Legal Notice

Incorporated Entity

Bucerius Law School
Hochschule für Rechtswissenschaft gemeinnützige GmbH

Bucerius Law School
Jungiusstraße 6
20355 Hamburg

Tel.: +49 (0) 40 3 07 06 – 0
Fax: +49 (0) 40 3 07 06 – 145
E-Mail: info(at) 

Professor Dr. Dr. h.c. mult. Katharina Boele-Woelki

Meinhard Weizmann, Benedikt Landgrebe

Chair of the Supervisory Board
Professor Dr. Michael Göring

Registered at
Freie und Hansestadt Hamburg
Amtsgericht Hamburg
HRB 75325
Tax ID: 17/424/06683
VAT-ID: DE212998891


Thomas Hilburger
Director UX, Web & Print
Tel.: +49 (0) 40 3 07 06 – 174
Email: thomas.hilburger(at)

Webdesign & Realization

PHORAX Web Solutions


Despite our best efforts to keep this website up to date and complete, it may contain errors and omissions. We reserve the right to correct errors or omissions without prior notice. We also reserve the right to cancel any offered product or service in the event of an error or omission in the description, including price, unavailability or other reason.

This site may include hyperlinks to websites maintained or controlled by others. Bucerius Law School is not responsible for and does not routinely screen, approve, review or endorse the contents of or use of any of the products or services that may be offered at these websites.

Privacy Policy


Bucerius Law School gGmbH, a non-profit university for the study of law ("BLS") operates under the Internet address This website provides information about our academic courses, other offers and activities, the application process as well as  support for our students and employees. The protection of our website users’ personal data is of great importance to us. Our privacy policy is intended to clarify whether and how we process the personal data of visitors to our Internet portal.

Personal Data

Personal data refers to individual details about personal or factual circumstances of a specific or identifiable real person. This includes information such as your name, address, phone number and date of birth. Information that is not directly related to your real identity - such as favorite websites or number of users per page – is not considered personal data.

Compiled Personal Data from Registration and Order Processing; Password

When registering with the online application system or using the student and employee intranet portal as well as other services on our website, your personal data, such as your title, first and last name, address, zip code, city, e-mail address, IP address and telephone number is collected in order to properly provide and perform our services. Mandatory data fields are marked as such. Additional data not clearly marked as mandatory is voluntary.

The use of some of the website features, particularly the online application and the intranet for students and employees, requires users to select a personal password. This password is secret and can be changed at the user’s request.

Use of Personal Data; Processing Orders

We assure you that all personal data is treated confidentially at BLS and that we observe the relevant legal provisions, in particular the Federal Data Protection Act, the General Data Protection Regulation (EU) 2016/679 and the Telemedia Act, when processing and using your data.

We store and process data necessary to perform our transactions. We use this data in particular to manage registration for the application process and semesters as well as individual courses and other offers. In addition, we use your personal data to communicate with you and for the purpose of preparing and carrying out the application process, the course selection and other activities such as billing.

We will not use any of your data for any other purpose, such as marketing or sharing with other students, unless you have given your consent.

With regards to processing and using personal data, we occasionally employ a service provider to handle and technically execute or support data processing and utilization according to our instructions. The service provider is obliged to comply with the statutory data protection provisions to the same extent as BLS and also handles personal data confidentially. We adhere to the statutory provisions on contracted data processing, particularly with regards to concluding agreements and supervising the service provider.

The Right to Information and Modification and the Withdrawal of Consent

As a visitor to our Internet portal, you have the right, at any time, to demand information about your personal data stored by us or to make corrections.

You may also withdraw your consent to the storage and processing of your personal data at any time for future use. In this case, we will block or delete data stored about you in accordance with legal requirements and, in particular, no longer use and process your data for marketing purposes or immediately discontinue sending you advertising material. All you need to do is send an informal message to:

Bucerius Law School
Jungiusstraße 6
20355 Hamburg
E-Mail: thomas.hilburger (at)

Please note that in case of complete or extensive deletion of your data, our services may be limited or may be impossible to provide.

Protective Measures

BLS takes all necessary technical and organizational security measures to protect your personal data from loss and misuse. Your data is saved in a secure operating environment that is inaccessible to the public. In certain cases, your personal information will be encrypted during transmission using Secure Socket Layer (SSL) technology. This means that the communication between your computer and the BLS servers takes place using a recognized encryption method if your browser supports SSL.

We cannot guarantee the confidentiality of information transmitted to BLS by email. As third parties may be able to view the content of emails, we recommend that you do not send us confidential information this way. It is also important for you to protect yourself against unauthorized access to your password and computer. If you share your computer with others, be sure to log out after each session.

