X-STUFF SECURITY

PRIVACY STATEMENT

DATA PROTECTION STATEMENT

Intended use of data processing and data protection

We appreciate your interest in our company. X-STUFF is a service company operating in the market segments of Property Agency, Security and Car & Yacht. Wherever X-STUFF processes personal data, such processing is carried out for the purposes defined in this data privacy statement.
Protection of the personal data you entrust to us is a priority for us, and we want you to feel safe and secure when you visit our website or use our online offers. It is important to us that you are fully informed about the personal data that we collect when you use our online offers and services, and are familiar with how we use them.
Our employees as well as the service providers appointed by us are bound to confidentiality and to observing the regulations of the EU General Data Protection Regulation (‘GDPR’) and any other relevant data protection regulations. We take protecting your personal data very seriously and conscientiously follow the rules of GDPR.

Use and circulation of personal data

Any personal data, which you provide us with via our website or other channels, will solely be used for correspondence with you and is exclusively collected, processed, and saved for the purposes you intended when submitting the data. In addition, we will use this data to send you occasional offers and to inform you about new products, services, and other items that might be of interest to you. You may revoke your consent regarding the use of your personal data by simply contacting us, for example, by sending an e-mail to support info@x-stuff.de.

If required, information will be passed on by us to companies, service providers or other third parties associated with X-STUFF. This may be necessary to perform a service or transaction requested by yourself, such as order processing, event and seminar registrations, for customer service purposes or to provide you with information regarding products or services. When passing on personal data to third parties, we shall limit this to the information necessary to provide our respective services. The respective third party must only use this personal data to perform the service required or the transaction needed, which is commissioned in our order. In doing so, the service providers are obliged to adhere to the GDPR.
We shall never share, sell or otherwise provide your personal data to third parties for marketing purposes.

Visiting our website

We record and save your computer's IP address to send the contents of our website visited by you to your computer (e.g. texts, pictures, and files provided for downloading, etc.) (cf. Art. 6 (1) lit. b GDPR). We also process these data to identify and pursue any misuse. Legal basis in this case is Art. 6 (1) lit. f GDPR. In this context, our legitimate interest in data processing is to ensure the due functioning of our website and the business transacted via the website.
In as far as we process your data as described above for providing the functions of our website, you are contractually bound to make these data available to us.

Data processing on our website

For security and technical reasons, X-STUFF automatically processes information transmitted by your browser on our systems.
This includes in particular:
○ Browser type/version
○ Operating system used
○ Assessed URL on our System (Website)
○ Referrer URL (the website that referred to our website)
○ Host name and full IP address of the computer accessing the site
○ Date and time of call
○ Data volumes and file types called
○ This data will not be consolidated
○ With other data sources or statistically evaluated.

Notes regarding IP addresses:
IP addresses are essential for the transmission of websites and data from our servers to your browsers. They are the “addresses” for information you request from our web servers. To common interpretation of law, IP addresses regarded as personal data and are therefore only used by us to the extent technically required.

Anonymized website tracking

To align this website better to our customers’ needs, we analyze how our customers interact with the site. We anonymize your IP address (and possibly similar information exchanged with our site by your computer or device during standard Internet use) and then use it to analyze data such as the pages at www.x-stuff.de visited by your browser and your computer. Again, we use cookies for this purpose. Our cookie contains only one unique number by which we can re-identify you on our websites but not, however, on third-party websites. We use the stored data for statistical purposes only. The IP address will not be associated with any individual user. The data will not be shared with third parties.

Use of Google Universal Analytics

This website uses Google Universal Analytics, a web analysis service offered by Google Inc. ("Google"). Google Universal Analytics uses ‘cookies,’ text files stored on your computer, to help us analyze how you use our website. The information generated by the cookie about your use of this website (including your IP address) is transferred to Google servers in the USA and saved there.
We have activated IP anonymization on this website, so that the IP address of users within EU Member States or other States party to the Agreement on the European Economic Area will be truncated by Google beforehand. Only in exceptional cases is the full IP address sent to Google servers in the USA and truncated there. On behalf of the website provider, Google will use this information for analyzing your use of the website, compiling reports on website activity, and providing us with other services relating to website activity and internet usage. Google will not associate the IP address transmitted by your browser within the operations of Google Universal Analytics with any other data held by Google. You may prevent cookies from being installed by selecting the appropriate settings on your browser. However, please note that in this case you may not be able to use the full range of functions of this website. Furthermore, you can prevent Google from collecting and using the data regarding your use of the website generated by the cookies (including your IP address) by downloading and installing the browser plugin from the following link http://tools.google.com/dlpage/gaoptout?hl=en.
Click on the link below to prevent collection of your data by Google Universal Analytics. By clicking on this link, you will set an opt-out cookie which prevents your data from being tracked when you visit this website in the future.
For more detailed information to disable Google Universal Analytics on the conditions of use and data privacy, go to https://www.google.com/analytics/terms/gb.html.
Please note that this website uses Google Universal Analytics with the code extension “anonymizeIp” to ensure anonymized recording of IP addresses (known as IP masking) and exclude direct personal references.

Application data

Your application data will be stored and processed at X-STUFF and forwarded to the responsible contact person at X-STUFF. Your data will only be used to correspond with you and to process your application as part of our recruitment process.

