Home >>> Privacy Policy
Privacy Policy
Here you will find the data protection notice for the website of X2E GmbH at “www.x2e.de“. In it, we inform you about the processing of your personal data in connection with the use of this website.
1. name and address of the person responsible
The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:
X2E GmbH
Große Ahlmühle 19
76865 Rohrbach
Phone: +49 6349 995 99 100
Fax: +49 6349 995 99 109
Website: www.x2e.de
Email: info@x2e.de
2. Name and address of the data protection officer
According to § 38 para. 1 S. 1 BDSG, we are currently not obliged to appoint and designate a data protection officer. Any data subject may at any time address any questions or suggestions relating to data protection directly to the person responsible at the above address.
3. Definitions
The data protection notice of X2E GmbH is based on the defined terms of the General Data Protection Regulation (DSGVO). Our data protection notice should be easy to read and understand. To ensure this, we explain the terms used in advance:
3.1 Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3.2 Person concerned
Data subject means any identified or identifiable natural person whose personal data are processed by the controller.
3.3 Processing
Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
3.4 Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.
3.5 Profiling
Profiling is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.
3.6 Pseudonymisation
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
3.7 Controller or person responsible for processing
Controller or data controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.
3.8 Processors
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
3.9 Receiver
Recipient means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients.
3.10 Third party
Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
3.11 Consent
Consent shall mean any freely given indication of the data subject’s wishes for the specific case in an informed and unambiguous manner in the form of a statement or any other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.
4 General information on data processing; legal bases, purposes of processing, duration of storage, objection and possibility of elimination
4.1 General information on the legal basis
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (DSGVO) as the legal basis for the processing of personal data.
In the case of processing of personal data which is necessary for the performance of a contract to which the data subject is a party, Article 6(6) of the Data Protection Act shall apply. 1 lit. b DSGVO as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c DSGVO as the legal basis.
In the event that vital interests of the data subject or of another natural person make it necessary to process personal data, Article 6(2) of the Data Protection Act shall apply. 1 lit. d DSGVO as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, then Art. 6 para. 1 lit. f DSGVO as the legal basis for the processing.
4.2 General information on data deletion and storage period
The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. In addition, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
4.3 General information about processing on our website
Data protection, data security and protection of secrets have a high priority for us. The permanent protection of your personal data, your company data and your company secrets is particularly important to us.
In principle, you can visit our website without providing any personal information. However, if you make use of our company’s services via our website, this makes it necessary to provide your personal data. As a rule, we use the data provided by you and collected by the website and stored during use exclusively for our own purposes, namely for the implementation and provision of our website and the initiation, implementation and processing of the services/offers offered via the website (contract fulfillment) and do not pass them on to outside third parties, unless there is an officially ordered obligation to do so. In all other cases, we will obtain your separate consent.
Your personal data will be processed in accordance with the requirements of the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to us. By means of this data protection notice, we would like to inform you about the type, scope and purpose of the personal data we process. Furthermore, we inform you about your rights by means of this data protection notice.
We have implemented technical and organizational measures to ensure an adequate level of protection for personal data processed through this website. Nevertheless, internet-based data transmissions can have security gaps, so that no absolute protection can be guaranteed.
5. Collection of general data and information
The website of the X2E GmbH collects a series of general data and information every time a data subject or automated system calls up the website. This general data and information is stored in the server’s log files. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of an access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
When using these general data and information, the X2E GmbH does not draw any conclusions about the data subject. Rather, this information is needed to (1) correctly deliver the content of our website, (2) optimize the content of our website and the advertising for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. The X2E GmbH therefore collects anonymous data and information on one hand for statistical purposes and on the other hand for the purpose of increasing the data protection and data security of our enterprise, with the ultimate aim of ensuring an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.
| Date / Data | Legal basis | Storage purpose | Storage period | Objection / Possibility of elimination |
| General system data | Art. 6 para. 1 lit. f DSGVO (legitimate interest) | The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. | No, because mandatory for operation of the website |
| Date / data | General system data |
| Legal basis | Art. 6 para. 1 lit. f DSGVO (legitimate interest) |
| Storage purpose | The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. |
| Storage duration | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. |
| Objection / elimination option | No, since mandatory for operation of the website. |
6. Contact form and e-mail contact
A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are (for example):
- Form of address
- Name*
- E-mail address*
- Phone
- Address
- Country
- Company
- Department
- Subject*
- Message*
The fields marked with * are mandatory.
The following data is also stored at the time the message is sent:
- The IP address of the user
- Date and time of dispatch
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored. Furthermore, contact can also be made by telephone using the telephone number provided.
In this context, the data will not be passed on to third parties. The data is used exclusively for the processing of the conversation.
| Date / Data | Legal basis | Storage purpose | Storage period | Objection / Possibility of elimination |
| Data from contact form and e-mail / telephone contact | The legal basis for the processing of data in the case of enquiries via the contact form and/or e-mail/telephone is generally Art. 6 para. 1 lit. b. DSGVO (Contract performance; Pre-contractual measures); Art. 6 para. 1 lit. c. DSGVO (compliance with a legal obligation, e.g. answering questions on data protection) and for the rest Art. 6 para. 1 lit. f DSGVO (legitimate interest). | The processing of the personal data from the input mask/email serves us only for the treatment of the establishment of contact. This also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it is clear from the circumstances that the matter in question has been conclusively clarified. The foregoing shall not apply if the correspondence is subject to a retention obligation under commercial law. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. | The user has the possibility to object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. |
| Date / Data | Data from contact form and e-mail/telephone contact |
| Legal basis | The legal basis for the processing of data in the case of enquiries via the contact form and/or e-mail/telephone is generally Art. 6 para. 1 lit. b. DSGVO (performance of contract; pre-contractual measures); Art. 6 para. 1 lit. c. DSGVO (fulfillment of a legal obligation, e.g. answering questions about data protection) and otherwise Art. 6 para. 1 lit. f DSGVO (legitimate interest). |
| Storage purpose | The processing of the personal data from the input mask/email serves us only for the treatment of the establishment of contact. This also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. |
| Storage duration | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it is clear from the circumstances that the matter in question has been conclusively clarified. The foregoing shall not apply if the correspondence is subject to a retention obligation under commercial law. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. |
| Objection / Possibility of elimination | The user has the possibility to object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. |
7. Data protection in applications and in the application procedure
We collect and process personal data from applicants for the purpose of processing the application procedure. The processing may also be carried out by electronic means. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail. If we conclude an employment contract with you as an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents shall be automatically deleted six months after the notification of the rejection decision, provided that no other legitimate interests of the controller prevent such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
7.1 Contact form for the application
X2E GmbH uses an additional contact form for questions regarding applications and application procedures. Here, interested parties can contact the responsible personnel employee directly and, in addition to the data from the contact form, also submit their application file as an electronic file (PDF). If a user takes advantage of this option, the data entered in the input mask as well as the application file will be transmitted to us and stored. These dates are:
- Form of address
- First and last name*
- email*
- Phone number
- Message*
- Application portfolio
The information marked with * is mandatory.
| Date / Data | Legal basis | Purpose of storage | Storage period | Objection / Possibility of elimination |
| Data from contact form and e-mail / telephone contact | The legal basis for the processing of data in the case of enquiries via the contact form and/or e-mail/telephone is generally Art. 6 para. 1 lit. b. DSGVO (Contract performance; Pre-contractual measures); Art. 6 para. 1 lit. c. DSGVO (compliance with a legal obligation, e.g. answering questions on data protection) and for the rest Art. 6 para. 1 lit. f DSGVO (legitimate interest). | The processing of the personal data from the input mask/email serves us only for the treatment of the establishment of contact. This also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it is clear from the circumstances that the matter in question has been conclusively clarified. The foregoing shall not apply if the correspondence is subject to a retention obligation under commercial law. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. | The user has the possibility to object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. |
| Date / Data | Data in applications and in the application procedure |
| Legal basis | The legal basis for the processing of data in the case of enquiries via the contact form and/or e-mail is generally Art. 6 para. 1 lit. b. GDPR (performance of employment contracts; pre-employment measures); Art. 6 para. 1 lit. c. DSGVO (fulfillment of a legal obligation, e.g. answering questions about the application process) and otherwise Art. 6 para. 1 lit. f DSGVO (legitimate interest) as well as special legal authorization norms, such as collective bargaining agreement, company agreement, income tax law, etc. Supplementary reference is made to the Processing Directory Personnel/HR. |
| Storage purpose | If we conclude an employment contract with you as an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. |
| Storage duration | If the controller does not conclude an employment contract with the applicant, the application documents shall be automatically deleted six months after the notification of the rejection decision, provided that no other legitimate interests of the controller prevent such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). |
| Objection / Possibility of elimination | Only general objection and removal options. |
8. Cookies
8.1 Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when you return to the website.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
- Language settings
- Log-in information
We also use cookies on our website that allow us to analyse the surfing behaviour of users.
The following data can be transmitted in this way:
- Entered search terms
- pageview frequency
- Use of website functions
- Name of the website that links to this page and through which you found this page
- clicked links on this website
- Duration of the visit to this website
- Date and time of the visit
- Web browser and version used
- Operating system used
- Screen resolution used
- IP address of the visitor (anonymized)
9. Use of analysis programs
9.1 Privacy policy on the use and application of Google Analytics (with anonymisation function)
We have integrated the Google Analytics component (with anonymisation function) on this website. Google Analytics is a web analysis service. Web analytics is the collection, aggregation and analysis of data about the behavior of visitors to websites. A web analysis service collects, among other things, data on which website a data subject came to a website from (so-called referrers), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. A web analysis is mainly used for the optimization of a website and for the cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The controller uses the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection of the data subject is shortened and anonymized by Google if access to our website is from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports for us showing the activities on our website, and to provide other services related to the use of our website.
Google Analytics sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. By each call of one of the individual pages of this website, which is operated by the controller and on which a Google Analytics component has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission calculations.
By means of the cookie, personal information, for example the access time, the place from which an access originated and the frequency of visits to our website by the person concerned, is stored. Each time you visit our website, this personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Furthermore, the data subject has the option to object to the collection of data generated by Google Analytics and related to the use of this website as well as to the processing of this data by Google and to prevent such processing. For this purpose, the data subject must download and install a browser add-on at this link. This browser add-on tells Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If the information technology system of the data subject is deleted, formatted or reinstalled at a later point in time, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within his or her sphere of control, it is possible to reinstall or reactivate the browser add-on.
Further information and the applicable Google privacy policy can be found here.
9.2 Privacy policy on the use and application of Google Tag Manager
We use “Google Tag Manager” on our website, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Tag Manager allows us as marketers to manage website tags through one interface. The Google Tag Manager tool that implements the tags is a cookie-less domain and does not collect any personal data itself. Google Tag Manager takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager.
You can find more information on data protection at the following website.
10 Use and application of other tools
10.1 Privacy policy on the use and application of Complianz
Our website uses the cookie consent technology of “Complianz GDPR/CCPA Cookie Consent” to obtain your consent to store certain cookies in your browser and to document this in a data protection compliant manner. The provider of this technology is Complianz B.V., Atoomweg 6b, 9743 AK Groningen, Netherlands (hereinafter Complianz).
When you visit our website, a Complianz cookie is stored in your browser to record the consents you have given or revoked.
The collected data will be stored until you request us to delete it or until you delete the Complianz cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details about Complianz’s data processing can be found at the following link.
Complianz cookie consent technology is used to obtain and document legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 S. 1 lit. c GDPR.
10.2 Privacy policy on the use and application of Google WebFonts
This site uses so-called web fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
The web fonts are transferred to the browser’s cache when the page is called up so that they can be used for the display. If the browser does not support Google Web Fonts or prevents access, the text will be displayed in a standard font.
No cookies are set for this purpose when you call up the page. Data transmitted in connection with page views is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. You will not be associated with any data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.
