Privacy Policy

1. Preamble

The protection of your personal data is important to us. Below, we inform you about the personal data we process when you visit our website and use our services.
Personal data is processed exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).
Where terms such as “personal data”, “processing” or “controller” are used in this Privacy Policy, they shall have the meanings assigned to them in Article 4 of the GDPR.

2. Data Controller

The controller within the meaning of the GDPR is:
HARNISCH & PARTNER
Invalidenstraße 123, 10115 Berlin
Telephone +49 (0)30-30329220
E-mail: info@HARNISCH-partner.de

3. Hosting

Our website is hosted by an external hosting provider. Personal data collected through this website is processed on the hosting provider’s servers. This may include, in particular, IP addresses, metadata and communication data, website access data, and any other data generated through the website.
The processing is based on our legitimate interest in ensuring the secure, efficient and reliable operation of our website pursuant to Article 6(1)(f) of the GDPR. Where required, we have entered into a Data Processing Agreement with our hosting provider in accordance with Article 28 of the GDPR.

4. Collection and Storage of Personal Data

a) When visiting our website

When you access our website, your browser automatically transmits information to our website server. This information is temporarily stored in so-called log files.
The following information is collected in particular:
● IP address of the requesting device;
● Date and time of access;
● Name and URL of the requested file;
● Website from which access is made (referrer URL);
● Browser type and operating system used;
● Name of the internet service provider.
This data is processed for the following purposes:
● ensuring a smooth connection to the website;
● ensuring system security and stability;
● technical administration of the website.
The legal basis for this processing is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes listed above.

b) Contact by e-mail

If you contact us by e-mail, we process the data you provide (such as your name, e-mail address, telephone number and the content of your message) in order to process your enquiry.
Where your enquiry relates to an existing or prospective contractual relationship, the legal basis is Article 6(1)(b) of the GDPR. In all other cases, the processing is based on our legitimate interest in handling your enquiry pursuant to Article 6(1)(f) of the GDPR.
The data will be deleted as soon as it is no longer required for processing your enquiry, provided that no statutory retention obligations apply.

5. Cookies and Consent Management

Our website uses cookies. Cookies are small text files that are stored on your device and contain certain information.
Technically necessary cookies are stored on the basis of § 25(2) of the TDDDG and Article 6(1)(f) of the GDPR.
Technically non-essential cookies and similar technologies are used only on the basis of your consent pursuant to Article 6(1)(a) of the GDPR in conjunction with § 25(1) of the TDDDG.
We use the consent management tool “Real Cookie Banner” to manage your consent preferences.
The following data may be processed in particular:
● consent status;
● date and time of your decision;
● browser information;
● pseudonymised user identifier.
The processing is carried out to fulfil our legal obligation to document consent pursuant to Article 6(1)(c) of the GDPR.
Further information is available at:
https://devowl.io/de/wordpress-real-cookie-banner/
You may withdraw or modify your consent at any time with effect for the future via the consent management tool.

6. Analytics and Tracking Tools

Analytics and tracking measures are carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) of the GDPR in conjunction with § 25(1) of the TDDDG.
You may withdraw your consent at any time with effect for the future.

a) Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is used solely for the administration and integration of services and, as a rule, does not itself process personal data.

b) Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyse the use of our website statistically and to optimise our online offering.
The following data may be processed in particular:
● IP address (shortened/anonymised);
● device information;
● browser information;
● user behaviour;
● page views and duration of visits.
Processing takes place exclusively on the basis of your consent.
IP anonymisation has been activated.
Personal data may be transferred to the United States. Google is certified under the EU-U.S. Data Privacy Framework. In addition, the Standard Contractual Clauses pursuant to Article 46 of the GDPR have been concluded.
Further information is available at:
https://policies.google.com/privacy

c) Google Ads Conversion Tracking

We use Google Ads Conversion Tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
This allows us to determine whether users have accessed our website via Google advertisements and have performed certain actions.
Processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) of the GDPR.
Further information is available at:
https://policies.google.com/privacy

d) Google Maps

Our website uses the Google Maps service provided by Google Ireland Limited.
Google Maps is only loaded after you have given your consent.
The use of Google Maps requires the processing of your IP address.
Personal data may also be transferred to Google servers in the United States.
Processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) of the GDPR in conjunction with § 25(1) of the TDDDG.

7. Language Management (WPGlobus)

To provide our multilingual website, we use the WPGlobus plugin.
The language selected by the user is stored in a cookie in order to maintain the chosen language version during subsequent visits.
The processing is based on our legitimate interest in providing a user-friendly multilingual website pursuant to Article 6(1)(f) of the GDPR.

8. Disclosure of Personal Data

Personal data will only be disclosed to third parties where:
● you have given your express consent;
● disclosure is necessary for the performance of a contract;
● we are under a legal obligation to disclose the data; or
● disclosure is necessary for the establishment, exercise or defence of legal claims.
Where personal data is transferred to countries outside the European Union or the European Economic Area, such transfers will only take place in compliance with the requirements of Articles 44 et seq. of the GDPR.

9. Data Subject Rights

You have the right:
● pursuant to Article 15 of the GDPR, to obtain information about your personal data processed by us;
● pursuant to Article 16 of the GDPR, to request the rectification of inaccurate personal data;
● pursuant to Article 17 of the GDPR, to request the erasure of your personal data;
● pursuant to Article 18 of the GDPR, to request the restriction of processing;
● pursuant to Article 20 of the GDPR, to receive your personal data in a structured, commonly used and machine-readable format (data portability);
● pursuant to Article 21 of the GDPR, to object to the processing of your personal data;
● pursuant to Article 7(3) of the GDPR, to withdraw your consent at any time with effect for the future;
● pursuant to Article 77 of the GDPR, to lodge a complaint with a competent supervisory authority.

10. Right to Object

Where personal data is processed on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right to object to such processing in accordance with Article 21 of the GDPR.
Where the objection concerns direct marketing, you have an unconditional right to object.
To exercise your rights, simply send an e-mail to:
info@HARNISCH-partner.de

11. Data Security

We use SSL and/or TLS encryption on our website to protect the transmission of confidential information.
In addition, we implement appropriate technical and organisational security measures to protect your data against manipulation, loss, destruction or unauthorised access.
Our security measures are continuously updated in line with technological developments.

12. Data Retention

Personal data is retained only for as long as necessary to fulfil the respective processing purposes or as required by applicable statutory retention obligations.
Once the relevant purpose no longer applies or the applicable retention period has expired, the data will be deleted or its processing will be restricted.

13. Amendments to this Privacy Policy

This Privacy Policy is currently in effect and was last updated in July 2026.
Due to further developments of our website or changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.