Privacy Policy of HK2 Rechtsanwälte
Data protection is our area of expertise. It naturally begins with this website. Therefore, we would like to inform you comprehensively about the collection, processing, and use of your personal data (“data processing”), in particular:
- When and in which circumstances we process your data
- What types of data we process and for what reasons
- To which recipients your data may be disclosed
- Which rights you have regarding the processing of your data by us
This privacy policy applies solely to the use of personal data on our website www.hk2.eu. If you leave our website via a link or visit our presence on a social media platform, the respective provider’s data protection regulations apply.
Data transmission to and from our website is encrypted using TLS technology.
You can access and print this privacy policy at any time under the following address: https://www.hk2.eu/de/data-use-policy/
I. Contact Information
The controller responsible for data processing under the EU General Data Protection Regulation (GDPR) is:
HK2 Rechtsanwälte GbR represented by the partners Karsten U. Bartels, LL.M., Bernhard Kloos, Philip Koch Hausvogteiplatz 11 A 10117 Berlin Germany Phone: +49 30 2789000 Fax: +49 30 27890010 Email: mail@hk2.eu
Further information about HK2 Rechtsanwälte is available on our website.
You can contact our Data Protection Officer at: mail@comtection.de
II. General Information on Data Processing
1. Scope of Personal Data Processing
The provision of our website requires the processing of various types of information. The extent of data processing also depends on how you use the website’s functionalities, for example, if you contact us via the contact form or subscribe to our newsletter and thereby consent to the processing of your data.
Visitors to our website are not subject to automated decision-making under Art. 22 GDPR.
2. Legal Bases for Processing
We process personal data based on the following legal grounds under GDPR:
| Purpose | Legal Basis | Explanation |
|---|---|---|
| Performance of contract or pre-contractual measures | Art. 6(1)(b) GDPR | Processing only takes place to the extent necessary for the exercise and fulfilment of the rights and obligations arising from the contract or for implementing pre-contractual measures. Unless expressly stated otherwise, we only process data to this extent. |
| Legitimate interests | Art. 6(1)(f) GDPR | Processing takes place insofar as we have a legitimate interest and there are no overriding opposing interests of the data subject that are apparent. The specific legitimate interest is explained in this privacy notice in the context of the respective processing description. |
| Consent | Art. 6(1)(a) GDPR | Processing takes place insofar as you have expressly consented to the nature and scope of the data processing. You may withdraw your consent at any time with effect for the future. Processing carried out up to the time of withdrawal remains unaffected. |
| Legal obligations | Art. 6(1)(c) GDPR | Processing takes place insofar as this is necessary to comply with legal obligations to which HK2 Rechtsanwälte are subject. |
3. Erasure of data and storage period
We erase your personal data as soon as the legal basis for its processing no longer applies. In some cases, multiple legal bases may exist in parallel, or when one legal basis ceases to apply, a new one may become relevant — for example, a statutory obligation to retain certain data in order to comply with legal record-keeping duties.
III. Data processing for provision of the website
In order to display the website to you, it is necessary for us to process certain information. This already takes place when you access our website.
When you access our website, your browser transmits various information to our server. We require this in order to establish and maintain the connection. Among this data is also your IP address, which we treat as personal data. The processing of this data is carried out on the basis of our legitimate interest in providing our website to inform you about our services and current topics in our areas of activity.
1. Cookies
Our website uses cookies. A cookie is a small text file containing information that is transmitted by your browser and stored on your device.
We distinguish between:
Technically necessary cookies
These are required to ensure that our website functions (e.g. for secure connections, language settings, as well as for controlling and documenting cookie consent). The processing is carried out on the basis of a legal obligation (Art. 6(1)(c) GDPR) and on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in the technically proper operation and use of our website.
Optional cookies
We also use cookies that are not technically necessary, e.g. for reach measurement, improving our offering, or marketing purposes (e.g. LinkedIn cookies). The legal basis for this is your consent pursuant to Section 25 (1) TTDDG in conjunction with Art. 6(1)(a) GDPR. Transfers of data to third countries (in particular the USA) cannot be ruled out in this context. Providers such as LinkedIn are certified under the EU-U.S. Data Privacy Framework.
