xDeck

Privacy Policy

1.Responsible body

As a visitor to our website, you expect a high degree of quality when processing your personal data. We are responsible for the handling of your data, which we process according to your wishes and in accordance with the provisions of the German and EU data protection laws. Personal information is data about which you are identified or identifiable. Personal data will only be processed by us if a legal regulation allows this or you have previously consented.

The person responsible for the collection and processing of personal data is:

XDECK GmbH
Vitalisstraße 67
50827 Cologne
Telephone +49 (0) 221 999 850 27
E-mail hello@xdeck.de

If you have any questions about data protection or data security, please contact our data protection officer at data@xdeck.de

2. Your rights in data protection & cancellation

The following rights apply to the processing of personal data:

  • Right to information on the part of the person responsible about the personal data concerned
  • Right to rectification or deletion or limitation of processing
  • Insofar as the processing of your personal data is based on a balancing of interests (Art. 6 (1) (f) GDPR) or if the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority (Art. 6 (1) (e) GDPR), the right to object to the processing. We will inform you about this in detail in the following sections.
  • Right to data transferability
  • Insofar as the processing of your personal data is based on a consent (Art. 6 (1) (a) or Art. 9 (2) (a) GDPR), the right to revoke the consent at any time.
  • We will inform you about this in detail in the following sections.
  • Right of appeal to a supervisory authority

You have the right, at any time for reasons that arise from your particular situation, to object to the processing of your data in the presence of legal requirements. If you object to the processing of your data for advertising purposes or want to revoke a given consent, it is sufficient at any time a short message to our data protection officer by e-mail to data@xdeck.de or by mail to XDECK GmbH, Vogelsanger Str 78, 50823 Cologne. Your data will then no longer be processed for advertising purposes or for revocation of consent. The legality of processing up to the opposition or revocation remains unaffected thereby. After your opposition to the processing of your personal data for advertising purposes or the revocation of your consent, we are required by data protection law in accordance with the requirements of the German data protection supervisory authorities to include the necessary data (name, address, e-mail address) in our internal advertising block list and permanently - only for this purpose - to save (block) and to compare with our future advertising files. (Art. 21 (3), Art. 17 (3) (b), Art. 6 (1) (c) GDPR). Thus, the compliance of your advertising contradiction or the revocation of your consent can be permanently ensured. If you have any questions about the processing of your personal data by us, we will gladly provide you with information about the data concerning you. Furthermore, you have the right to rectification, cancellation, Limitation of processing, opposition and the right to data portability. Please contact our data protection officer in all these cases (see contact details under section 1) under the communication addresses listed there. Finally, you have the right to complain to a competent data protection supervisory authority.

3. Processing of personal data on our website

Call our website
The XDECK GmbH - as is customary and necessary for use on Internet sites - processes so-called server log files when the user accesses our website. When you visit our website, our web server records the domain name or IP address of your computer, the file name and the URL that was requested, as well as the http response code and, if applicable, the URL referring to our website (legal basis: Art. 6 (1) (b) GDPR). This procedure is technically usual and necessary to enable the use of our website. We are supported by our technical service providers who we use as processors. The above-mentioned data are logged and used for the purpose of preventing illegal use or attempting to attack our web server (Art. 6 (1) (f) GDPR). The data will be deleted after 6 months.

Newsletter
If you subscribe to our newsletter for updates on information, you agree that we occasionally inform you about current information and interesting facts about the XDECK GmbH by email and invite you to surveys. You can revoke your consent at any time. For example, at the e-mail address hello@xdeck.de. Maybe also use your contact or by clicking on the unsubscribe link in each newsletter. (For newsletter un-subscription). When registering for the newsletter, we will enter your email address, salutation and name for the personalized shipping of our newsletter. Your address data will be forwarded to our service providers for newsletter delivery, which we will use as a processor. You will receive a confirmation e-mail confirming your consent (so-called double opt-in procedure). We will use your data until the consent is revoked.

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.
The storage of Google Analytics cookies and the utilization of this analysis tool are based on Art. 6 (1) (f) GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities.
IP anonymization
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plugin
You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to the recording of data

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set, which prevents the collection of your data on future visits to this website: Disable Google Analytics.
For more information on how to handle user data on Google Analytics, please refer to the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.

