​Request project

​​​Privacy Policy (DSGVO)

​Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This only applies if no other information is provided in the subsequent processing operations. "Personal data" is all information that relates to an identified or identifiable natural person.

Server-Logfiles

​You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or our web host/IT service provider through your Internet browser and stored in protocol data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our offering.

SSL/TLS encryption

To protect the security of your data during transmission, we use current encryption methods such as SSL (Secure Socket Layer) or TLS (Transport Layer Security). You can recognize an encrypted connection by the character string "https://" in the address line of your browser and the lock symbol. This encryption protects the data you transmit from unauthorized access.

Contact

​Responsible

​Please contact us on request. The person responsible for data processing is: Benjamin Wohlrab, Sepapaja tn 6, 15551 Tallinn, Estonia, +49 151 25879258, info@xcorez.com

Proactive contact of the customer by e-mail

​If you contact us by e-mail on your own initiative, we will only collect your personal data (name, e-mail address, message text) only to the extent provided by you. The purpose of data processing is to process and respond to your contact enquiry. If the purpose of contacting you is to take steps prior to entering into a contract (e.g. consultation in the event of an interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right for reasons arising from your particular situation, to object at any time to this processing based on Art. 6 para. 1 lit. f GDPR. processing of personal data concerning you. We will only use your email address to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

​When you use the contact form, we only collect your personal data (name, e-mail address, message text) to the extent that you have provided. The data processing serves the purpose of establishing contact. If the purpose of the contact is to carry out pre-contractual measures (e.g. advice on an interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on Article 6(1)(f) GDPR. We will only use your email address to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use. 

Use of the Contact Form via Formspree

For the transmission of inquiries via our contact form, we use the service Formspree, provided by Formspree, Inc. (132 E 3rd St, Floor 3, New York, NY 10009, USA). When using the contact form, your personal data (e.g., name, email address, message content) is transmitted to Formspree, which forwards the data to us on our behalf.
Data processing is carried out on the basis of Art. 6 (1) lit. b GDPR to process your inquiries, and on the basis of Art. 6 (1) lit. f GDPR due to our legitimate interest in efficient and secure management of the contact forms.
Formspree stores your data only as long as it is necessary for transmission to us. After that, the data is deleted by Formspree. For the USA, there is an adequacy decision from the European Commission (Trans-Atlantic Data Privacy Framework, TADPF). Formspree has certified itself under the TADPF and is committed to complying with European data protection standards.
For more information on how Formspree processes data, please refer to their privacy policy: https://formspree.io/privacy.

Data transfer to third countries

Please note that using Formspree will result in your data being transferred to the USA. The USA is considered a third country with a potentially inadequate level of data protection according to EU standards. In order to ensure an appropriate level of data protection, we have concluded standard contractual clauses with Formspree in accordance with Art. 46 GDPR. However, there is a residual risk that US authorities may access the data. By using the contact form, you agree to the transfer of your data to the USA.

Security of your data

We and our service provider Formspree use technical and organizational measures to protect your data from unauthorized access, loss or destruction. However, complete protection cannot be guaranteed when transmitting data over the Internet.

Collection and processing of applications by e-mail

​Site visitors can apply by e-mail for vacancies advertised on our website. In doing so we collect your personal data only to the extent provided by you. This includes your contact details (e.g. name, e-mail address, telephone number), details of your professional qualifications and training, details of further professional training as well as performance-specific certificates. The data processing serves the purpose of establishing contact and deciding on the establishment of an employment relationship with you. with you. The provision of the data is necessary in order to carry out the application process. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. b GDPR i.V.m. § 26 para. 1 BDSG for the implementation of pre-contractual measures (going through the application process to initiate an employment contract). If you have given us your consent to process personal data for inclusion in our applicant pool, e.g. by ticking a checkbox, the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. is affected. If, as part of the application process, special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants, such as GDPR are requested from applicants, such as information on the degree of severe disability, this is done on the basis of Art. 9 para. 2 lit. b. GDPR, so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this regard. We store your personal data for as long as this is necessary for the decision on your application. Your data will deleted after six months at the latest, unless you have consented to further processing and use. If an employment relationship is established following the application process, the data provided will be processed on the basis of Art. on the basis of Art. 6 para. 1 lit. b GDPR in conjunction with § 26 para. 1 BDSG for the purposes of implementing the employment relationship. and subsequently transferred to the personnel file.

