1. Controller Responsible for Data Processing

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Name: Aleksandra Lelek
Address: Heidestraße 5, 82515 Wolfratshausen, Germany
Phone: +49 (0) 155 11486056
E-Mail: ra@kanzlei-lelek.de
Website: https://kanzlei-lelek.de

2. Collection and Storage of Personal Data as well as the Nature and Purpose of Their Use

a) When Visiting the Website

When accessing my website, information is automatically transmitted by the browser used on your device to the server of my website. This information is temporarily stored in so-called log files.

The following information is collected:

• anonymized IP address of the requesting computer
• date and time of access
• name and URL of the retrieved file
• website from which access is made (referrer URL)
• browser used and, if applicable, the operating system of your computer
• name of your access provider
• This data is processed by my hosting provider IONOS for the purpose of:
• ensuring a smooth connection setup of the website
• ensuring convenient use of the website
• evaluating system security and stability
• as well as for further administrative purposes

The log files are stored for a maximum period of 8 weeks and are then automatically deleted.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. My legitimate interest follows from the purposes for data collection listed above.

b) Contact Form

If you have any questions, you may contact me via a form provided on the website. Providing a valid email address or telephone number is required so that I can assign and respond to your inquiry. Further information may be provided voluntarily.

The data processing for the purpose of contacting me is carried out on the basis of your voluntarily given consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. The personal data transmitted by you via the contact form will be deleted after your request has been fully processed, provided that there are no statutory retention obligations.

c) Use of Friendly Captcha

To protect my contact form against abusive automated requests (spam), I use the service Friendly Captcha provided by Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee, Germany.

Friendly Captcha is used to verify whether entries into the contact form are made by a natural person. For this purpose, Friendly Captcha processes certain technical data, in particular:

• IP address
• information about browser and operating system
• referrer URL
• timestamp of the request
• cryptographic challenge data

The processing is carried out for the purpose of ensuring the security of my website and protecting it against spam and abusive automated access.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. My legitimate interest lies in protecting my website and communication systems against misuse, spam, and automated attacks.

Further information on data protection at Friendly Captcha can be found at: Friendly Captcha Privacy Policy.

3. Disclosure of Data

Your personal data will only be disclosed to third parties if:

• you have expressly given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
• there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR,
• or this is legally permissible and necessary pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR for the performance of contractual relationships.

4. Cookies

My website uses cookies. Cookies are small text files stored on your device.

Technically necessary cookies are used to ensure the basic functionality of the website. The processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR due to my legitimate interest in the technically error-free and optimized provision of my website. If cookies are used for analysis, statistics, or marketing purposes, this will only take place on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

You can configure your browser so that no cookies are stored or cookies are only permitted in individual cases. However, disabling cookies may limit the functionality of this website.

5. Rights of Data Subjects

You have the right:

• pursuant to Art. 15 GDPR to request information about your personal data processed by me,
• pursuant to Art. 16 GDPR to request without undue delay the correction of inaccurate personal data or completion of your personal data stored by me,
• pursuant to Art. 17 GDPR to request the deletion of your personal data stored by me, unless processing is required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims,
• pursuant to Art. 18 GDPR to request the restriction of processing of your personal data,
• pursuant to Art. 20 GDPR to receive your personal data in a structured, commonly used, and machine-readable format or to request the transfer to another controller,
• pursuant to Art. 7 para. 3 GDPR to withdraw your consent once given at any time with effect for the future,
• and pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority.

The competent supervisory authority in Bavaria is: Bayerisches Landesamt für Datenschutzaufsicht.

6. Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, provided that there are grounds arising from your particular situation. If you wish to exercise your right to object, simply send an email to: ra@kanzlei-lelek.de. 

7. Data Security

During your visit to the website, I use the widely used SSL/TLS encryption method for secure data transmission.

In addition, I implement appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

8. Status and Updates of this Privacy Policy

This Privacy Policy is effective as of May 2026. I reserve the right to amend this Privacy Policy in order to ensure that it always complies with current legal requirements or to reflect changes in my services.