Data Protection Policy

Data Protection
Policy

Collection of data on this website

Who is responsible for the collection of data on this website?

Data is collected on this website by the website operator. You can find its contact information in the imprint for this website.

How do we collect your data?

Your data are collected, on the one hand, when you provide them to us. This may involve, e.g., data that you enter in a contact form. Other data are automatically collected by our IT systems when you visit the website. These mainly consist of technical data (e.g. internet browser, operating system, and time of site access). These data are automatically collected once you access this website.

For what purposes do we use your data?

Some of your data are collected in order to ensure that the website can be made available free of errors. Other data may be used for the purpose of analysing your user behaviour.

What rights to you have with respect to your data?

You have the right at any time to obtain information at no charge about the source, recipients, and purpose of the personal data stored about you. You also have a right to obtain the rectification or erasure of these data. If you have further questions about this or other issues of data protection, you may contact us at any time at the address listed in the imprint. In addition, you have the right to lodge a complaint with the competent supervisory authority.
Furthermore, you have the right to obtain the restriction of the processing of your personal data under certain circumstances. You can find details about this in the Data Protection Policy under “Right to restriction of processing”.

2. General notices and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory provisions concerning data protection, as well as this Data Protection Policy.
Various personal data are collected when you use this website. Personal data mean data that can be used to identify you personally. This Data Protection Policy explains what data we collect and what we use them for. It also explains how and for what purpose this takes place.
Please be aware that the transmission of data over the internet (e.g. when communicating by email) may be exposed to security gaps. It is not possible to fully protect data against access by third parties.

Notice concerning the controller

The controller responsible for data processing on this website is:

x.project AG
Eschersheimer Landstr. 25-27
60322 Frankfurt a.M.

Telefon: +49 (0) 69 71673328-0
E-Mail: info@x-project-ag.com

“Controller” means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. name, email address, etc.).

Withdrawal of your consent to data processing

Many data processing operations are possible only with your explicit consent. You may at any time withdraw the consent that you provided. Simple notification by email to us is sufficient for this purpose. Withdrawal of consent does affect the lawfulness of data processing based on consent before its withdrawal.

Right to object to the collection of data in special cases, as well as to direct marketing (Article 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. You can find the respective legal basis for processing in this Data Protection Policy. If you lodge an objection, we may no longer process the personal data concerning you unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (objection in accordance with Article 21(1) GDPR).

Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, the personal data concerning you may no longer be processed for such direct marketing purposes (objection in accordance with Article 21(2) GDPR).

Right to lodge a complaint with the competent authority

In the event of infringements of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we automatically process on the basis of your consent or in performance of a contract turned over to you or a third party in a commonly used and machine-readable format. If you request that the data be transmitted directly to another controller, this takes place only where technically feasible.

SSL and TLS encryption

For security reasons, and in order to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL and TLS encryption. You can tell that a connection is encrypted when the display in your browser’s address bar changes from “http://” to “https://”, as well as by the lock icon in your browser’s status bar. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Information, erasure and rectification

Within the scope of applicable statutory provisions, you have the right at any time to obtain information at no charge about the personal data stored about you, their source and recipients, and the purpose of data processing, as well as, where necessary, a right to rectification or erasure of these data. If you have further questions about this or other issues concerning personal data, you may contact us at any time at the address listed in the imprint.

Right to restriction of processing

You have the right to obtain the restriction of processing of your personal data. You may contact us about this at any time at the address listed in the imprint. The right to restriction of processing exists in the following cases:
• If you contest the accuracy of your personal data stored with us, we normally need time to verify this. You have the right to obtain the restriction of processing of your personal data for the duration of the verification.
• If the processing of your personal data is/was unlawful, you may obtain the restriction of data processing instead of erasure.
• If we no longer need your personal data, but they are required by you for the establishment, exercise or defence of legal claims, you have the right to obtain the restriction of processing of your personal data instead of erasure.
• If you have objected to processing pursuant to Article 21(1) GDPR, a balancing of your interests and our interests has to take place. Until it has been determined which interests are overriding, you have the right to obtain the restriction of processing of your personal data.

If you restricted the processing of your personal data, such personal data may, with the exception of storage, be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Objection to advertising email

We hereby object to the use of the contact data published in connection with the imprint obligation for the purpose of sending advertising and informational material that was not expressly requested. The operators of the website expressly reserve legal steps in the event of the unsolicited sending of advertising information, e.g. through spam.

3. Collection of data on this website

Contact form

If you send us enquiries using the contact form, we store the information contained in the enquiry form, including the contact data provided by you in it, for the purpose of processing the enquiry and in the event of follow-up questions. We do not disclose these data without your consent.

These data are processed on the basis of Article 6(1)(b) GDPR, to the extent that your enquiry is related to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries directed at us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), insofar as this was requested.

We retain the data entered by you in the contact form until you request that they be erased, until you withdraw your consent, or until the purpose for data storage no longer exists (e.g. after the processing of your enquiry has been completed). Mandatory statutory provisions, including retention periods, remain unaffected.

Enquiry by email, phone, or fax

If you contact us by email, phone, or fax, we store and process your enquiry, including all personal data resulting from it (name, enquiry), for the purpose of processing your concern. We do not disclose these data without your consent.

These data are processed on the basis of Article 6(1)(b) GDPR, to the extent that your enquiry is related to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on your consent (Article 6(1)(a) GDPR) and/or on our legitimate interests (Article 6(1)(f) GDPR), since we have a legitimate interest in the effective processing of enquiries directed at us.

We retain the data sent to us by you in connection with contact enquiries until you request that they be erased, until you withdraw your consent, or until the purpose for data storage no longer exists (e.g. after the processing of your concern has been completed). Mandatory statutory provisions, including statutory retention periods, remain unaffected.

4. Plug-ins and tools

OpenStreetMap

We use the map service OpenStreetMap (OSM). The provider is OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.
If you visit a website in which OpenStreetMap is embedded, data such as your IP address and other information about your behaviour on this website are forwarded to OSMF. For this purpose, OpenStreetMap may store cookies in your browser. These are text files that are stored on your computer and facilitate an analysis of your use of the website. You can prevent the storage of cookies by configuring your browser software accordingly. However, please be aware that in such case you may not be able to use all features of this website to their full extent.

In addition, your location may be recorded if you have allowed this in your device settings, e.g. on your mobile phone. The provider of this site has no influence over this data transfer. You can find details in OSMF’s privacy policy, which is available at the following link: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

OpenStreetMap is used in the interest of displaying our website in attractive manner and to make it easier to find the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. To the extent that corresponding consent was requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Article 6(1)(a) GDPR. Consent may be withdrawn at any time.