Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation is the law firm IVANOV.LAW, Attorney-at-Law (Rechtsanwalt) Svetoslav Ivanov, LL.M.
Address: Arabellastr. 32, 81925 Munich, Germany
Phone: +49 89 32801134
E-mail: info@ivanov.law
Website: ivanov.law
2. Collection and storage of personal data and the nature and purpose of their use
a) When visiting the website
The website is hosted by Hostinger International Ltd., Larnaca, Cyprus (data centre in the EU). A data processing agreement under Art. 28 GDPR is in place with Hostinger.
When you visit the website, the hosting provider processes technically necessary data (IP address, date and time, page requested, referrer URL, browser and operating system) in server log files. The purpose is the secure and stable operation of the website; the legal basis is Art. 6(1)(f) GDPR. The data are deleted as soon as they are no longer required for this purpose.
To protect against abuse, requests are counted per IP address for a short time; no data are stored permanently.
Whether a page was accessed via an AI assistant (for example ChatGPT, Perplexity, Gemini) is logged without IP address and without any other identifiers (reach measurement, Art. 6(1)(f) GDPR).
b) Browser storage
Our website does not use cookies. The local storage of your browser is used only for functions you trigger yourself (temporarily saving form entries so that you can interrupt and resume later); these data do not leave your device until you submit the form. The legal basis is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6(1)(b) GDPR.
c) When using our contact form
Through the contact form we process your details to answer your enquiry and with a view to a possible engagement. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
We retain enquiries for as long as this is necessary to handle them, to check for conflicts of interest and as evidence, and as long as follow-up questions may still arise; if an engagement follows, the professional and commercial retention periods apply (Art. 6(1)(c) GDPR, Section 50 of the German Federal Lawyers’ Act (BRAO)).
d) Case description with file upload
Through the case description you can describe your matter to us in a structured way, upload documents and inform us of pending deadlines. Your details and files are transmitted in encrypted form and stored in our office systems; you receive an acknowledgement of receipt. The purpose is the initial assessment and a possible engagement; the legal basis is Art. 6(1)(b) GDPR. Clause 2 c) applies to retention.
e) Appointment booking
When you book an appointment online, we process your contact details, your note on the matter and the requested date and time in order to hold the meeting; you receive a confirmation by e-mail. The legal basis is Art. 6(1)(b) GDPR. We keep calendar entries as a record of which appointments took place and when (Art. 6(1)(f) GDPR).
f) Online shop for templates
When you purchase a template, Stripe Payments Europe Ltd. (Dublin) processes the payment; we receive your name, e-mail address, product and amount. Stripe may transfer data to the USA (EU Standard Contractual Clauses, EU-US Data Privacy Framework). The legal basis is Art. 6(1)(b) GDPR; we retain invoice data for the statutory periods (Art. 6(1)(c) GDPR). Stripe’s privacy policy: stripe.com/en-de/privacy.
g) Instruction forms, e.g. for design and trademark applications
When you instruct us through the instruction forms, e.g. for a design or trademark application or opposition or cancellation proceedings, we collect the details and documents required for the engagement. They are stored in our office systems; you receive a confirmation by e-mail. The legal basis is Art. 6(1)(b) GDPR; the retention periods for client files apply.
3. Disclosure of data
We disclose your data only where this is necessary to perform a contract with you (Art. 6(1)(b) GDPR), you have given your consent (Art. 6(1)(a) GDPR), a legal obligation exists (Art. 6(1)(c) GDPR) or this is necessary to establish, exercise or defend legal claims (Art. 6(1)(f) GDPR).
Processors and recipients: Hostinger International Ltd. (hosting), Stripe Payments Europe Ltd. (payment processing in the shop).
4. Cookies
We do not use cookies to operate the website (clause 2 b).
5. Your rights
You have the right:
- under Art. 15 GDPR, to obtain access to the personal data we process about you
- under Art. 16 GDPR, to request the rectification of inaccurate data or the completion of incomplete data
- under Art. 17 GDPR, to request the erasure of your stored data, unless statutory exceptions apply
- under Art. 18 GDPR, to request the restriction of processing
- under Art. 20 GDPR, to receive your data in a structured, commonly used and machine-readable format
- under Art. 7(3) GDPR, to withdraw, at any time and with effect for the future, any consent you have given
- under Art. 21 GDPR, to object to the processing of your personal data on grounds relating to your particular situation
- under Art. 77 GDPR, to lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht)
To exercise these rights, contact info@ivanov.law. The lawyer’s duty of professional secrecy may restrict certain of these rights (Section 29 of the German Federal Data Protection Act, BDSG).
6. Last updated
Last updated: 29 October 2026.