Privacy policy

1. Privacy at a glance

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

The following information gives an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

In short: this website sets no cookies and uses no analytics or tracking tools, no advertising networks and no social media plugins. Fonts, images, videos and documents are served exclusively from our own server. We only process personal data in three cases: for the technically necessary page request (server log files), when you write to us, and when you explicitly load the map.

2. Controller

The controller within the meaning of Art. 4(7) GDPR is:

Xproducts Deutschland GmbH, Paradiesstraße 7, 97080 Würzburg, Germany, represented by the Managing Director Martin Dreismann. Phone: +49 931 3042951100, email: info@xprds.de.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. With every request the server automatically stores information transmitted by your browser:

• IP address of the requesting computer
• date and time of the request
• requested page or file and amount of data transferred
• access status (HTTP status code)
• referrer URL (the previously visited page)
• browser type and version, operating system

This data is not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in the technically error-free, stable and secure provision of the website and in detecting and defending against attacks. Log files are deleted automatically after a short period unless they are needed to investigate a specific security incident.

A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS. IONOS processes the data solely on our instructions and in data centres in Germany.

4. Cookies and local storage

This website uses no cookies and stores no other information on your device (no local storage, no fingerprinting). Consent under § 25 TDDDG is therefore not required for a normal visit, which is why we do not show a cookie banner.

5. Contact form, email and phone

If you contact us via the contact form, by email or by phone, we process your details (e.g. name, email address, company, subject and your message) to handle your enquiry and any follow-up questions. We do not pass this data on without your consent.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for pre-contractual measures (e.g. a project enquiry). In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6(1)(f) GDPR).

The contact form sends your details to us by email; they are not stored in a database on the web server. To prevent automated abuse (spam), the IP address is kept for at most one hour in a shortened, irreversible form (hash) and then deleted automatically. We do not use a third-party captcha.

Your data remains with us until you ask us to delete it, withdraw your consent or the purpose of storage no longer applies (e.g. once your enquiry has been dealt with). Mandatory statutory provisions – in particular retention periods under commercial and tax law – remain unaffected.

6. Google Maps (only after click)

On the contact page you can load a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is only loaded when you explicitly click “Load map”. No connection to Google is made before that. After the click, your IP address is transmitted to Google, and Google may set cookies. This may include a transfer to the USA. Google is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, given by the click. The consent applies only to the current page view; once the page is reloaded, the map is no longer loaded. More information: https://policies.google.com/privacy

7. Downloads and external links

The PDF documents offered for download are served from our own server; only the server log files described in section 3 are created.

Our website may contain links to websites of other providers. When you click such a link, you leave our website; the respective provider is solely responsible for data processing on the linked pages.

8. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries you send to us, this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar and the lock icon. When encryption is active, the data you send to us cannot be read by third parties.

Please note that data transmission over the internet – in particular by email – may have security gaps. Complete protection of data against access by third parties is not possible.

9. Your rights

Within the scope of the applicable legal provisions, you have the right at any time to:

• access your personal data stored by us, its origin, recipients and the purpose of processing (Art. 15 GDPR)
• rectification of incorrect data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability – receiving data we process automatically on the basis of your consent or a contract in a common, machine-readable format, for yourself or a third party (Art. 20 GDPR)
• object to processing (Art. 21 GDPR, see section 10)
• withdraw any consent given with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected

An informal message to info@xprds.de or to the address given in section 2 is sufficient for all of these requests.

10. Right to object under Art. 21 GDPR

Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

11. Right to lodge a complaint

In the event of data protection violations, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

12. Storage period and automated decisions

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of processing no longer applies or you make a justified request for deletion – subject to statutory retention obligations.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

13. Objection to advertising emails

We hereby object to the use of contact data published under the legal notice obligation for sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

14. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our website. The new privacy policy will then apply to your next visit. If you have any questions about data protection, please contact info@xprds.de at any time.