As a visitor to our website, you expect a high degree of quality when processing your personal data. We are responsible for the handling of your data, which we process according to your wishes and in accordance with the provisions of the German and EU data protection laws. Personal information is data about which you are identified or identifiable. Personal data will only be processed by us if a legal regulation allows this or you have previously consented.
The person responsible for the collection and processing of personal data is:
If you have any questions about data protection or data security, please contact our data protection officer at email@example.com
2. Your rights in data protection & cancellation
The following rights apply to the processing of personal data:
- Right to information on the part of the person responsible about the personal data concerned
- Right to rectification or deletion or limitation of processing
- Insofar as the processing of your personal data is based on a balancing of interests (Art. 6 (1) (f) GDPR) or if the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority (Art. 6 (1) (e) GDPR), the right to object to the processing. We will inform you about this in detail in the following sections.
- Right to data transferability
- Insofar as the processing of your personal data is based on a consent (Art. 6 (1) (a) or Art. 9 (2) (a) GDPR), the right to revoke the consent at any time.
- We will inform you about this in detail in the following sections.
- Right of appeal to a supervisory authority
You have the right, at any time for reasons that arise from your particular situation, to object to the processing of your data in the presence of legal requirements. If you object to the processing of your data for advertising purposes or want to revoke a given consent, it is sufficient at any time a short message to our data protection officer by e-mail to firstname.lastname@example.org or by mail to XDECK GmbH, Vitalisstraße 67, 50827 Cologne. Your data will then no longer be processed for advertising purposes or for revocation of consent. The legality of processing up to the opposition or revocation remains unaffected thereby. After your opposition to the processing of your personal data for advertising purposes or the revocation of your consent, we are required by data protection law in accordance with the requirements of the German data protection supervisory authorities to include the necessary data (name, address, e-mail address) in our internal advertising block list and permanently - only for this purpose - to save (block) and to compare with our future advertising files. (Art. 21 (3), Art. 17 (3) (b), Art. 6 (1) (c) GDPR). Thus, the compliance of your advertising contradiction or the revocation of your consent can be permanently ensured. If you have any questions about the processing of your personal data by us, we will gladly provide you with information about the data concerning you. Furthermore, you have the right to rectification, cancellation, Limitation of processing, opposition and the right to data portability. Please contact our data protection officer in all these cases (see contact details under section 1) under the communication addresses listed there. Finally, you have the right to complain to a competent data protection supervisory authority.
3. Processing of personal data on our website
Call our website
The XDECK GmbH - as is customary and necessary for use on Internet sites - processes so-called server log files when the user accesses our website. When you visit our website, our web server records the domain name or IP address of your computer, the file name and the URL that was requested, as well as the http response code and, if applicable, the URL referring to our website (legal basis: Art. 6 (1) (b) GDPR). This procedure is technically usual and necessary to enable the use of our website. We are supported by our technical service providers who we use as processors. The above-mentioned data are logged and used for the purpose of preventing illegal use or attempting to attack our web server (Art. 6 (1) (f) GDPR). The data will be deleted after 6 months.
If you subscribe to our newsletter for updates on information, you agree that we occasionally inform you about current information and interesting facts about the XDECK GmbH by email and invite you to surveys. You can revoke your consent at any time. For example, at the e-mail address email@example.com. Maybe also use your contact or by clicking on the unsubscribe link in each newsletter. (For newsletter un-subscription). When registering for the newsletter, we will enter your email address, salutation and name for the personalized shipping of our newsletter. Your address data will be forwarded to our service providers for newsletter delivery, which we will use as a processor. You will receive a confirmation e-mail confirming your consent (so-called double opt-in procedure). We will use your data until the consent is revoked.
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.
This analysis tool is used on the basis of Art. 6 Sect. 1 lit. a GDPR. The agreement can be revoked at any time.
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to the recording of data
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set, which prevents the collection of your data on future visits to this website: Disable Google Analytics.
Order Data Processing
We have entered into an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographics in Google Analytics:
This website uses the "demographics" feature of Google Analytics. As a result, reports can be produced that contain information on the age, gender and interests of the site visitors. These data are from interest-based advertising from Google and from third-party visitor data. This data cannot be assigned to a specific person. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as described in the section "Opposition to data collection".
