Data protection

With the following privacy policy, we inform you about the types of personal data (hereinafter also referred to as “data”) that we process, the purposes of such processing, and its scope. The privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, when using our website as well as other online services (hereinafter collectively referred to as the “online offer”).

The terms used in this privacy policy are to be understood as gender-neutral.

As of: January 23, 2026

Controller

This privacy policy applies to data processing by:

Schock Rechtsanwälte PartmbB (hereinafter: “Schock Rechtsanwälte”)

D – 66119 Saarbrücken
Tel.: +49 681 58 80 18-0
Fax: +49 681 58 80 18-18
Website: https://schock-rae.de
E-Mail: info@schock-rae.de

Partners authorized to represent:
Dr. Gerd-Hans Schock, Christian Wolff

Overview of processing

The following overview summarizes the types of personal data we process, the purposes of their processing, and the data subject groups. It serves as a transparent representation of the processing operations within the meaning of Articles 13 and 14 GDPR.

Types of data processed

• Identification and contact details (e.g. names, addresses, email addresses, telephone numbers, client or stakeholder numbers)
• Payment data (e.g. bank details, invoice information)
• Contractual data (e.g. subject of contract or mandate, duration, contract status, file number)
• Content data (e.g. text entries, submissions, uploaded files)
• Usage data (e.g. visited websites, access times)
• Metadata, communication and procedural data (e.g. IP addresses, timestamps, consent status, technical log data)

Categories of data subjects

• Clients
• Interested parties
• Communication partners
• Users of the online offer
• Business and contractual partners

Purposes of processing

• Initiation of mandates, processing of mandates and performance of legal services
• Provision of contractual services and customer service
• Processing of contact requests and communication
• Implementation of security measures
• Organization of internal administrative and business processes
• Administration of and response to inquiries
• Provision and optimization of our online offer
• Ensuring the information technology infrastructure

Relevant legal bases

The processing of personal data takes place on the basis of the legal provisions of the General Data Protection Regulation (GDPR). Depending on the type and purpose of the respective processing, the following legal bases may be considered in particular:

• Consent (Art. 6(1)(a) GDPR): Insofar as we obtain the consent of the data subject for specific processing operations.
• Performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR): If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.
• Legal obligation (Art. 6(1)(c) GDPR): To the extent that we are legally obliged to process personal data.
• Legitimate interests (Art. 6(1)(f) GDPR): If the processing is necessary to protect our legitimate interests or the legitimate interests of third parties, and there are no overriding interests of the data subjects to the contrary.

The relevant legal basis will be explained in more detail within the framework of the individual processing operations.

Use of cookies

Our website uses cookies and comparable technologies. Cookies are small text files that are stored on the user’s device and enable the browser to be recognized.

Types of cookies

We only use cookies that are necessary for the operation and basic functions of our website. The following categories are used in particular:

• Necessary cookies: These cookies are required to ensure basic functions of the website (e.g. page navigation, language settings or the storage of consent decisions).
• Preference cookies: These cookies enable the website to remember information that influences the behavior or appearance of the website, in particular language settings.

Analysis, tracking or marketing cookies are not used.

Legal bases

The use of necessary cookies is based on our legitimate interest in providing our online offer in a technically flawless and user-friendly manner (Art. 6 para. 1 lit. f GDPR). Insofar as cookies are only used with your consent, the processing is based on Art. 6 para. 1 lit. a GDPR.

Cookie consent management

We use a cookie consent management tool to manage the cookies used and to obtain any consent that may be required.

Cookiebot – Cookie Consent Management

• Service provider: Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark
• Purpose of processing: Obtaining, managing and documenting consent for cookies and comparable technologies
• Processed data: Abbreviated or anonymized IP address, time of consent, consent status, unique consent identifier (Consent ID)
• Storage period: up to 12 months
• Data transfer: Personal data is only transferred to Usercentrics A/S if this is necessary within the framework of the technical provision of cookie consent management.
• Website: https://www.cookiebot.com/

The user’s consent decision is stored in order to avoid having to ask them again when they visit the website again and to comply with our legal obligations to provide evidence.

A detailed and constantly updated overview of the cookies used on this website and their purposes can be found in the separate cookie declaration at https://schock-rae.de/en/cookies/. Via this cookie declaration and via the cookie settings on our website, which can be accessed at any time, users can also view and change or revoke their consent at any time with effect for the future.

