Lexbau
DE

Privacy policy

This is a courtesy translation. Only the German version is legally binding. German version

1. Controller

Lexbau Technologies GmbH
Heßstraße 92
80797 München
Email: info@lexbau.ai

2. Overview of processing

The following overview summarizes the types of data processed and the purposes of their processing, and refers to the data subjects concerned.

Types of data processed

  • Contact data (e.g., name, email address)
  • Content data (e.g., text entered in the contact form)
  • Usage data (e.g., pages visited, access times)
  • Meta and communication data (e.g., IP addresses, browser information)

Purposes of processing

  • Handling contact requests and communication
  • Providing our online services and ensuring usability
  • Security measures
  • Measuring reach and improving our website (web analytics, only with consent)

3. Legal bases

Below, we set out the legal bases under the General Data Protection Regulation (GDPR) on which we process personal data:

  • Consent (Art. 6(1)(a) GDPR): The data subject has given consent to the processing (e.g., by accepting the cookie banner or submitting the contact form).
  • Legitimate interests (Art. 6(1)(f) GDPR): The processing is necessary for the purposes of our legitimate interests, unless these are overridden by your interests or fundamental rights.

4. Hosting and content delivery network

Our website is hosted on Google Cloud Platform (Google Cloud Storage and Cloud CDN). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit our website, the server automatically records technical access data (so-called server log files). These include:

  • IP address of the accessing device
  • Date and time of the request
  • Address of the page accessed (URL)
  • Referrer URL (previously visited page)
  • Browser type and version
  • Operating system
  • Amount of data transferred

The processing is based on our legitimate interest in providing our online services securely and efficiently (Art. 6(1)(f) GDPR).

We have concluded a data processing agreement (Data Processing Addendum) with Google. Google also processes data in the USA. The transfer is based on the EU-U.S. Data Privacy Framework. For more information, please see Google's privacy policy.

5. Cookies and consent

When you first visit our website, a cookie banner is displayed. Technically necessary cookies are not used. Analytics cookies (Google Analytics and PostHog) are only set after you have given your express consent. Your choice is stored in your browser (localStorage) and taken into account on future visits.

You can withdraw your consent at any time: click "Cookie settings" at the bottom of any page and choose "Decline". The analytics services are then stopped and the identifiers they stored in your browser are deleted.

6. Web analytics

Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyze your use of our website. Google Analytics is only loaded after you have given your consent via the cookie banner.

The following data is collected: pages visited, time spent on the site, device and browser used, approximate location (country/city), and referrer URL. Your IP address is anonymized before it is transmitted to Google's servers.

The processing is based on your consent (Art. 6(1)(a) GDPR).

For more information, please see Google's privacy policy. You can prevent data collection by Google Analytics by installing the browser add-on to opt out of Google Analytics.

PostHog

We also use PostHog, an analytics service provided by PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. We use the EU instance of PostHog; the data is stored on servers in Frankfurt am Main (Germany). PostHog stores a random identifier in a cookie and in your browser's localStorage to recognize returning visits. PostHog is only loaded after you have given your consent via the cookie banner.

The following data is collected: pages visited, clicks on buttons and links, time spent on the site, device and browser used, approximate location (country/city), and referrer URL. Your IP address is only used to determine your approximate location and is not stored. We do not record your sessions (session recording).

The processing is based on your consent (Art. 6(1)(a) GDPR). We have concluded a data processing agreement with PostHog. PostHog and its subprocessors also process data in the USA and other third countries. The transfer is based on the EU-U.S. Data Privacy Framework; in addition, we have agreed the EU Standard Contractual Clauses with PostHog (Art. 46 GDPR).

For more information, please see PostHog's privacy policy.

7. SSL/TLS encryption

For security reasons and to protect the transmission of data, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the lock icon in your browser bar.

8. Contact form

If you send us a message via the contact form on our website, the information you provide (name, email address, message and, if given, phone number and call-back request) will be processed in order to handle your request.

To transmit the form data, we use the Web3Forms service. The provider is Web3Forms (Aero Technologies Inc.). When the form is submitted, your data is forwarded to our email address via the Web3Forms servers. Web3Forms does not store your data permanently. For more information, please see the Web3Forms privacy policy.

The processing is based on your consent (Art. 6(1)(a) GDPR), given by actively submitting the form, and on our legitimate interest in handling your request (Art. 6(1)(f) GDPR).

9. Your rights as a data subject

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR): You have the right to obtain information about the personal data we store about you.
  • Rectification (Art. 16 GDPR): You can request the rectification of inaccurate data.
  • Erasure (Art. 17 GDPR): You can request the erasure of your data, unless there is a statutory obligation to retain it.
  • Restriction (Art. 18 GDPR): You can request the restriction of the processing of your data.
  • Data portability (Art. 20 GDPR): You can request that we provide your data to you in a structured, machine-readable format.
  • Objection (Art. 21 GDPR): You can object to the processing of your data at any time, insofar as we base it on legitimate interests.

To exercise your rights, please contact info@lexbau.ai.

10. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. In particular, you can contact the supervisory authority of your place of residence, your place of work, or the place of the alleged infringement. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
www.lda.bayern.de

11. Validity and changes to this privacy policy

This privacy policy is currently valid and was last updated in October 2026. As our website evolves, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.