Statement on data protection

1. Name and contact details of the responsible person

This statement of data protection informs about the processing of personal data on the firm's website:

Thilo Rath
Dr. Langenmayr und Partner mbB, Seidlstraße 30, 80335 München 
This email address is being protected from spambots. You need JavaScript enabled to view it.
089 55 17 07 0

Contact details of the data protection officer:
The data protection officer of the office can be reached at the above office address and at This email address is being protected from spambots. You need JavaScript enabled to view it.

2. Scope and purpose of the processing of personal data

2.1 Calling up the website

When you access this website, the Internet browser used by the visitor automatically sends data to the server of this website and stores it in a log file for a limited period of time. Until automatic deletion, the following data will be stored without further input by the visitor:

  • IP address of the visitor's terminal device,
  • date and time of access by the visitor,
  • Name and URL of the page called up by the visitor,
  • The website from which the visitor accesses the offices website (referrer URL),
  • browser and operating system of the visitor's terminal device and the name of the access provider used by the visitor.

The processing of this personal data is justified pursuant to Art. 6 para. 1 sentence 1 letter f) DSGVO. The office has a legitimate interest in data processing for this purpose,

  • to quickly establish a connection to the offices website,
  • to enable a user-friendly application of the website,
  • to recognise and ensure the security and stability of the systems, and
  • to facilitate and improve the administration of the website.

The processing does not take place expressly for the purpose of gaining knowledge about the person of the visitor of the website.

2.2 Contact form

Visitors can send messages to the firm via an online contact form on the website. In order to receive a reply, at least a valid e-mail address must be provided. All other information may be provided voluntarily by the requesting person. By sending the message via the contact form, the visitor consents to the processing of the personal data transmitted. Data processing is carried out exclusively for the purpose of processing and answering enquiries via the contact form. This is done on the basis of voluntarily given consent pursuant to Art. 6 Para. 1 Sentence 1 Letter a) DSGVO. The personal data collected for the use of the contact form are automatically deleted as soon as the enquiry is completed and there are no reasons for further storage (e.g. subsequent commissioning of our firm).

2.3 Newsletter

By registering for the newsletter, the visitor expressly agrees to the processing of the personal data transmitted. To subscribe to the newsletter, only an e-mail address of the visitor needs to be entered. The legal basis for the processing of the visitor's personal data for the purpose of sending newsletters is consent in accordance with Art. 6 Para. 1 Sentence 1 Letter a) DSGVO. The visitor can unsubscribe from receiving future newsletters at any time. This can be done by using a special link at the end of the newsletter or by sending an email to This email address is being protected from spambots. You need JavaScript enabled to view it.

3. Data transfer

Personal data will be transmitted to third parties if

  • the data subject has expressly consented to this pursuant to Art. 6 para. 1 sentence 1 letter a) DSGVO
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 letter f) DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that the data subject has an overriding legitimate interest in not disclosing his or her data,
  • for the transmission of data in accordance with Article 6 para. 1, first sentence, letter 1. c) DSGVO a legal obligation exists, and/or
  • This is required under Art. 6 para. 1 sentence 1 letter b) DSGVO for the performance of a contractual relationship with the data subject.

In other cases, personal data will not be passed on to third parties.

4. Cookies

So-called cookies are used on the website. These are data packets that are exchanged between the server of the offices website and the visitor's browser. These are stored by the respective devices used (PC, notebook, tablet, smartphone, etc.) when the website is visited. Cookies cannot cause any damage to the devices used in this respect. In particular, they do not contain any viruses or other malware. Information is stored in the cookies, which in each case results in connection with the specifically used terminal device. Under no circumstances can the office obtain direct knowledge of the identity of the visitor to the website. Cookies are largely accepted according to the basic browser settings. The browser settings can be set in such a way that cookies are either not accepted on the devices used or that a special note is made before a new cookie is created. Please note, however, that deactivating cookies may prevent the best possible use of all website functions. The use of cookies serves to make the use of the law firm's website more convenient. For example, session cookies can be used to track whether the visitor has already visited individual pages on the website. After leaving the website, these session cookies are automatically deleted.

Temporary cookies are used to improve user-friendliness. They are stored on the visitor's device for a temporary period of time. When the website is visited again, it is automatically recognised that the visitor has already called up the page at an earlier point in time and which entries and settings have been made in order not to have to repeat them.

Cookies are also used to analyse visits to the website for statistical purposes and to improve the service. These cookies make it possible to automatically recognise that the website has already been called up by the visitor when the user visits it again. The cookies are automatically deleted after a specified period of time. The data processed by cookies are justified for the above-mentioned purposes for the protection of the legitimate interests of the office according to Art. 6 Para. 1 Sentence 1 Letter f) DSGVO.

5. Web Analytics Services

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). The use is based on Art. 6 para. 1 p. 1 lit. f. DSGVO. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website such as.

  • Browser type/version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

are usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. We have also extended Google Analytics on this website with the code "anonymizeIP". This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. [You can find information on the integration of the opt-out cookie at:

We continue to use Google Analytics to analyse data from Double-Click-Cookies and also AdWords for statistical purposes. If you do not wish this, you can deactivate this via the Ads Preferences Manager (

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (


Deactivate Google Analytics

6. Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.The purpose of reCAPTCHA is to verify whether data entry on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.For more information on Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Use at the following links: and

7. Plugins and tools


This website embeds videos from the website YouTube. The operator of the website is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our websites on which YouTube is embedded, a connection to the YouTube servers is established. In doing so, the YouTube server is informed which of our pages you have visited.

Furthermore, YouTube may store various cookies on your terminal device or use comparable technologies for recognition (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Further information on the handling of user data can be found in YouTube's privacy policy.

