Malte Möller
DE

Privacy Policy

Only the German version of this privacy policy (Datenschutzerklärung) is legally binding. This English version is provided for convenience only.

1. Data protection at a glance

General notes

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can personally identify you. Detailed information on the subject of data protection can be found in this privacy policy.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Notice concerning the responsible party” in this privacy policy.

How do we collect your data?

Your data is collected when you provide it to us, for example data you enter in a contact form.

Other data is collected automatically as you visit the website, mainly technical data (e.g. the internet browser, operating system, or time of the site visit). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data (your inquiry) is used exclusively to process your request.

What rights do you have regarding your data?

You have the right to receive information about the source, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Please feel free to contact me at any time regarding this or any other questions on data protection.

Analytics and third-party tools

This website currently does not use any analytics programs or third-party tools to evaluate your browsing behavior.

2. Hosting

We host the content of our website with the following provider:

External hosting

This website is hosted externally. The personal data collected on this website is stored on the hosting provider’s servers. This may include, in particular, IP addresses, contact inquiries, meta and communication data, website access data, and other data generated via a website.

External hosting is carried out for the purpose of contract fulfillment towards our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).

Our hosting provider will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data.

We use the following hosting provider:

Netlify, Inc.
101 2nd Street
San Francisco, CA 94105-2239
USA

Data processing agreement

A data processing agreement (DPA) is in place for the use of the above-mentioned service. This is a contract required by data protection law that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General notes and mandatory information

Data protection

I take the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various pieces of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data I collect and what I use it for. It also explains how and for what purpose this is done.

Please note that data transmitted over the internet (e.g. via email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Notice concerning the responsible party

The party responsible for data processing on this website is:

Malte Möller
Bodelschwinghstr. 6
65191 Wiesbaden, Germany
Email: malte@moeller-advisory.com

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with me until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless I have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods); in the latter case, deletion will take place after these reasons cease to apply.

If you have consented to data processing, I process your personal data on the basis of Art. 6(1)(a) GDPR. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, I process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, I process your data if this is necessary to fulfil a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of my legitimate interest pursuant to Art. 6(1)(f) GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.

Recipients of personal data

In the course of my business activities, I work with various external parties. This sometimes requires the transfer of personal data to these external parties. I only pass on personal data to external parties if this is necessary for the performance of a contract, if I am legally obliged to do so (e.g. disclosure of data to tax authorities), if I have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the disclosure. When using processors, I only pass on personal data on the basis of a valid data processing agreement.

Many data processing operations are only possible with your express consent. You can revoke consent already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. IF YOU OBJECT, I WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS I CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged violation. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that I process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Access, rectification, and erasure

Within the scope of applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, a right to rectification or erasure of this data. Please feel free to contact me at any time regarding this or any other questions on personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. In particular, this right exists if you dispute the accuracy of your personal data stored with me, if the processing was/is unlawful, if I no longer need your data but you need it to assert, exercise, or defend legal claims, or as long as an objection you have raised under Art. 21(1) GDPR has not yet been decided.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption (provided automatically by Netlify). You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock icon in your browser line.

Objection to promotional emails

The use of contact data published within the scope of the legal notice obligation for the purpose of sending unsolicited advertising and information material is hereby objected to. I expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

4. Data collection on this website

Server log files

Netlify, as the hosting provider, automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

This data is not merged with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. I have a legitimate interest in the technically error-free presentation and optimization of this website — the server log files must be collected for this purpose.

Contact form

If you use the contact form, the data you enter (name, email address, message) is used solely to process your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measure) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Submission is handled technically by a serverless function that forwards your inquiry by email via the Resend service to my inbox. Your data is never stored in a database or log file — the inquiry exists only as an email in my inbox.

Resend (email delivery service)

The provider is Plus Five Five, Inc. (operating under the brand “Resend”), 2261 Market Street #5039, San Francisco, CA 94114, USA. Since Resend is a US provider, this involves a transfer of data to a third country, based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) between myself and Resend.

Data processing agreement

A data processing agreement (DPA) is in place for the use of the above-mentioned service. This is a contract required by data protection law that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Inquiry by email

If you contact me by email, your inquiry, including all resulting personal data (name, inquiry), will be processed for the purpose of handling your request. I do not pass on this data without your consent.

Legal basis: Art. 6(1)(b) GDPR, if your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on my legitimate interest in the effective handling of inquiries addressed to me (Art. 6(1)(f) GDPR).

5. Analytics and advertising

No analytics tools or advertising services are currently in use.

6. Exali AG liability insurance seal

Description and scope of data processing

This site embeds the liability insurance seal (“Haftpflichtsiegel”) of Exali AG. The seal’s graphic is loaded from Exali AG’s servers. Due to the technical design of the internet, your IP address is processed for this purpose in order to transmit the graphic to your browser.

If you click on this seal, you leave our site and are redirected to Exali AG’s servers.

Further information can be found in Exali’s privacy policy.

The legal basis for this data processing is Art. 6(1)(f) GDPR (legitimate interest).

Purpose of data processing

The processing serves the purpose of providing, in a visually appealing form, the proof of the legally required mandatory information on professional liability insurance pursuant to Section 2(1) No. 11 DL-InfoV (German Service Information Obligations Ordinance).

Legitimate interest

Our legitimate interest in this data processing results from the purpose of offering an appealing online presence and fulfilling our information obligations in a visually appealing manner.

This text is based on the eRecht24 generator and was adapted to the services actually used (Netlify, Resend, Exali).