Collection and Storage of Personal Data, and the Type and Purpose of its Use
When you access our website at www.graefeundpartner.de, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file.
The following information is collected without your intervention and stored until automated deletion: IP address of the requesting computer, date and time of access, name and URL of the retrieved file, website from which access is made (referrer URL), browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.
We process the aforementioned data for the following purposes: ensuring a smooth connection to the website, guaranteeing comfortable use of our website, evaluating system security and stability, and for other administrative purposes.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about your identity.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, based on your voluntarily given consent.
Disclosure of Data
Your personal data will not be transferred to third parties for purposes other than those listed below.
We only disclose your personal data to third parties if: you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, the disclosure is necessary for the assertion, exercise, or defense of legal claims in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data, there is a legal obligation for the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, and this is legally permissible and necessary for the performance of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
Data Subject Rights
You have the right:
in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
in accordance with Art. 16 GDPR, to demand the immediate rectification of inaccurate or completion of your personal data stored by us.
in accordance with Art. 17 GDPR, to demand the erasure of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims; in accordance with Art. 18 GDPR, to demand the restriction of processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful, but you oppose its erasure and we no longer need the data, but you require it for the assertion, exercise, or defense of legal claims, or you have objected to processing in accordance with Art. 21 GDPR; in accordance with Art. 20 GDPR, to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request its transmission to another controller.
in accordance with Art. 7 para. 3 GDPR, to withdraw your consent given to us at any time. This means that we will no longer be permitted to continue the data processing based on this consent in the future; in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
Right to Object
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you wish to exercise your right of withdrawal or objection, an email to info@graefeundpartner.de is sufficient.
Data Security
During your website visit, we use the widespread SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can recognize whether an individual page of our website is transmitted encrypted by the closed key or lock symbol in the lower status bar of your browser.
Furthermore, we employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
We point out that data transmission over the Internet (e.g., when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible. This applies in particular if you contact us on your own initiative via email. In this case, you are responsible for taking appropriate measures to transmit your data securely and protect it against unauthorized third-party access.
Actuality and Amendment of this Privacy Policy
This Privacy Policy is currently valid and was last updated in May 2026.
Due to the further development of our website and its offerings, or due to changed legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current Privacy Policy can be viewed here at any time.