Privacy Policy

We are pleased about your interest in our website. Your privacy is very important to us. Below we provide you with a simple overview of how we handle your personal data when you use our website. Personal data is any data with which you can be personally identified, such as your name, your email address, or your IP address.

1. General Information

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use our website, personal data by which you can be personally identified is collected. This privacy policy explains what data we collect and for what purpose we use it. We would like to point out that data transmission over the internet – e.g. when communicating by email – can have security gaps. Complete protection of data against access by third parties is not possible.

2. Name and Contact of the Controller pursuant to Article 4 (7) GDPR

Dr. Richard Böhr, Hohenzollernring 58, 50672 Cologne
Phone: 0221 2726060
Email: info@notar-boehr.de

Data Protection Officer
The following data protection officer has been appointed at our organization:
Mr. Dipl.-Inform. Olaf Tenti
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Alter Schloßweg 30
58119 Hagen
Phone: +49 (0)2331/356832-0
Email: datenschutz@gdi-mbh.eu
Internet: www.gdi-mbh.eu

In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of North Rhine-Westphalia. You can find the contact details of the State Data Protection Commissioner of North Rhine-Westphalia at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

3. Website Hosting

Our website is operated on servers of e-nitio mediasign GmbH & Co. KG, Melatengürtel 125A, 50825 Cologne, Germany.

4. Data Collected / Server Log Files

When our web pages are accessed, data is automatically collected and stored in log files on the server of our host. This data may have a personal reference. The data collected includes:

• Type of internet browser and
• Browser version
• Operating system
• Referrer URL
• Name of the accessed web page
• Date and time of access
• Amount of data transferred
• Requesting provider
• IP address

5. Purpose of Collection by the Host

The host uses the collected data to ensure the trouble-free operation of the website as well as to ensure IT security and to improve our offering. In the case of specific indications, the log data may be analyzed retrospectively if necessary. This data is not merged with other data sources. The legal basis for the data collection is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest in the data collection arises from the purposes mentioned above. The data stored by the host is automatically deleted after 31 days.

6. Use of Cookies

In addition to the data mentioned above, cookies are used on your computer when you use and visit our website. On your first visit to our website, you will be asked whether you consent to the use of cookies and, if so, which categories you consent to. Cookies are text files that are stored by your browser on your end device (PC, laptop, tablet, smartphone, etc.) to save certain information. Furthermore, these cookies are used to make the use of our offering more pleasant and comfortable for you, or for analytical purposes.

Most of the cookies we use are so-called "session cookies." They serve to make the services of our website technically available to you. Following your visit, these cookies that have been set are automatically deleted by your browser. Other cookies remain on your computer and enable us to recognize your end device on your next visit (so-called persistent or permanent cookies). On your next visit to our website with the same end device, the information stored in cookies is read out either by our website ("first-party cookie") or by another website to which the cookie belongs ("third-party cookie"). These cookies are automatically deleted by your system after a preset period of time, which differs depending on the cookie. Through the stored and returned information, the respective website recognizes that you have already accessed and visited it with the browser of your end device. We use this information to be able to design and display the website optimally according to your preferences. In doing so, only the cookie itself is identified on your end device. Any further storage of personal data only takes place after your express consent or if this is absolutely necessary in order to be able to use the offered service that you have accessed accordingly.

This website uses the following types of cookies, whose scope and functionality are explained below:

Essential cookies:
Strictly necessary cookies ensure functions without which you cannot use our web pages as intended. These cookies are used exclusively by us and serve, for example, to ensure that you, as a logged-in user, always remain logged in when accessing various subpages of our website and thus do not have to re-enter your login data each time a new page is accessed. The legal basis for use is our legitimate interest within the meaning of Art. 6 (1) lit. f) GDPR.

Functional cookies:
Enable our website to store information you have already provided and, based on this, offer you improved functions. The legal basis for the use of these cookies is your consent pursuant to Art. 6 (1) lit. a) GDPR.

Marketing or tracking cookies:
These cookies originate from third parties and are used to collect information about the websites visited by the user, to create targeted advertising for the user, to enable us to display more effective and better advertising, and to enable us to identify the interests of our website visitors in order to make our website even more interesting in the future. Marketing and/or tracking cookies are only set after your active consent. The legal basis for the data processing here is Art. 6 (1) sentence 1 lit. a GDPR.

Opt-out for marketing cookies:
You can also manage cookies used for online advertising via the tools developed in many countries as part of self-regulation programs, such as the US-based https://www.aboutads.info/choices/ or the EU-based https://www.youronlinechoices.com/de/praferenzmanagement/.

