Privacy policy

Advofleet Business Services GmbH, Rheinsberger Str. 42, 10435 Berlin, Germany, info@advofleet.com, telephone +49 30 55779289-60.

When you access the website, technically necessary connection data is processed. This may include IP address, date and time, requested address, data volume, referrer, browser, operating system and status codes. Processing is necessary to deliver the site, defend against attacks and investigate errors. The legal basis is Article 6(1)(f) GDPR; our legitimate interests are secure, stable and abuse-free operation.

Hosting and delivery are provided through Vercel, Inc. Content is managed through infrastructure provided by Supabase, Inc. Both providers process data on our behalf. Where content is delivered through our own domain or image optimisation, no separate user account is created with these providers.

When you use the contact form, we process your name, email address, any telephone number, company and position you provide, your message, the selected segment and optional segment-specific information. For law-firm enquiries this may include career stage, firm size, product interests, operational bottlenecks, current systems and practice areas. We also process the submission ID, form timestamp, language, landing page, referrer and available campaign parameters. Please do not submit client, opposing-party, health or specific matter data.

To prevent abuse and duplicate submissions, the IP address that technically arises when the form is requested is converted server-side into a cryptographic verification value; the website does not add the raw IP address to the enquiry content. A random submission ID is stored in your browser for the duration of the session.

The enquiry is transmitted to the internally used Advofleet application for central handling. If this route fails, Resend, Inc. may send the enquiry to us by email as a fallback and send a receipt confirmation to your email address.

The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR. Our legitimate interest is properly handling business, partnership and media enquiries. The form confirmation records that you have read this privacy policy; it does not replace those legal bases. Required fields are necessary so we can assign and answer your enquiry.

Your choice about optional technologies is stored in your browser’s local storage and additionally in the strictly necessary “af_consent” cookie, with a timestamp and policy version for no more than twelve months. Without this record, we could not respect your decision on later page views. The language switch may also set the “NEXT_LOCALE” cookie for no more than twelve months. During a session, the contact form uses “advofleet-contact-submission” to prevent duplicate submissions.

These technically essential operations are based on section 25(2)(2) TDDDG. Where personal data is processed, the legal basis is Article 6(1)(f) GDPR; our legitimate interests are respecting your choice, displaying a consistent language and protecting the form.

Only after your prior consent do we use Google Analytics and Google Tag Manager from Google Ireland Limited. Online identifiers, cookie IDs, truncated or temporarily used IP information, device and browser data, referrer, visited pages, timestamps and interaction events may be processed. Interaction events may also include form starts, form submissions and CTA clicks. Google Tag Manager manages tags; it does not itself create the reports. Google Analytics helps us analyse reach and website usage statistically. IP anonymisation is enabled in the Google Analytics configuration.

Only after analytics consent, an aggregate view counter for Insights articles is also incremented in the Supabase infrastructure. The article identifier and counting operation are sent to Supabase; no individual user identifier is stored in the article table.

If you also allow marketing, the Google Analytics configuration enables Google Signals and advertising-personalisation signals. Depending on your Google account settings, Google may associate usage data with a signed-in Google account and use it for cross-device reports and campaign measurement. Marketing therefore requires analytics consent on this website. The published Google Tag Manager container for advofleet.com currently contains no separate Google Ads conversion tags.

The legal bases are section 25(1) TDDDG for storage or access on your device and Article 6(1)(a) GDPR for subsequent processing. You can change both categories at any time for the future through “Manage consent” in the footer. Withdrawal does not affect the lawfulness of processing before withdrawal.

The cookie notice lists providers, storage periods and potential cookies.

Recipients may include, only where necessary, Vercel, Inc. for hosting, Supabase, Inc. for content and data infrastructure, Resend, Inc. for fallback email delivery, Google Ireland Limited for consent-based analytics and campaign measurement, and the internally used Advofleet application for handling enquiries. Processing agreements under Article 28 GDPR are used where legally required.

Some providers belong to groups based in the United States or use subprocessors there. Depending on the provider and transfer, transfers outside the European Economic Area rely on an adequacy decision, including the EU-US Data Privacy Framework for certified recipients, or the European Commission’s Standard Contractual Clauses together with supplementary safeguards.

Links to Rechtsanwalt24, Firmenanwalt24, Kitaplatzklage, advofleet.de, LinkedIn and other external services connect to the respective provider only when you open the link. The same applies to the LinkedIn share control on Insights pages. The provider of the destination service is generally responsible for processing there, and its privacy information applies. This website does not embed social-media plugins that send data to social networks when the page initially loads.

Server logs are erased or anonymised when they are no longer needed for operation and security. Where a specific security incident occurs, they may be retained longer to investigate it and enforce legal claims. The exact technical retention period also depends on the hosting provider’s security configuration.

Enquiries that do not result in an active business relationship are erased or anonymised no later than 24 months after the last substantive contact. If a contract is formed, applicable statutory and contractual retention periods apply. Consent choices are stored for no more than twelve months. Storage periods for optional technologies are listed in the cookie notice.

Subject to statutory requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20) and objection (Article 21). You can withdraw consent for the future at any time. Contact info@advofleet.com or use “Manage consent” in the footer for optional website technologies.

You may complain to a data protection supervisory authority. The Berlin Commissioner for Data Protection and Freedom of Information is particularly competent for us: https://www.datenschutz-berlin.de/.

We do not use processing on this website to make decisions based solely on automated processing that produce legal or similarly significant effects within the meaning of Article 22 GDPR.

This corporate website is not directed at children. Persons under 16 should not submit personal data without the consent of a parent or guardian.

We update this privacy policy when features, service providers or applicable law change. The version published on this page is authoritative.