Legal

Privacy Policy

This privacy policy informs you which personal data we process when you visit this website or use the naturalisation check, and which rights you have in this respect.

1. Controller

Rechtsanwalt Nihat Kaygalak, LL.M.
Falkenweg 11, 41468 Neuss
Telephone: +49 173 9120770 · E-mail: info@meindeutscherpass.de

2. Legal bases of processing

3. Hosting and server log data

This website is hosted at 1&1 IONOS in Germany. When the site is accessed, technically necessary data such as the IP address, date and time of access, the page accessed and the browser type are processed briefly in server log files in order to deliver the website stably and securely (Art. 6 (1) (f) GDPR).

4. Naturalisation check

When you complete the naturalisation check, we process the data you provide (including name, contact details, information on residence, language and employment) in order to assess your enquiry and contact you personally (Art. 6 (1) (b), in part (a) GDPR). Valid enquiries are first stored in encrypted form in a database with restricted access. A copy of the submitted form data is then sent as an internal notification e-mail to the firm's access-restricted mailbox. The database remains the primary record; the internal e-mail is an additional means of receipt.

Information on criminal convictions is processed only to the extent that it is necessary for the specific legal assessment requested and the processing is permissible under Art. 10 GDPR in conjunction with the applicable law. Access is limited to authorised persons involved in the legal processing. Enquiries without a mandate, for which no contract file has been created, are deleted automatically after 90 days. For enquiries with a contract file as well as for contract, signature and evidence data, the statutory and professional retention periods apply; statutory obligations to provide evidence and to retain records remain unaffected.

After successful storage, a technically necessary session cookie mdp_tracking, valid for this website only, is set temporarily. It confirms to the website on a one-off basis that the success page shown belongs to an enquiry that was actually stored; no form content is stored in it, and the confirmation expires after 30 minutes at the latest.

5. Contact by telephone and e-mail

If you contact us by telephone or e-mail, we process the data arising in this context in order to deal with your request (Art. 6 (1) (b), in part (f) GDPR). The data are deleted as soon as the matter has been concluded and no statutory retention obligation prevents this.

6. Contract portal and electronic signature

When we make documents available to you, we process in particular your contact details, contract number, service and remuneration model, the immutably assigned versions and checksums of the original mandate agreement, the power of attorney, the general terms and conditions and the withdrawal information, the times of dispatch, access and signature, your contract address, the name you entered, the signature image as well as your separate declarations regarding the contract, the power of attorney, the remuneration notices and any early commencement of services you may request. The legal basis is Art. 6 (1) (b) GDPR; evidence required by law is additionally based on Art. 6 (1) (c) GDPR, and safeguarding integrity and verifiability on Art. 6 (1) (f) GDPR.

To prevent misuse and for documentation purposes, the time, abbreviated technical browser details and the IP address may also be processed when documents are sent, accessed, signed and withdrawn. The evidence log also records on which expressly confirmed signature fields of the original documents the signature image you provided was placed. Contract, power of attorney, signature and technical evidence data are stored in encrypted form in the database. The access link sent by e-mail contains a random identifier; only its cryptographic check value is stored in the database. Contract pages do not load any analytics, advertising or other third-party scripts.

After your electronic signature you receive the customer signature package immutably assigned to you, including the original pages, signatures, accepted general terms and conditions and withdrawal information, as a PDF by e-mail. Insofar as the wording of the mandate agreement additionally requires countersignature or acceptance by the firm, this is not replaced by the customer's signature. The electronic signature in this portal is a simple electronic signature and is not designated as a qualified electronic signature. Contract and mandate data are stored in accordance with the statutory professional retention obligations, in particular § 50 BRAO, and any further statutory obligations.

7. Online withdrawal function

Using the permanently available „Vertrag widerrufen“ (withdraw contract) function, you can submit a declaration of withdrawal in two steps. In doing so we process the contract number, name, e-mail address, an optional message as well as the content, date and time of the declaration. The original signature evidence is retained as a historical record and is not overwritten by the withdrawal. You receive an electronic acknowledgement of receipt without undue delay.

8. Consent management, Google Tag Manager, Google Analytics and marketing measurement

We load Google Tag Manager and the measurement services provided through it only after you have selected „Nur Analytics“ (analytics only) or „Analytics + Werbemessung“ (analytics plus advertising measurement) in the consent dialogue. Without a selection, or with „Nur erforderlich“ (necessary only), these measurement services remain deactivated and they do not set any analytics or advertising cookies.