You can revoke this consent to the cookies at any time with effect for the future by deleting the cookies in the browser cache of your web browser.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, e.g. third-party cookies (cookies that are set by a third party, i.e. not by the actual website you are currently on), exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. You can delete stored cookies at any time using your web browser.

You have the option to generally deactivate cookies in your browser at any time. However, if cookies are deactivated, the functionality of this website may be limited.

Deleting cookies:
Cookies are stored on your end device until you delete these cookies, which is possible at any time. Furthermore, expired cookies are automatically deleted by your browser if you have set up your browser accordingly. Expired cookies are no longer sent to our servers by your browser and can therefore no longer be used by us.

Here you will find information on how to delete cookies in your browser and manage cookie settings for the most common browsers:

Desktop PC / Laptop

• Microsoft Edge
• Mozilla Firefox
• Apple Safari
• Google Chrome

Mobile devices

• Google Chrome (Android)
• Google Chrome (iOS)
• Apple Safari (iOS)
• Samsung Internet (Android)
• Mozilla Firefox (Android)

To protect your privacy, you should regularly check and independently delete the cookies on your respective end device as well as your browser history.

7. USE OF SSL OR TLS ENCRYPTION

To protect the transmission of confidential content, such as inquiries that you send to us via our contact form, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the lock symbol in your browser bar and by the fact that the address line of the browser changes from "http://" to "https://". When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

8. Contact Options (Email)

On our website, there is the option to contact us by email.

In this context, your information from the email, including the contact data you provide there, is stored and processed by us for the purpose of handling the inquiry and in case of follow-up questions. This data (e.g. name, address, telephone number, email address) is not passed on to third parties without your consent.

This data is not merged with other data collected on this website.

The data may be stored within the scope of notarial activity, provided that an engagement has taken place.

The processing of this data takes place on the basis of Art. 6 (1) sentence 1 lit. b GDPR, insofar as your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (Art. 6 (1) sentence 1 lit. f GDPR).

The data you provide in the email remains with us until you request its deletion, you object to the processing, or the purpose for storing the data ceases to apply (e.g. after your inquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

9. Transfer of Data to Third Countries

On our website, we use service providers who provide us with various technologies and tools. Some of these service providers transfer personal data to countries outside the European Union or the European Economic Area (e.g. to the USA), where an adequate level of data protection or a level of data protection that is generally equivalent to European data protection law may not exist. The associated transfer of personal data must be permissible under Art. 44 et seq. GDPR.

For the USA, an adequacy decision within the meaning of Art. 45 (3) GDPR exists. Personal data from the EU may now be transferred to companies and organizations in the USA that have certified under the EU-U.S. Data Privacy Framework without further protective measures being required. This adequacy decision therefore serves as the basis for the data transfer to the service providers we use in the USA.

If there is no adequacy decision within the meaning of Art. 45 (3) GDPR, or if the company or organization in the USA has not certified under the EU-U.S. Data Privacy Framework, we conclude standard data protection clauses issued by the EU Commission within the meaning of Art. 46 (2) lit. c GDPR with the respective service providers/providers to protect your data. Where possible, we also agree on additional guarantees intended to ensure that an adequate level of data protection is guaranteed in the USA or other third countries.

If a service provider maintains so-called approved binding corporate rules (BCR) that ensure compliance with European data protection standards within the company, we do not agree on separate standard contractual clauses with the service providers subject to the respective BCR.

Nevertheless, it may happen that, despite contractual and technical protective measures, the level of data protection in the third country does not correspond to that of the EU. For these cases, we ask you, within the scope of cookie consent, in (contact) forms, or in the case of other registrations and sign-ups, for your consent pursuant to Art. 49 (1) lit. a GDPR to the transfer of personal data to a third country.

10. Google

10.1 Information about Google Services

On our website, we use various services of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

As a result, Google may receive information from you. It cannot be ruled out that Google also transfers the information to a server in a third country.

For the transfer of personal data, we have concluded a data processing agreement with Google with EU standard data protection clauses pursuant to Art. 46 GDPR. Google has committed to complying with the standard contractual clauses for the transfer of personal data to third countries in accordance with Directive 95/46/EC (Standard Contractual Clauses – SCC).

Furthermore, for data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

You can obtain further information on this at:

https://policies.google.com/privacy/frameworks?hl=de

We cannot influence which data Google actually collects and processes. Google states that, in principle, the following information (including personal data), among others, may be processed:

• Log data (in particular the IP address)
• Location-related information
• Unique application numbers
• Cookies and similar technologies

If you are logged into your Google account, Google can link the processed information to your account depending on your account settings. Further information from Google on this can be found at https://www.google.com/intl/de/policies/privacy/index.html.
You can prevent this by logging out of your Google account or by making the appropriate account settings in your Google account. Furthermore, you can prevent the installation of cookies – insofar as Google sets any – by making appropriate settings in your browser; however, we point out that in this case you may not be able to use all functions of this website to their full extent.

