plate, vehicle type, make, year of manufacture, mileage, previous damage)
  • Details about the other party (driver, registered keeper, vehicle, license plate, insurer, policy and claim number)
  • Details of witnesses and other parties involved
  • Insurance data (legal protection, comprehensive and partial cover — insurer, policy number and excess in each case)
  • Information about injuries and state of health (type of injuries, hospital stay with period and clinic, treating physicians, home nursing care, health insurer, employers' liability insurance association, pension insurance provider, and your statement on releasing physicians from medical confidentiality)
  • Details about the injured person (date of birth, address, phone, marital status, children)
  • Details of occupation and income (occupation, self-employment, net income and its source, pension received, employer with address and phone) — for calculating loss of earnings and loss of household capacity
  • Name of the expert and their reference number (if an expert report is available)
  • Case reference (for an existing mandate)

Data is only transmitted after the user has explicitly confirmed the privacy policy. A summary of all entered data is displayed before submission.

This data may contain special categories of personal data within the meaning of Art. 9 GDPR (health data relating to injuries). The legal basis is Art. 6(1)(b) GDPR in conjunction with Art. 9(2)(a) GDPR (consent and pre-contractual measures). You may revoke your consent at any time with effect for the future.

The technical delivery of the email with the accident data is handled via our own mail server at Strato AG in Germany. The data is not transmitted to third-party providers and is not permanently stored in a database.

Where you provide details about other persons in the form — such as the other party involved, the driver or registered keeper, witnesses, further parties involved, treating physicians or your employer — we process personal data that we have not obtained from the data subject themselves. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the establishment, exercise and defence of legal claims) and Art. 6(1)(b) GDPR. We inform these persons in accordance with Art. 14 GDPR as soon as we contact them, unless such information is not required under Art. 14(5) GDPR — in particular because the data is subject to lawyers' professional secrecy pursuant to § 43a(2) BRAO. Please only provide us with third-party data that is necessary to handle your matter.

10. Traffic Fine Report (Form and Chat Assistant)

On the "Traffic Fine" page, you can submit data about your fine proceedings. As with the accident report, a complete form and a guided chat assistant are available. The chat assistant does not use artificial intelligence — it is a rule-based dialog with fixed questions.

The following data may be collected:

  • Personal details (name, email, optionally phone)
  • Fine notice data (reference number, authority, fine amount, points, driving ban)
  • Alleged offense (type of violation, date, location, speed)
  • Delivery date (for deadline calculation)
  • Insurance data (legal protection)
  • Uploaded documents (photos or PDF of the fine notice/hearing form)

Uploaded photos and documents are transmitted exclusively by email to the law firm and are not permanently stored on the web server. After transmission, the data is not retained on the server.

Data is only transmitted after explicit confirmation of the privacy policy. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Technical delivery is handled via our own mail server at Strato AG in Germany.

If the alleged offence involves alcohol or drugs, your information may contain health data within the meaning of Art. 9 GDPR. In that respect, the legal basis is Art. 9(2)(a) GDPR (your consent) and Art. 9(2)(f) GDPR (establishment, exercise and defence of legal claims). You may revoke your consent at any time with effect for the future.

11. Dismissal Protection Assistant (Chat)

On the "Review Dismissal" page, you can submit details about your employment situation. A guided chat assistant is available that walks you through the key questions step by step. The chat assistant does not use artificial intelligence — it is a rule-based dialog with fixed questions.

The following data is collected:

  • Personal details (first name, last name, email, optionally phone)
  • Employment details (date of delivery of dismissal, dismissal date, length of service, reason for dismissal, company size)
  • Insurance data (legal protection insurance yes/no)
  • Uploaded documents (dismissal letter, employment contract — optional, photo or PDF)

Uploaded documents are transmitted exclusively by email to the law firm and are not permanently stored on the web server. Data is only transmitted after explicit confirmation of the privacy policy. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Technical delivery is handled via our own mail server at Strato AG in Germany.

12. Online Calculators

Our website provides several calculators: the household capacity loss calculator, the blood alcohol calculator and the traffic fine calculator.

Your entries in these calculators — for the household capacity loss calculator, for example, household size, degree of impairment and duration — are processed exclusively within your browser. No data is transmitted to our server or to third parties; the entries are neither stored nor logged and never become known to us. Your entries are lost when you leave or reload the page. We do not process any personal data when you use the calculators.

13. Google Maps

This website uses the Google Maps mapping service via an iFrame embed. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

The map is only loaded after you actively click "Load map" (2-click solution). Only when you click is a connection established to Google's servers and your IP address transmitted to Google. Google may also set cookies or evaluate existing cookies. Google may also process your data in the USA. Google is certified under the EU-US Data Privacy Framework.

The legal basis is Art. 6(1)(a) GDPR (consent by clicking "Load map"). You can revoke your consent at any time by reloading the page. Google's privacy policy can be found at: https://policies.google.com/privacy

14. Fonts

We deliberately refrain from using external font services such as Google Fonts. The fonts used on this website ("Plus Jakarta Sans" and "DM Sans") are stored locally on our server and delivered directly to your browser without routing through third-party providers. No connection to Google servers or other third-party servers is established. No data is transferred.

15. Your Rights as a Data Subject

As a data subject, you have the following rights vis-à-vis the controller:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact: info@anwalt-offenbach.de

16. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Phone: 0611 / 1408-0
E-Mail: poststelle@datenschutz.hessen.de
https://datenschutz.hessen.de

17. Currency and Amendment of this Privacy Policy

This privacy policy is currently valid as of August 2026. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.