Privacy Policy

Privacy Policy

KORTE LAW Last updated: March 2026


1. Controller and Contact Details

The controller responsible for data processing on this website is:

KORTE LAW Kurfürstenhöfe, Spreeufer 5 10178 Berlin, Germany

Email: info@korte-law.com Phone: +49 157 377 44 265

2. Our Offices

KORTE LAW maintains offices in Berlin (Germany), Paris (France), Rabat (Morocco), and Casablanca (Morocco). This privacy policy applies to all data processing activities conducted through our website korte-law.com, regardless of which office handles your inquiry.

3. Data We Collect

3.1 Contact Form

When you use our contact form, we collect:

  • Name
  • Email address
  • Telephone number (if provided)
  • Your message

Purpose: To respond to your inquiry, assess whether we can assist you, and conduct internal conflict checks.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in responding to inquiries from prospective clients and business contacts, and Article 6(1)(b) GDPR where the inquiry relates to the initiation of a contractual relationship. Under Morocco's Loi 09-08, processing is based on Article 4 (legitimate interest of the controller and the necessity to perform pre-contractual measures).

Retention period: If your inquiry does not lead to a client engagement, we delete your data within six (6) months of our last communication, unless we are required to retain minimal identifying information for conflict-check purposes (up to three years, in line with §§ 195–199 BGB). If a mandate is formed, your data becomes part of the client file and is retained in accordance with statutory professional and tax retention obligations (§ 50 BRAO: six years; § 147 AO / § 14b UStG: up to ten years for billing records).

3.2 Server Log Files

When you visit our website, your browser automatically transmits certain technical data to our server, including your IP address, date and time of access, pages visited, browser type, and operating system. This data is processed on the basis of Article 6(1)(f) GDPR (our legitimate interest in ensuring the security and functionality of our website) and is deleted after 30 days.

3.3 Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Non-essential cookies are only set with your prior consent (§ 25(1) TTDSG; Article 6(1)(a) GDPR).

Google Analytics

We use Google Analytics (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage. Google Analytics uses cookies to collect anonymized usage data (pages visited, session duration, approximate location derived from a truncated IP address).

  • Purpose: Statistical analysis of website traffic to improve our online presence.
  • Legal basis: Your consent (Article 6(1)(a) GDPR; § 25(1) TTDSG).
  • Retention: Analytics data is automatically deleted after 14 months. Cookie expiry: up to 2 years (_ga cookie).
  • Data processing agreement: We have concluded a data processing agreement with Google pursuant to Article 28 GDPR.
  • International transfers: Google may transfer data to servers in the United States. Transfers are safeguarded by EU Standard Contractual Clauses (Article 46(2)(c) GDPR).

Remarketing and Tracking Pixels

Where we use remarketing or advertising tracking pixels (e.g., from Google Ads, Meta/Facebook, or LinkedIn), these are activated only with your prior consent. Such tools may collect device identifiers and browsing behavior to display targeted advertisements.

  • Purpose: Measuring the effectiveness of advertising campaigns and displaying relevant advertisements.
  • Legal basis: Your consent (Article 6(1)(a) GDPR; § 25(1) TTDSG).
  • Opt-out: You may withdraw your consent at any time through our cookie consent manager or your browser settings.

Cookie Consent Management

When you first visit our website, a consent banner allows you to accept or reject non-essential cookies. You may modify your preferences at any time by clicking the cookie settings link in the website footer. Strictly necessary cookies (required for the basic functioning of the website) do not require consent (§ 25(2) TTDSG).

4. International Data Transfers

KORTE LAW operates offices in Morocco (Rabat and Casablanca). When your data is shared with our Moroccan offices for the purpose of processing your inquiry or managing a client engagement, this constitutes a transfer of personal data to a country outside the European Economic Area (EEA).

Morocco does not currently benefit from an EU adequacy decision under Article 45 GDPR. We therefore rely on EU Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Article 46(2)(c) GDPR to ensure an adequate level of protection for your data. You may request a copy of these safeguards by contacting us at info@korte-law.com.

Additionally, Morocco's national data protection law (Loi 09-08, Dahir n° 1-09-15 of 18 February 2009) and its supervisory authority (Commission Nationale de contrôle de la protection des Données à caractère Personnel — CNDP) provide a regulatory framework for personal data protection in Morocco.

5. Recipients of Your Data

We may share your personal data with the following categories of recipients, where necessary:

  • Within our firm: Attorneys and staff across our Berlin, Paris, Rabat, and Casablanca offices, as required to handle your inquiry or matter.
  • AMERELLER network: Where your matter requires coordination with AMERELLER offices, subject to appropriate confidentiality and data protection arrangements.
  • IT service providers: Hosting, email, and website service providers acting as processors under Article 28 GDPR.
  • Professional advisors and courts: Where necessary for the provision of legal services (e.g., courts, arbitral tribunals, opposing counsel, experts, notaries).
  • Regulatory authorities: Where required by law (e.g., anti-money laundering obligations).

6. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Article 15 GDPR) — to obtain confirmation of whether we process your personal data and to receive a copy thereof.
  • Right to rectification (Article 16 GDPR) — to have inaccurate data corrected.
  • Right to erasure (Article 17 GDPR) — to request deletion of your data, subject to statutory retention obligations.
  • Right to restriction of processing (Article 18 GDPR).
  • Right to data portability (Article 20 GDPR) — to receive your data in a structured, commonly used, and machine-readable format.
  • Right to object (Article 21 GDPR) — to object to processing based on legitimate interests. Where we process your data for direct marketing purposes, you have an absolute right to object.
  • Right to withdraw consent (Article 7(3) GDPR) — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Under Morocco's Loi 09-08, data subjects additionally have rights of access, rectification, and objection (Articles 7, 8, and 9 of Loi 09-08), which may be exercised by contacting us at the address above.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:

  • Germany: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany (https://www.datenschutz-berlin.de)
  • Morocco: Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP), Angle Boulevard Annakhil et Avenue Mehdi Ben Barka, Hay Riad, Rabat, Morocco (https://www.cndp.ma)

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with Article 32 GDPR and Article 23 of Loi 09-08.

9. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our data processing practices or legal requirements. The current version is always available on our website. We encourage you to review this page periodically.

10. Applicable Law

This privacy policy is governed by the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG), the German Telecommunications-Telemedia Data Protection Act (TTDSG), and, where applicable, Morocco's Loi 09-08 relative to the protection of natural persons with regard to the processing of personal data.


© 2026 KORTE LAW. All rights reserved.