Law Firm of the Year Insolvency and Restructuring


Protecting your personal data is very important to us. We treat your personal data with care and protect it in line with the legal requirements. This Privacy Policy outlines the types of personal data we collect, the purposes for which we collect this data, how we process it and your rights in relation to your personal data.


The data controller within the meaning of data protection legislation is

GRUB BRUGGER Partnerschaft von Rechtsanwälten mbB
Reinsburgstraße 27
70178 Stuttgart Germany

Phone +49 711 966 89 0
Fax +49 711 966 89 19


We collect and store personal data in the following circumstances. We only use personal data of the types and for the purposes described below.

a) When you visit our website
When you visit our website,, your device’s browser automatically sends information to our website’s server. This information is temporarily stored in a server log file. During this process, the following information is stored without any action on your part until it is automatically deleted:

  • Your computer’s IP address
  • The date and time of access
  • The name and URL of the webpage you are accessing
  • The website you were visiting before you accessed our website (referrer URL)
  • The browser you are using
  • Your computer’s operating system and the name of your internet service provider (in some cases)

Log files are important sources of information which allow system processes to be tracked. This information can be used for error analysis purposes or to reproduce lost data. We use the data stored in these log files for the following purposes:

  • To ensure users can connect to and use our website
  • To evaluate and maintain system security and stability
  • To make it possible to conduct technical administration on our network infrastructure
  • To optimise our website
  • To collect statistical data for internal use

The legal basis for data processing is Article 6 (1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest in processing the data lies in the purposes described above. We will never use the data we collect for identification purposes. We only analyse the computer IP addresses we collect for statistical purposes or if there is an attack on our network infrastructure.

b) When you use our contact form
You can get in touch with us by using the contact form on our website. When completing this contact form, you are required to provide your name, a valid email address and the reason for getting in touch. By entering these contact details, you consent to us using this information to respond to your enquiry.

We will only process the data you provide to us for the purpose of handling and responding to your enquiry.

The legal basis for data processing is our legitimate interest in handling your enquiry (Article 6 (1)(f) GDPR) and the consent you give when you use the contact form to us processing the data you enter into the form (Article 6 (1)(a) GDPR).

Please note that our contact form is not the only way to get in touch with us. You are also welcome to contact us using the contact details provided on our website. Once we have finished handling your enquiry, the personal data we collect from you for this purpose will be automatically deleted.

c) When you register to use our INSOTOOL
Our INSOTOOL allows you to use our website to do the following:

  • To view general information on insolvency proceedings, including decisions from the competent insolvency courts
  • To file claims
  • To view the claims you have submitted
  • To view the status of the cases we are administrating

You need to register to use these features. When you register, we will process the following personal data:

  • Name/company and address
  • Bank details (IBAN, SWIFT code)
  • Email address
  • Phone number, fax number (optional information)
  • Representative (optional information)
  • Principal claim and reason for the debt, including any ancillary claims (optional information)
  • Application for claims in case of loss
  • Any enforcement orders
  • Evidence of your claims
  • Your user name and your chosen password

We will only process the data you provide to us for the purposes specified above.
In cases where we are collecting and processing the data for the purpose of handling insolvency proceedings in accordance with the statutory provisions, the legal basis for data processing is Article 6 (1)(c) GDPR. The additional legal basis for data processing is your consent, which you give to us when you register to use our INSOTOOL (Article 6 (1) (a) GDPR).

Please note that you do not need to register for our INSOTOOL to submit claims during insolvency proceedings or to obtain the information available on the proceedings from the appointed insolvency practitioner. You also always have the option to communicate with the appointed insolvency practitioner in writing and can request the information you require in writing from the insolvency practitioner.

d) Cookies and analytics services
We use cookies and analytics services when you visit our website. For more information, please see sections 4 and 5 of this Privacy Policy.


We do not transfer your personal data to third parties for any purposes other than those listed below.
We only transfer your personal data to third parties if:

  • You have expressly consented to this in accordance with Article 6 (1)(a) GDPR
  • Transferring your data in accordance with Article 6 (1)(f) GDPR is necessary for the establishment, exercise or defence of legal claims, provided that there is no reason to believe that you have an overriding legitimate interest in the data not being disclosed
  • There is a legal obligation to disclose the data as per Article 6 (1) (c) GDPR
  • Doing so is permissible by law and is necessary for the performance of a contract with you in accordance with Article 6 (1) (b) GDPR


Like many other websites, our website uses cookies. Cookies are small text files which your web browser automatically saves to your device’s hard disk when you visit our website. This automatically transmits data to us, such as your IP address and which browser you are using. This data also allows us to analyse your user behaviour anonymously when you visit our website. Cookies do not cause any damage to your hard disk. In particular, cookies cannot be used to start programs and/or transmit viruses. Cookies do not provide us with any personal data about you. We cannot link the information stored in the cookies to an identified or identifiable natural person. We never transfer the data we obtain from the cookies to third parties.

Cookies enhance your user experience on our website and make our website more user-friendly. For example, by analysing how visitors use our website, we can tailor our website more closely to your requirements. Cookies also help us to make our website easier to navigate and to ensure that it is displayed correctly.

You can, of course, also visit our website without cookies. Most web browsers are configured to accept cookies automatically. You can, however, disable this function at any time or change your browser settings so that you are always notified when you receive a new cookie. You can also delete stored cookies. Please note that disabling cookies may result in you no longer being able to use all of the features of our website.


