Privacy Policy
Collection, processing and use of personal data
It is generally possible to use our website without providing personal data.
If personal data is processed, you will find detailed information on data processing in this privacy policy.
Name and address of the responsible persons
XANTARA GmbH
Represented by the managing directors Andrea Tafel, Klaus Tafel
Prinzregentenstr. 5
83022 Rosenheim
Germany
Tel: +49 (0)8031 61478-0
Fax: +49 (0)8031 61478-20
e-Mail: service@xantara.eu
Name and address of the data protection officer
Christina Tafel,
Business Lawyer LL.M.
+49 8031 614780
datenschutzbeauftragter@xantara.eu
You can contact our data protection officer at any time with questions or concerns.
Contact form and E-Mail-Reception
The use of the contact form is optional. The entered data will be processed exclusively for the purpose of processing your request. The data will not be passed on to third parties.
The entered data is transmitted via a secure connection (TLS/SSL encryption).
The legal basis for such data processing is Article 6 (1 1) (a, b and c) GDPR.
The data will be processed exclusively for the purpose of answering your enquiry and will be kept for the duration of the statutory retention obligation (6 years under Section 257 (1) No. 2, (4) of the German Commercial Code (HGB)), insofar as it involves commercial correspondence. You can revoke your consent at any time by sending us a simple e-mail if the entered data is not required to fulfil the contract or to implement pre-contractual measures. If you do not withdraw your consent, your request will be deleted after 6 years at the latest, starting from the end of the year in which your request was received.
Cookies
Our website uses cookies to make the website available and analyse access to the website. Cookies are small text files that are stored on your computer and contain information about your visit. Further information on cookies can be found here (https://en.wikipedia.org/wiki/HTTP_cookie.).
We distinguish between necessary and non-necessary cookies. Necessary cookies are those that are absolutely necessary for the provision of the website within the meaning of Art. 5 para. 3 of Directive (EU) No. 2002/58 (ePrivacy Directive). These necessary cookies are set automatically. For cookies that are not necessary, we ask for your consent.
We use the following cookies:
| Cookie name | Type of cookie (necessary or not necessary) | Function | Duration of storage |
|---|---|---|---|
| PHPSESSID | Necessary | Retains the user's states for page requests | Until session is closed |
| PersistentSession | Necessary | Retains the user's states for page requests | 3 months |
| cookieconsent_status | Necessary | Saves your consent status for cookies on our domain | 1 year |
| _gid | Not necessary | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 1 day |
| _gat; | Not necessary | Used by Google Analytics to limit the request rate | 1 day |
| _ga | Not necessary | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 2 years |
The legal basis for the processing of necessary cookies is Art. 6 para. 1 subpara. 1 lit. f GDPR (legitimate interests) and Art. 5 para. 3 Directive (EU) No. 2002/58. The legitimate interest consists in offering a website. The legal basis for the processing of non-essential cookies is your consent (Art. 6 para. 1 UAbs. 1 lit. a GDPR, Art. 5 para. 3 RL (EU) No. 2002/58).
You can revoke your consent at any time with effect for the future by going to the homepage (https://www.xantara.eu) and setting the cookie settings (at the top left) there to only necessary cookies.
You can configure your browser so that it does not accept cookies or so that they will be deleted after a specified time. You can also delete existing cookies via the browser itself. Please visit your browser's help pages to do so.
Google Analytics
If you have consented to the setting of all cookies, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer to assist with analysing your use of the website. The information generated by the cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. We would like to point out that Google Analytics on our website has been extended by the code "anonymizeIp" to guarantee anonymised collation of IP addresses (so-called IP masking). Your IP address will thus be abbreviated within Member States of the European Union or in other States party to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and abbreviated there. Google will use this information on behalf of the operator of our website to evaluate your use of the website, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by appropriately configuring your browser software; we would however point out that in this case you may not be able to use all our website's functions to their full extent.
Further information on terms of use and data protection can be found at
- http://www.google.com/analytics/terms/gb.html
- https://www.google.com/intl/en/policies/privacy/partners/
- https://policies.google.com
The legal basis for data processing is Art. 6 para. 1 UAbs. 1 lit. a GDPR.
We have concluded a contract on commissioned processing pursuant to Art. 28 (3) GDPR with Google. The data may be transferred to third countries if they ensure a sufficient level of data protection within the meaning of Art. 44 et seq. DSGVO. The data transfer to the USA takes place on the basis of the EU standard contractual clauses.
The storage of the IP address and other personal data only takes place within the scope of the minimum period of Google Analytics, which is 14 months.
You can revoke your consent at any time with effect for the future by going to the homepage (https://www.xantara.eu) and setting the cookie settings (at the top left) there to only necessary cookies.
Server-Log-Files
The web server automatically collects and stores information in so-called server log files, which your browser automatically transfers to the web server. These are:
- Visited website
- Time at point of access
- Amount of transmitted data in bytes
- Source/ reference from which the site was accessed
- Browser used
- Operating system used
- IP address used
The data collected is only used for statistical analysis and to improve the website. We reserve the right however, to subsequently check the server log files if there are concrete indications of illegal use.
The legal basis for such data processing is Article 6 (1 1) (f) GDPR. The legitimate interests lie in website defect analysis and to enable prosecution in the event of denial of service attacks.
Data processing for orders via the online shop
The data you enter when ordering via the online shop is processed for the purpose of concluding the contract and delivery, as well as for the fulfilment of statutory retention obligations.
The legal basis for the processing is Art. 6 para. 1 UAbs. 1 lit. b) GDPR (contract performance) and Art. 6 para. 1 UAbs. 1 lit. c) GDPR in conjunction with. § 257 HGB (German Commercial Code), § 147 AO (German fiscal code) (fulfilment of statutory retention obligations).
The data will be deleted as soon as there are no more contractual claims and no more statutory retention obligations, thus usually after 10 years at the latest.
Applications
If you apply to us by e-mail, your personal data will be processed for the purpose of handling your application. The legal basis is § 26 BDSG (Federal Data Protection Act) (data processing for the purpose of the employment relationship) as well as Art. 6 para. 1 UAbs. 1 lit. f) GDPR (legitimate interest). Your data will be deleted six months after your application has been rejected. We have a legitimate interest in retaining the data for a period of six months even after your application has been rejected in order to be able to defend against claims under the General Equal Treatment Act (AGG).
You have the right
- according to Art. 15 GDPR to request information about your personal data processed by us.. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to request the correction of inaccurate or incomplete personal data we hold about you;
- in accordance with Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- according to Art. 18 GDPR to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;
- according to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible person;
- according to Art. 7 Para. 3 GDPR to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future;
- according to 21 GDPR to object to the processing of your personal data if there are grounds for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation. You have the possibility to inform us of the objection formless by telephone, by e-mail, by fax or to our address listed at the beginning of this data protection declaration and
- to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose; you can find an overview of the supervisory authorities here
(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html);
the supervisory authority responsible for us as a rule is
Bavarian State Office for Data Protection Supervision
Promenade 27 (Castle)
91522 Ansbach
Telephone: 0981/53-1300
Fax: 0981/53-5300
E-mail: poststelle@lda.bayern.de
Homepage: http://www.lda.bayern.de
Status of the data protection declaration: 01.03.2021