Privacy
This site loads nothing from third-party servers and measures nothing. The one cookie it sets belongs to the access code of the development phase. What you send via the contact form or the membership application goes to this site’s server and from there to the firm — details under no. 07.
Controller
Makery GmbH Rechtsanwaltsgesellschaft, Löwengrube 18, D-80333 Munich, represented by Dr. Tobias Fuchs. Telephone +49 89 287 55 99 0, info@makery-legal.com.
The firm has not appointed a data protection officer, because the legal requirements for one (Art. 37 GDPR, § 38 BDSG) are not met. Please send data protection questions to the address above.
What this site does not do
It loads nothing from foreign servers — no fonts, no scripts, no tracking pixels, no maps, no embedded video. It measures no reach, evaluates no behaviour and includes no advertising networks. That is why there is no consent dialogue either: there would be nothing to consent to.
The one cookie
During the development phase an access code stands in front of the site. Entering it yields a cookie tor_makery-legal. It holds no name and no identifier, only a check value of the code; HttpOnly, Secure, SameSite=Lax, valid for 30 days. It is strictly necessary for operation (§ 25 (2) no. 2 TDDDG) and disappears once the site is public.
Calling up the site
The site is delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Log data arises on access: IP address, time, address requested, status code and browser identification. It serves operation and the defence against attacks (Art. 6(1)(f) GDPR). Cloudflare processes it on our behalf (Art. 28 GDPR); data may be transferred to the United States in the process. The basis is the European Commission’s adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework (Art. 45 GDPR), under which Cloudflare is certified; in addition, the Commission’s standard contractual clauses in the data processing agreement apply (Art. 46(2)(c) GDPR).
The rate limit
Tools that use a language model are limited per visitor, so that the site cannot be read out at someone else’s expense. This requires counting — but your IP address is not stored in the process. It passes through a one-way function (SHA-256, salted with this site’s identifier); eight bytes of the result are kept and expire by themselves after two hours. Your address cannot be reconstructed from them. Legal basis: Art. 6 (1) (f) GDPR.
The tools
All freely accessible tools compute entirely on your own device. What you enter there does not leave it and does not reach the firm. This does not hold for the deadline scanner and the contract diff — they are in preparation; what they transmit will be stated here before they are switched on. in preparation
Contact form and applications
What you send via the contact form (appointment preparation), the membership application or an enquiry about paid tools is transmitted, together with any files you attach, in encrypted form to this site’s server (Cloudflare). The firm collects the cases from there — usually within minutes —, files them case by case in its own records and is notified by e-mail. A case stays on the server for no more than 30 days and is then deleted automatically; the firm’s records are governed by No. 08. The legal basis is the initiation of an engagement or your enquiry (Art. 6(1)(b) GDPR). As long as this site is a trial version: do not upload anything that is truly confidential.
Contact and mandate
If you write to us, we process what your message contains — in order to answer it and to initiate or carry out a mandate (Art. 6 (1) (b) and (f) GDPR). An ordinary e-mail is not encrypted in transit; for confidential matters we agree on a secure route. Everything that reaches us is covered by legal professional privilege (§ 43a BRAO, § 203 StGB) and by the professional retention period of six years after the end of the mandate (§ 50 BRAO); tax retention periods remain unaffected.
Appointments
We take appointment requests through the contact form: you suggest up to three times, and we confirm one of them or propose others. No external calendar service is involved.
Live ticker
The live ticker processes no personal data. It is not a subscription: there is nothing to sign up for, and we keep no address list for it.
Your rights
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Consent can be withdrawn at any time with effect for the future. Complaint under Art. 77 GDPR to a supervisory authority, for us: Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach, Germany.
No decision by machines
There is no automated decision-making in individual cases and no profiling within the meaning of Art. 22 GDPR. The tools on this site prepare; they do not decide. Every legal assessment is made by a lawyer.
Status
This declaration applies in the version published here. If what the site does changes, this text changes first.
This translation follows the German version. In case of doubt the German text prevails.