Data protection statement

The patent law firm Hentrich® Patent- & Rechtsanwaltspartnerschaft mbB takes the protection of your personal data very seriously. We treat your personalised data confidential according to legal privacy rules and to this privacy statement.

1. name and contact of the controller and data protection officer

This data protection statement is valuable for personal data processing by:

Hentrich Patent- & Rechtsanwaltspartnerschaft mbB (“us/ we”), Syrlinstraße 35, 89073 Ulm, Germany
Fon: +49 (0)731-1404490; Fax: +49(0)731-14044929

A data protection officer is not needed.

2. collection and storage of personal data by access of our website

The use of our website is possible without providing any personal data. However we draw your attention to the fact, that data transmission over the internet may involve gaps in security. It is not possible to protect such data completely against access by third parties.

Server log files:

The provider of this site collects and automatically saves in its so called server log files information that your browser automatically sends to us. These are:

  • IP-address at the time of access
  • browser type / browser version
  • operating system
  • referrer URL
  • time of request

These data cannot be attributed to specific persons and will not be combined with other data sources.

Besides the server log files we do not deliberately save further data.We are commited to data economy and therefor save these data only for a short time, as a rule not longer than a few days.

3. collection and storage of personal data as well as type and purpose and their use

If you mandate us, we collect the following information:

  • Form of address, first name, last name,
  • a valid e-mail address,
  • address,
  • if necessary the nationality,
  • Telephone number (landline and/or mobile),
  • Information necessary for the enforcement and de-fence of your rights under the mandate.

These data are collected,

  • to identify you as our client;
  • in order to be able to advise and represent you appropriately;
  • to correspond with you;
  • for invoicing;
  • to settle any liability claims that may exist and to enforce any claims against you;

The data processing is carried out at your request and is required according to Art. 6 para. 1 sentence 1 lit. b General Data Protection Regulation (GDPR) for the stated purposes for the appropriate handling of themandate and for themutual fulfilment of obligations arising from the mandate agreement.

If you are the inventor, designer, creator or official in charge of a client, we collect the following information:

  • Form of address, first name, last name,
  • a valid e-mail address,
  • address,
  • if necessary the nationality,
  • if necessary telephone number (landline and/or mobile),

These data are collected,

  • to correspond with you;
  • for passing on to patent and trademark offices for the fulfilment of an application order;
  • to be passed on to colleagues in a third country for the purpose of filing an application in that third country;

Data processing is carried out in order to fulfil a legal obligation and, pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, is necessary for the purposes stated for the appropriate handling of the client’smandate or for the fulfilment of the registration order.

The personal data collected by us for the purpose of the mandate and for the fulfilment of an application order will be stored until the expiry of the legal obligation of lawyers and patent attorneys to retain data (6 years after the end of the calendar year in which themandate was terminated) and will be deleted thereafter, unless we are obliged to a longer storage under Article 6 para. 1 of the German Data Protection Act. 1 sentence 1 lit. c GDPR due to tax and commercial storage and documentation obligations (from German Commercial Code, German Criminal Code or German Fiscal Code) or you have agreed to a storage going beyond this according to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. transfer of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.
Insofar as it is necessary in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for the handling of the client relationship with you, your personal data will be passed on to third parties. The same applies if the data is passed on in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR.
This includes, in particular, disclosure to colleagues in correspondence, to opponents of proceedings and their representatives (in particular their patent attorneys and lawyers) as well as courts and other public authorities for the purpose of correspondence and for enforcing and defending your rights. The data passed on may only be used by the third party for the aforementioned purposes. The attorney-client privilege remains unaffected. Insofar as the data concerned is subject to the attorney-client privilege, it will only be passed on to third parties according to your agreement.

We work together with contract data processors, namely with IT service providers for legal software and the technical infrastructure and service providers for finance and accounting. We have corresponding contracts with the contract data processors for contract data processing within the meaning of Art. 28 Para. 3 GDPR. The service providers are bound to secrecy.

5. transmission of data to recipients in a third country

Depending on the case, it is possible that your personal data may be transferred to a recipient in a third country. This is also in your interest as an inventor (Art. 49 para. 1 lit. c GDPR). Recipients are, in particular, opponents, representatives of opponents, courts, authorities, bailiffs, correspondence lawyers, translation service providers, research service providers, etc.
Such transfer to third parties will only take place if and to the extent that this is necessary to fulfil the mandate agreement (Art. 6 I 1 b GDPR) or if the person concerned has a legitimate interest in it.

The data may also be transferred to third countries for which there is no decision on the adequacy of the data protection level of the European Commission. Insofar as an adequacy decision does not exist and/or suitable guarantees are not provided, such a transfer shall only take place in exceptional cases of Art. 49 GDPR, in particular if this is necessary for the fulfilment of the mandate agreement or in the interest of the data subject or for the assertion, exercise and defence of legal claims, if express consent has been given or if the data are transferred from a public register.

6. rights of the data subject

You have the right:

  • in accordance with Art. 7 para. 3 GDPR to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future;
  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In par-ticular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the ex-istence of a right of rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data, unless it has been collected from us, as well as the existence of an automated decisionmaking process including profiling and, if applicable,meaningful information on its details;
  • in accordance with Art. 16 GDPR, to immediately request the rectification of inaccurate or incomplete personal data stored by us;
  • to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the accuracy of the data is contested by you, the pro-cessing is unlawful but you oppose the erasure, we no longer need the data, but you need it for the establishment, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your per-sonal data which you have provided to us in a struc-tured, common andmachine-readable format or to request to transmit to another responsible party; and
  • to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your habitual residence or place of work or place of our office.

7. right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation. If you wish to exercise your right of objection, simply send an e-mail to

8. Warning notice pursuant § 2 BORA

We usually communicate via e-mails with transport encryption, especially if you contact us in this way. This involves certain technical risks for the confidentiality of the message. At your request or if the situation requires it, we use encrypted e-mails or communicate by post.

9. responsible supervisory authority

In Baden-Württemberg, i.e. at site of our office, the responsible supervisory authority is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, Königsstraße 10a, 70173 Stuttgart.

10. validity and changes of this data protection statement

This data protection statement as of January 2018 is currently valid. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may be necessary to amend this data protection declaration. You can call up and print out the currently valid data protection declaration at any time by entering our website at