Legal
Privacy Policy
This privacy policy informs you about the nature, scope, and purpose of personal data processing on this website. As of April 2026.
1. Controller
Controller within the meaning of GDPR:
Attorney Elena Peony, MLE
Anwaltskanzlei Peony
Eisenbahnstraße 1, 72072 Tübingen, Germany
Phone: +49 7071 54 99 224 · Email: info@anwaltskanzlei-peony.de
2. Your rights
You have rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and withdrawal of consent (Art. 7 (3)). You may lodge a complaint with the supervisory authority at any time.
3. Hosting (Vercel)
This site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel runs servers in Frankfurt am Main for European visitors.
Technically necessary server logs (truncated IP, user agent, timestamp) are stored for a maximum of 30 days.
Legal basis: Art. 6 (1) (f) GDPR (secure operation of the site). DPA in place. For US transfers we rely on the EU-US Data Privacy Framework decision of 10 July 2023 and on Standard Contractual Clauses.
4. Contact form
We process data submitted via the form solely to handle your enquiry.
Legal basis: Art. 6 (1) (f) GDPR; with concrete mandate context Art. 6 (1) (b) GDPR.
Retention: up to 6 months without a mandate; within a mandate, 6 years after closure (§ 50 BRAO). Mandatory fields are marked as such.
5. Email correspondence
Standard emails are unencrypted. For sensitive data we recommend the beA secure mailbox or encrypted channels.
6. Email delivery and reception (ALL-INKL.COM)
The mailbox and SMTP delivery for info@anwaltskanzlei-peony.de are operated by ALL-INKL.COM — Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (servers in Germany).
Confirmation and notification emails from the contact form are sent via the same provider. Transmitted: recipient address, subject, message body, and technical send metadata.
Legal basis: Art. 6 (1) (f) GDPR (secure and traceable email delivery). DPA in place.
7. Anti-spam measures
To deter automated abuse we rely on server-side measures only: a hidden honeypot field, a minimum dwell time on the page, and a minimum message length.
No cookies are set, no third-party services are integrated, and no personal data is stored persistently for this purpose.
Legal basis: Art. 6 (1) (f) GDPR (protection of the contact form against abuse).
8. Cookieless analytics
We use Vercel Web Analytics. No cookies are set, no fingerprinting, no personal profiles. The IP is processed only in anonymised, hashed form for daily de-duplication.
Legal basis: Art. 6 (1) (f) GDPR. § 25 TDDDG does not apply because no terminal-equipment access beyond what is necessary takes place.
9. Local fonts
Fonts are bundled at build time into the deliverable (Next.js Font Optimization). At runtime, no data is transmitted to Google Fonts or comparable services.
10. Server logs
See section Hosting (Vercel).
11. Data subject rights and confidentiality
Where a mandate is involved, attorney confidentiality must be observed. Access and erasure requests are handled in light of statutory retention obligations.
12. Right to lodge a complaint — supervisory authority
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Heilbronner Straße 35, 70191 Stuttgart, Germany
Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
Web: www.baden-wuerttemberg.datenschutz.de
13. Data protection officer
The firm is not legally required to appoint a data protection officer (§ 38 BDSG). The controller and contact for all data protection matters is Attorney Elena Peony; you can reach her via the contact details given in the legal notice (Impressum).