Legal information

Privacy policy

Non-binding English overview of how we process personal data under the EU General Data Protection Regulation (GDPR).

English summary – non-binding

This is a non-binding English overview for international readers. The legally binding version is the German original.

Members: identification data, tax-relevant documents, receipts, communication. Legal basis: Art. 6(1)(b) GDPR (contract) and § 4 No. 11 StBerG.
Website visitors: log data, cookies and similar technologies based on your consent (Art. 6(1)(a) GDPR) – managed via the CCM19 consent banner.
Contact requests: name, email, message; legal basis Art. 6(1)(b) or (f) GDPR.
Microsoft Bookings: appointment data when you book a meeting via our website.
We do not sell personal data and we do not transfer data to third countries without appropriate safeguards.

We use Google Analytics 4 with measurement ID G-4TS1JVKNFK.
IP anonymisation is enabled and Google Consent Mode v2 is implemented.
All analytics storage categories are set to denied by default; tracking only begins after you consent to analytics via the CCM19 banner.
Data recipient: Google Ireland Ltd. / Google LLC (USA), based on EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

We use Microsoft Clarity, a web analytics service provided by Microsoft Ireland Operations Ltd. (with Microsoft Corporation, USA).
Clarity records page views, clicks, mouse and scroll movements, session recordings and heatmaps, plus technical data such as browser, operating system, screen size, approximate location and a truncated IP address. Form input is masked by default.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Clarity is only loaded after you consent via the CCM19 cookie banner, and it is never loaded on preview or lovable.app domains.
You can withdraw your consent at any time via the cookie settings on this website.
Data may be transferred to the USA; Microsoft is certified under the EU-US Data Privacy Framework and we additionally rely on EU Standard Contractual Clauses. Details: https://privacy.microsoft.com/en-us/privacystatement

Right of access, rectification, erasure, restriction, data portability and objection.
Right to withdraw consent at any time.
Right to lodge a complaint with a supervisory authority – the competent authority for us is the Bavarian Data Protection Office (BayLDA).

Tax-relevant data is retained for the statutory retention periods (up to 10 years per § 147 AO).
Other data is deleted as soon as the purpose of processing no longer applies.

For questions, please contact us at kontakt@lexo.tax.