Privacy

KALER Rechtsanwaltsgesellschaft mbH
Große Gallusstraße 14, 60315 Frankfurt am Main, Germany
Email: info@kaler-law.com
Telephone: +49 69 8088 4768

Please use these contact details for data protection requests and withdrawal of consent.

This website is hosted on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Access involves processing technically necessary connection data, including your IP address, time of access, requested URL, data volume and browser and device information. This enables content delivery, troubleshooting and protection against attacks. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and functional operation of the service.

Recipients are the people responsible for operating the service and the technical hosting providers. Connection data is retained for as long as needed for operation, troubleshooting, attack detection or required evidence; purpose-related storage ends afterwards.

The website’s application code does not set its own analytics, marketing or profiling cookies. The form does not store your input in its own cookie or local browser storage. System fonts are used. External websites open only when you follow the relevant link and are subject to their own privacy notices.

When you expressly select a language, the website stores the necessary “hyper_language” preference cookie for 180 days. It contains only “de” or “en” and is used solely to provide your chosen language, not for tracking. At the general entry point, the browser language may be used for a temporary redirect to English. Each language version remains directly accessible.

The form asks for your name, email address and broad practice area. These details are needed to assign your enquiry and respond. You are not legally required to use the form; you may call instead. Please do not initially submit confidential case details, documents or other people’s data. The language of the form version you use is also stored as your preferred correspondence language.

Selecting “Send enquiry” sends these details over HTTPS to our website server and then to the client portal’s intake system on its German server. A record is created for manual contact and conflict checks. The website displays an acknowledgement with a reference number only after storage is confirmed. The form does not open an email application or require you to send an email yourself. It does not obtain AI consent; the enquiry is created with AI processing explicitly disabled.

Processing serves initial contact and a possible engagement. For your own request for legal advice, the legal basis is Article 6(1)(b) GDPR. Other contacts, particularly on behalf of an organisation, rely on Article 6(1)(f) GDPR; the legitimate interest is appropriate communication and handling of the enquiry. Necessary conflict checks fulfil professional obligations under Article 6(1)(c) GDPR in conjunction with section 43a(4) BRAO. Recipients are the responsible people at the firm and the hosting providers engaged to operate the systems. The details are not collected for advertising or AI training.

To prevent misuse, the website server checks the origin, size and content of the request and limits repeated submissions. A hash of the connection address, salted with a random server value, is held in memory for no more than 15 minutes. A random request identifier helps recognise repeated submissions. A hash of the input and the transmission outcome with its reference number are held in memory for no more than 15 minutes, rather than complete form input or portal access codes. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is protecting the form and preventing duplicate records. General technically necessary hosting connection data is unaffected.

A contact enquiry alone does not create an engagement or responsibility for monitoring deadlines. After the necessary conflict check, we agree a suitable transmission method with you before you share confidential information.

Your contact enquiry does not give consent to HYPER AI or other AI systems. The website does not use AI to analyse your contact details or make a solely automated decision about your matter within the meaning of Article 22 GDPR.

If AI is to be used later in your matter, you first receive specific information about purposes, affected data, providers and recipients, processing locations, retention, possible risks and any third-country transfers. Only then may separate, voluntary and documented consent be obtained under Article 6(1)(a) GDPR and, where required, section 43e(5) BRAO. Your contact enquiry does not replace that consent. Handling without AI remains available. A qualified lawyer retains responsibility for advice and approval.

Sensitive data also requires compliance with Article 9 GDPR, where applicable including explicit consent under Article 9(2)(a). Criminal offence data is subject to Article 10 GDPR. A statement from the person enquiring does not automatically permit processing other people’s data or disclosing their confidential information.

You may withdraw any later consent at any time for the future using the contact details above. Processing before withdrawal remains lawful insofar as it was lawful at the time. A contact enquiry does not authorise new purposes such as model training or advertising.

The client portal at portal.hyper-legal.com is a separate access point for handling your matter. Following the necessary conflict check, it processes your account of the facts, uploaded documents, follow-up questions and approved documents. Technically necessary session and security data, including login times and IP addresses, is also processed. The legal bases are initiating and performing an engagement under Article 6(1)(b) GDPR and applicable legal duties. Your initial contact is first recorded in the portal intake system without AI processing. Further portal functions are separate from this initial contact.

For optional AI use in the client portal, Anthropic Claude models are accessed through Amazon Bedrock. The named provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg; the intended AWS region is Ireland (EU). The data categories, recipients, processing locations, storage and usage terms and any possible third-country access for your specific matter must be disclosed before separate consent. An EU region alone does not guarantee that all third-country access is excluded. A portal user’s consent does not automatically cover other people’s data or secrets.

If HYPER Meet is used for a meeting, participant, connection, video and audio data necessary to conduct it is processed under Article 6(1)(b) GDPR. Before the meeting, we explain the specific access arrangements, confidentiality and technical services. Your contact enquiry does not authorise recording or transcription; where relevant, these require separate information and a legal basis.

For the portal and meetings, please also observe the additional information provided before data collection there. A contact enquiry includes no consent to AI use, recording or model training.

Lawyer confidentiality under section 43a(2) BRAO and criminal protection of secrets under section 203 of the German Criminal Code apply. External services must also be assessed under section 43e BRAO and, where relevant, Article 28 GDPR. Consent, processor agreements and professional duties relating to service providers are separate requirements.

Processing outside the European Economic Area additionally requires compliance with Articles 44 et seq. GDPR. For services abroad involving client matters, protection of secrets under section 43e(4) BRAO must also be assessed separately. Clicking the contact form neither consents to a third-country transfer nor waives professional safeguards.

Submitted contact details are stored in the firm’s intake system. The website server does not maintain an additional permanent form archive; temporary abuse-prevention and repeat-submission features are described in section 4. The website does not store form input or the reference number in its own cookie or local browser storage.

Enquiries are retained for as long as necessary for handling, legal duties, required evidence or defending legal claims. Without an engagement, storage ends when these purposes no longer apply. If an engagement is created, statutory retention obligations apply, particularly section 50 BRAO for client files: generally six years from the end of the year in which the work ended. Other legal duties or evidence requirements may justify different periods. Not every enquiry is a client file.

Subject to legal requirements, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20 GDPR). Consent may be withdrawn under Article 7(3) GDPR.

Objection: Where we rely on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. Please contact us using the details above.

You may complain to a data protection supervisory authority, particularly where you live, work or believe an infringement occurred. For Hesse: Hessian Commissioner for Data Protection and Freedom of Information, PO Box 3163, 65021 Wiesbaden, Germany.

18 October 2026. This notice covers the website and initial contact process described here. Before any later handling of your matter using other services, you receive the additional information required for those services.