Data Policy

1. Data Controller

Responsible for data processing on this website:

Dr.-Ing. Henrik Stephan
Patentanwalt
Kaulbachstraße 54
80539 München
Deutschland

2. Hosting

This website is hosted by:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

When accessing this website, the hosting provider automatically collects information in so-called server log files. These include:

IP address of the requesting device
Date and time of access
Requested page or file
Data volume transferred
Browser type and version
Operating system used
Referrer URL (previously visited page)

These data are not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR. The legitimate interest lies in the technically error-free provision, stability, and security of the website. Server log files are stored by the hosting provider for a limited period and then automatically deleted. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

3. Content Management System (WordPress)

This website uses the WordPress content management system. WordPress does not process personal data of visitors unless additional plugins or functions are used that collect data. The website exclusively uses functions necessary for technical operation.

4. Contact

If you contact us by email, the personal data you provide (e.g., name, email address, message content) will be processed for the purpose of handling your request. Processing is based on:

Art. 6(1)(b) GDPR (processing pre-contractual inquiries) or
Art. 6(1)(f) GDPR (legitimate interest in handling inquiries).

Data will be deleted once no longer required for the purpose and no statutory retention periods apply.

5. Google Fonts

This website uses Google Fonts loaded locally on the server. No connection to Google servers is established, so no personal data is transmitted to Google.

6. External Links (LinkedIn)

This website contains an external link to the LinkedIn social network.
Provider:

LinkedIn Ireland
Unlimited Company
Wilton Place
Dublin 2, Ireland.

No personal data is transmitted to LinkedIn when visiting this website. Data processing on LinkedIn occurs only after clicking the link. LinkedIn is solely responsible for its data processing. Further information on LinkedIn’s privacy practices: https://www.linkedin.com/legal/privacy-policy. LinkedIn may transfer personal data to countries outside the European Union, particularly the USA.

7. Cookies

This website uses no analytics or tracking cookies. If technically necessary cookies are used, processing is based on Art. 6(1)(f) GDPR (legitimate interest in technically error-free website provision).

8. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. An encrypted connection is indicated by “https://” in the browser’s address bar.

9. Your Rights

Under the GDPR, you have the following rights:

Right to information about your stored data (Art. 15 GDPR)
Right to rectification of inaccurate data (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)

Contact the data controller above to exercise your rights.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data. The supervisory authority in the federal state where the controller is based is responsible.

For Bavaria:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany

11. Currency of this Privacy Policy

This privacy policy is current as of: 03/2026.