Controller and data collected
The controller for personal data processed on this website is Redwood Law, Kaiserstraße 6, 97070 Würzburg, Germany, e-mail office@redwood.de, phone +49 931 359 8140. We collect the data you enter in the contact form (name, e-mail address, phone number and the content of your message), together with technical data automatically transmitted by your browser such as IP address, browser type, date and time of access and referring page.
Purposes and legal bases
Form data is processed solely to answer your enquiry and to prepare a possible mandate, on the basis of Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). Technical log data is processed under Art. 6(1)(f) GDPR to keep the site secure and stable. Optional cookies are set only after you give consent under Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.
Storage and disclosure
Enquiry data is retained for as long as needed to deal with your request and thereafter for the statutory retention periods under German commercial and tax law; server logs are deleted or anonymised within a short period. We do not sell personal data. Disclosure is limited to processors bound by a data processing agreement (hosting and e-mail providers) and to courts, authorities or opposing counsel where this is required to carry out a mandate or by law. Where a service provider processes data outside the EU, the transfer is safeguarded by the European Commission's standard contractual clauses.
Your rights
Under the GDPR and the German Federal Data Protection Act (BDSG) you have the right to access your data, to have it rectified or erased, to restrict processing, to data portability and to object to processing based on legitimate interests. To exercise any of these rights, write to office@redwood.de. You may also lodge a complaint with the Bavarian Data Protection Authority or the supervisory authority of your habitual residence. Please note that professional confidentiality obligations may limit erasure of data held in an active or archived case file.