You can set your browser so that the fonts are not loaded from the Google servers (for example, by installing add-ons such as NoScript or Ghostery for Firefox). If your browser does not support Google Fonts or you disable access to Google servers, the text will be displayed in the system’s default font.
X2E GmbH is aware of the transfer of its personal data to a third country and has put in place appropriate safeguards in accordance with the data protection laws. Art. 46 DSGVO to ensure lawful and secure processing of your personal data.
For information about Google Web Fonts’ privacy policy, follow this link. General information on data protection is available in the Google Privacy Center here.
| Legal basis | Storage purpose | Storage period | Objection / Possibility of elimination |
| Art. 6 para. 1 lit. f GDPR. (legitimate interest) | The purpose of the storage is the improvement of our website and in visual and functional level. | The data will be deleted as soon as our legitimate interest no longer exists or we are obliged to delete the data due to legal or statutory orders. | As a user, you have the possibility at any time to object to the processing of your data in accordance with the data protection laws. Clause 11.7 |
| Legal basis | Art. 6 para. 1 lit. f GDPR. (legitimate interest) |
| Storage purpose | The purpose of the storage is the improvement of our website and in visual and functional level. |
| Storage duration | The data will be deleted as soon as our legitimate interest no longer exists or we are obliged to delete the data due to legal or statutory orders. |
| Objection / Possibility of elimination | As a user, you have the possibility at any time to object to the processing of your data in accordance with the data protection laws. Clause 11.7 |
10.3 Privacy policy on the use and application of Google Maps
On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably.
By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, only the technically necessary data is transmitted. This is done regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the design of its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right you must contact Google.
X2E GmbH is aware of the transfer of your personal data to a third country and has appropriate safeguards in place in accordance with the Data Protection Act. Art. 46 DSGVO to ensure lawful and secure processing of your personal data.
For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. Here you will also receive further information about your rights in this regard and setting options for protecting your privacy.
| Legal basis | Storage purpose | Storage period | Objection / Possibility of elimination |
| Art. 6 para. 1 lit. f GDPR. (legitimate interest) | The purpose of the storage is the improvement of our offer, the visual and functional optimization of the website and the provision of a function that facilitates the location of places and our business. | The data will be deleted as soon as our legitimate interest no longer exists or we are obliged to delete the data due to legal or statutory orders. | As a user, you have the possibility at any time to object to the processing of your data in accordance with the data protection laws. Clause 11.7 |
| Legal basis | Art. 6 para. 1 lit. f GDPR. (legitimate interest) |
| Storage purpose | The purpose of the storage is the improvement of our offer, the visual and functional optimization of the website and the provision of a function that facilitates the location of places and our business. |
| Storage period | The data will be deleted as soon as our legitimate interest no longer exists or we are obliged to delete the data due to legal or statutory orders. |
| Objection / Possibility of elimination | As a user, you have the possibility at any time to object to the processing of your data in accordance with the data protection laws. Clause 11.7 |
10.4 Use of various social media plugins
10.4.1 Facebook
This website uses social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are recognizable by one of the Facebook logos (white “f” on blue tile or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and the appearance of the Facebook social plugins can be can be viewed here.
When a participant calls up a website of this offer that contains such a plugin, his browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which then integrates it into the website. The provider therefore has no influence on the scope of the data that Facebook collects with the help of this plugin and therefore informs the participants according to its state of knowledge (link):
By integrating the plugins, Facebook receives the information that a participant has called up the corresponding page of the offer. If the participant is logged into Facebook, Facebook can assign the visit to his Facebook account. When participants interact with the plugins, for example by clicking the Like button or leaving a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. If a participant is not a member of Facebook, there is still a possibility that Facebook will learn and store his or her IP address. According to Facebook, only an anonymized IP address is stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for protecting the privacy of the participants, can be found here in the privacy policy of Facebook (link).
If a participant is a Facebook member and does not want Facebook to collect data about him or her via this offer and link it to his or her membership data stored on Facebook, he or she must log out of Facebook before visiting the website. It is also possible to block Facebook social plugins with add-ons for your browser, for example with the “Facebook Blocker“.