Further information can be found in Google's privacy policy, which you can access here: https://www.google.com/policies/privacy/.

Further information on the individual Google services that we use on this website can be found in the further privacy policy.

10.2 Google Maps

On this website, we use the "Google Maps" offering, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you have your company headquarters or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

On the website, Google Maps is integrated via the Google API in order to visualize location information and display it in the form of a map. The files required for this purpose are requested via the Google domains maps.googleapis.com, maps.gstatic.com, fonts.googleapis.com and/or fonts.gstatic.com.

Gstatic is a domain used by Google to load static content into another domain name in order to reduce bandwidth usage and increase network performance for the end user.

To display the map, the processing of the IP address by Google Maps is technically necessary. With regard to the other web services integrated via Google APIs, the provisions in the respective section of this privacy policy on Google APIs apply.

The legal basis for the use of Google Maps is your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR, insofar as you have given us your consent to this when you first accessed the page.

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the following are transmitted:

• the IP address,
• date and time of the request,
• time zone difference from Greenwich Mean Time (GMT),
• content of the request (specific page),
• access status/HTTP status code,
• the amount of data transferred,
• the website from which the request comes (so-called referrer),
• type and version of the browser used along with the language version used, as well as
• type and version of the operating system used along with the interface used.

This information (including your IP address) is transmitted by your browser directly to a Google server in the USA and stored there.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

The transfer takes place regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be directly assigned to your account. If you do not want the assignment to your profile at Google, you must log out of your Google profile before using our website. Google stores your data as usage profiles and uses them for the purposes of advertising, market research, and/or needs-based design of its website. Such an evaluation takes place in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

You can revoke your consent to the data processing and transfer at any time without giving reasons by deleting the cookies in your browser.

The lawfulness of data processing that has already taken place is not affected by the revocation of consent.

With regard to Google Maps, we have concluded a joint processing agreement with Google. You can find the content at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

Further information on the purpose and scope of the data collection and its processing by Google can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for the protection of your privacy: http://www.google.de/intl/de/policies/privacy.

10.3 Google Fonts

Through the integration of "Google Maps," "Google Fonts" are loaded, offered by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you have your company headquarters or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We have no influence over this.

The files required for this purpose may be requested via the Google domains fonts.googleapis.com, maps.gstatic.com, maps.googleapis.com and/or fonts.gstatic.com.

Gstatic is a domain used by Google to load static content into another domain name in order to reduce bandwidth usage and increase network performance for the end user.

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the following are transmitted:

by your browser directly to a Google server. According to Google's own statements, Google does not store this information and uses it only to deliver the requested fonts and to detect and, if necessary, defend against attacks on the IT system.

If you have given your consent for the aforementioned tools to be activated and thus for Google Fonts to be reloaded, the legal basis for the data processing is this consent (Art. 6 (1) sentence 1 lit. a GDPR).

Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for the protection of your privacy: https://policies.google.com/privacy?hl=de&gl=de

11. Your Rights and the Assertion of Rights

You are entitled to the rights listed below. You can assert these rights against us. To assert them, please use the data mentioned above or contact us by email at: info@notar-boehr.de

Information/Access:
Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;

Rectification:
Pursuant to Art. 16 GDPR, you have the right to request the immediate rectification of incorrect personal data or the completion of your personal data stored by us;

Erasure:
Pursuant to Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, insofar as the processing is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;

Restriction of processing:
Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is unlawful but you refuse its erasure and we no longer need the data, but you need it for the establishment, exercise or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;

Data portability:
Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;

Revocation of your consent:
Pursuant to Art. 7 (3) GDPR, you have the right to revoke consent you have once given at any time vis-à-vis us. This has the consequence that we may no longer continue the data processing that was based on this consent for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of revocation.
Please direct your revocation to the data provided above or by email to: info@notar-boehr.de

Right to object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) sentence 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If the personal data concerning you is processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.

If you object to processing for the purposes of direct advertising, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you have the option of exercising your right to object by means of automated procedures using technical specifications.

Automated decision-making in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into or performing a contract between you and the controller, is permissible on the basis of Union or Member State law to which the controller is subject and this law contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or is carried out with your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) lit. a) or g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

Complaint to a supervisory authority:
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of our company headquarters for this purpose.

12. Status of the Privacy Notice

The constant development of the internet makes it necessary to adapt our privacy policy from time to time. We reserve the right to make appropriate changes at any time.

Status: July 2026