Privacy Policy

This is a translation of the German privacy policy. In case of doubt, the German version shall prevail.

1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
GY Legal, Rechtsanwältin (attorney at law) Janine Gerner-Yumusak, Fregestr. 26, 12161 Berlin, Germany
Phone: +49 172 3947796 · Email: info@gy-legal.de
No data protection officer has been appointed, as there is no legal obligation to do so.

2. Accessing the website and hosting
This website is provided via the Framer platform. The provider is Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands. Framer uses the infrastructure of Amazon Web Services (AWS) for hosting. When you access the website, technically necessary data is processed: IP address, date and time of access, the page accessed and the previously visited page (referrer), browser type and operating system. The purpose is to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and functional operation of the website. The data is deleted as soon as it is no longer required for these purposes. We have concluded a data processing agreement with Framer pursuant to Art. 28 GDPR.

3. Fonts
The fonts used on this website are loaded from Framer's servers. No connection is established to servers of Google or other font providers.

4. No cookies; audience measurement by Framer
This website does not use cookies or any tracking or advertising services. Framer compiles anonymous visitor statistics for us (page views, number of visitors, referring pages). For this purpose, your IP address and browser identifier are irreversibly encrypted (hashed) on access using a key that changes daily. Neither the IP address nor personal profiles are stored, and we are unable to attribute the data to you. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in analysing the use of our website. You may object to this processing as described in section 10.

5. Contact form
When you write to us using the contact form, we process the data you enter: name, email address and message, and, on a voluntary basis, company and phone number. Name, email address and message are required; without them we cannot process your enquiry. Your entries are stored by Framer and forwarded by email to our mailbox (see section 6). We process the data to respond to your enquiry and, before accepting a mandate, to check for possible conflicts of interest. The legal bases are Art. 6(1)(b) GDPR where your enquiry is aimed at engaging us, Art. 6(1)(c) GDPR in conjunction with Sec. 43a(4) of the German Federal Lawyers' Act (BRAO) for the conflict check, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). If no mandate results, we delete your enquiry three months after the end of the communication, unless statutory retention obligations apply. Please do not send any confidential documents with your initial enquiry.

6. Contact by email and phone
The purposes, legal bases and deletion periods set out in section 5 apply accordingly to enquiries by email or phone. Our email infrastructure is provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We have concluded a data processing agreement with STRATO pursuant to Art. 28 GDPR.

7. Processing in the context of a mandate
If a mandate is established, we process the data relating to it in order to perform the mandate (Art. 6(1)(b) GDPR) and to comply with professional and tax law obligations (Art. 6(1)(c) GDPR). We generally retain client files for six years in accordance with Sec. 50 BRAO; retention periods under tax and commercial law (Sec. 147 German Fiscal Code (AO), Sec. 257 German Commercial Code (HGB)) remain unaffected. All information relating to a mandate is subject to attorney-client confidentiality (Sec. 43a(2) BRAO, Sec. 203 German Criminal Code (StGB)). Clients receive further details with the engagement agreement.

8. External links
This website contains a link to our LinkedIn profile. This is a simple link, not an embedded plugin. Data is only transmitted to LinkedIn once you click the link. LinkedIn is responsible for any processing on its platform.

9. Recipients and transfers to third countries
Recipients of personal data are the processors named above, Framer (including the sub-processors engaged by Framer, such as AWS) and STRATO. Framer may have personal data processed in countries outside the European Economic Area. Such transfers take place only on the basis of an adequacy decision of the European Commission, in particular the EU-US Data Privacy Framework where the recipient is certified under it, or on the basis of the EU Standard Contractual Clauses (Art. 45, 46 GDPR). Framer's current list of sub-processors is available at trust.framer.com.

10. Your rights
Subject to the statutory requirements, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR), as well as the right to withdraw any consent given with effect for the future (Art. 7(3) GDPR). Where data is subject to attorney-client confidentiality, the right of access may be restricted under Sec. 29(1) sentence 2 of the German Federal Data Protection Act (BDSG).

Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint (Art. 77 GDPR): You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany. To exercise your rights, simply send a message to info@gy-legal.de.

11. No automated decision-making
No automated decision-making, including profiling (Art. 22 GDPR), takes place.

12. Data security
This website uses an encrypted connection (TLS). We take appropriate technical and organisational measures to protect your data.

13. Version
Last updated: October 2026