Privacy

Data controller

Email: info@xsigns.de
Phone: +49 4231 9033900

Hosting and server logs

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Technical connection data is processed whenever you visit so that the website can be delivered and operated securely. Hetzner may process this data as our hosting provider.

Server logs include the IP address, date and time, requested address including submitted URL parameters, HTTP status, amount of data transferred, and browser-supplied information about the browser and referring page. Error logs may contain additional technical details about failed requests. Processing serves delivery, troubleshooting and abuse prevention under Article 6(1)(f) GDPR.

Logs are rotated based on size: the rotation check uses a threshold of 10 MiB per log file, and up to ten archived files are retained for each log. Retention therefore depends on the volume of requests and log entries. No fixed deletion period in days is configured for these logs.

Hetzner privacy information

Contact form, email and telephone

When you contact us, we process the contact details and information you provide to handle your enquiry. The contact form requires your name, email address and message; your company name is optional. The form cannot be submitted without the required details. Use of the form is voluntary; you can also contact us by email or telephone.

Form messages are sent through our server by email to info@xsigns.de. Your email address is used as the reply address. The form does not store messages in a separate website database; they are processed as part of email correspondence. Access is available to the people handling your enquiry and the technical providers involved in hosting and email operation.

Messages sent to info@xsigns.de are also forwarded to our Zendesk support system and processed there to handle your enquiry. Zendesk receives your contact details and message content. Zendesk operates internationally; processing outside the European Economic Area, particularly in the United States, is possible. Information about Zendesk’s safeguards for international data transfers is available in the data processing agreement linked below.

For enquiries concerning a contract or steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR; our legitimate interest is communicating appropriately and responding to your request. Retention depends on handling the enquiry, necessary records and statutory retention requirements. Data is deleted once its purpose has ended and no further retention obligation applies.

Zendesk: data processing and international transfers

Protecting the contact form

To protect against automated or repeated submissions, the form checks technical request information and uses short-lived security identifiers. The server stores an IP address hashed with a secret key, attempt counters and hashes of used form tokens for this purpose. This protection data contains no message content. No external CAPTCHA services are loaded.

Attempt counting uses a 15-minute window; reuse of consumed tokens is blocked for 30 minutes. Expired entries are removed during a subsequent successful update of the protection file. If there is no further form activity, expired entries may remain stored until that update. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in protecting the form and email operation.

Colour scheme and local storage

The website initially follows your device’s light or dark setting. If you change the colour scheme yourself, your choice is stored under “xsigns-theme” in your browser’s local storage. Only “light” or “dark” is stored, with no visitor identifier. The setting is not sent to our server and remains until you change it or delete the website data in your browser. Language selection uses the page address and does not require a stored language preference.

Storage is used solely to retain the display option you expressly selected (section 25(2)(2) TDDDG). To the extent that personal data is processed, the basis is Article 6(1)(f) GDPR and our interest in providing your chosen display setting.

Local content and external links

This website uses no analytics or marketing cookies and no tracking services. Fonts, images and icons are served from our own web server. No external maps, videos, social media widgets or remotely loaded fonts are embedded.

Simply displaying this website does not connect to the providers linked from our product and other external links. When you open a link, the destination website processes your connection data according to its own privacy notice.

Transmission security

The website connection is encrypted with HTTPS. This protects the transfer of your form entries between your browser and our web server. It does not automatically provide end-to-end encryption for email communication.

Your rights

Subject to the applicable legal requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on your consent, you may withdraw it at any time with effect for the future. Please use the contact details above for privacy requests.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation (Article 21 GDPR). We will then stop processing the data concerned unless we demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), particularly where you live or work or where the alleged infringement occurred. The State Commissioner for Data Protection of Lower Saxony is a competent contact for our company.

The website does not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

Lodge a complaint with the Lower Saxony authority