Privacy Policy

Koudous Law wants to explain what personal data we collect when you use our website or services. Under the General Data Protection Regulation (GDPR), personal data refers to any information relating to an identified or identifiable person, e.g., name, address, email, or your behavior on the website.

Who is responsible for your data?

The data controller under Article 4(7) of the GDPR is Attorney Roman Koudous (“Koudous Law”).

Our contact details:
Address: Kurfürstendamm 67, 10707 Berlin
Phone: +49 (0)30 5200 1249
Email: info@koudous-law.de

Overview of data processing

Here, we summarize what data Koudous Law processes, why we do it, and who is affected.

Types of data we process:

• Contact data (e.g., name, email, phone number)
• Content data (e.g., text from forms)
• Contract data (e.g., contract-related information)
• Usage data (e.g., visited pages, time spent)
• Meta, communication, and procedural data (e.g., IP addresses, device information)

Who is affected:

• Communication partners (e.g., people who contact us)
• Users (e.g., website visitors)
• Business and contractual partners

Why we process data:

• To respond to inquiries and communicate with you
• To keep our systems secure
• To measure how many people use our services
• To track affiliate links
• To manage and respond to inquiries
• To collect feedback
• For marketing purposes
• To create user profiles
• To provide and improve our online offerings
• To operate our IT infrastructure

Legal basis

Koudous Law processes data based on the GDPR. The main reasons are:

• Consent (Art. 6(1)(a) GDPR): You have agreed to let us use your data for a specific purpose.
• Contracts (Art. 6(1)(b) GDPR): We need the data to fulfill a contract with you or to respond to your request before entering into a contract.
• Legitimate interests (Art. 6(1)(f) GDPR): We use data for our business interests, as long as your rights do not outweigh them.

In addition to the GDPR, German laws like the Federal Data Protection Act (BDSG) apply. It governs, for example, your right to access or delete data. State data protection laws may also apply. If a specific legal basis applies, we will inform you here.

Data sharing

Sometimes, Koudous Law shares your data with others, e.g., IT service providers or companies embedding content on our website. We comply with legal requirements and enter into contracts to protect your data.

• Within our group: Koudous Law may share data with other companies in our group, e.g., for administrative purposes, based on our interests, for contracts, or with your consent.
• Within our organization: Koudous Law may share data internally for the same reasons—administration, contracts, or with your consent or legal permission.

International data transfers

If Koudous Law processes or shares data outside the EU or the European Economic Area (EEA), we do so only in compliance with the law. This may be secured by:

• An EU “adequacy decision” (Art. 45 GDPR), recognizing a country’s data protection level.
• Standard contractual clauses (Art. 46(2)(c) GDPR) or your explicit consent (Art. 49(1) GDPR).

For example, under the EU-US Data Privacy Framework (DPF), some US companies are certified as secure (see www.dataprivacyframework.gov/). We will inform you if we use such providers. More details are available on the EU Commission’s website (ec.europa.eu/info/law/law-topic/data-protection).

Data deletion

Koudous Law deletes your data as soon as we no longer need it, you withdraw your consent, or the legal basis no longer applies—unless we must retain it for legal reasons (e.g., tax law). In such cases, we restrict the data and use it only for that purpose.

Your rights

Under the GDPR (Articles 15-21), you have rights regarding your data:

• Objection: You can object to processing if it’s based on our interests or used for advertising.
• Withdrawal: You can withdraw your consent at any time.
• Access: You can ask if we process your data and request a copy.
• Correction: You can have incorrect data corrected.
• Deletion or restriction: You can request deletion or restricted use.
• Data portability: You can receive your data in a usable format or have it transferred to someone else.
• Complaint: You can complain to a data protection authority, e.g., where you live or work.

Cookies

Cookies are small files that store information on your device, e.g., to remember logins or analyze usage. Koudous Law uses cookies in compliance with the law:

• We ask for your consent, except for essential cookies (e.g., for security or basic functions).
• With consent, that’s our basis. Otherwise, we rely on legitimate interests (e.g., website operation) or contractual needs.

Types of cookies:

• Temporary: Deleted when you close your browser.
• Permanent: Stored (up to two years unless specified otherwise), e.g., for logins or analytics.

You can withdraw consent or block cookies in your browser. For marketing cookies, you can also use optout.aboutads.info.

Website hosting

Koudous Law processes data (e.g., IP addresses) to provide our online services. We use providers like Vercel and Cloudflare, based on our legitimate interests.

Contact management

When you contact Koudous Law (e.g., via email or form), we process your details to respond—based on our interests or contracts.

Web analytics

Koudous Law uses tools like Vercel Analytics to pseudonymously analyze website usage (e.g., visited pages). This helps us improve it, based on consent or interests.

Social media

Koudous Law has profiles on platforms like Instagram or LinkedIn. We process data there to share content and interact with you, based on our interests. Platform operators also process data—see their privacy policies.

Supervisory authority

For questions or complaints, contact:

Berlin Commissioner for Data Protection and Freedom of Information
Address: Alt-Moabit 59-61, 10555 Berlin
Entrance: Alt-Moabit 60