Data protection

Thank you for visiting our website and for your interest in our company and our products and services. We take the protection of your personal data and its confidential treatment seriously.

Your personal data is processed exclusively within the framework of the statutory provisions of the data protection law of the European Union, in particular the General Data Protection Regulation (hereinafter »DSGVO«) and, in addition, the Federal Data Protection Act.

With this data protection declaration, we inform you about the processing of your personal data and about your rights as a data subject in the context of the processing of your personal data by us. The terms used, such as “personal data” or their “processing” correspond to the definitions in Art. 4 DSGVO.



1. person responsible

The person responsible for data processing within the meaning of the data protection laws is:

Vogel & Partner Rechtsanwälte mbB
Erbprinzenstrasse 27
76133 Karlsruhe
Telephone: +49 (0)721. 782027-0
Fax: +49 (0)721. 782027-27


You can view our imprint here.

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us.


2. Subject of data protection

The subject of data protection is personal data. This is all information that relates to an identified or identifiable natural person (so-called data subject). This includes, for example, details such as name, postal address, e-mail address or telephone number, but also information that necessarily accrues during the use of our website, such as details about the beginning, end and extent of use and the transmission of your IP address.


3. Data processing when calling up our website

The use of our website is generally possible without registration and without providing personal data. However, even if you use our website in this way for purely informational purposes, personal data may be automatically collected and processed. Below you will find an overview of the type, scope, purposes and legal basis of data processing via our website.


a. Provision of our website

When you access our website through your terminal device, we automatically collect and process the following data by means of server log files:

  • Date and time of access,
  • duration of the visit,
  • content of the request (specific page),
  • type of terminal device,
  • operating system used and its interface,
  • language and version of the browser software,
  • access status/HTTP status code
  • the functions you are using,
  • amount of data sent,
  • type of event,
  • referrer URL
  • domain name
  • IP address


We process this data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f) DSGVO, namely for the provision and display of the website, to ensure and maintain technical operation, for the purpose of identifying and eliminating faults and for security reasons (e.g. to clarify cases of abuse or fraud). When you access our website, this data is automatically processed. Without this provision, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your identity.

The collected data is usually deleted after 30 days, unless we exceptionally need it longer for the above-mentioned purposes. In such a case, we delete the data immediately after the purpose ceases to apply.


b. Cookies

So-called cookies, i.e. small text files, may be stored on your terminal device when you visit our website in order to provide you with a comprehensive range of functions, to make use more convenient and to be able to optimise our offers. If you do not wish cookies to be used, you can prevent cookies from being stored on your device by making the appropriate settings in your internet browser or by using separate opt-out options. Please note that the functionality and scope of functions of our website may be limited as a result. For detailed information on the type, scope, purposes, legal basis and objection options for data processing with cookies, please refer to the descriptions of the individual functions that rely on the use of cookies.


c. Matomo (formerly Piwik)

We use Matomo, an open source software for statistical analysis of user access to our website. The data processing is based on our legitimate interests within the meaning of Art. 6 Para. 1 lit. f) DSGVO, namely our interest in the analysis, optimisation and economic operation of our website.

The IP address of the user is shortened by Matomo before it is stored. Matomo uses cookies that are stored on your terminal device and that enable an analysis of your use of our website. In doing so, pseudonymous user profiles can be created from the processed data. The information generated by the cookie about your use of our website is stored on a server of our service provider and is not passed on to third parties.

Preventing the use of Matomo/Piwik is possible by unchecking the box in the section “Website analysis with Piwik” and thus activating the opt-out plugin.

You can find more information on data protection with Matomo under the following link:


4. Data processing in the context of an application with us

We take the protection of your personal data very seriously and treat the data entrusted to us confidentially and responsibly in accordance with the applicable data protection regulations. Therefore, we would like to inform you at this point how we implement the provisions of data protection in our firm and what information we collect during your application and, of course, how it is used.

The following information applies to applications by e-mail as well as applications that reach us by post or via other channels (e.g. applicant portals). The following paragraphs inform you about which personal data we process as part of the application process.

“Personal data” is any data that can be related to you personally, e.g. name, address, email addresses, certificates, etc. “Processing” means any operation performed with or without the aid of automated procedures in relation to personal data, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.


a. Collection and processing in the application procedure

Via or via advertisements elsewhere, you will receive information on our currently advertised positions for which you can apply via e-mail or application form.

We will process your application documents in accordance with the following provisions as part of the application process at our firm and pass on your data to the employees involved in the selection process if this is necessary for the specific application process. Ultimately, it is always people who decide on your employment with us; fully automated decision-making does not take place.

In order to conclude an employment contract with our firm, you are required to provide us with meaningful application documents.


b. Categories of data

We process the following categories of data on our applicants:

  •  Correspondence (e-mails etc.)
  •  Application documents submitted
  •  Evaluation of the applicants


c. Purpose of use

The personal data and documents provided by you as part of the application process, as well as notes prepared by us, will be processed by us solely for the purpose of processing your application, i.e. primarily deciding whether and, if so, for which position and on what terms you should be hired. Your data will be processed by our firm in accordance with the applicable data protection regulations. Your data will only be passed on to third parties outside the firm in exceptional cases if you give your separate consent or if there is a legal obligation to do so.


d. Legal basis for data processing

The legal basis for the processing of personal data in an application procedure is Art. 6 (1) b) DSGVO as well as Section 26 (1) of the German Federal Data Protection Act (BDSG), as the processing of your data is necessary for the implementation of pre-contractual measures, namely the decision on the establishment of an employment relationship.

