1. Controller
Rechtsanwalt Mir Naim Heydarinami, wolves law – Business Law Firm, Hermann-Kauffmann-Straße 2, 22307 Hamburg, Germany; telephone +49 40 189 80267; email nh@wolves.law. Found in Germany is a project and offering brand operated by wolves law, not an additional legal entity or controller. This notice covers website visits and initial contact; additional information may apply to a subsequent engagement.
2. Hosting and access data
When you visit, IP address, time, requested address, any transmitted referrer address, browser, operating system and connection information are processed to deliver the website, investigate errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in a secure and functional website.
The hosting provider is Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, USA. Hosting and content delivery infrastructure includes providers such as Amazon Web Services and Cloudflare. See Webflow's subprocessor list and data processing addendum. Technical providers receive the data necessary for their tasks. Retention depends on the duration required for operation, security and any specific incident investigation. We do not combine these data into advertising profiles.
3. Contact
An email link opens your own email application. The website does not itself send a message. We receive the information only after you actually send the email. We process contact details, messages and any documents you supply to reply, understand the proposed project, assess conflicts of interest and prepare a possible engagement.
Contract-related enquiries rely on Article 6(1)(b) GDPR. Other professional enquiries rely on Article 6(1)(f) GDPR and our legitimate interest in appropriate business communication. Article 6(1)(c) GDPR applies to processing required by law. Providing information is voluntary, but a meaningful description and a way to reply are necessary to handle an enquiry.
Please do not initially send identity-document copies, health information, confidential contracts or other sensitive attachments. Email is not automatically end-to-end encrypted; a suitable protected transfer channel can be arranged. An enquiry alone does not establish an engagement or deadline monitoring.
4. Email infrastructure and project coordination
The firm's communication uses Microsoft 365. The EU provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Message, contact and technical delivery data are processed to provide the email service. See Microsoft's contractual privacy terms.
Initial assessment and selection of the required assistance are performed by people at wolves law. Enquiries are not automatically distributed to network members, notaries, translators or other providers. Necessary involvement is assessed individually on a suitable legal basis, with regard to professional confidentiality and any required approval. Separately retained professionals and authorities are responsible for their own processing. Further information and data flows required for a formation or market-entry project are explained when the engagement is clarified.
5. Technical functions, cookies and links
Necessary scripts and hosted files support layout, navigation and language selection. The current configuration does not activate our own analytics or marketing services, Google Analytics, Google Tag Manager or review widgets. Non-essential device access requires prior consent under section 25(1) TDDDG; related personal-data processing relies on Article 6(1)(a) GDPR. Operations solely necessary for transmission or an expressly requested service fall under section 25(2) TDDDG. Continuing to browse is not consent.
External links are ordinary references. The destination operator processes data under its own notice when you visit that page. Linking does not automatically create joint controllership. Enquiries are not used for newsletters or advertising lists without a separate legal basis.
6. Recipients and retention
Apart from the technical providers named above, data is disclosed only to persons whose participation is necessary or bodies to which disclosure is legally required. Enquiry and communication data is retained for handling and necessary documentation. Further retention may be required by law, necessary conflict checks or legal claims. Legal case files are generally subject to the six-year period in section 50 BRAO; other statutory periods may be longer. Data no longer required is deleted or, where necessary, its processing restricted.
7. Transfers outside the EEA
Webflow and international IT services may process data outside the European Economic Area, particularly in the USA. Webflow states that it participates in the EU-US Data Privacy Framework. Covered transfers to appropriately certified recipients rely on the adequacy decision under Article 45 GDPR. Other transfers require safeguards under Article 46 GDPR, particularly EU Standard Contractual Clauses and any necessary supplementary measures. Project-related disclosure to recipients in other countries is assessed separately. Details and a copy of applicable safeguards can be requested from us.
8. Your rights
Subject to the applicable conditions, Articles 15–20 GDPR provide rights of access, rectification, erasure, restriction and data portability. Consent may be withdrawn at any time for the future; this does not affect earlier lawful processing.
You may object under Article 21 GDPR to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. You may object to direct marketing at any time without giving reasons.
Use the contact details above to exercise your rights. We do not make solely automated decisions with legal or similarly significant effects within Article 22 GDPR.
9. Complaints
You may complain under Article 77 GDPR to a supervisory authority, particularly where you live, work or suspect an infringement. The authority for the firm's location is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany; mailbox@datenschutz.hamburg.de; datenschutz-hamburg.de.