To help us improve our website, we use Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). Google Analytics uses cookies. Cookies are text files which are stored on your computer and analyse how you use our website. Cookies collect the following information about your visit to our website:

  • Browser type/version
  • Which operating system you are using
  • Referrer URL (the webpage you were visiting before you accessed our website)
  • Your computer’s host name (IP address)
  • Time of the server request

 This information is generally transferred to a Google server in the USA and stored there. However, since IP anonymisation is activated on this website, your IP address will be shortened by Google before being transferred to the USA if you are in a member state of the European Union or in a country party to the Agreement on the European Economic Area. Your full IP address will only be transferred to a Google server in the USA and shortened there in exceptional circumstances. Google will use this information on behalf of the operator of this website to analyse how you use this website, to compile reports on website activities and to provide other services to the website operator relating to website and internet usage.

The legal basis for data processing is our legitimate interest in improving our website (Article 6 (1)(f) GDPR).

Google LLC, which is headquartered in the USA, is certified under the EU-US Privacy Shield, which means that it provides the level of data protection required in the EU.

You can view Google LLC’s Privacy Policy here.

The IP address transmitted by your browser for the purposes of Google Analytics will not be merged with other data held by Google. You can adjust your browser settings to prevent cookies from being stored. Please note, however, that doing so may prevent you from being able to use all of this website’s features in full. You can also prevent Google from collecting and processing the data generated by the cookie on your use of this website (including your IP address) by downloading and installing the following browser add-on.

In addition or as an alternative to the browser add-on, you can prevent Google Analytics from tracking your use of our website by clicking on this link. An opt-out cookie will then be installed on your device. Provided that this cookie remains installed on your browser, Google Analytics will no longer collect data for this website and for this browser in future.


Our website uses Google Maps (API), which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service which displays interactive maps to allow websites to depict geographical information visually. This service shows you where we are located and makes it easier for you to find us.

The legal basis for data processing is our legitimate interest in making it easier to show you where we are located and how to find us (Article 6 (1)(f) GDPR).

When you access the webpages displaying the map from Google Maps, information about your use of our website (such as your IP address) will be transmitted to and stored on Google servers in the USA. Your location data will also be recorded, provided that you have consented to this on your device. This will happen regardless of whether you are logged into your Google user account or you do not have a Google user account at all. If you are logged into Google, your data will be directly linked to your account. If you do not wish for this data to be linked to your Google profile, you should log out of your Google account before accessing the map feature. Google saves your data (even if you are not logged into Google) as usage profiles and evaluates it.

You can view Google LLC’s Privacy Policy here. If you do not wish to consent to your data being transferred to Google when you use Google Maps in future, you can completely disable the Google Maps web service by disabling JavaScript on your browser. If you choose to do this, Google Maps will no longer work on our website and you will not be able to view any maps.


When you visit our website, we use the common SSL (Secure Socket Layer) procedure in combination with the highest level of encryption supported by your browser. Usually this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. If you see a closed padlock symbol in your browser’s address bar, this is a visual indication that the page you are viewing is encrypted.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. We continuously improve our security measures in line with technological developments.


In accordance with the principles of data avoidance and data minimisation, we do not process your information for any longer than is necessary for the purpose for which it was collected or than is legally required. We delete your personal data as soon as we no longer need to process it for the purpose for which it was collected and/or as soon as the statutory retention periods have expired.


You have the following rights whenever your personal data is being processed:

a) Right of access, Article 15 GDPR
In accordance with Article 15 GDPR, you have the right to request information about which of your personal data we are processing. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipient to whom your data has been or will be disclosed, the envisaged duration of storage, the existence of the right to rectification, deletion, restriction of processing or objection to such processing, the existence of the right to lodge a complaint with a supervisory authority, the source of your data if it has not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the details of this decision-making.

b) Right to rectification and completion, Article 16 GDPR
In accordance with Article 16 GDPR, you have the right to request that we rectify or complete inaccurate or incomplete personal data we have stored about you without undue delay.

c) Right to erasure, Article 17 GDPR
In accordance with Article 17 GDPR, you have the right to request that we delete the personal data we have stored about you, provided that processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

d) Right to restriction of processing, Article 18 GDPR
In accordance with Article 18 GDPR, you have the right to request that we restrict the processing of your personal data if one of the following applies: you contest the accuracy of the data; the processing is unlawful and you do not wish for your data to be deleted; we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or you have objected to processing pursuant to Article 21 GDPR.

e) Right to data portability, Article 20 GDPR
In accordance with Article 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and you have the right to request that this data be transmitted to another controller.

f) Right to withdraw consent, Article 7 Paragraph 3 GDPR
In accordance with Article 7 Paragraph 3 GDPR, you have the right to withdraw your consent at any time. If you withdraw your consent, we are no longer permitted to continue processing the data which we are processing on the basis of this consent.

g) Right to lodge a complaint, Article 77 GDPR
In accordance with Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. In general, you can lodge a complaint with the competent supervisory authority in your habitual place of residence, your place of work or the location of our law firm’s registered office.


If your personal data is being processed on the basis of legitimate interests in accordance with Article 6 (1)(f) GDPR, you have the right, pursuant to Article 21 GDPR, to object to the processing of your personal data, provided that you have grounds for doing so which relate to your particular situation or you are objecting to your data being processed for direct marketing purposes. In the latter case, you have a general right to object and we will comply with this request without the need for you to specify any grounds relating to your particular situation. To exercise your right to withdraw your consent or your right to object, simply send an email to datenschutzbeauftragter(at)


We reserve the right to make changes to our Privacy Policy to ensure that it always complies with the latest legal requirements, particularly if we make changes to our services. When you visit our website, the version of our Privacy Policy published on our website is always the applicable version. 

XIII. Änderung der Datenschutzerklärung

Sofern eine Änderung der Datenschutzerklärung aus rechtlichen oder tatsächlichen Gründen erforderlich wird, werden wir diese Seite entsprechend aktualisieren. Dabei werden keine Änderungen an den vom Nutzer erteilten Einwilligungen vorgenommen.