Social Media plug-ins with Shariff
We do use plug-ins of social media networks on this website and its pages (e.g. Instagram, LinkedIn). As a rule, you will be able to recognize these plug-ins because of the respective social media logos that appear. To warrant the protection of data on this website, we use these plug-ins only in combination with the so-called “Shariff” solution. This application prevents the plug-ins that have been integrated into this website from transferring data to the respective provider as soon as you enter our website.
A direct connection to the provider's server shall not be established until you have activated the respective plug-in by clicking on the affiliated button (which indicates your consent). As soon as you activate the plug-in, the respective provider receives the information that you have visited this website with your IP address. If you are simultaneously logged into your respective social media account (e.g. linkedin), the respective provider will be able to allocate your visit to this website to your user account.
The activation of the plug-in constitutes a declaration of consent as defined in Art. 6 Sect. 1 lit. a GDPR. You have the option to revoke this consent at any time, which shall affect all future transactions.
The controller has integrated components from LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that allows users to connect to existing business contacts and make new business contacts.
The use of the LinkedIn plug-in is based on Art. 6 Sect. 1 lit. a GDPR. The declaration of consent may be revoked at any time.
Contact / Inquiries
If you have questions or requests, we are at your disposal. We process your information to answer your product or service requests (Art. 6 (1) (b), (f) GDPR). The communication of address and telecommunication data marked as obligatory is necessary to be able to process and answer your request. The voluntary specification of further data facilitates the processing of your request. The information from your inquiry we store after answering the request in principle for six years, if it concerns commercial or business letters (§ 257 (4) HGB, § 6 (1) (c) GDPR).
Request for information material by post
For sending by letter post information material we collect address data (legal basis: Art. 6 (1) (a) GDPR). The mandatory information is required to allow addressing. The voluntary indication of the salutation allows us the salutation (legal basis: Art. 6 (1) (a) GPDR). You can revoke your consent at any time with effect for the future. We are supported by our technical service providers as a processor and pass on your address data to logistics, transport and shipping service providers. Your data will be deleted after sending us. We process the data from orders or applications and other data collected outside the internet to the extent permitted by law for advertising by mail as well as for our internal customer analyses (Art. 6 (1) (f) GDPR).
With your always revocable, explicit consent, we will inform you by e-mail about our activities and services (§ 7 Abs. 2 Nr.3 UWG). We will process your mandatory information when you give your consent in order to send you the newsletter you have selected and to be able to address you personally (Art. 6 (1) (f) GDPR). In order to be able to receive certain newsletters, you must first register (see explanation under registration). When soliciting your consent, we use the online double-opt-in procedure to prevent our emails from being sent to the email addresses of people who did not request or request them. In this case, your IP address is also recorded and stored for documentation purposes according to the specifications of the data protection supervisory authorities. (Art. 7 (1), Art. 6 (1) (c) GDPR). If you have given us your e-mail address when registering or ordering, we will also inform you by e-mail about our products, which are similar to those you have purchased. Of course, you can object to basic tariffs at any time. (§ 7 Abs. 3 UWG.) We store your data collected for advertising purposes as long as the advertising purpose exists or to us a revocation of your consent or your objection to the processing of your data for advertising purposes reached (see Section 3.). We also inform you by e-mail about our products, which are similar to those you have bought. Of course, you can object to basic tariffs at any time. (§ 7 Abs. 3 UWG.) We store your data collected for advertising purposes as long as the advertising purpose exists or to us a revocation of your consent or your objection to the processing of your data for advertising purposes reached (see Section 3.). We also inform you by e-mail about our products, which are similar to those you have bought. Of course, you can object to basic tariffs at any time. (§ 7 Abs. 3 UWG.) We store your data collected for advertising purposes as long as the advertising purpose exists or to us a revocation of your consent or your objection to the processing of your data for advertising purposes reached (see Section 3.).
Extended storage periods
We store your data for as long as the respective purpose requires. Corresponding deletion concepts are available and are continuously adapted to the legal and required conditions.
If there is a tax retention period for certain data processed for the processing of purchase contracts (voucher data), the retention period is 6 or 10 years. During this time the processing of the data is limited. The storage obligation begins at the end of the calendar year in which the offer was made or the contract fulfilled.
