Data Privacy Policy

This Data Privacy Policy (“Policy”) describes how Saveleva Law (“we,” “us,” or “our”) collects, uses, and protects any personal data we receive from you or that you provide to us when visiting our website (the “Website”). We are committed to complying with all applicable data protection regulations, in particular the General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, “BDSG”).

01Name and Contact Details of the Controller

The data controller responsible for the processing of your personal data on this Website is:

02Hosting with Vercel

Our Website is hosted by Vercel Inc., a third-party service provider based in the United States. When you visit our Website, certain information (e.g., IP address, browser type, operating system, and pages visited) may be automatically collected and processed by Vercel to ensure the functionality and stability of the Website.

Vercel acts as our processor in accordance with Article 28 GDPR. Where data is transferred to the United States, the transfer is based on the EU-U.S. Data Privacy Framework and, where applicable, the Standard Contractual Clauses (SCCs) approved by the European Commission. For more information on how Vercel handles your data, please review Vercel’s Privacy Policy: https://vercel.com/legal/privacy-policy

03No Use of Cookies

We do not use any cookies on our Website. No information is stored on your device for tracking or analytics purposes through cookie technology.

04Server Log Files

When you access our Website, our server (or the server of our hosting provider) may automatically store data in server log files. This data may include:

• IP address
• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request

This data is collected for technical reasons, to ensure the stability and security of the Website, and to detect and prevent fraudulent or abusive use of our services. The legal basis for this data processing is our legitimate interest in the correct operation of our Website (Art. 6(1)(f) GDPR). Server log file information is typically retained for a short period and then automatically deleted, unless there is a need to retain it for evidence purposes (e.g., in case of a security incident).

05Use of Google Fonts

We use Google Fonts on our Website to ensure a consistent and visually appealing presentation of text. For users in the EU, Google Fonts is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access a page that includes Google Fonts, your browser establishes a direct connection to Google’s servers. In the process, your IP address may be transmitted to Google.

Legal Basis. The legal basis for using Google Fonts is our legitimate interest (Art. 6(1)(f) GDPR) in the proper presentation of our online content.

Data Transfer to the U.S. Google may process your data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. In addition, the transfer is safeguarded by the Standard Contractual Clauses (SCCs) approved by the European Commission.

For more information about data processing by Google, please see Google’s Privacy Policy: https://policies.google.com/privacy

06Contact Form and Email

If you use the contact form on our Website or otherwise send us an email, we will receive personal data such as your name, company, email address, and any other information you include in your message. We process this data solely for the purpose of responding to your inquiry and handling any follow-up communication.

Legal Basis. Our legitimate interest in providing and improving our services, as well as effectively handling your inquiries (Art. 6(1)(f) GDPR). If your inquiry is related to entering into a contract with us (e.g., engaging our consulting services), then Art. 6(1)(b) GDPR also applies.

Please do not send confidential documents through the contact form before an engagement has been agreed. We will delete your data once it is no longer required for the purpose of your inquiry, unless we are legally obligated to retain it longer (e.g., under commercial or tax law).

07Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR). You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information.
• Right to Rectification (Art. 16 GDPR). You have the right to request the rectification of inaccurate personal data concerning you and to have incomplete data completed.
• Right to Erasure (Art. 17 GDPR). You have the right to request the erasure of your personal data under certain conditions.
• Right to Restriction of Processing (Art. 18 GDPR). You have the right to request the restriction of processing of your personal data under certain conditions.
• Right to Data Portability (Art. 20 GDPR). You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, and to request its transmission to another controller.
• Right to Object (Art. 21 GDPR). You have the right to object to the processing of your personal data at any time, on grounds relating to your particular situation, where the processing is based on Art. 6(1)(e) or (f) GDPR. You also have the right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent (Art. 7(3) GDPR). You have the right to withdraw your consent at any time with effect for the future where processing is based on your consent.

To exercise these rights, please contact us using the details provided in Section 1.

08Right to Lodge a Complaint with a Supervisory Authority

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is unlawful. You may contact the supervisory authority of your place of residence or the authority competent for us:

09Data Retention

We retain your personal data only for as long as necessary to achieve the purpose for which it was collected or to comply with statutory retention periods (e.g., under tax or commercial law). Once the purpose no longer applies or the retention periods expire, your personal data will be deleted or restricted from further processing.

This does not apply where we are not permitted to delete certain data (e.g. documents that must be retained in accordance with tax law and commercial law) or where data is necessary to pursue legitimate interests, for example to exercise legal claims.

10Security Measures

We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. This includes the use of TLS (Transport Layer Security) encryption for data transmission.

11Changes to This Policy

We reserve the right to update or modify this Policy at any time to comply with changing legal requirements or to reflect changes in our processing activities. The latest version published on our Website applies.

Contact Information

If you have any questions about this Policy or our data protection practices, please contact us at: