top of page

Privacy Policy

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

​

Charlotte Waning Lawyer (Rechtsanwältin) Waning Migrationsrecht

​

Address: Hansaring 12, 50670 Cologne, Germany

​

Phone (landline): +49 221 25968014 Mobile: +49 178 9421116

Email: info@cw-legal.de

​

2. General Information on Data Processing

I take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR, German Federal Data Protection Act (BDSG)) and this privacy policy. As an attorney, I am also subject to professional confidentiality obligations under Section 43a of the German Federal Lawyers' Act (BRAO) and Section 2 of the Rules of Professional Conduct for Lawyers (BORA), which go beyond the requirements of data protection law.

This website can generally be used without providing personal data. Insofar as personal data (such as name, address, or email addresses) is collected on this website, this is done, wherever possible, on a voluntary basis. This data will not be passed on to third parties without your explicit consent.

​

3. Hosting by Wix

This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv, Israel ("Wix"). In this context, Wix processes personal data on my behalf as a processor (Art. 28 GDPR). When you access this website, the hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. This includes:

  • The page visited on my domain

  • Date and time of the server request

  • Browser type and version

  • Operating system used

  • Referrer URL

  • IP address (where applicable, shortened/anonymized)

  • Hostname of the accessing device

This data is not combined with other data sources. Collection is based on Art. 6(1)(f) GDPR. I have a legitimate interest in the technically error-free presentation and optimization of my website.

As Wix Inc. may process data outside the EU (Israel/USA), data transfers are based on EU Standard Contractual Clauses and/or an adequacy decision by the European Commission for Israel. Further information on data protection at Wix is available at: https://www.wix.com/about/privacy

​

4. Contacting Me

4.1 Contact Form

If you send me inquiries via the contact form on this website, your details from the contact form — including the contact information you provide there (e.g., name, email address) — will be stored by me for the purpose of processing your inquiry and in case of follow-up questions.

Legal basis:

  • If you contact me to establish a mandate or to prepare for a mandate relationship, processing is carried out under Art. 6(1)(b) GDPR (pre-contractual measures).

  • In all other cases, processing is based on a legitimate interest in handling inquiries under Art. 6(1)(f) GDPR, or — where obtained — on your consent under Art. 6(1)(a) GDPR.

I will not pass on this data without your consent. Data submitted via the contact form will remain with me until you request its deletion, revoke your consent to its storage, or the purpose for which it was stored no longer applies (e.g., once your inquiry has been fully processed). Mandatory statutory provisions — in particular the statutory retention period under Section 50 BRAO (retention of case files, generally 6 years after termination of the mandate) — remain unaffected.

​

4.2 Contact by Email or Phone

If you contact me by email or telephone, your inquiry — including all personal data arising from it (name, inquiry content) — will be stored and processed by me for the purpose of handling your request. I will not pass on this data without your consent.

Legal basis: Art. 6(1)(b) and/or (f) GDPR, supplemented by Section 50 BRAO regarding retention within the context of a mandate relationship.

Note on email communication: Please note that communication via unencrypted email is generally not protected against access by third parties. For sending confidential or particularly sensitive information, I recommend using a secure channel (e.g., the special electronic attorney mailbox "beA," encrypted email, or postal mail).

​

5. Social Media

This website contains links to my profiles on Instagram and LinkedIn. These are plain links to the respective platforms; no social media plugins or embedded feeds are used that would automatically transmit data to the respective providers upon visiting this website. Only when you click on the relevant link will you be redirected to the respective network; data processing there is the responsibility of the respective provider:

​

6. Cookies

This website uses technically necessary cookies required for the operation of the website and the provision of its functions (e.g., session cookies set by Wix for the technical delivery of the website). These cookies do not process personal data for advertising or analytics purposes.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically error-free operation of the website) as well as Section 25(2) No. 2 of the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG), as these cookies are strictly necessary to provide the website.

This website does not use any cookies or tools for analytics, marketing, or tracking purposes that would require consent.

​

7. Your Rights as a Data Subject

You generally have the following rights:

  • Right of access (Art. 15 GDPR) regarding the personal data I process

  • Right to rectification (Art. 16 GDPR) of inaccurate data

  • Right to erasure (Art. 17 GDPR), insofar as no statutory retention obligations apply

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR) to processing based on Art. 6(1)(f) GDPR

  • Right to withdraw consent already given (Art. 7(3) GDPR), with effect for the future

  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The supervisory authority responsible for me is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW) Kavalleriestraße 2–4 40213 Düsseldorf, Germany www.ldi.nrw.de

To exercise your rights, please contact me using the details provided under Section 1 above.

​

8. Special Notice for Clients

Within the context of an actual mandate relationship, I process additional personal data and, where applicable, special categories of personal data (Art. 9 GDPR, e.g., information on origin, health, or criminal matters in connection with immigration law proceedings), insofar as this is necessary to provide legal services, in particular to represent your interests before authorities and courts.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) as well as Art. 9(2)(f) GDPR (establishment, exercise, or defense of legal claims), each in conjunction with the professional requirements of the BRAO and BORA.

This data is stored in accordance with statutory retention periods (in particular Section 50 BRAO) and subsequently deleted, provided no further statutory retention obligations apply.

​

9. Currency and Amendment of This Privacy Policy

This privacy policy is currently valid (as of: [insert date]). Due to the further development of my website, or due to changes in statutory or regulatory requirements, it may become necessary to amend this privacy policy. The current version of this privacy policy is available on this website at any time.

Note: This English version is provided for your convenience and for international clients. The German version remains the legally authoritative text for your website; consider adding a note stating "The German version of this privacy policy shall prevail in case of any discrepancies" if you publish both.

bottom of page