The controller for the processing described here is Thornbury Chambers, Am Wall 168, 28195 Bremen, Germany, reachable at office@thornbury.de or +49 421 361 5420. Through this website we collect only the data you submit in the consultation form — name, e-mail address, telephone number and the content of your message — together with technical server data such as IP address, browser type and time of access that are generated automatically when any page is loaded.
Form data is used solely to answer your enquiry and, where instructed, to prepare and perform a mandate; the legal bases are Art. 6(1)(b) GDPR for pre-contractual and contractual steps and Art. 6(1)(f) GDPR for our legitimate interest in responding to correspondence. Technical server data is processed on the basis of Art. 6(1)(f) GDPR to keep the site secure and stable, and non-essential cookies are set only after you give consent under Art. 6(1)(a) GDPR, which you may withdraw at any time.
Enquiries that do not lead to a mandate are deleted no later than six months after the correspondence ends, while mandate files are retained for the statutory periods that apply to legal practice in Germany, generally six years under the BRAO and up to ten years under tax and commercial law. Your data is stored on servers located in Germany and is disclosed only to processors bound by written agreements under Art. 28 GDPR — our hosting provider and IT maintenance service — or to courts, authorities and opposing parties where this is necessary to carry out your instructions or required by law; it is never sold or used for third-party advertising.
Under the GDPR and the German Federal Data Protection Act (BDSG) you may request access to your data, rectification of inaccurate entries, erasure, restriction of processing and portability, and you may object at any time to processing based on legitimate interests. Requests can be sent informally to office@thornbury.de and are answered within one month; if you believe your data has been handled improperly you may also lodge a complaint with the Bremen data protection authority (Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen) or the supervisory authority of your habitual residence.