Our website uses cookies to provide you with the best possible service. In addition to our use of strictly necessary cookies, you can consent to the use of analytics cookies. You can find more information here: To the privacy policy. You can revoke your consent at any time by clicking on the ‘Revoke consent’ button.
kallan privacy policy
Thank you for your interest in our website www.kallan-legal.de (hereinafter “website”’) and our law firm. We attach great importance to the protection of your personal data (hereinafter “personal data” or “data”). This privacy policy applies to data collected by us in connection with clients and other business contacts, in response to an application, after registering for our newsletter or for one of our events and/or when accessing the website. Please read the following information to ensure that you are fully informed about the collection and use of personal data on our website.
Controller and data protection officer
This privacy policy applies to data processing by:
kallan Rechtsanwaltsgesellschaft mbH (hereinafter “kallan”)
Mauerstraße 83/84
10117 Berlin
Tel. +49 (0)30 22 66 99 0
Fax +49 (0)30 22 66 99 10
Email: info@kallan-legal.de
kallan's data protection officer can be reached at the following address: info@kallan-legal.de.
Collection and processing of personal data
In principle, we collect, process and use personal data only if you give your consent or if a legal provision, in particular Art. 6 para. 1 sentence 1 lit. b to f GDPR, permits the processing or use.
Personal data in connection with mandates
In connection with providing legal advice and legal services, we collect and process personal data of (potential) clients, their contractual partners and opponents, as well as third parties involved in the mandate or related to it, such as advisors, auditors, court personnel or witnesses. This includes the respective mandate holders, representatives and employees.
The personal data includes, in particular, contact and communication data, as well as, depending on the type of mandate, further data that is transmitted to us or obtained by us in the course of the mandate. In individual cases, in particular for mandates in the area of labour law, we may also process special categories of personal data within the meaning of Art. 9 para. 1 GDPR, such as health data.
In this context, the collected data will only made available to employees that are involved in the respective mandate and that are necessary for its proper processing and execution. A transfer may take place, among others, to the following third-party recipients: supervisory authorities, tax authorities, service providers, credit reference agencies, courts, law enforcement authorities and other government agencies, auditors. We take all appropriate measures to disclose only the personal data necessary for the processing.
When we collect and process personal data of our clients or potential clients, this is done for the purpose of advising our clients and for the performance and execution of the mandate, i.e. to fulfil the pending or concluded legal services contract. The basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR. In the context of the identification and verification of mandates prescribed by the Money Laundering Act, in the processing for accounting and tax purposes or in the case of an obligation to disclose personal data to government agencies due to a law or an order, we process the personal data on the basis of Art. 6 para. 1 sentence 1 lit. c GDPR to fulfil our corresponding legal obligation. If the processing of special categories of data within the meaning of Art. 9 para. 1 GDPR is necessary for the assertion, exercise or defence of legal claims, we process these data on the basis of Art. 9 para. 2 sentence 1 lit. f GDPR.
The processing of personal data of opposing parties, contractual partners of our clients and other third parties is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR due to our overriding legitimate interest in providing legal advice and legal services to our clients.
Personal data in connection with other business contacts
Furthermore, personal data of persons with whom the law firm maintains business relationships may be collected and processed. This includes, in particular, personal data of contact persons of service providers and suppliers, which we collect and process for the purpose of executing the aforementioned contracts. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.
Personal data in connection with our website
Among other things, you can use the website to subscribe to publications such as our newsletter, submit job applications or register for our events. Data is only collected, stored and processed if you provide it to us when ordering the newsletter, submitting an application or registering for events. Unless otherwise stated in this privacy policy, we use the data you provide without your express consent solely for these purposes. Further information on the specific processing of the data can be found in the respective areas of the website.
Newsletter
If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your e-mail address to regularly send you our newsletter.
You can unsubscribe at any time, for example via a link at the end of the respective newsletter.
Registering for an event
You can register for events using a registration form on our website. To do so, you need to provide your name and email address for the purposes of organising and running the event. Further information, in particular the name of your company, can be provided voluntarily.
Data processing for the purpose of registering for one of our events is carried out on the basis of your voluntarily granted consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or on the basis of Art. 6 para. 1 sentence 1 lit. b or f GDPR.
Application
As part of the application process, you provide us with personal data. This includes, in particular, master data (title, surname, first name, title, address, telephone number, email address) as well as further information from your application documents, such as date of birth, qualifications, professional career. This data is processed for the purpose of applying for employment.
Your data is accessible to the personnel managers and will be made available to selected managers in individual cases. The data will only be processed for the stated purpose to the extent necessary to process the application. The data will be regularly deleted no later than 6 months after completion of the application process, unless you have voluntarily consented to a longer retention period, in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
The legal basis for the processing of personal data in the context of your application to us is Art. 88 GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG) in its latest version.
Log files
When you use our website for informational purposes only, we only collect the personal data that your browser transmits to our server. The information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted: IP address of the requesting computer, date and time of access, name and URL of the retrieved file, referrer URL (website from which access is made), browser used and, if applicable, your computer's operating system and the name of your access provider.
