Privacy notice

What's in this Notice?

In this Notice, we provide information about how your personal data is processed when you are using our website https://www.andcolaw.com/ (our site). We also let you know about our processing operations and how we comply with our legal obligations, in particular, the EU General Data Protection Regulation (GDPR) and the UK GDPR. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

Controller - who we are and how to contact us

AndCo Law (We) are an international alliance of firms and independent professionals operating through a number of separately constituted and regulated legal entities and individuals which provide legal and other client services in accordance with the relevant laws of the jurisdictions in which they respectively operate. Details of the different AndCo Law entities and independent professionals that control your data are set out in our Legal Notice. The Controllers pursuant to Art. 4 para. 7 GDPR are the co-founding entities and professionals in France, UK, Germany and Spain.

Processing of personal data when visiting our website

On our site we only provide content for informational purposes. When using the site, i.e. merely viewing it, we process data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us:

• date and time of the request
• name and URL of the accessed file
• IP address
• access Status/HTTP Status Code

The legal basis is Art. 6 para. 1 sentence 1 lit. e GDPR in connection with the NIS2-Directive.

• time zone difference to Greenwich Mean Time (GMT)
• content of the request (page visited)
• amount of data transferred in each case
• previously visited page
• browser type
• operating system
• language and version of the browser software.

The legal basis is Art. 6 para. 1 sentence 1 lit. b, and f GDPR.

If you consent to the use of the Google Analytics (GA4) cookies for statistical purposes the following data will be collected and processed for such purpose. For more information please see Googles Privacy Policy:

1. User and Device Data

• IP address (pseudonymized by tranqulizing the last octet, e.g. 183.172.xxx.xxx)
• Unique user identifier (via cookies)
• Browser
• Operating system
• Device type (mobile, tablet, desktop)
• Browser language
• Internet service provider (ISP)

2. Navigation and Interaction Data

• Pages visited
• Time spent on each page
• Navigation path (page sequence)

3. Traffic and Acquisition Data

Traffic source (search engine, direct, social media, referral)
• Traffic channels (organic, paid, social, email, referral, direct)

4. Location Data

• Country, region, city (inferred from IP)
• Time zone

Your rights

You have the following rights with regard to your personal data:

• Right of access,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to processing,
• Right to data portability.

You can exercise your privacy rights by sending an email to the Contact mentioned below.
You also have the right to complain to your relevant data protection supervisory authority about the processing of your personal data by us.

Duration of Data Processing

Your data will only be processed for as long as is necessary to achieve the purposes of processing. You can find out more about the use and storage duration of cookies here.

Transfer of Personal Data to Third Parties; Legal Basis

We use the following service providers to operate our website and process data stored or transmitted through the systems (e.g., for hosting services). The legal basis for data transfer is Article 6(1)(1)(b) or (f) of the GDPR, provided they are not processors.

• Host Provider: Go Daddy Inc., Corporate Headquarters, 100 S. Mill Ave Suite 1600Tempe, AZ 85281 USA. For further information please visit GoDaddy’s Privacy Notice.
• If you consent to using Google Analytics (GA4) by accepting their respective cookies the following Gogle entities are responsible for processing the data collected. For more information please visit the Google Privacy Policy.
  • Google Ireland Limited for users of Google services based in the European Economic Area or Switzerland, located at Gordon House, Barrow Street, Dublin 4, Ireland.
  • Google LLC for users of Google services based in the United Kingdom, located at 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

Beyond this, we will only transfer your personal data to third parties if you have given explicit consent pursuant to Article 6(1)(1)(a) of the GDPR.

Cookies

We use some essential cookies to provide you with a good experience and make this site work. We'd like to set analytics cookies provided by Google Analytics to understand how you use this site. You can set your preferences using our cookie consent wall/banner.

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site. The table below explains the cookies we use and why.

Essential Cookies

Non-essential performance cookies

Contact

For all privacy related matters you may contact Helge Huffmann, LL.M. via Email.