Use of Cookies

We use cookies on our website. Cookies are alphanumeric identifiers that we transmit to your computer's hard drive using your web browser. This enables us to perform an analysis of your use of the website and to save certain settings and data for exchange with our system via your browser. Saving this data helps us to make our website easier for you to use by, for example, saving certain data from you so that you do not repeatedly need to reenter it. The analysis helps to determine the frequency of use and the number of users of our website. They are not used to investigate the behavior of certain users or to influence the selection of content offered. We do not record the identity of our users. You can set your web browser to disable any storage of cookies or you may do so on a case-by-case basis. You should be aware, however, that if you do so, you may not be able to use some of the web pages in their full functionality.

Collection of Anonymized Data - Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google uses cookies to generate information about how the website is used by visitors. This information is in turn transmitted to a Google server in the US and stored there. Google will use this information on our behalf to evaluate how visitors use our website, compile reports on user activity and provide us with additional services related to the use of our website and the Internet. Pseudonym user profiles may be developed from the processed data.

We only use Google Analytics with activated IP anonymization. This means that visitors’ IP addresses will be shortened by Google in EU member states or in other participating states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address submitted by the visitor's browser will not be merged with other data provided by Google.

Visitors may prevent the storage of cookies by opting out though their browser software. Visitors may also stop Google from collecting their usage data generated by cookies as well as the processing of such data by downloading and installing the browser plug-in available here:

Use of Google reCaptcha

We use the reCaptcha service of Google Inc. (Google) to protect the order you place on our website. The query is used to distinguish whether the input comes from a legitimate source, i.e. a real person, or an illegitimate source, such as an automated machine. The query process includes sending your IP address and any other necessary data for the reCaptcha service to Google. For this reason, your input will be transmitted to Google and used there.

By using reCaptcha, you agree that the advanced recognition you provide will be used to digitize former submissions. In the event that the IP anonymization is activated on this website, IP addresses within the European Union or in other participating states of the Agreement on the European Economic Area will be shortened by Google. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

Google will use this information on our behalf to evaluate your use of this service. The IP address sent by your browser as part of reCaptcha will not be merged with other data provided by Google. This data is subject to the varying privacy policies of Google.

More information about Google's privacy policy can be found here:

Google Conversion Tracking

This website uses Google conversion tracking, a service of Google Inc. (“Google”). If you reached this website through an advertisement on Google, Google AdWords will set a cookie with a maturity of 30 days on your computer. The information collected by these cookies enable the creation of AdWords conversion statistics for AdWords clients. AdWords clients get to know the total number of users who clicked on their ad and were redirected to a conversion tracking page. However, it is not possible to personally identify visitors through this statistical information. If you want to prohibit the tracking process, you can block or refuse cookies from the domain in your browser.

Google Remarketing

This website uses the remarketing feature within the Google AdWords service, a service of Google Inc. ("Google"). Google Remarketing is a technology that repeatedly addresses people - who have already visited this website – by targeted advertising on this website and on other websites within the scope of the Google Display Network (on Google itself, so-called "Google Ads" or on other websites). The display of the advertisements is carried out by reading cookies (third-party DoubleClick cookie), which are set when you first visit the website. The cookies are used to identify a web browser on a particular computer and not to identify a person. Personal data is not stored. If you do not want to receive interests-based advertising, you can manage the cookies for these purposes in the Ads Preferences Manager or disable them via the NAI (Network Advertising Initiative).

Use of Hotjar Web Analytics

This website makes use of Hotjar Web Analytics in order to improve its user experience. Hotjar is a software that records mouse clicks, mouse movements and scrolling activity on specific pages. It also collects information regarding pages visited, actions taken on these pages, geographic locations and the devices, operating systems and browsers used.

Hotjar does not collect personally identifiable information unless you voluntarily enter it, e.g. by participating in an online survey. Hotjar does not track your browsing habits across web sites which do not use Hotjar services.

If you do not want to be tracked by Hotjar, you can turn it off with a “do not track” header in your browser settings or by clicking on this link:

View official Hotjar Privacy Statement:

Use of PayPal

For the settlement of payments using PayPal (PayPal (Europe) S.a.r.l. et Cie, S.C.A.), you will be forwarded to at various points on our page. The data collected as part of the payment is collected exclusively by PayPal. The privacy policy and terms and conditions of PayPal can be found here:

The BLS uses the data you provide to PayPal (name, e-mail address purpose of the transaction, amount, date of payment, comment on payment) to create a donation receipt. If you have not provided PayPal with a postal address to which we can send the receipt, we will ask for this by e-mail.

