Privacy policy

Information about server and security logs, our own anonymous audience measurement and Google Analytics, which is loaded only after consent.

Controller

Law firm Jablukov & Kollegen
Attorney-at-law Georg Jablukov
Kurfürstendamm 132 A, 10711 Berlin
Tel.: +49 (0)30 206785210
E-mail: kanzlei@jablukov.de

Server and security logs

When you access the website, the web server processes the data technically required to deliver the response. A separate security log is kept for operational security, abuse prevention and error analysis. It contains the date and time, IP address, request method, requested path without query parameters, HTTP status, bytes transferred, response time, a broad source category and the User-Agent. These data are deleted after no more than 14 days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and functional operation of the website.

Our own anonymous audience measurement

We operate our own anonymous audience measurement to improve the website technically and editorially. The analytics log contains only the day and time, the public path requested without query parameters, HTTP status, bytes transferred, response time, a broad source category and a classification of the request as human or automated.

The analytics log contains no IP address, full User-Agent, full referrer, cookies or persistent identifiers. Interactions contain only the date and time, event name, locale and a neutral technical element key. Callback-form contents or field values and other contact details are never included in analytics.

Raw anonymous data are deleted after three days. Statistical aggregates are retained for no more than 16 months. The legal basis is Art. 6(1)(f) GDPR. The legitimate interests are detecting technical errors and improving the website’s use, reach, accessibility, performance and content.

You may object to this processing at any time with effect for the future. Global Privacy Control (GPC), Do Not Track (DNT) and the local opt-out setting below are honoured as objections. The necessary first-party cookie used for this purpose contains only the opt-out value, is not used as an identifier and expires after one year. The objection does not affect server processing required for security and delivery.

Google Analytics (consent only)

If you select “Allow statistics”, we use Google Analytics 4 to measure audience reach. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland may engage Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other processors. We have entered into a data-processing agreement with Google.

Before your explicit consent, the Google tag is not loaded and no connection to Google is made. All Consent Mode v2 signals are denied by default. If you consent, only analytics_storage is granted; ad_storage, ad_user_data and ad_personalization remain denied. GPC or DNT prevents activation even if consent was previously recorded on the device.

After consent, only the following measurement data are transmitted:

• the page address consisting of origin and path, without query parameters or fragment,
• locale, timestamp and, for interactions, the event name and a neutral element key,
• technical browser and device details such as language and screen size,
• pseudonymous client and session identifiers and a broad region derived from the IP address technically transmitted.

We do not transmit query parameters, URL fragments, the page referrer as a measurement value, form contents, contact details, user IDs or user-provided data. Enhanced Measurement, Google Signals and personalised advertising are disabled. The IP address is technically required for the connection to Google but is not displayed in our Analytics reports.

Google Analytics sets the first-party cookies _ga and _ga_8JXJV0K5L2 for pseudonymous measurement and session identifiers. We limit their lifetime to no more than 60 days and do not renew it through continued use. Event and user data in the Analytics property are deleted after two months. The necessary first-party cookie jablukov_consent stores your choice for 180 days.

The legal bases for Google Analytics are your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG. Where data are transferred to the United States, Google relies on Google LLC’s certification under the EU-US Data Privacy Framework and, where required, Standard Contractual Clauses. Further information is available in Google’s privacy policy.

You may withdraw consent at any time with effect for the future. Selecting “Necessary only” sets all consent signals to denied and deletes the accessible Google Analytics cookies from this device without reloading the page. You can manage our own anonymous audience measurement independently above.

Contact by e-mail or phone

If you contact the firm by e-mail or phone, the data you provide will be used to process your inquiry and any follow-up communication. The legal basis is Art. 6(1)(b) GDPR and, where necessary, Art. 6(1)(f) GDPR.

No advertising or profiling services

Apart from Google Analytics, which is loaded only after consent, no marketing or advertising services are used. No embedded social-media feeds, advertising networks or third-party comment systems are loaded either.

Downloads and external links

The website provides PDF documents for download. When these files are accessed, the same technically necessary access data is processed as with a normal page request. External services such as Google Maps or LinkedIn are opened only after you actively click the relevant link.

Retention of communication data

Data received in connection with a specific inquiry or mandate are stored in accordance with the purpose of the inquiry or mandate and applicable retention obligations. The retention periods for security and analytics data are stated separately above.

Your rights

• right of access to your personal data
• right to rectification of inaccurate data
• right to erasure or restriction of processing where legally available
• right to object to processing based on legitimate interests
• right to data portability where applicable
• right to lodge a complaint with a data-protection supervisory authority

Status

August 2026