4. Data protection in applications and in the application process
The controller collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to the controller by electronic means, for example by e-mail or via a web form available on the website. If the controller concludes a contract of employment with an applicant, the data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the applicant by the controller, For example, the application documents will be automatically deleted six months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the controller. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG).
5. Information for start-ups and partners.
We process your data only for the purpose and within the scope of the application procedure in accordance with the legal requirements. The processing of data is carried out to fulfil our (pre-) contractual obligations within the scope of the application procedure in accordance with Art. 6 (1) (b) GDPR. The application procedure requires that applicants provide us with their application data. The necessary data are marked in our online form (e.g. names and roles of your founding team, name and e-mail of the founder, pitch deck information).
We share personal data with third parties only if this is necessary in conjunction with the handling of the application procedure. Your data will be forwarded to our partners and investors in particular. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.
We process your data to protect our legitimate interests, e.g. to contact you as an investor or to inform you about important developments in the company. If you have given us your consent to process personal data for specific purposes (e.g. advertising by e-mail or telephone), the legality of this processing is based on your consent. A granted consent can be revoked at any time.
Within our company, access to your data is granted to those entities that need it to fulfil our contractual and legal obligations. Service providers and vicarious agents employed by us may also receive data for these purposes, provided they observe confidentiality and comply with data protection regulations and agreements. These are companies in the categories IT services, telecommunications, auditors and legal advisors, as well as service providers. We conclude appropriate data protection agreements with the companies we commission to process data on our behalf, which guarantee an appropriate level of data protection.
We store your personal data initially for the period of time for which the respective purpose of use requires corresponding storage. This also includes the initiation of a contract (pre-contractual legal relationship) and the processing of a contract. In addition, we may store your personal data until any legal claims arising from the relationship with you become statute-barred, in order to be able to use it for verification purposes if necessary. The limitation period is usually between 12 and 36 months.
6. What are mandatory information or required fields?
If the survey identifies certain data fields as mandatory fields and / or is marked with an asterisk (*), the provision of such data is either required by law or by contract, or we will need that data for the purpose of the contract, service or purpose. The specification of the data is of course also in the mandatory fields at your discretion. Failure to do so may result in the contract not being fulfilled by us or the desired service not being provided or the stated purpose being unavailable.
7. Information about cookies and newsletters
If you have not made or make any other settings, cookies will remain on your device until the browser closes on your device, enabling the necessary technical functions and ensuring that cookies remain on your device for longer.
8. Data security
We take technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons and to ensure the protection of your rights and compliance with the applicable data protection regulations of the EU and the Federal Republic of Germany. The measures taken are designed to ensure the confidentiality and integrity of your data and to ensure the long-term availability and resilience of systems and services when processing your data. They should also quickly restore data availability and accessibility in the event of a physical or technical incident. Our security measures include encryption of your data. All information, which you enter online are technically encrypted and only then transmitted. As a result, this information can never be viewed by unauthorized third parties. Our data processing and security measures are constantly being improved in line with technological developments. The employees of XDECK GmbH are or will be obliged in writing to maintain confidentiality and to comply with the data protection requirements of the GDPR.
Data transfer upon closing of contracts for online stores, retailers and the shipment of merchandise
We share personal data with third parties only if this is necessary in conjunction with the handling of the contract; for instance, with companies entrusted with the shipment of goods or the financial institution tasked with the processing of payments. Any further transfer of data shall not occur or shall only occur if you have expressly consented to the transfer. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.
The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.
Data transfer upon closing of contracts for services and digital content
We share personal data with third parties only if this is necessary in conjunction with the handling of the contract; for instance, with the financial institution tasked with the processing of payments.
Any further transfer of data shall not occur or shall only occur if you have expressly consented to the transfer. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.
The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.
Liability for links
Our offer contains links to external websites of third parties, on whose contents we have no influence. Therefore, we cannot assume any liability for these external contents. The respective provider or operator of the pages is always responsible for the contents of the linked pages. The linked pages were checked for possible legal breaches at the time of linking. Illegal contents were not recognisable at the time of linking. A permanent control of the contents of the linked pages is not reasonable without concrete evidence of an illegality. As soon as we become aware of any legal breaches, we will remove such links immediately.