Privacy Policy

In this notice, we want to make clear to you that we handle your personal data with care.

1. Responsible party

xbAV AG
Arnulfstr. 126
80636 Munich
Germany

is responsible for this website.
In accordance with Article 37 of the European Union’s General Data Protection Regulation (GDPR), we have appointed a data protection officer.
This person and our data protection team can be contacted at datenschutz@xbav.de.

2. What data is used and for what purpose

General

In principle, you can use our website anonymously. However, to ensure that it functions properly and to optimize its use, we use various technical tools. This data protection notice explains what data is processed and why.
 
The legal basis for data processing by us is a legitimate interest within the meaning of Article 6 (1) (f) GDPR to operate our website professionally and securely, as well as Article 6 (1) (b) GDPR, which allows us to process data to fulfill a contract with you as contractual party, or to take pre-contractual steps in response to your request. If you consented to data processing for specific purposes, the legal basis is Article 6 (1) (a) GDPR, until revocation.
 

Hosting

We make use of the hosting services of the hosting company stated in Section 3, in order to make our website available to you. We require computing capacity, memory space, and database services, as well as technical maintenance services. As the responsible party, we have a legitimate interest in accessing these services to provide our website free from technical errors and in an optimized manner in accordance with Article 6 (1) (f) GDPR. As part of hosting, subscriber data, contact data, content, contractual data, usage data, metadata, and communication data of the users of our website are processed.

 
For this, we have concluded a processing agreement (Art. 28 GDPR) in which we place the hosting company under obligation to handle the transmitted data with care and not to pass it on to third parties.
 

Browser data and log files

Your browser automatically transmits to us the following data to enable the use of our website:

    • Browser type and browser version
    • Operating system used
    • Referrer URL
    • Host name of the computer accessing the site
    • Time of the server request
    • IP address


The web server on which our website is hosted stores this information in what are known as log files.

The legal basis for this processing is a legitimate interest, in accordance with Article 6 (1) (f) GDPR, to operate this website professionally and securely.

Cookies

Cookies are stored on your computer when you use this website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. The entity that placed the cookie receives certain information through the cookie. Cookies cannot run programs or transfer viruses to your computer. Their aim is to make the website more user-friendly and more efficient.

You can configure your browser settings according to your wishes and, for example, decline the acceptance of third-party cookies or all cookies. Please note that, if you decline cookies, you may not be able to use all the functions of this website.

Cookies that are required to communicate with you electronically or to provide certain functions that you have requested are stored in accordance with Article 6 (1) (f) GDPR. The basis for this is a legitimate interest in storing cookies to provide this website free from technical errors and in an optimized manner.

Cookies used for other purposes (for example, tracking cookies to analyze your websurfing activities) are addressed in other sections of this data protection notice.

This website uses transient and persistent cookies:
Transient cookies are deleted automatically when you close the browser. In particular, these include session cookies. These cookies save what is known as a session ID with which different requests from your browser can be assigned to the same session. This means that your computer can be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies are automatically deleted after a predetermined period. This period can vary depending on the cookie. You can delete the cookies in your browser’s security settings at any time.

Matomo

To measure the reach of our website, we use “Matomo” (previously known as “Piwik”). Matomo is an open source project from InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand.

Matomo uses cookies. One reason is to store a unique session ID issued by Matomo, which has no significance beyond Matomo. Another reason is to record your choice of opting out of being tracked, if you have done so.

The anonymized information gathered using the session ID about the use of our website is stored by us on our server and used there to create statistics and analyses about our website. The basis for this is a legitimate interest in providing our website free from technical errors and in an optimized manner in accordance with Article 6 (1) (f) GDPR.

The IP addresses recorded by Matomo are immediately anonymized, so that it is not possible for us to identify the user. The anonymous data is stored separately from any other personal data you may have entered and does not allow any inferences to be drawn about you.

Matomo respects the “do not track” setting, which you can activate. If your browser supports this function and you have activated this function in your browser settings, Matomo will not record any data.

You can withdraw your consent to the collection of your data with future effect at any time.

By making the appropriate browser setting, you can reject cookies and thus prohibit Matomo from recording data.

You can also prevent Matomo from collecting data from your device by clicking the link below, which sets an opt-out cookie for two years. Please note that you must click this link again if you use another device to access our website, or if you delete all your cookies or specifically the opt-out cookie.

The data you have entered is deleted from our server when the purpose of processing ceases to exist, at the latest.

3. The processor we have engaged

Host Europe GmbH (hosting company)
Hansestraße 111
51149 Köln

Tel.: 0221 99999-301
Fax: 0221 99999-350
E-Mail: info@hosteurope.de

commercial register: Cologne district court, HRB 28495
VAT-ID: DE 187370678

4. For how long will your data be stored?

For the purpose of backing up data, complete copies of the data collected and stored are created. These copies are encrypted and stored for up to 13 weeks.

If you have given consent, we will delete your personal data when the purpose of processing ceases to exist.

5. What rights do you have?

Your right to information, blocking, and deletion

Within the scope of legal provisions, you have the right to receive information – free of charge – concerning the personal data stored about you, its origin and recipients, and the purpose of data processing, and, if applicable, you have the right to have this data corrected, blocked, or deleted. We abide by legal requirements concerning retention and documentation periods. Furthermore, we retain your data for the legally permitted periods to ward off liability claims.

You can contact us at any time about this matter and about other questions concerning personal data. You will find our contact details under Section 1 of this data protection notice. If data is deleted or blocked at your request, it may be the case that you can no longer use all the features of our website.

Revocation of consent

Some data processing operations are only possible with your express consent. If you have already given consent and wish to withdraw it, you can do so with future effect by contacting us at any time, for example by sending an e-mail to widerruf@xbav.de. The lawfulness of the data processing performed until revocation remains unaffected by a revocation.

Your right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data undertaken on the basis of Article 6 (1) (e) or (f). This also applies to profiling within the meaning of these provisions.

If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling, insofar as it is connected with such direct advertising.
eleted or blocked at your request, it may be the case that you can no longer use all the features of our website.

Your right to data portability

You have the right to receive, in a commonly used and machine-readable format, the personal data that we process on the basis of your consent or to fulfill a contract. Further, you have the right to have such data transmitted to a third party.

Your right to complain to a supervisory authority

In case of a violation of data protection laws, you have the right to complain to a supervisory authority. The supervisory authority responsible for data protection issues is the Bavarian regulatory authority for data protection:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 27 (Schloss)
91522 Ansbach

https://www.lda.bayern.de

[borlabs-cookie type="btn-cookie-preference" title="Datenschutzeinstellungen"/]