Order Data Processing
We have entered into an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographics in Google Analytics:
This website uses the "demographics" feature of Google Analytics. As a result, reports can be produced that contain information on the age, gender and interests of the site visitors. These data are from interest-based advertising from Google and from third-party visitor data. This data cannot be assigned to a specific person. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as described in the section "Opposition to data collection".

Privacy Policy for Use and Use of LinkedIn
The controller has integrated components from LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that allows users to connect to existing business contacts and make new business contacts.
LinkedIn's operating company is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. Outside of the US, privacy issues are handled by LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Each time you visit our website, which has a LinkedIn component (LinkedIn plug-in), this component causes the browser used by the subject to download a corresponding representation of the LinkedIn component. More information about the LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn learns about the specific bottom of our website visited by the person concerned.
If the data subject is logged in to LinkedIn at the same time, LinkedIn recognizes with each visit to our website by the data subject and during the entire duration of the respective stay on our website which specific subpage of our website the data subject visits. This information is collected through the LinkedIn component and linked by LinkedIn to the affected LinkedIn's LinkedIn account. If the person concerned activates a LinkedIn button integrated on our website, LinkedIn assigns this information to the personal LinkedIn user account of the person concerned and stores this personal data.
LinkedIn always receives information via the LinkedIn component that the person concerned has visited our website if the person concerned simultaneously logs on to LinkedIn at the time of access to our website; this happens regardless of whether the person clicks on the LinkedIn component or not. If the affected person does not want to transmit this information to LinkedIn, the latter can prevent it from logging out of their LinkedIn account before visiting our website.
At https://www.linkedin.com/psettings/guest-controls, LinkedIn offers the ability to unsubscribe from e-mail, SMS and targeted ads, and manage ad settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame to set cookies. Such cookies can be refused at https://www.linkedin.com/legal/cookie-policy. LinkedIn's privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

Contact / Inquiries
If you have questions or requests, we are at your disposal. We process your information to answer your product or service requests (Art. 6 (1) (b), (f) GDPR). The communication of address and telecommunication data marked as obligatory is necessary to be able to process and answer your request. The voluntary specification of further data facilitates the processing of your request. The information from your inquiry we store after answering the request in principle for six years, if it concerns commercial or business letters (§ 257 (4) HGB, § 6 (1) (c) GDPR).
Request for information material by post
For sending by letter post information material we collect address data (legal basis: Art. 6 (1) (a) GDPR). The mandatory information is required to allow addressing. The voluntary indication of the salutation allows us the salutation (legal basis: Art. 6 (1) (a) GPDR). You can revoke your consent at any time with effect for the future. We are supported by our technical service providers as a processor and pass on your address data to logistics, transport and shipping service providers. Your data will be deleted after sending us. We process the data from orders or applications and other data collected outside the internet to the extent permitted by law for advertising by mail as well as for our internal customer analyses (Art. 6 (1) (f) GDPR).

E-mail advertising
With your always revocable, explicit consent, we will inform you by e-mail about our activities and services (§ 7 Abs. 2 Nr.3 UWG). We will process your mandatory information when you give your consent in order to send you the newsletter you have selected and to be able to address you personally (Art. 6 (1) (f) GDPR). In order to be able to receive certain newsletters, you must first register (see explanation under registration). When soliciting your consent, we use the online double-opt-in procedure to prevent our emails from being sent to the email addresses of people who did not request or request them. In this case, your IP address is also recorded and stored for documentation purposes according to the specifications of the data protection supervisory authorities. (Art. 7 (1), Art. 6 (1) (c) GDPR). If you have given us your e-mail address when registering or ordering, we will also inform you by e-mail about our products, which are similar to those you have purchased. Of course, you can object to basic tariffs at any time. (§ 7 Abs. 3 UWG.) We store your data collected for advertising purposes as long as the advertising purpose exists or to us a revocation of your consent or your objection to the processing of your data for advertising purposes reached (see Section 3.). We also inform you by e-mail about our products, which are similar to those you have bought. Of course, you can object to basic tariffs at any time. (§ 7 Abs. 3 UWG.) We store your data collected for advertising purposes as long as the advertising purpose exists or to us a revocation of your consent or your objection to the processing of your data for advertising purposes reached (see Section 3.). We also inform you by e-mail about our products, which are similar to those you have bought. Of course, you can object to basic tariffs at any time. (§ 7 Abs. 3 UWG.) We store your data collected for advertising purposes as long as the advertising purpose exists or to us a revocation of your consent or your objection to the processing of your data for advertising purposes reached (see Section 3.).

