Privacy policy
This notice explains, as Article 13 GDPR requires, which personal data are processed when you visit this website, for what purpose, and on what legal basis.
Controller
Rechtsanwalt Henry Charles Naporra
Kastanienstraße 3a
65933 Frankfurt am Main
Germany
Phone: +49 178 6023083
Email: info@rechtsanwalt-naporra.de
No cookies, no tracking
This website sets no cookies, stores nothing on your device and loads nothing from third parties: no analytics, no advertising, no embedded maps or videos, no external fonts. No consent is therefore needed, and there is no consent banner.
Hosting and server log data
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Server functions run in the Frankfurt region (fra1). There is a data processing agreement under Article 28 GDPR with the provider; transfers to the United States rest on the European Commission's Standard Contractual Clauses and on the provider's certification under the EU-US Data Privacy Framework. For technical reasons, opening a page produces the following data:
- your IP address
- the date and time of the request
- the address requested
- the referring page, where your browser sends it
- your browser and operating system
These data are necessary to deliver the pages and to keep the site secure and working. The legal basis is Article 6(1)(f) GDPR. The provider states that it deletes these log entries after one day, and the data are not combined with any others.
Contact by email and telephone
When you write or call, I process what you tell me in order to answer your enquiry. The legal basis is Article 6(1)(b) GDPR where it concerns starting or carrying out a mandate, and otherwise Article 6(1)(f) GDPR.
The mailbox runs on Google Workspace, with the data region set to Europe. I delete your enquiry once it has been dealt with and no retention duty applies; for mandates the retention period of § 50 BRAO applies.
Contact via WhatsApp
If you write to me on WhatsApp, your message passes through the service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The contents are end-to-end encrypted, but WhatsApp processes your phone number, your profile name and the connection data, also in the United States, based on the EU-US Data Privacy Framework. This website itself loads nothing from WhatsApp: the button is a plain link. The legal basis is Article 6(1)(b) GDPR where it concerns starting a mandate, and otherwise Article 6(1)(f) GDPR. Contacting me on WhatsApp is voluntary. Please do not send documents or confidential details there yet; email, telephone and the enquiry form are there for that.
Booking an appointment
For appointments I use Google Calendar booking pages. Opening the booking link takes you away from this website: the booking page is provided by Google, and what you enter there is processed in order to arrange the appointment. Nothing is loaded or stored on this website itself.
Enquiry form
If you use the enquiry form, I process what you enter there: your name, your email address or phone number, the area of law you chose, how you would like to be answered, your description where you give one, what you say about how you heard of me, and the page the form was sent from. The submission passes through a function at the hosting provider in the Frankfurt region (fra1); the enquiry is delivered to my mailbox and is not stored by this website, which has no database. The legal basis is Article 6(1)(b) GDPR where it concerns starting a mandate, and otherwise Article 6(1)(f) GDPR. Deletion follows the same rule as for an email. To prevent abuse, the function also limits how many enquiries one connection may send in a short time. For that it holds an unreversible check value derived from your IP address in memory for a few minutes; the address itself is not stored.
Your rights
- access to the data held about you (Article 15 GDPR)
- correction of inaccurate data (Article 16 GDPR)
- erasure (Article 17 GDPR)
- restriction of processing (Article 18 GDPR)
- data portability (Article 20 GDPR)
- objection to processing based on Article 6(1)(f) GDPR (Article 21 GDPR)
A message to the address above is enough for any of these rights.
There is no automated decision-making and no profiling.
Right to lodge a complaint
You may complain to a data protection supervisory authority. The competent one is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 31 63, 65021 Wiesbaden, datenschutz.hessen.de.
This page is also available in German. The German version prevails.