Privacy Policy | Data Protection

Last updated: December 2024

1. Introduction

Stonevale ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you consent to the practices described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

Stonevale GmbH
Friedrichstraße 123
10117 Berlin, Stoney
Email: privacy@stonevale.pro
Phone: +49 30 1234 5678

3. Information We Collect

3.1 Personal Data You Provide

We collect personal information that you voluntarily provide to us, including:

Contact information (name, email address, phone number, postal address)
Professional information (company name, job title, industry)
Inquiry details (messages, service requests, consultation topics)
Legal documents (as required for specific services)

3.2 Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

IP address and device information
Browser type and version
Pages visited and time spent on each page
Referring website address
Date and time of your visit

4. How We Use Your Information

We use the collected information for the following purposes:

To provide and manage our legal assistance services
To respond to your inquiries and communication
To process your service requests and consultations
To send you relevant updates about our services (with your consent)
To improve our website and user experience
To comply with legal obligations
To protect our rights and prevent fraud

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: When you have given explicit consent for specific purposes
Contract: When processing is necessary to fulfill a contract with you
Legal Obligation: When we must comply with legal requirements
Legitimate Interest: When processing is in our legitimate business interests

6. Data Sharing and Disclosure

We may share your personal data with:

Service Providers: Third parties who assist us in operating our business (IT support, hosting services)
Professional Partners: Notaries, tax advisors, and other professionals involved in your case (with your consent)
Government Authorities: When required by law or legal process
Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties for marketing purposes.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

Active client files: Duration of engagement plus 10 years
Contact form submissions: 3 years unless converted to client
Website analytics data: 26 months
Marketing communications: Until you unsubscribe

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data (subject to legal exceptions)
Right to Restriction: Request limited processing of your data
Right to Data Portability: Receive your data in a structured format
Right to Object: Object to certain types of processing
Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at privacy@stonevale.pro.

9. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

Essential Cookies: Necessary for website functionality
Analytics Cookies: Help us understand how visitors use our site
Preference Cookies: Remember your settings and choices

You can control cookie settings through your browser preferences.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit (SSL/TLS)
Secure server infrastructure
Access controls and authentication
Regular security assessments
Employee training on data protection

11. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate protection through:

EU Standard Contractual Clauses
Adequacy decisions by the European Commission
Other approved transfer mechanisms

12. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. The "Last updated" date at the top indicates when the policy was last revised.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer
Stonevale GmbH
Friedrichstraße 123
10117 Berlin, Stoney
Email: privacy@stonevale.pro
Phone: +49 30 1234 5678

You also have the right to lodge a complaint with the relevant supervisory authority:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin, Stoney