Confidentiality Policy

1) Information on the collection of personal data and contact details of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the Basic Data Protection Regulation (DSGVO) is XPACT Consulting AG, Silvanerstr. 2a, 55270 Jugenheim, Germany, Tel.: +49 (0) 61 30 – 94 13 10, Fax: +49 (0) 61 30 – 94 12 68, E-Mail: impressum@xpact.de. The person responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the person responsible). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

2) Data acquisition when visiting our website

If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymous form)

Processing takes place in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (cookies from third parties) to recognize your browser during your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO in order to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

Under certain circumstances, we work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive (cookies from third parties) when you visit our website. If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for each browser under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that if cookies are not accepted, the functionality of our website may be restricted.

4) How to contact us

Personal data is collected within the scope of contacting us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form, is apparent from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO. If the purpose of your contacting is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been conclusively clarified and provided there are no legal obligations to retain data to the contrary.

5) Tools and Miscellaneous

Google Web Fonts

This page uses so-called web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for the uniform display of fonts. When you access a page, your browser loads the web fonts you need into its browser cache to display text and fonts correctly.

To do this, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer.

Google LLC, headquartered in the USA, is certified for the us-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq uand in Google’s privacy policy: https://www.google.com/policies/privacy/

6) Rights of the data subject

6.1 The applicable data protection law grants you comprehensive data subject rights (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:

  • Right of access pursuant to Art. 15 DSGVO: In particular, you have a right of access to your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the duration of the storage period. the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information on the logic involved and the scope and desired effects of such processing, as well as your right to be informed of the guarantees pursuant to Art. 46 DSGVO that exist when your data are transferred to third countries;
  • Right to deletion pursuant to Art. 17 DSGVO: You have the right to demand the deletion of your personal data if the requirements of Art. 17 para. 1 DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • Right to limitation of processing pursuant to Art. 18 DSGVO: You have the right to demand limitation of processing of your personal data as long as the correctness of your data is verified, which you dispute, if you refuse to delete your data due to inadmissible data processing and instead demand limitation of processing of your data, if you need your data to assert, exercise or defend legal claims, after we no longer need this data after achieving the purpose, or if you have lodged an objection due to your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
  • Right to information pursuant to Art. 19 DSGVO: If you have asserted the right to rectification, cancellation or limitation of the processing to the controller, the latter is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, cancellation or limitation of the processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients;
  • Right to data transfer in accordance with Art. 20 DSGVO: You have the right to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible person as far as this is technically feasible;
  • Right to revoke consent granted pursuant to Art. 7 (3) DSGVO: You have the right to revoke consent once granted for the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation;
  • Right of appeal pursuant to Art. 77 DSGVO: If you are of the opinion that the processing of your personal data violates the DSGVO, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place where the alleged violation occurred;
  • Right of appeal pursuant to Art. 77 DSGVO: If you are of the opinion that the processing of your personal data violates the DSGVO, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place where the alleged violation occurred.

6.2 RIGHT OF APPEAL

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A WEIGHING OF INTERESTS ON THE BASIS OF OUR PREDOMINANTLY LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE WILL TERMINATE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE THAT THERE ARE COMPELLING REASONS WORTHY OF PROTECTION FOR THE PROCESSING, WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

7) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After this period has expired, the corresponding data will be routinely deleted if they are no longer required for contract fulfilment or contract initiation and/or if there is no justified interest on our part in further storage.