Legal

Privacy policy

This is an English translation for your convenience. In case of doubt, the German version prevails.

As a tax advisor, protecting your data is particularly important to me. This website uses no cookies, no tracking and no analytics, and does not embed content from third parties. Fonts and images are served from my own web server.

1. Controller

Lorenz Schuster, Steuerberater (certified tax advisor)
LSTB Steuerberatung Schuster
Kreszentiaheimstraße 24
84503 Altötting, Germany
Email: ls@lstb-steuerberatung.de

2. Hosting

This website and the email account are operated by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.

3. Server log files

When you visit this website, the server automatically processes data transmitted by your browser:

IP address
date and time of access
page requested and amount of data transferred
previously visited page (referrer)
browser and operating system

The purpose is the secure and stable operation of the website. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in preventing attacks and analysing errors. Log files are deleted or anonymised after 7 days.

4. Contact form

If you use the contact form, I process your name, your email address, optionally your phone number, and your message. The details are sent by email to my mailbox and are not stored on the web server.

The purpose is to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a potential engagement, and otherwise Art. 6 (1) (f) GDPR.

To prevent misuse, your IP address is stored in encrypted form (as a checksum) together with the number of enquiries for no more than one hour and then deleted automatically. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in preventing automated mass submissions.

Please do not send tax documents, assessments or identity documents via the form.

5. Contact by email

If you email me, I process your email address and the content of your message to handle your request, on the same legal bases as for the contact form. Transmission is encrypted in transit (TLS) where your email provider supports it. Emails are not end-to-end encrypted.

6. Retention

Enquiries that do not lead to an engagement are deleted no later than 6 months after the correspondence has ended. If an engagement is concluded, statutory and professional retention obligations apply, in particular § 66 StBerG, § 147 AO and § 257 HGB.

7. Recipients and third countries

Apart from me, the only recipient of your data is STRATO as processor for hosting and email. No data is transferred to countries outside the EU. All data is additionally subject to my professional duty of confidentiality under § 57 StBerG.

8. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw any consent at any time with effect for the future. An email to the address above is sufficient.

Right to object (Art. 21 GDPR): Where processing is based on Art. 6 (1) (f) GDPR, you may object to it at any time on grounds relating to your particular situation.

9. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority competent for me is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

10. Encryption

This website is delivered exclusively via an encrypted connection (HTTPS), indicated by the padlock symbol in your browser's address bar.

11. No automated decision-making

No automated decision-making, including profiling, takes place.

Last updated: November 2026