To manage your consents, we use the service “Cookiebot” by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot displays a banner when you first visit our website, in which you can consent to the setting of certain cookies or reject them. Your selection will be documented together with your consent ID as proof of consent and stored. Processing is carried out on the basis of our legitimate interest in meeting the legal obligation to provide evidence of consent pursuant to Art. 6(1)(c) GDPR in conjunction with Art. 7 GDPR and Section 25 TTDDG (obligation to document granted consent).
You may withdraw or change your consent at any time with effect for the future via the link “[Cookie Settings]” in the footer of our website. You can find an up-to-date overview of all cookies used, their purposes, providers, and storage duration at any time directly in the Cookiebot Consent Manager.
2. Contacting us via contact form and by electronic mail
You can send us an inquiry at any time using the contact form on our website. The following information is requested: name, email address, and your message. These fields are marked as mandatory. Any additional data that you send to us in the course of the inquiry — including via the free text field — is provided voluntarily. If you send us an email to one of the addresses listed on the website, we will process the data contained in your message depending on the purpose of the message. We use this data solely for responding to your inquiry and for any resulting communication.
The legal basis for processing your inquiry depends on your request. As a rule, our legitimate interest in providing the contact functionality and in responding to your inquiry constitutes the legal basis. Where your inquiry aims at the conclusion of a contract or relates to an existing contract, the processing takes place in the context of pre-contractual measures. In individual cases, there may also be a statutory obligation to store the communication. Your data will generally be deleted once your inquiry has been fully processed. In the event that a contract is concluded, the data may be processed further for contractual performance.
3. Newsletter
To register for our newsletter, you only need to provide your email address. Any information beyond that is voluntary. We use your email address initially to verify your registration by sending you an email asking you to confirm via a link (double opt-in). Only after you have done this the newsletter will be sent.
No further data is collected. You can unsubscribe from the newsletter at any time with effect for the future. The easiest way to do this is to click the unsubscribe link provided at the end of each newsletter. Alternatively, you can send an email to mail@hk2.eu
VI. Rights of the data subject
If personal data relating to you is processed, you are a data subject within the meaning of Art. 4(1) GDPR. As a data subject, you have the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details provided in Section I.
Right of access pursuant to Art. 15 GDPR
You have the right to obtain information about the personal data concerning you that we process. This includes the mandatory information set out in Art. 15 GDPR.
Right to rectification pursuant to Art. 16 GDPR
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data.
Right to erasure pursuant to Art. 17 GDPR
You have the right to obtain the erasure of your personal data where one of the grounds set out in Art. 17 GDPR applies, in particular where there is no longer a legal basis for the processing.
Right to restriction of processing pursuant to Art. 18 GDPR
You have the right to obtain restriction of processing of your personal data where one of the conditions set out in Art. 18 GDPR applies, in particular instead of erasure of the data at your request.
Right to data portability pursuant to Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us.
Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR
Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority competent for you.
VII. Recipients of data
Within the scope of processing your personal data on our website, some processing is carried out by processors, in particular the hosting of the website, the sending of the newsletter, and the use of Google Analytics. These service providers are engaged on the basis of a data processing agreement in accordance with Art. 28(3) GDPR.
VIII. Data transfers to third countries
As a rule, the processing of your personal data takes place within the European Union or the European Economic Area.
If, in exceptional cases, we transfer personal data to a third country or have it processed there, this only occurs if
- an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists for the respective third country (e.g. for Switzerland or for certified U.S. companies under the EU-U.S. Data Privacy Framework), or
- we have concluded the EU Commission’s Standard Contractual Clauses (SCC) with the recipient and – where required – agreed additional safeguards, or
- you have expressly given your consent pursuant to Art. 49(1)(a) GDPR.
This may in particular apply to optional services that we can use with your consent via our cookie consent tool Cookiebot, e.g. LinkedIn (marketing and analytics cookies).
Status: October 2025