Privacy policy for the website of FF FinanzRecht® Rechtsanwaltsgesellschaft.
Controller
This privacy information applies to the processing of data in connection with the website www.ff-finanzrecht.com (the “Website”) of the law firm FF FinanzRecht® Rechtsanwaltsgesellschaft, represented by Rechtsanwalt Dr Justus Froehlich.
Maximiliansplatz 12b, 80333 Munich, Germany
E-mail: info(at)ff-finanzrecht.com
Managing Director: Dr Justus Froehlich, LL.M. (Georgetown)
Collection of general information when visiting our Website
Nature and purpose of processing
When you access our Website, the browser used on your device automatically sends information to the server hosting our Website. This information is stored temporarily in what is known as a log file. The following information is recorded without any action on your part and stored until it is deleted automatically:
- the IP address of the requesting computer;
- the date and time of access;
- the name and URL of the file retrieved;
- the website from which access is made (referrer URL);
- the browser used and, where applicable, the operating system of your computer, together with the name of your access provider.
The data referred to above are processed by us, or by the service operators acting for our Website, exclusively for the following purposes:
- ensuring that a connection to the Website is established without difficulty;
- ensuring that our Website can be used conveniently;
- evaluating system security and stability; and
- further administrative purposes.
We do not use your data to draw conclusions about you personally. Information of this kind may be evaluated by us statistically in anonymised form in order to optimise our online presence and the technology behind it.
Legal basis and legitimate interest
Processing takes place pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our Website.
Recipients
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our Website.
Storage period
Data are deleted as soon as they are no longer required for the purpose for which they were collected. In the case of data serving to make the Website available, this is generally the case once the session in question has ended.
Where data are stored in log files, this is the case after fourteen days at the latest. Storage beyond that period is possible. In that event, users’ IP addresses are anonymized so that the requesting client can no longer be identified.
Whether provision is required by law or contract
Provision of the personal data referred to above is required neither by law nor by contract. Without the IP address, however, the service and functionality of our Website cannot be assured. Individual services and features may also be unavailable or restricted. For this reason, no right to object arises.
Technically necessary cookies
Nature and purpose of processing
We use cookies to make our Website more user-friendly. Some elements of our website require the requesting browser to be identifiable even after the user moves to another page.
The purpose of using technically necessary cookies is to make websites easier for users to use. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser be recognised even after the user moves to another page.
We require cookies for the following applications:
- carrying over language settings;
- remembering search terms;
- pages already visited.
Legal basis and legitimate interest
Processing takes place pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in designing our Website in a user-friendly manner.
Recipients
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our Website.
Whether provision is required by law or contract
Provision of the personal data referred to above is required neither by law nor by contract. Without these data, however, the service and functionality of our Website cannot be assured. Individual services and features may also be unavailable or restricted.
Right to object
Please refer to the information on your right to object under Article 21 GDPR set out below.
General contact
Nature and purpose of processing
The data you provide are stored for the purpose of communicating with you individually. You may contact us using the e-mail address provided. In that case the personal data of the user transmitted with the e-mail are stored. These include the date and time the e-mail was sent, the e-mail address, IP addresses and information relating to the servers involved in the e-mail communication. You may also contact us using the telephone number provided. In doing so we collect log data comprising your telephone number and the duration of the call. We do not, as a rule, record calls. Irrespective of the means of communication chosen, we collect the content of your enquiry.
Legal basis
The data are processed on the basis of a legitimate interest pursuant to Article 6(1)(f) GDPR, in order to enable you to contact us without difficulty. The information you provide is stored for the purpose of dealing with your enquiry and any follow-up questions. Where you contact us in order to request an offer, the data communicated are processed for the purpose of taking steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR.
Recipients
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our Website. All service providers are contractually obliged to treat your data as confidential.
Storage period
Data are deleted no later than six months after the enquiry has been dealt with. Where a contractual relationship comes about, we are subject to the statutory retention periods. These are generally six or ten years, for reasons of proper accounting and tax requirements.
