Privacy Policy

We hereby inform you about the collection and use of your personal data as well as about your rights. The legal basis is the General Data Protection Regulation (GDPR).

Data Controller and Contact Details

The data controller of www.x-software.com is
X‑Software GmbH

Marktstrasse 6

87730 Bad Grönenbach, Germany

Managing Director: Michael Gehret

Registered Office: Bad Grönenbach, Germany

Commercial Register Memmingen HRB 10042

The data protection officer can be contacted at data-guard@x-software.com.

Collection and Storage of Data when Visiting the Websites

When you visit our websites, information is automatically sent to our website servers by the browser used on your terminal device. This information is temporarily stored in so-called server log files. The following information is collected: name and URL of the website visited, referrer URL, date and time of access, IP address, web browser and the operating system used on your terminal device, domain name. The legal basis for data processing insofar is Art. 6 para. 1 S. 1 lit. f GDPR. This data does not allow any conclusions to be drawn about your person. A combination of this data with personal data is not carried out. However, we reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use. The collection of this data is necessary to ensure a smooth connection of the websites as well as the comfortable use, delivery and presentation of the contents of our websites. We also use this data for the evaluation of system security and stability as well as for statistical purposes, in particular for the optimisation of the websites, the technology and our offer.

Personal Data, Use and Transfer to Third Parties

Personal data is any information relating to an identified or identifiable natural person. This includes in particular name, address, e-mail address, telephone number and gender.

We only collect, process and use your personal data if you agree to the collection, processing and use or if there is another legal basis in accordance with the GDPR. We only transfer your personal data to third parties if: you have given your explicit consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, it is necessary for the fulfilment of a contract with you in accordance with Art. 6 para. 1 S. 1 lit. b GDPR, and/or in the event that there is a legal obligation to pass on the data pursuant to Art. 6 para. 1 S. 1 lit. c GDPR. The personal data passed on may be used by the third party exclusively for the specified purpose.

Duration of Data Storage and Deletion

We process and store your personal data only for the period that is necessary to fulfil our contractual or legal obligations, especially to maintain the usability of our websites and/or to defend against liability claims. If the purpose of storage no longer applies or if a legally prescribed storage period expires, the personal data will be blocked or deleted.

Data Security

Your personal data is protected by appropriate organisational and technical precautions to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved with technological developments. Nevertheless, Internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed.

Cookies

We do not use any cookies on our websites.

Web Analysis Services

We run the Plausible Analytics script to collect some anonymous usage data for statistical purposes. The goal is to track overall trends in our website traffic, it is not to track individual visitors. All the data is in aggregate only. No personal data is collected.

Data collected includes referral sources, top pages, visit duration, information from the devices (device type, operating system, country and browser) used during the visit and more.

Your Rights

If you intend to make use of one or more of the rights listed below, you can contact our data protection officer at data-guard@x-software.com or our company at any time.

Right to Information (Art. 15 GDPR)

You have the right to receive information from us at any time and free of charge about the personal data stored about you, as well as a copy of this information. You also have the right to be informed about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations, if possible the planned storage period or, if this is not possible, the criteria for determining this period, the existence of a right to rectification or erasure of the personal data concerning you or to restriction of processing by the controller or a right to object to such processing, the existence of a right of appeal to a supervisory authority if the personal data are not collected from the data subject, any available information about the origin of the data, the existence of automated decision-making, including profiling, and — at least in these cases — meaningful information about the logic involved and the scope and intended effects of such processing for the data subject. In addition, you as the data subject have the right to be informed whether personal data have been transferred to a third country or to an international organisation. If this is the case, you have the right to obtain information about the appropriate safeguards in connection with the transfer.

Right to Rectification (Art. 16 GDPR)

You have the right to request that inaccurate personal data relating to you be rectified without delay. Taking into account the purposes of the processing, you may request the completion of incomplete personal data.

Right to Erasure (Right to be Forgotten) (Art. 17 and 19 GDPR)

You have the right to obtain the erasure of personal data concerning you without undue delay, provided that one of the following reasons applies and to the extent that the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw your consent on which the processing is based pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR and there is no other legal ground for the processing; you object to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 (2) GDPR; the personal data have been unlawfully processed; the personal data have to be erased for compliance with a legal obligation in European Union or Member State law to which we are subject. If the personal data has been made public by us and our company as the controller is obliged to erase the personal data pursuant to Article 17 (1) GDPR, we shall take reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other data controllers which are processing the published personal data that you have requested the erasure of such personal data, unless the processing is necessary.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to obtain restriction of processing insofar as you contest the accuracy of the personal data, the processing is unlawful, but you oppose the erasure of the personal data and we no longer need the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Article 21 (1) GDPR.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to transmit those data to another controller, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons.

Right to Object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. This also applies to profiling based on these provisions. We will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. If we process personal data for the purpose of direct marketing, you have the right to object at any time to processing of personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. In addition, where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, you, on grounds relating to your particular situation, have the right to object to processing of personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Automated Individual Decision-Making, including Profiling (Art. 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects in respect to you or similarly significantly affects you, unless the decision (i) is necessary for entering into, or performance of, a contract between us, or (ii) is authorized by European Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interest, or (iii) is based on your explicit consent. Where the decision is either necessary for the conclusion or performance of a contract between you and us, or is made with your express consent, we will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, at least the right to obtain human intervention, to express your point of view and to contest the decision.

You have the right to withdraw your consent at any time. This has the consequence that we may not continue the data processing, which was based on this consent, for the future. An informal communication by email to us is sufficient for the withdrawal. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority. You can usually contact the supervisory authority of your habitual residence, place of work or of our registered office for this purpose.

Up-to-dateness and Changes

This privacy policy is currently valid and was updated in October 2021. We reserve the right to change this policy from time to time by updating our website and offers respectively or due to changes in regulatory or legal requirements. You can access, download, and print out the current privacy policy on our website at www.x-software.com/privacy.