We process the aforementioned data for the purpose of ensuring a smooth connection and convenient use of the website, as well as for evaluating system security and stability and for other administrative purposes. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the aforementioned purposes of data processing. Under no circumstances do we use the collected data to draw conclusions about you as an individual.
Cookies
Among other things, our website uses so-called ‘cookies’, which serve to make our internet presence more user-friendly, more effective and safer overall. Cookies are small text files that are stored on your computer system. We use so-called ‘session cookies’, which are transferred from our server to your computer system. ‘Session cookies’, also known as session cookies, are only stored in the computer's memory during a user's browser session and are automatically deleted from the user's computer when the browser is closed. The data processed by cookies is required for the aforementioned purpose of safeguarding our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
Most web browsers allow the use of cookies by default. If you do not want cookies to be stored on your computer, you can adjust the settings in most browsers and set up general or specific permissions for websites to store cookies. At this point, you can also delete cookies that have already been stored on your computer.
Further information can be found on your browser's help pages. If you decide not to accept any cookies, you can still use the website, but its functionality will be limited.
Google Analytics
Our website uses Google Analytics, a web analysis service provided by Google Inc. (hereinafter ‘Google’), for the purpose of designing and continuously optimising our pages in line with requirements. Google Analytics uses cookies, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity for website operators and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
We only use Google Analytics if you have consented to the use of analytics cookies. You can revoke your consent at any time by clicking on the following button:
You can prevent the installation of cookies by selecting the appropriate settings on your browser; however, we would like to point out that in this case you may not be able to use all the features of this website to their full extent.
The collection and storage of data can be revoked at any time with effect for the future. You can find our contact address for the objection in the imprint. Alternatively, you can use the Google Analytics deactivation add-on (http://tools.google.com/dlpage/gaoptout?hl=de), provided that it is available for your browser.
Please note that this website uses Google Analytics with the extension of IP anonymisation and therefore IP addresses are only processed further in abbreviated form in order to exclude direct personal reference.
Data collection by Google Analytics is necessary for the purposes mentioned to protect our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
CleverReach
This website uses CleverReach to send newsletters and invitations to events. The provider of this service is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach is a service which organises and analyses the distribution of newsletters and invitations. The data you enter to subscribe to our newsletter (e.g. your email address) is stored on CleverReach servers in Germany and Ireland.
Sending our newsletters and invitations with CleverReach enables us to analyse the behaviour of recipients. Among other things, we can see how many recipients have opened the message and how often various links in the newsletter or invitation have been clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action has taken place after clicking on the link in the newsletter or invitation. Further information on data analysis using CleverReach newsletters can be found at:
https://www.cleverreach.com/de/funktionen/reporting-und-tracking/
The data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.
If you do not want CleverReach to analyse your data, you must unsubscribe from the newsletter. For more information, please refer to the CleverReach privacy policy at:
https://www.cleverreach.com/de/datenschutz/
Security
We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Deletion of your data
Unless prevented by statutory retention requirements, your data will be deleted if you request the deletion, if the data is no longer required to fulfil the purpose for which it was stored, or if its storage is no longer permitted for other legal reasons. The personal data collected by us for the mandate will be stored until the expiry of the statutory retention obligation for lawyers (6 years after the end of the calendar year in which the mandate was terminated) and then deleted, unless we are obliged to store it for a longer period of time in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from the German Commercial Code (HGB), German Criminal Code (StGB) or German Fiscal Code (AO)) require a longer storage period or you have consented to a longer storage period in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
Transfer of data to third parties
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only transfer your personal data to third parties if:
- you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the transfer is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not transferring your data,
- in the event that there is a legal obligation to pass on the data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, and
- this is necessary for the performance of a contract to which you are party in accordance with Article 6 para. 1 sentence 1 lit. b GDPR. This includes, in particular, the transfer of data to opposing parties and their representatives (in particular their lawyers) as well as to courts and other public authorities for the purpose of correspondence and to assert and defend your rights.
The transferred data may be used by third parties exclusively for the stated purposes. The attorney-client privilege remains unaffected. Insofar as the data is subject to the attorney-client privilege, it will only be transferred to third parties in consultation with you.
Your rights
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or objection, the existence of a right of appeal, the origin of your data if not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about the details;
- in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us;
- to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;
- to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse to allow its deletion and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;
- to revoke your consent to us at any time in accordance with Art. 7 para. 3 GDPR. As a result, we are no longer allowed to continue the data processing based on this consent in the future, and
- to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our office.
Right of objection
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for doing so that arise from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right to object, which we will implement without you having to specify a particular situation.
If you wish to exercise your right to withdraw consent or your right to object, please use the contact details of the Controller mentioned above.
Amendments
This privacy policy is currently valid and was last updated in July 2025.
It may be necessary to amend this privacy policy due to the further development of our website and offers on it or due to changes in legal or official requirements. The current privacy policy can be accessed and printed at any time on the website.