Collection and processing when sending images by e-mail

​You have the option of sending us images by e-mail in connection with the order of a personalised product. When you send us your images, we may collect your personal data (image of an identifiable person) only to the extent provided by you. The purpose of data processing is to create personalised products. The image sent serves as a template for the product and is used for this purpose. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the fulfilment of a contract with you. Your data will not be passed on. We only use the image you send us in the context of providing the service. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

WhatsApp Business

​If you contact us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; ‘WhatsApp’). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). The purpose of data processing is to process and respond to your contact enquiry. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided and other data to the extent provided by you. We use a mobile device for the service, the address book of which only contains data from users who have contacted us via WhatsApp. Personal data will not be passed on to WhatsApp without your prior consent. Your data will be transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself in accordance with the TADPF and has therefore undertaken to comply with European data protection principles. If the contact is made for the purpose of implementing pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in providing a quick and easy way to contact you and to answer your enquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Article 6(1)(f) GDPR. We only use your personal data to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use. You can find more information on terms of use and data protection when using WhatsApp at
https://www.whatsapp.com/legal/terms-of-service-eea and https://www.whatsapp.com/legal/privacy-policy-eea.

Orders

Collection, processing and transfer of personal data for orders

​When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the fulfilment of a contract with you. Your data will be passed on, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.

Plug-ins and other

Use of Google Fonts

​We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’) on our website. The purpose of data processing is to ensure the uniform display of fonts on our website. In order to load the fonts, a connection to Google's servers is established when the page is accessed. Cookies may be used for this purpose. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account. Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has therefore undertaken to comply with European data protection principles. The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information on data processing and data protection at https://policies.google.com/?hl=de&gl=de​ and https://developers.google.com/fonts/faq?hl=de.

Use of Adobe Fonts

​We use Adobe Fonts from Adobe Systems Software Ireland Limited (4-6 Riverwalk Citywest Business Campus, Dublin 24, Ireland; ‘Adobe’) on our website. The purpose of data processing is the standardised display of fonts on our website. In order to load the fonts, a connection to Adobe servers is established when the page is accessed. Cookies may be used for this purpose. Among other things, your IP address and information about the browser and operating system you are using are processed and transmitted to Adobe. Your data may be transferred to third countries such as the USA and India. There is no adequacy decision by the EU Commission for India. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Adobe has certified itself in accordance with the TADPF and has therefore undertaken to comply with European data protection principles. The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information on data processing and data protection at https://www.adobe.com/de/privacy/policy and under https://www.adobe.com/de/privacy/policies/adobe-fonts.

Use of FontAwesome

​We use Font Awesome from Fonticons Inc (307 S Main St., Suite 202, Bentonville, AR, 72712-9214 USA ‘Font Awesome’) on our website. The purpose of data processing is to ensure the uniform display of fonts and icons on our website. To load the fonts, a connection to FontAwesome servers is established when the page is accessed. Cookies may be used for this purpose. Among other things, your IP address and information about the browser you are using will be processed and transmitted to Font Awesome. Your data may be transferred to third countries, such as the USA. An adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Font Awesome is not certified under the TADPF. The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information on data processing and data protection at https://fontawesome.com/privacy and under https://fontawesome.com/support.

Data subject rights and storage duration

Storage period of personal data

We only store your personal data for as long as it is necessary for the respective purposes or as required by law. As soon as the purpose of data processing no longer applies and there are no longer any statutory retention periods, the data will be deleted.

In concrete terms, this means:
Data from contact forms or email inquiries: These will be deleted as soon as your request has been fully processed and no further communication is required.
Server log files: These are usually deleted after 30 days, unless there are legal retention obligations.
Data within the scope of statutory retention periods: Certain data must be stored for a specified period of time due to legal requirements. After these periods have expired, they are deleted accordingly.

Rights of the data subject

​If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability. You also have the right to object to processing based on Article 6(1)(f) GDPR and to processing for the purposes of direct marketing in accordance with Article 21(1) GDPR.

Right to lodge a complaint with the supervisory authority

​In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully.

​You can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details:

​Andmekaitse Inspektsioon
Tatari 39
10134 Tallinn
Estland
Tel.: +372 627 4135
E-Mail: info@aki.ee
Website: https://www.aki.ee

Right of objection

​If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation. Once you have objected, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

​last update: 29.11.2023