Extended storage periods
We store your data for as long as the respective purpose requires. Corresponding deletion concepts are available and are continuously adapted to the legal and required conditions.
If there is a tax retention period for certain data processed for the processing of purchase contracts (voucher data), the retention period is 6 or 10 years. During this time the processing of the data is limited. The storage obligation begins at the end of the calendar year in which the offer was made or the contract fulfilled.

4. Data protection in applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to the controller by electronic means, for example by e-mail or via a web form available on the website. If the controller concludes a contract of employment with an applicant, the data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the applicant by the controller, For example, the application documents will be automatically deleted six months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the controller. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG).

5. What are mandatory information or required fields?

If the survey identifies certain data fields as mandatory fields and / or is marked with an asterisk (*), the provision of such data is either required by law or by contract, or we will need that data for the purpose of the contract, service or purpose. The specification of the data is of course also in the mandatory fields at your discretion. Failure to do so may result in the contract not being fulfilled by us or the desired service not being provided or the stated purpose being unavailable.

6. Information about cookies and newsletters

Cookies
In order to make the visit to our website attractive and to enable the use of certain functions in order to display suitable products or for data analysis, XDECK GmbH uses so-called cookies. In the interests of clarity, we would like to explain the subject of cookies here. Cookies are small text files that are stored on your computer. These are used to enable the recognition of your Internet browser. From this data, user profiles are created under a pseudonym. Unless you have specifically consented to this, this information will not be used to identify you personally and will not be collated with personally identifiable information about the recipient of the alias. IP addresses are only used anonymously in this procedure. We use this information solely to optimize our offer and to tailor it to our customers' needs. You can object to the creation of pseudonymous usage profiles by setting an opt-out cookie. In addition, we use cookies to make the use of our website customer-friendly. We use information about the date and duration of a visit to our website as well as the pages viewed by the visitor. Most browsers are set to automatically accept cookies. You can set your web browser to notify you when cookies are set or to refuse or restrict the setting of cookies in general. If you disable or restrict cookies using your browser, but then different functions on our website will no longer be usable for you. You can always delete stored cookies using your web browser, even automatically.

If you have not made or make any other settings, cookies will remain on your device until the browser closes on your device, enabling the necessary technical functions and ensuring that cookies remain on your device for longer.

7. Data security

We take technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons and to ensure the protection of your rights and compliance with the applicable data protection regulations of the EU and the Federal Republic of Germany. The measures taken are designed to ensure the confidentiality and integrity of your data and to ensure the long-term availability and resilience of systems and services when processing your data. They should also quickly restore data availability and accessibility in the event of a physical or technical incident. Our security measures include encryption of your data. All information, which you enter online are technically encrypted and only then transmitted. As a result, this information can never be viewed by unauthorized third parties. Our data processing and security measures are constantly being improved in line with technological developments. The employees of XDECK GmbH are or will be obliged in writing to maintain confidentiality and to comply with the data protection requirements of the GDPR.

Data transfer upon closing of contracts for online stores, retailers and the shipment of merchandise

We share personal data with third parties only if this is necessary in conjunction with the handling of the contract; for instance, with companies entrusted with the shipment of goods or the financial institution tasked with the processing of payments. Any further transfer of data shall not occur or shall only occur if you have expressly consented to the transfer. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.
The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.

Data transfer upon closing of contracts for services and digital content

We share personal data with third parties only if this is necessary in conjunction with the handling of the contract; for instance, with the financial institution tasked with the processing of payments.
Any further transfer of data shall not occur or shall only occur if you have expressly consented to the transfer. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.
The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.

8. Changes

The privacy policy must be adapted from time to time to the actual circumstances and the legal situation. Please check the privacy policy before using our website to be up to date on any changes or updates.

Liability for links
Our offer contains links to external websites of third parties, on whose contents we have no influence. Therefore, we cannot assume any liability for these external contents. The respective provider or operator of the pages is always responsible for the contents of the linked pages. The linked pages were checked for possible legal breaches at the time of linking. Illegal contents were not recognisable at the time of linking. A permanent control of the contents of the linked pages is not reasonable without concrete evidence of an illegality. As soon as we become aware of any legal breaches, we will remove such links immediately.