Privacy Notice

aa) Personalization of your statute book – Not logged in

When using LexMea, you personalize your online statute book yourself - for example, by creating notes, references, highlights, etc. - and manage your knowledge. To enable you to use our service as extensively as possible without any entry barriers, you can make such personalisations even without registration. These are then not stored on our servers, but only in the local storage of your browser (local storage). Only when you register or log in with an existing account, this information is transferred to us and loaded into your account. The legal basis for this processing is Art. 6(1)(a) GDPR (fulfillment of a contract) in conjunction with § 25(2) No. 2 TDDDG.

bb) Personalization of your statute book - Logged in

When you are logged in, your profile data (especially email address, username, and payment data for additional booked features), the data you enter when using our product (e.g., notes), and the metadata (such as the date when a note was created - to sort them accordingly in your library) are securely stored on European servers.

Your content and personalisations are generally not displayed to other users unless you actively use the content-sharing function. You can individually manage which content should be shared with which people. The legal basis for this processing is Art. 6(1)(a) GDPR (fulfillment of a contract).

aa) No tracking and advertising cookies, no third-party cookies

Many websites store cookies from third-party companies (so-called third-party cookies) or tracking and advertising cookies on your device, especially to evaluate user behavior or display advertising – we do not!

We do not use Google Analytics, Facebook/Meta-Pixel and also refrain from setting tracking and advertising cookies as well as third-party cookies on your device to ensure a particularly high level of data protection.

bb) Necessary cookies

We may only use cookies that are strictly necessary for the function of our site (necessary cookies) or for functions that you explicitly request (functional cookies):

• Ensuring information security (Anti-CSRF token)
• Logging into LexMea with your personal account and authenticating against our servers to retrieve your personal content
• • When you log in, a cookie is stored that keeps you logged in for the following days (session cookie) without requiring you to enter your data again.
  • If you optionally click on 'Stay logged in' when logging in, a second cookie is stored that keeps you logged in for the following months (remember cookie).

cc) Website improvement without Google Analytics

To make our services more user-friendly and effective for you, we use the open-source analysis tool PostHog. The data collected is hosted on European servers and not transferred to the USA. Personal user data is only used internally to improve our features and never passed on to advertising partners, let alone sold. When personalized advertising, such as legal job advertisements, is displayed to you, our advertising partners do not receive any information about you, but we curate it ourselves (e.g., based on the opened law book) on our own European servers. The legal bases for these processes are Art. 6(1)(a) GDPR (fulfillment of a contract) and Art. 6(1)(f) GDPR (legitimate interests).

dd) Log files

Your browser automatically transmits information when visiting LexMea – just like when visiting any other website – which is stored in a log file. This information includes, in particular: used web browser; operating system; the previously visited page (referrer); for visitors coming from a search engine, the search terms; date, time, time zone; content and scope of the requests and transferred data volumes as well as the IP address. The mentioned data is processed by us for the following purposes: ensuring a smooth connection setup of the website; ensuring the correct display of our content; ensuring the security of our services (e.g., protection against hacker attacks) and evaluation of system security and stability; ensuring a comfortable use of our website. The IP address is shortened by us for data protection reasons by the last three digits. Thus, it is no longer possible or only possible with a disproportionate amount of time, cost, and effort to establish a reference to a specific or identifiable natural person (so-called anonymization). If personal data is still involved, the legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interests of the provider).

Without your consent, we do not send you emails about news (newsletter).

If you have given us consent during the registration process or in your privacy cockpit, we will only send you an email with really relevant news – such as new features, special Commented [A1]: Redundant? events, content, or internship/job offers in your region or legal field.

Most companies use US services such as MailChimp for sending newsletters, which transfer email addresses and data on interaction with sent emails (e.g., time of retrieval, IP address, browser type, and operating system) to servers in the USA – we do not!

Instead we may use European alternatives, such as Brevo (formerly Sendinblue), for sending emails.

For sending, organizing, and analyzing (e.g., whether a newsletter was opened and which links were subsequently clicked) our newsletters, we currently use the European provider Brevo (operated in Germany by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany). The data generated in this context is stored exclusively on European servers by Brevo. We have concluded a data processing agreement with Brevo, in which we oblige Brevo to protect our customers' data and not to pass it on to third parties.

The legal basis for this is Art. 6(1)(a) GDPR (consent). You can revoke your consent at any time, e.g., simply by clicking on the corresponding link at the end of each email or via your privacy cockpit in the account settings. Alternatively, you can also send your unsubscribe request at any time by email to datenschutz@lexmea.de.

Many operators integrate social media plugins on their sites. These allow, for example, content to be shared directly on social media without leaving the site. However, such plugins transmit personal data about the visitors of the respective site to the social media operators, regardless of whether they have an account there or not.

We do not use social media plugins which transfer data to third parties.

We are very pleased to receive applications for jobs, internships, or legal clerkships at LexMea. Received applications are processed exclusively for selection procedures. If we can welcome you to our team, we store your data in your employee file at least until the end of the collaboration.

If a collaboration does not come about at the intended time, we only keep your data if you consent (Art. 6(1)(a) GDPR) or if we have a legitimate interest in doing so (e.g., to be able to reach you in case of important inquiries or for legal evidence purposes). You can revoke your consent at any time. Even with given consent, we delete the data at the latest 3 years later.

The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interests of the provider), Art. 6(1)(b) GDPR (contract or pre-contractual measures), Art. 6(1)( a) GDPR (consent), and Art. 9(2)(a) GDPR (processing of special categories).

In the case of the protection of vital interests, data processing is carried out in accordance with Art. 9(2)(c) GDPR. For purposes of health care, occupational medicine, medical diagnosis, provision or treatment in the health or social sector, or the management of systems and services in the health or social sector, the processing of personal data is carried out in accordance with Art. 9(2)(h) GDPR. If you voluntarily provide data of special categories, the processing is based on Art. 9(2)(a) GDPR.