All data used by BLS will be deleted after the transaction has been successfully completed.

Facebook Pixel, Custom Audiences and Facebook Conversion

Due to our legitimate interests in the analysis, optimisation and economic operation of our online service, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used within our online service.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (

With the help of the Facebook pixel, Facebook is on the one hand able to determine the visitors of our online offer as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products that are determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). Using Facebook pixels, we also want to ensure that our Facebook ads match the potential interest of users and are not annoying. Using Facebook pixels, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing if users were referred to our website after clicking on a Facebook ad (known as "conversion").

Facebook processes the data in accordance with Facebook's data usage policy. Accordingly, general information on the presentation of Facebook ads is provided in Facebook's data usage policy: Specific information and details about Facebook pixels and how they work can be found in the Facebook help section:

You may opt out of Facebook pixel collection and use of your information to display Facebook ads. To set what types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based ads: The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

You may also object to the use of cookies to measure reach and for advertising purposes, via the Network Advertising Initiative's opt-out page ( and additionally via the U.S. website ( or the European website (


We incorporate YouTube videos on our website. YouTube is operated by YouTube LLC., 901 Cherry Ave., San Bruno, CA 94066, USA; YouTube is a subsidiary of Google Inc. Should you activate the playback of YouTube content, YouTube/Google will be informed that you have accessed the corresponding sub-page of our website. If you are logged into Google, your data is allocated directly to your account. If you do not want to have your data allocated to your profile with YouTube, you must log out before activating the button. In addition, YouTube/Google also processes personal data if you do not have a Google user account, these are in particular: IP address, search queries, browser and operating system version.

YouTube/Google also stores this data for usage profiling and processes these for the purposes of advertising, market research and/or to design its website suitable for the needs of users. Such processing is carried out in particular (even for users who are not logged in or users without a corresponding account) in order to provide needs-based advertising and to inform other users of the social network about your activities on our website.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f General Data Protection Regulation (EU) 2016/679 (GDPR). If a corresponding consent was requested, the processing is based exclusively on Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Further information on data processing and notes on data protection by YouTube/Google can be found at: and

The information collected by YouTube may be transferred in full or in part to a server in the USA and stored there. To ensure a sufficient level of data protection EU Standard Contractual Clauses have been concluded in accordance with Art. 46 GDPR. You can find more information here:


LinkedIn Conversion Tracking and Insight Tag

The LinkedIn Insight Tag is a piece of lightweight JavaScript code that we have added to our websites to enable in-depth campaign reporting and to help us unlock valuable insights about our website visitors. We use the LinkedIn Insight Tag to track conversions, retarget website visitors, and unlock additional insights about members interacting with our LinkedIn adverts.

The LinkedIn Insight Tag enables the collection of metadata such as IP address information, timestamp, and events such as page views. All data is encrypted. The LinkedIn browser cookie is stored in a visitor's browser until they delete the cookie or the cookie expires (there’s a rolling six-month expiration from the last time the visitor’s browser loaded the Insight Tag).

You can opt out of cookies from LinkedIn on your LinkedIn settings page and recommend you read their Cookie Policy for more information.

Additional Questions and Notices

Should you have any further questions on data protection at BLS, please contact us at info(at) and we will try to address your concerns. We reserve the right to send you occasional notifications about our applicable policies. Please visit our website regularly and make note of any changes. Unless otherwise noted, the use of your personal information and your accounts on our site is subject to this Privacy Policy.

Data Protection Officer

The Data Protection Officer at BLS is:

Dr. Torsten Glockemann
E-Mail: datenschutz(at)

Settlement of disputes

The Bucerius Law School Hochschule für Rechtswissenschaft gGmbH strives to settle any disputes arising from consumer contracts out of court. It is, therefore, willing to participate in dispute resolution proceedings of the General Consumer Center for Conciliation / Allgemeine Verbraucherschlichtungsstelle Zentrum für Schlichtung e.V., Straßburger Strasse 8, 77694 Kehl am Rein,, E-Mail: mail(at) provided that the consumer has previously asserted the disputed claim against the law school and provided that the claim is within the competence of the Consumer Center.

The European Commission has established a European online dispute resolution platform (OS platform) under EU Consumers may use the OS platform to resolve disputes arising from online contracts with providers established in the EU. In case there are no language barriers, EU Consumers may also directly make use of the German General Consumer Center for Conciliation, the Allgemeine Verbraucherschlichtungsstelle Zentrum für Schlichtung e.V. (see above).