With „Nur Analytics“ you permit analysis of website use, but no release of data for Google advertising purposes. If you expressly select „Analytics + Werbemessung“, you additionally permit technical identifiers such as cookie, device and ad click identifiers as well as conversion data to be transmitted to Google in order to measure advertising campaigns and to attribute confirmed enquiries to advertisements. For this purpose we use Google Ads conversion tracking for successfully submitted naturalisation checks and clicks on telephone links. The consent signal for transmitting user data to Google for advertising purposes (ad_user_data) is set to granted in this case. This enables Google Ads to evaluate the effectiveness of advertisements and to optimise bids on the basis of the released conversion data. Personalisation of advertising, Google Signals and remarketing remain deactivated with every selection. We do not create personalised advertising profiles or remarketing lists from your use of this website.

Google Analytics 4 helps us understand which pages and languages are used and which steps lead to an enquiry. Page views, scroll depth, navigation, views of the naturalisation check, general form steps, technically confirmed enquiries as well as clicks on telephone, e-mail, route and external links may be recorded. Contents or selected values of the naturalisation check, as well as name, e-mail address and telephone number, are not transmitted to Google as analytics events or user properties.

If you permit marketing measurement, existing campaign parameters such as gclid, gbraid, wbraid and standardised UTM parameters may be stored locally as first and last contact and transmitted to us together with a successfully submitted enquiry. They serve exclusively for campaign attribution and are not used for remarketing. Where valid marketing consent exists, we may subsequently transmit confirmed conversion events to Google Ads by means of an offline conversion upload. In doing so, the ad click identifier, the type and time of the conversion event and, where applicable, its value are transmitted so that Google can attribute the event to the original ad contact. Names, e-mail addresses, telephone numbers and answers from the naturalisation check are not transmitted to Google for enhanced conversions, even where marketing consent has been given.

Where marketing consent has been given, a click on a telephone link is measured as a click event; in itself it does not confirm that a telephone call actually took place. For call measurement in Google advertisements, Google may display a Google forwarding number that forwards calls to our regular telephone number. In doing so, Google may process in particular the time and duration of the call and its attribution to the advertisement and campaign.

In this context, the pages accessed, page titles and referrers, interactions and times, device and browser information, a pseudonymous client ID as well as the IP address may be processed for technical transmission and location derivation. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the USA cannot be ruled out; in this respect Google refers in particular to the EU-US Data Privacy Framework and standard contractual clauses.

The legal basis for storing or reading information on your end device is your consent pursuant to § 25 (1) TDDDG; the legal basis for the subsequent processing of personal data is Art. 6 (1) (a) GDPR. Your selection is stored without a user ID in local storage under mdp_consent_v3. Where marketing consent has been given, campaign information is stored under mdp_attribution_v1. After consent, Google Analytics may use in particular _ga cookies. Where marketing consent has been given, Google Ads may use cookies whose names begin with _gcl_; they serve to attribute conversion events to ad contacts and have a standard lifetime of 90 days. The storage period of other Google cookies depends on the settings of the service used.

A marketing selection stored earlier is not automatically extended to this data transmission. We ask for your consent again for that purpose. An earlier selection of „Nur erforderlich“ or „Nur Analytics“ is carried over without extending its scope.

You can change or withdraw your selection at any time via „Cookie-Einstellungen“ (cookie settings) in the page footer. Upon withdrawal, the consent signals concerned are set to „denied“ and accessible _ga and _gcl cookies as well as locally stored campaign information are deleted. The lawfulness of the processing carried out up to the withdrawal remains unaffected. Further information can be found in the Google privacy notice.

Fonts are loaded exclusively from our own server, not from external font services.

9. Confidentiality in the case of a legal mandate

If your enquiry results in a mandate with Rechtsanwaltskanzlei Kaygalak, the mandate-related data are additionally subject to the attorney's duty of confidentiality (§ 43a BRAO, § 203 StGB) and are processed in accordance with the statutory retention periods (§ 50 BRAO).

10. TLS encryption

This website is delivered exclusively via an encrypted HTTPS connection.

11. Your rights

An informal message to the contact details given above is sufficient to exercise these rights.

12. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, poststelle@ldi.nrw.de, www.ldi.nrw.de.

Start Naturalization Check
Call Start Check