This English version is provided for information. The German version (Datenschutzerklärung) is the legally binding one.
Last updated: 16 September 2026
1. Controller
Jasmin Al Sharif, Das Mandatsbüro Rhein-Ruhr
c/o POSTFLEX PFX-772-515, Emsdettener Straße 10, 48268 Greven
Phone: 0151 20285029, e-mail: kontakt@mandatsbuero-rhein-ruhr.de
No data protection officer has been appointed, as the legal requirements do not apply.
2. Principles
This website uses no cookies, no tracking and no analytics tools. Fonts are served from our own server. We process personal data only to the extent necessary to operate the website and to handle your enquiry. The password-protected administration area of the website is intended solely for the operator and sets a technically necessary session cookie only there.
3. Hosting (Cloudflare Pages)
The website is hosted by Cloudflare (Cloudflare Germany GmbH, Rosental 7, 80331 Munich, on behalf of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technical access data (IP address, date and time, page accessed, browser type, referrer) in server logs in order to deliver the website and protect it from attacks.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and fast operation). A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Processing in the USA cannot be ruled out; Cloudflare is certified under the EU-US Data Privacy Framework, and the EU standard contractual clauses (Art. 46 (2) (c) GDPR) apply in addition. Log data is deleted by Cloudflare after a short period.
4. Enquiry form and e-mail delivery (Brevo)
If you use the enquiry form, we process your name, your e-mail address, optionally your phone number and the content of your message in order to answer your enquiry and arrange a conversation. The message is delivered as an e-mail via the service Brevo (Brevo GmbH, Köpenicker Str. 126, 10179 Berlin). Brevo processes the data on servers in the European Union; a data processing agreement under Art. 28 GDPR is in place.
To protect against automated submissions, the form contains a check field invisible to humans; no additional data is collected in the process.
Legal basis: Art. 6 (1) (b) GDPR (steps prior to entering into a contract) and Art. 6 (1) (f) GDPR (answering general enquiries). Retention: if no collaboration comes about, we delete the enquiry no later than 6 months after the last communication. If a mandate comes about, the contractual and statutory retention periods apply (up to 10 years under the German Commercial Code and Fiscal Code).
Please do not send special categories of personal data (such as health data), bank details or passwords through the form.
5. Map (OpenStreetMap)
The “Service area” section displays a map based on OpenStreetMap. The map tiles are loaded from servers of the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). In the process, your IP address, browser type, referrer and time of access are transmitted to the OpenStreetMap Foundation; delivery takes place via a content delivery network. No cookies are set.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a clear presentation of the service area). An adequacy decision of the European Commission exists for the United Kingdom. Further information: OpenStreetMap Foundation privacy policy.
6. Phone and e-mail
If you contact us by phone or e-mail, we process the data transmitted in order to handle your request (Art. 6 (1) (b) and (f) GDPR). The retention period corresponds to section 4.
7. Recipients and disclosure
Your data is transmitted only to the processors named above (Cloudflare, Brevo). Technical support of the website, including the hosting account and form delivery, is provided by Emre Sakalli (sakalli.ai) as a processor under Art. 28 GDPR.
Within a mandate we involve, at your request, specialist businesses and practices from our network, such as trade businesses, care and household help, sworn translators, tax advisers or lawyers. We pass on to them only the data required for the respective assignment, and only after informing you. The legal basis is the performance of the mandate agreement (Art. 6 (1) (b) GDPR) or your consent (Art. 6 (1) (a) GDPR), and for health data Art. 9 (2) (a) GDPR. All partners are bound to confidentiality in writing. No disclosure to other third parties takes place unless we are legally obliged to do so.
8. Your rights
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
- Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
To exercise these rights, contact kontakt@mandatsbuero-rhein-ruhr.de or write to the address above.
9. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de.
10. Data security
The website is delivered exclusively via HTTPS. Enquiries and documents from mandates are kept locked away or password-protected; only the owner has access.
11. Changes
We adapt this privacy policy when the legal situation or the services used change. The version published on this website at the time applies.