8. Your rights as a data subject

Insofar as your personal data are processed on the occasion of your visit to our website, you are entitled to the following rights as a "person concerned" within the meaning of the DSGVO:

8.1 Information

You can request information from us as to whether your personal data will be processed by us. There is no right to information if the provision of the requested information would violate the duty of confidentiality pursuant to § 57 Para. 1 StBerG or if the information must be kept secret for other reasons, in particular due to the overriding legitimate interest of a third party. Deviating from this, there may be an obligation to provide the information if your interests outweigh the interest of secrecy, in particular taking imminent damage into account. The right to information is also excluded if the data is only stored because it may not be deleted due to legal or statutory retention periods or solely for purposes of data security or data protection control, provided that the provision of information would require a disproportionately high effort and processing for other purposes by appropriate technical and organizational measures is excluded. If in your case the right to information is not excluded and your personal data is processed by us, you can request information from us about the following information:

  • purposes of the processing,
  • categories of personal data processed by you,
  • Recipients or categories of recipients to whom your personal data is disclosed, in particular recipients in third countries,
  • If possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining the storage duration,
  • the existence of a right to correction or deletion or limitation of the processing of personal data concerning you or of a right to object to such processing,
  • the existence of a right of appeal to a data protection supervisory authority,
  • If the personal data has not been collected from you as the data subject, the available information about the origin of the data,
  • If necessary, the existence of automated decision making, including profiling and meaningful information about the logic involved and the scope and desired impact of automated decision making,
  • If necessary, in the case of transfer to recipients in third countries, unless the EU Commission has made a decision on the adequacy of the level of protection pursuant to Art. 45 para. 3 DSGVO, information on which suitable guarantees are provided pursuant to Art. 46 para. 2 DSGVO for the protection of personal data.

8.2 Correction and completion

If you discover that we have inaccurate personal data about you, you may request that we correct that inaccurate data immediately. If your personal data is incomplete, you may request that it be completed.

8.3 Deletion

You shall have a right of cancellation ("right to be forgotten"), unless the processing is necessary for the exercise of freedom of expression, of information or of a legal obligation or for the performance of a task which is in the public interest and one of the following reasons applies:

  • Personal data are no longer necessary for the purposes for which they were processed.
  • The only justification for the processing was your consent, which you have withdrawn.
  • You have objected to the processing of your personal data, which we have made public.
  • You have objected to the processing of personal data not made public by us and there are no overriding legitimate reasons for the processing.
  • Your personal data has been processed unlawfully.
  • The deletion of personal data is necessary to fulfil a legal obligation to which we are subject.

There is no right to deletion if, in the case of lawful non-automated data processing, the deletion is not possible or only possible with disproportionately high effort due to the special type of storage and your interest in the deletion is low. In this case, the restriction of processing takes the place of deletion.

8.4 Restriction of processing

You can demand that we restrict the processing if one of the following reasons applies:

  • You dispute the accuracy of the personal data. In this case, the limitation may be requested for a period of time that allows us to verify the accuracy of the data.
  • The processing is unlawful and you demand the restriction of the use of your personal data instead of deletion.
  • Your personal data will no longer be required by us for the purposes of processing, but which you need to assert, exercise or defend legal claims.
  • You have lodged an objection pursuant to Art. 21 Para. 1 DSGVO. The restriction of the processing can be demanded as long as it is not yet certain whether our justified reasons outweigh your reasons.

Limitation of processing means that personal data will only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest. Before we remove the restriction, we have a duty to inform you.

8.5 Data transferability

You have a right to data transfer if the processing is based on your consent (Art. 6 para. 1 sentence 1 letter a) or Art. 9 para. 2 letter a) DSGVO) or on a contract to which you are a party and the processing is carried out using automated procedures. In this case, the right to data transfer includes the following rights, provided that the rights and freedoms of other persons are not impaired: You may request that we keep the personal data that you have provided to us in a structured, common and machine-readable format. You have the right to transfer this data to another responsible person without any hindrance on our part. As far as technically feasible, you can demand that we transfer your personal data directly to another responsible person.

8.6 Objection

If the processing is based on Art. 6 para. 1 sentence 1 letter e) DSGVO (performance of a task in the public interest or in the exercise of official authority) or on Art. 6 para. 1 sentence 1 letter f) DSGVO (legitimate interest of the person responsible or a third party), you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on Art. 6 para. 1 sentence 1 letter e) or letter f) DSGVO. After exercising the right of objection, we will no longer process your personal data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

You may object to the processing of your personal data for direct marketing purposes at any time. This also applies to profiling in connection with such direct marketing. After exercising this right of objection, we will no longer use the relevant personal data for direct marketing purposes.

You have the option of informing our office of your objection by telephone, e-mail or to the postal address given at the beginning of this data protection declaration.

8.7 Revocation of consent

You have the right to revoke your consent at any time with effect for the future. The revocation of the consent can be communicated informally by telephone, by e-mail or to our postal address. The revocation does not affect the legality of the data processing, which took place on the basis of the consent until the receipt of the revocation. After receipt of the revocation the data processing, which was based exclusively on your consent, is stopped.

8.8 Complaint

If you believe that the processing of personal data concerning you is unlawful, you may lodge a complaint with a data protection supervisory authority responsible for the place of your stay or work or for the place of suspected infringement.

9. Status and update of this privacy statement

This Privacy Policy is dated March 23, 2022 and we may update this Privacy Policy from time to time to improve our privacy practices and/or to reflect changes in government practices or court rulings.

Get to know the partners of our office for holistic advice!


We are at your disposal to answer your questions, your feedback and your suggestions.

Contact us

Dr. Langenmayr und Partner; Seidlstraße 30, 80335 München