Privacy Policy

The controller for data processing on this website is:

We process personal data only to the extent necessary to provide our services or to fulfill legal obligations. Legal bases include in particular:

• Art. 6(1)(a) GDPR – consent (e.g., contact form)
• Art. 6(1)(b) GDPR – contract performance / pre-contractual measures
• Art. 6(1)(c) GDPR – legal obligations
• Art. 6(1)(f) GDPR – legitimate interests (secure website operation)

When you access this website, our hosting provider automatically processes data transmitted by your browser: IP address (anonymized after 7 days), date and time of request, time zone difference, content of the request, access status, data volume transferred, referrer URL, browser type and language, operating system. Retention max. 14 days for security purposes. Legal basis: Art. 6(1)(f) GDPR.

This website is hosted by Vercel Inc. (region: Frankfurt, Germany). DNS and CDN are provided by Cloudflare. Data processing agreements (Art. 28 GDPR) are in place with both providers. Server location: EU. Legal basis: Art. 6(1)(f) GDPR (efficient website operation).

When you use our contact or consultation form, we process the data you provide (name, email, phone, description of facts) to handle your request. Confirmation emails are sent via Resend (Resend, Inc., USA, EU-DPF certified). Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent). Retention: until your request is closed, no longer than 6 months after last contact.

We use Plausible Analytics (Plausible Insights OÜ, Estonia) for cookieless, anonymous traffic measurement. No cookies are set, no personal data is collected, no data is transferred to third countries. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in statistics).

This website only sets a technically necessary cookie to store your language preference (NEXT_LOCALE, lifetime 1 year). No tracking cookies, no marketing cookies, no third-party cookies. Legal basis: Art. 6(1)(f) GDPR in conjunction with § 25(2) TTDSG (technically necessary).

We do not transfer your data to third parties, except to our processors (Vercel, Cloudflare, Resend, Plausible) and – where legally required – to supervisory authorities or courts. Transfers to third countries occur only as described in sections 4 and 5 above and under Standard Contractual Clauses (SCCs) or EU-DPF.

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object (Art. 21 GDPR)
• Withdraw consent (Art. 7(3) GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message to kontakt@lexrights.com is sufficient.

Competent: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, www.datenschutz-berlin.de

Within a mandate, we are subject to attorney-client privilege (§ 43a(2) BRAO, § 203 German Criminal Code). Data transmission to platforms, authorities or courts only takes place on your instruction.

This privacy policy was last updated in May 2026. We reserve the right to adapt this policy to reflect changes in the legal framework or our services.