Contact and contact form

When you contact us (e.g. by e-mail, telephone or via a contact form on our website), we process the personal data provided by the requesting person insofar as this is necessary to process and answer the request.

Data processed

• Contact data (e.g. name, e-mail address, telephone number)
• Content data (e.g. message texts, information from the contact form)
• Metadata and communication data (e.g. IP address, time of request)

Purposes of processing

• Processing and answering contact requests
• Communication with enquirers
• Documentation of the communication process

Legal bases

The processing of the data depends on the content of the request:

• based on Art. 6 para. 1 lit. b GDPR , if the request serves to initiate a mandate, process a mandate or implement pre-contractual measures;
• based on Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the proper processing and answering of other inquiries.

Storage period

The data collected in the context of contact requests will be deleted as soon as they are no longer required to achieve the purpose for which they were collected and there are no legal storage obligations to the contrary.

Provision of the online offer and web hosting

We use external hosting and infrastructure service providers to provide our website and the associated online services. Personal data of users is processed in this context, insofar as this is technically necessary to deliver the content of the website to the browser or the user’s device and to guarantee the stability and security of the operation.

Service providers used

• STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin (domain hosting, DNS management)
• Raidboxes GmbH, Hafenstraße 32, 48153 Münster (web hosting and technical provision of website content)

Agreements for data processing agreement in accordance with Art. 28 GDPR exist with the aforementioned service providers.

Data processed

• Usage data (e.g. pages accessed, access times)
• Metadata and communication data (e.g. IP address, date and time of access, browser type, operating system)

Purposes of processing

• Technical provision of the website
• Ensuring the security and stability of the information technology systems
• Prevention of misuse and attack scenarios

Legal bases

The processing takes place on the basis of our legitimate interest in the secure and reliable provision of our online offer in accordance with Art. 6 para. 1 lit. f GDPR.

Server log files

Each time our website is accessed, the hosting providers used automatically collect and store information in server log files. This data is processed exclusively for technical and security-related purposes and is not merged with other data sources.

The log file data is stored by the hosting providers used for a period that is necessary to ensure technical security and stability, and then deleted or anonymized. Longer storage only takes place if this is necessary for security reasons or to investigate misuse or attacks.

Applications and recruiting via social media

We may use social media and professional networks to provide information about our law firm and, if applicable, to draw attention to professional opportunities (e.g. job offers). In this context, it may happen that we process personal data of interested parties or applicants if they contact us via corresponding platforms or provide us with corresponding information.

Please note that the processing of personal data in the context of the use of social media is primarily the responsibility of the respective platform operators. We have no influence on the type and scope of data processing by these providers.

Data processed

• Profile data (e.g. name, professional career, qualifications)
• Contact data (e.g. message content, contact history)
• Other information that users voluntarily provide to us in the context of contacting us or applying

Purposes of processing

• Contacting interested parties or applicants
• Reviewing and processing applications
• Communication in the context of recruiting and selection processes

Legal bases

The data is processed:

• based on Art. 6 para. 1 lit. b GDPR , insofar as the contact or application serves to initiate an employment relationship;
• based on Art. 6 para. 1 lit. f GDPR based on our legitimate interest in carrying out recruiting and selection processes.

Further information

Further information on data processing can be found in the data protection notices of the respective social media used.

Rights of data subjects

Data subjects have the following rights with regard to the processing of their personal data in accordance with the GDPR:

• Right of access in accordance with Art. 15 GDPR about the personal data processed by us;
• Right to rectification in accordance with Art. 16 GDPR of incorrect or incomplete data;
• Right to erasure in accordance with Art. 17 GDPR (“right to be forgotten”), provided that there are no legal storage obligations to the contrary;
• Right to restriction of processing in accordance with Art. 18 GDPR;
• Right to data portability in accordance with Art. 20 GDPR, provided that the processing is based on consent or a contract;
• Right to object in accordance with Art. 21 GDPR to the processing, insofar as this is based on legitimate interests.

If the processing of personal data is based on consent, data subjects may revoke their consent at any time with effect for the future.

To exercise the aforementioned rights, data subjects can contact us at any time using the contact details provided above.

Right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with a data protection supervisory authority if they consider that the processing of personal data relating to them infringes the GDPR.

The competent supervisory authority is generally determined by the location of our company or the habitual residence of the data subject.