If you consent to the further storage of your personal data in our applicant pool after the application process has – for the time being – been unsuccessful, the legal basis for the associated further processing is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future without giving reasons.


e. Recruitment and internal data recipients

In our firm, job appointments are generally made in cooperation with the relevant members of staff in the teams.

If, at the time of your application, we have other vacancies that match your profile, we may also forward your application to the relevant members of staff. If you do not agree to your application being forwarded, please let us know when you apply or by e-mail.

All employees involved in our recruitment process are obliged to maintain data secrecy in accordance with current data protection regulations.


f. Unsolicited application

With a speculative application you are not applying for a specific advertised position, but showing your general interest in working for our firm. In this case, we will respond to your application to indicate the positions for which we consider your applicant profile suitable and the departments or teams to which we will forward your application so that you are informed about who has access to your personal data.


g. Retention periods

If your application to us has led to employment with the firm, your data will be taken over and processed for the new employment relationship insofar as it is necessary for the establishment and implementation of the employment relationship.

In the event of a rejection, we will store your personal data and documents for 6 months in order to be able to process any queries relating to your application and our rejection. In this case, your data will be deleted six months after the end of the application process. In the event that you have consented to further processing of your personal data in our applicant pool, the data will be deleted when it is no longer necessary for the purposes for which it was collected and processed to that extent, as a rule after a period of 2 years after inclusion in the applicant pool.


h. Withdrawal of the application

You can withdraw your application with us at any time. To do so, please send us an e-mail to your contact person at our law firm.

Please note that for legal reasons it is not possible for us to delete all data relating to your application immediately, as we have to retain certain data for a period of six months in order to comply with legal requirements.


i. Data Security

Our firm uses technical and organizational security measures to protect the data you provide from manipulation, loss, destruction or unauthorized access. Our security measures are continuously revised in accordance with technological developments.


j. Miscellaneous

If you have any questions or suggestions regarding our application process, please contact your contact person at our firm or


5. Contacting us

If you provide us with personal data by e-mail or via a contact form, this is always done on a voluntary basis. Your information will be processed by us for the purpose of handling your contact request and its processing in accordance with Art. 6(1)(b) DSGVO and may also be passed on to one of our affiliated companies or to third parties in this context. We delete the data you have provided as soon as the purpose for which it was collected ceases to apply completely, unless a new legal basis intervenes (e.g. further processing of the data is required to fulfil a concluded contract) and there are no legal obligations to retain data.


6. Recipients of personal data

We only pass on your personal data to external third parties if this is necessary for the processing or handling of your request, if there is another legal permission or if we have your consent for this. External recipients may in particular be service providers that we use for the provision of services, for example in the areas of technical infrastructure and maintenance of our website. Such processors are carefully selected by us and regularly reviewed. They may only use the data for the purposes specified by us and in accordance with our instructions.

If data is transferred to bodies whose registered office or place of data processing is not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we will ensure prior to the transfer that, outside of exceptional cases permitted by law, either an adequate level of data protection exists at the recipient or your consent to the data transfer has been obtained.


7. Storage period

We store your personal data only for as long as is necessary to fulfil the purposes or – in the case of consent – as long as you do not revoke your consent. In the event of an objection, we will delete your personal data unless its further processing is permitted or even mandatory under the relevant legal provisions (e.g. within the scope of commercial and tax law retention obligations). We will also delete your personal data if we are obliged to do so for legal reasons.


8. Data subject rights

As a data subject, you have a number of rights available to you. In detail these are:

  • Right to information: you have the right to obtain information about the data we hold about you.
  • Right of correction and deletion: You can demand that we correct incorrect data and delete your data.
  • Restriction of processing: You can demand that we restrict the processing of your data.
  • Data portability: If you have provided us with data on the basis of a contract or consent, you can request that you receive the data you have provided in a structured, common and machine-readable format or that we transfer it to another controller.
  • Objection to data processing on the legal basis of “legitimate interest”: You have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of “legitimate interest”. If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for further processing that override your rights.
  • Objection to cookies: You can also object to the use of cookies at any time.
  • Revocation of consent: If you have given us consent to process your data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data until revocation remains unaffected.
  • Right to lodge a complaint with the supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. To do so, you can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.


The rights described above are only available to you on condition that the applicable legal requirements are met, even if this is not expressly mentioned in the above description.

If you have any questions about the processing of your personal data, your data subject rights and any consent you may have given, you can contact us free of charge. To exercise any of your aforementioned rights, please contact us at or by post at the address given in section 1 above. Please ensure that we are able to clearly identify you.


9. Links to third-party offers

Websites and services of other providers linked to our website have been designed and are provided by third parties. We have no influence on the design, content and function of these third-party services. We expressly distance ourselves from all content of all linked third-party services. Please note that the third-party services linked to our website may install their own cookies on your end device or collect personal data. We have no influence on this. Please inform yourself directly with the providers of these linked third-party offers.


10. Status

From time to time it may become necessary to adapt the content of this data protection notice. We therefore reserve the right to change it at any time. We will also publish the amended version of the data protection information here. The current version of our data protection information applies at the time of your visit.


Status: 06.09.2021



Web analysis with Piwik

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.