Whether provision is required by law or contract
You provide your personal data voluntarily. We can, however, deal with your enquiry only if you tell us your name and, where applicable, your e-mail address and the reason for the enquiry.
Right to object
Please refer to the information on your right to object under Article 21 GDPR set out below.
Contact and job applications
Purpose, legal basis and legitimate interest
You may send us your application by e-mail using the contact details given on our Website. We will process the data you provide exclusively in order to assess your professional suitability and to contact you.
In that case the personal data of the user transmitted with the e-mail are stored. These include the date and time the e-mail was sent, the e-mail address, IP addresses and information relating to the servers involved in the e-mail communication.
You may also contact us using the telephone number provided. In doing so we collect log data comprising your telephone number and the duration of the call. We do not, as a rule, record calls.
Processing takes place for the purpose of establishing an employment relationship, in the context of taking steps prior to entering into a contract carried out at your request, pursuant to section 26 of the Federal Data Protection Act (BDSG).
Recipients of the data
Within the firm, access to your data is granted to those departments which require it in order to fulfil contractual, statutory and regulatory obligations.
Our Website is maintained by service providers acting as our processors.
All service providers are contractually obliged to treat your data as confidential.
Storage period
If your application is unsuccessful, the data are deleted six months after the decision has been communicated.
Where an employment relationship comes about, the application documents are retained at least for the duration of the employment.
Whether provision is required by law or contract
Provision of the personal data is required neither by law nor by contract. Without that information, however, your application cannot be processed.
Right to object
Please refer to the information on your right to object under Article 21 GDPR set out below.
There is no company presence on LinkedIn. There is only a personal presence run personally by Rechtsanwalt Dr. Justus Froehlich, general manager of the law firm. It is hosted on a platform operated by LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland.
Rights of data subjects
You have the right:
- pursuant to Article 15 GDPR, to request information about the personal data we process concerning you. In particular, you may request information about the purposes of processing, the categories of personal data, the specific recipients to whom your data have been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where these were not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about the details thereof;
- pursuant to Article 16 GDPR, to request without undue delay the rectification of inaccurate personal data concerning you, or the completion of the personal data stored by us;
- pursuant to Article 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- pursuant to Article 18 GDPR, to request the restriction of processing of your personal data where (a) you contest the accuracy of the data, (b) the processing is unlawful but you oppose erasure, (c) we no longer need the data but you require them for the establishment, exercise or defence of legal claims, or (d) you have objected to the processing pursuant to Article 21 GDPR and it has not yet been determined whether our legitimate grounds override yours;
- pursuant to Article 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
- pursuant to Article 7(3) GDPR, to withdraw at any time consent once given. The effect of this is that we may no longer continue the data processing based on that consent for the future.
You may lodge a complaint with a supervisory authority at any time — for example with the competent supervisory authority of the federal state in which you reside, or with the authority responsible for us as controller.
A list of supervisory authorities (for the non-public sector), with addresses, is available at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.
Right to object
Where your personal data are processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR (processing on the basis of a balancing of interests), you have the right pursuant to Article 21 GDPR to object to the processing of your personal data, where there are grounds arising from your particular situation or where the objection is directed against direct marketing. In the latter case you have a general right to object, which we will give effect to without any need to state a particular situation.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where to address an objection
If you wish to exercise your right to object, an e-mail to info(at)ff-finanzrecht.de will suffice.
Data security
During your visit to the Website we use an encryption method reflecting the current state of the art, together with the highest level of encryption supported by your browser. You can tell whether an individual page of our online presence is transmitted in encrypted form by the closed representation of the key or padlock symbol in your browser’s status bar.
We otherwise employ appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Currency of and changes to this privacy policy
This privacy policy is currently in force and is dated 1. August 2026. As our Website and the services offered through it develop, or as a result of changes in statutory or regulatory requirements, it may become necessary to amend this privacy policy. The new privacy policy will then apply to any subsequent visit by you. The current version of the privacy policy of FinanzRecht® may be accessed and printed at any time on the Website at www.ff-finanzrecht.com.
Note: This is a translation provided for information purposes. The German version of this privacy policy is authoritative.