Privacy Policy

1. Who we are and how to contact us

LEXONYX is an independent international advisory practice. It provides cross-border structural and factual analysis, Ukrainian-law advice within the professional authorisation of Advokat (Ukraine), and coordination of appropriately qualified local professionals where jurisdiction-specific legal, tax or regulatory conclusions are required.

Controller:
Liudmyla Miroshnychenko (LEXONYX)
Haunstetter Straße 105
86161 Augsburg
Germany

2. What data we collect

Data you provide directly:

• Contact form — name, email, a brief description of the matter and, optionally, countries and company. This data is needed to respond to your request.
• Newsletter subscription — email address only. It is used exclusively to send LEXONYX materials.
• Email correspondence — the content of communications when you contact us directly.

Data collected automatically:

• Technical data — IP address, browser type and operating system. These are collected by the hosting platform (Netlify) to ensure the operation of the site.
• Analytics data — pages visited, referral source and time on site. These are collected only with your consent (cookies).

We do not collect special categories of data (health, financial, biometric data, etc.) through the site.

3. Why and on what basis we process it

Where required by applicable law (including AML/CTF requirements and professional obligations), we may process and retain certain data to the extent necessary to comply with legal obligations.

Newsletter subscription is voluntary. You may unsubscribe at any time by using the link in the email or by writing to us.

In certain cases, processing may be carried out under Article 6(1)(f) GDPR — LEXONYX’s legitimate interests, including ensuring site security, preventing abuse and protecting against bad-faith requests.

4. Who we share data with

We do not sell your data. We do not disclose it to advertisers or third parties for marketing purposes.

Data may be disclosed to the following categories of processors, solely to ensure the operation of the site and the provision of services:

• Netlify — hosting and form processing. A GDPR-compliant DPA applies.
• Email provider — for newsletter delivery and responses to requests.
• Google Analytics — site analytics, only with your consent to cookies.
• Local counsel — in specific cases, in connection with the provision of services and only with your consent or on the basis of a contract.

Data is disclosed to regulators and public authorities only where required by law.

5. International data transfers

Some service providers or professional advisers may process personal data outside the European Economic Area. Where Chapter V GDPR applies, transfers are based on an applicable adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism, together with supplementary safeguards where required.

The transfer mechanism depends on the recipient, destination country and processing context and is reviewed when the relevant provider or professional is engaged.

6. Cookies and tracking technologies

Our site uses cookies. Detailed information is available in our Cookie Policy.

Necessary cookies are set automatically to ensure the operation of the site. Analytics cookies (Google Analytics) are set only with your explicit consent.

7. How long we retain data

• Initial enquiries — for as long as reasonably necessary to assess, respond to and follow up the request, and thereafter only where retention is justified by applicable legal or legitimate-interest requirements.
• Client and matter data — for the engagement period and the retention period required by applicable professional, tax, accounting, AML/CTF, limitation and other legal obligations.
• Newsletter subscription — until consent is withdrawn or the address is removed for another lawful reason.
• Analytics data — according to the configured Google Analytics retention settings and only where analytics consent has been given.

8. Your rights

Under the GDPR, you have the right to:

• Request access to your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase data / “right to be forgotten” (Art. 17)
• Restrict processing in the circumstances provided by law (Art. 18)
• Receive data portability in a machine-readable format (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))

You also have the right to lodge a complaint with a data-protection supervisory authority. For this practice, the competent non-public-sector supervisory authority in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

9. Data security

We apply appropriate technical and organisational data protection measures, including:

• encryption of data transmission (TLS/SSL);
• limiting access to data on a need-to-know basis;
• use of reliable data processors with DPAs in place.

However, no system for transmitting data over the Internet is completely secure. By sending us personal data, you accept this risk.

Please note that submitting information through the site does not automatically create a “lawyer — client” relationship and does not guarantee professional privilege. Confidentiality is governed by a separate agreement after cooperation is formalised.

10. Changes to this policy

We may update this Privacy Policy. The current version is always available on this page. If material changes are made, we will publish a notice on the site.

Last updated: August 2026.