Standard periods for deletion of data

Legislation has defined numerous data storage periods and obligations. At the end of these periods, the relevant data will be routinely deleted. Data that are not affected by the above storage periods and obligations are deleted or anonymized as soon as the purposes defined in this data privacy statement no longer apply. Unless this data privacy statement includes other deviating provisions for data storage, we will store any data we collect for as long as they are required for the above purposes for which they were collected.

Other data use and deletion of data

Any further processing or use of your personal data will generally only be carried out to the extent permitted on the basis of a legal regulation or where you have consented to data processing or data use. In the case of further processing for other purposes than the ones for which the data were originally collected, we will inform you about these other services and provide you with all other significant information before further processing.

Cookies

Our Internet pages use cookies in several locations. Cookies are small text files that are stored on your computer and are saved by your browser. They are used to make our Internet pages more user-friendly, effective, and secure.
As such, they enable the technical implementation of a user session for a password-protected download area. At the same time, these cookies provide information which enables us to optimize our websites in line with user requirements, e.g., direct links to localized websites by entering the Internet address www.x-stuff.de.
The majority of cookies used by us are session cookies. These are automatically deleted once you exit our website. Some cookies are used which are saved for a longer period of time. The maximum storage period of a cookie can be up to one year, for example, when saving your preferred language on our website.
All cookies on our websites contain purely technical information in a pseudonymzed or anonymized format, with no personal data.
If you want to prevent cookies from being saved, in your browser settings select “Do not accept cookies”. If cookies are not accepted by the browser, the scope of functions of our websites may be severely limited. A number of functions are then no longer available.

Supplementary notes regarding use and circulation of personal data

X-STUFF may be forced to disclose your data and corresponding details by order of a judicial or regulatory action. We also reserve the right to use your data to assert a claim or to defend against legal claims. In compliance with applicable law, we reserve the right to save and pass on personal data and any other data in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, and violations of X-STUFF 's terms and conditions of use.
Secure Internet communication
We make every effort to ensure that your personal data is transmitted and saved utilizing technical and organizational measures, in such a way that it is not accessible to third parties.
As a general rule, the Internet is regarded as an insecure medium. In contrast to a telephone line, for instance, transmission of data on the Internet can be more easily wiretapped, recorded or even modified by unauthorized third parties. To ensure the confidentiality of communications with you, we use AES 256-bit SSL encryption for specific functions (login, etc.). The encryption used by us is regarded as secure, based on the latest technological advancements. Operating systems and browsers from earlier versions also achieve this security level. If necessary, you should update the operating system and browser on your PC to enable the use of this high-grade encryption.
When communicating via e-mail in an unencrypted manner, complete data security cannot be guaranteed, so we recommend using the postal service for confidential information.
Update of this data protection statement

If X-STUFF launches new products or services, alters its Internet procedures or if the Internet and electronic data processing security technology is further developed, the data protection statement shall be updated. We therefore reserve the right to alter or modify this statement as required. The revision will be published here.

Rights concerning the processing of personal data.
Right of access

On request, you have the right to obtain information from us about the personal data concerning you and processed by us, to the extent defined in Art. 15 GDPR. You can send your request either by mail or email to the addresses given below.

Right to rectification

You have the right to require us to rectify any inaccurate personal data concerning you without undue delay (Art. 16 GDPR). For this purpose, please contact the address given below.
Right to deletion

Where the legal reasons defined in Art. 17 GDPR apply, you have the right to immediate deletion (“right to be forgotten”) of personal data concerning you. These legal reasons include: the personal data are no longer necessary for the purposes for which they were processed, or you withdraw your consent, and there are no other legal grounds for processing; the data subject objects to the processing (and there are no overriding legitimate grounds for processing does not apply to objections to direct advertising). To assert your above right, please contact the contact address given below.
Right to restriction of processing

If the criteria defined in Art. 18 GDPR are fulfilled, you have the right to restriction of processing as established in the above article of the GDPR. According to this article, restriction of processing may be called for if processing is unlawful and the data subject opposes deletion of the personal data and requests the restriction of their use instead, or if the data subject has objected to processing according to Art. 21 (1) GDPR as long as it is unclear whether our legitimate interest overrides the interest of the data subject. To assert your above right, please contact the contact address given below.
Right to data portability

You have the right to data portability as defined in Art. 20 GDPR. This means you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another controller, such as another service provider. Prerequisite is that processing is based on consent or a contract, and is carried out using automated means. To assert your above right, please contact the contact address given below.
Right to object

You have the right to object at any time under Art. 21 GDPR to processing of personal data concerning you which is based on Art 6 (1) lit. e or f GDPR, on grounds relating to your particular situation. We will desist from processing your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms, or unless processing is for the establishment, exercise, or defense of legal claims. To assert your above right, please contact the contact address given below.

Right to file a complaint with a supervisory authority

If you think that processing of personal data concerning you and carried out by us is unlawful or impermissible, you have the right to file a complaint with the supervisory authority responsible for us.

Amendment of this data privacy statement

The current version of this data privacy statement can always accessed at www.x-stuff.de.
X-STUFF
Data Controller
Karl-Marx-Damm 89
15526 Bad Saarow
Phone .......+49 033631 59089
E-mail ....... info@x-stuff.de



Version: May 2018