10.4.2 Twitter
Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. In the process, data is also transferred to Twitter. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter. For more information, please refer to the privacy policy of Twitter (link).
You can change your privacy settings on Twitter in the account settings (link).
10.4.3 LinkedIn
If you click on the LinkedIn “Recommend” button and are logged into your LinkedIn account at the same time, you have the option of linking content from our website to your LinkedIn profile page. In doing so, you enable LinkedIn to assign your visit to our websites to you or your user account. You must know that we do not gain any knowledge of the content of the transmitted data and its use by LinkedIn.
For more details on the collection of data and your legal and hiring options, visit LinkedIn. You can change your privacy settings on Twitter in the account settings (link).
10.4.4 Tumblr
There is also the function to share contributions and articles via the Tumblr platform. If you are logged into your Tumblr account at the same time, you have the direct option to share content from our website on your Tumblr profile page. In doing so, you enable Tumblr to associate your visit to our websites with you or your user account. We have no knowledge of the content of the transmitted data and its use by Tumblr.
For more details on the collection of data and your legal options, as well as setting options, contact Tumblr. These are provided for you here.
10.4.5 Further Social Media PlugIns
If we use other social media plug-ins, you will find further information on data protection in the respective data protection notices of these providers. If you do not find them, please contact us in confidence at info@x2e-at.de.
| Date / Data | Legal basis | Purpose of storage | Storage period | Objection / Possibility of elimination |
| Data transfer through third-party cookies (Third-Party-Cookies) | Art. 6 para. 1 lit. f DSGVO (legitimate interest) | The purpose and legitimate interest in setting third-party cookies is to improve our offer for you by analysing your user behaviour. As a rule, only a pseudonymised data transfer to the third parties takes place. Incidentally, it is up to you to prevent the transmission of third-party cookies by selecting the appropriate settings in your Internet browser. Please compare in detail the information given in paragraphs 10 to 12. | Third-party cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of third-party cookies. | By changing the settings in your Internet browser, you can disable or restrict the transmission of third-party cookies. Third-party cookies that have already been stored can be deleted at any time. This can also be automated. The transmission of Flash cookies cannot be prevented via the settings of the browser, but by changing the settings of the Flash Player. |
| Date / Data | Data transfer through third-party cookies (third-party cookies) |
| Legal basis | Art. 6 para. 1 lit. f DSGVO (legitimate interest) |
| Storage purpose | The purpose and legitimate interest in setting third-party cookies is to improve our offer for you by analysing your user behaviour. As a rule, only a pseudonymised data transfer to the third parties takes place. Incidentally, it is up to you to prevent the transmission of third-party cookies by selecting the appropriate settings in your Internet browser. Please compare in detail the information given in paragraphs 10 to 12. |
| Storage duration | Third-party cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of third-party cookies. |
| Objection / Possibility of elimination | By changing the settings in your Internet browser, you can disable or restrict the transmission of third-party cookies. Third-party cookies that have already been stored can be deleted at any time. This can also be automated. The transmission of Flash cookies cannot be prevented via the settings of the browser, but by changing the settings of the Flash Player. |
11.5 Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by the controller.
11.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable and interoperable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that
- the processing is based on consent pursuant to. Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to. Art. 6 para. 1 lit. b DSGVO and
- the processing is carried out with the aid of automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another, insofar as this is technically feasible. Freedoms and rights of other persons must not be impaired by this.
The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
11.7 Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1) of the Data Protection Act. 1 lit. e or f DSGVO; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
11.8 Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time and without giving reasons. In the event of revocation, we will immediately delete your personal data and no longer process it. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
11.9 Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
- is necessary for the conclusion or performance of a contract between you and the controller,
- is authorised by Union or Member State legislation to which the controller is subject and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
- with your express consent.
However, such decisions shall not be based on special categories of personal data pursuant to Article 9(2). 1 DSGVO, unless Art. 9 para. 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms of, and the legitimate interests of, the data subject, including at least the right to obtain the intervention of a person from the controller, to express his or her point of view and to contest the decision.
11.10 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
Status: May 2021
Responsible entity: X2E GmbH