In the following we inform about the collection of personal data when using our website. Personal data is all data that is personally attributable to you, eg. name, address, e-mail addresses, user behavior.
The controller pursuant to Article 4 (7) General Data Protection Regulation (GDPR) is XI-MACHINES GmbH, Lokstedter Steindamm 35, 22529 Hamburg/Germany
Phone: +49 (0)40 4666675-0
Email:
Website: www.xi-machines.com/en
Our Data Protection Officer can be contacted at or by writing to us and addressing your letter c/o “The Data Protection Officer“.
If, to provide individual functions of our offer, we make use of any contracted service providers or if we would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify criteria for how long we store your data.
Your rights
You are entitled to the following rights towards us regarding your personal data:
Right to information,
Right to rectification or deletion,
Right to restriction of processing,
Right to object to the processing,
Right to data portability.
To exercise your rights, you can contact the controller or the Data Protection Officer, using the above contact details.
You also have the right to complain to the data protection supervisory authorities about our processing of your personal data.
Objection against the processing of your data or withdrawal of consent
If you have given your consent to the processing of your data, you have the right to withdraw this consent at any time. Such withdrawal of consent influences the permissibility of processing your personal data after you have given it to us.
If we base the processing of your personal data on the pursuit of our legitimate interests, you have the right to object to such processing. This is the case if the processing is not necessary for the performance of a contract to which you are a party, but for other purposes, details of which we will provide in the description of those processes. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in that manner. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, which form the basis of the processing.
Collection of personal data when you visit our website
When you visit our website for information purposes only, i.e. if you do not register or otherwise provide information to us, we only collect the personal data that your browser transmits to our server. When you visit our website we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (the legal basis being Article 6(1) 1 lit. f GDPR):
IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Website transmitting the request
Websites accessed by the user's system via our website
Bytes downloaded
Browser
Operating system and interface
Language and version of the browser software.
The above data will be stored in a so-called log file for a period of 7 days, after which it will be deleted. In case of any malevolent or criminal access, we reserve the right to store said data for further evaluation for a period of up to one month.
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that your browser stores on your hard drive which transmit certain information back to the initiating entity (in this case, us). Cookies cannot run programs or transmit viruses to your computer. They are widely used in order to make websites function properly as well as to improve their user-friendliness and effectiveness.
Use of cookies:
This website uses the following types of cookies; the scope and functioning of which are explained below:
Transient cookies (see 4.3.2)
Persistent cookies (see 4.3.3).
Transient cookies (notably session cookies) are automatically deleted when you close your browser. They store a so-called session ID, with which different requests of your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. Session cookies also include the cookies that we use to ensure the correct display of our website on the device used by you. Session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
Contacting us by e-mail
When you contact us by e-mail, we will store the data you provide (your e-mail address and - where applicable - your name, telephone number and your message) in order to answer your query. Once storage is no longer necessary, we will delete all data collected with regard to your query or limit processing of your data to comply with any legal obligation we are subject to.
We will process said data to respond to your request. Said processing is based on a contractual basis (Article 6 (1)1 lit. b GDPR) as far as issues regarding your purchase of our products are concerned. With regards to general customer service and answering of your queries, said processing takes place for the purposes of our legitimate interests (Article 6 (1)1 1 lit. b GDPR), as it enables us to provide a satisfactory customer service.
Newsletter
If you consent to receiving our newsletter, we will keep you posted about new and special sales.
We use the so-called double opt-in procedure for our newsletter subscription. This means that we will send you a confirmation e-mail after receiving your registration. In this e-mail we will ask you to confirm that you do in fact want to receive our newsletter. If you do not confirm your subscription, your e-mail address will not be added to our list. In addition, we will store the IP addresses used for and the time and date of your registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. Our legitimate interests result from the aforementioned purpose. The legal basis is Article 6 (1) 1 lit. f GDPR.
After receiving confirmation from you, we will store your e-mail address and, if voluntarily given, your name, for the purpose of sending you the newsletter. The legal basis is Article 6 (1) 1 lit. a GDPR.
With your consent we will track your user behaviour in relation to our newsletter. This means that we can track whether you open the newsletter e-mails we send and how often and on which links you have clicked in the newsletter e-mails we send. We do this to optimize the content of the newsletter and to provide you with information and offers that are of interest to you. This is a legitimate interest, the legal basis is Article 6 (1) 1 lit. f GDPR.
You may withdraw your consent to receiving our newsletter and to the related evaluation of your user behaviour at any time. Simply click on the appropriate link provided in every newsletter e-mail, or write to us at
or by sending a message to the contact details stated in the imprint.
We will delete your consent details, your e-mail address and any other corresponding user data when you withdraw your consent.
We use MailChimp to administer and send our newsletter. MailChimp is a service of The Rocket Science Group LLC and a provider from the USA. The Rocket Science Group has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. When you access the registration site for our newsletter and consent to receiving it, the data you provide will be transferred to MailChimp. In addition, the IP address used for registering as well as the time and place of your registration will be stored. This integration of MailChimp takes place so that we can provide you with the possibility to consent to receiving our newsletter and to therefore the above-mentioned content, as well as to document your consent and, if necessary, to trace how this was granted in the case of any queries. Our interests arise from the aforementioned purpose. The legal basis is Article 6 (1) 1 lit. f GDPR. The obligation of MailChimp to handle your data according to the GDPR and to take suitable technical and organisational measures for data security has been specified in a data processing agreement. For any further information we kindly ask you to refer to the data protection regulations provided by MailChimp: https://mailchimp.com/legal/privacy/
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", i.e. text files that are stored on your computer, to help analyse how users use the website. The information generated by the cookie about your use of this website is habitually transferred to a Google server in the US and stored there. However, if IP anonymization is activated on this website, your IP address will be truncated by Google within European Union member states and other signatories to the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the US and truncated there. Google will use this information on our behalf to evaluate your usage of our website, to compile reports on website activity and to provide us with further services regarding website and internet usage.
The IP address supplied by your browser within the scope of Google Analytics will not be combined with other Google data.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. You can also prevent Google from collecting and processing data relating to your use of our website (including your IP address) by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en .
Opt-out cookies will prevent the future collection of your data when you visit this website. To prevent Google Analytics from collecting your data across different devices, you must opt-out on all systems used. If you click here, the opt-out cookie will be set: Deactivate Google Analytics
This website uses Google Analytics with the extension “_anonymizeIp()". As a result, IP addresses are processed in abbreviated form, so that any personal reference is excluded. As far as any data collected can be attributed to you, any such personal reference will be excluded immediately, resulting in this personal data being deleted.
The data collected by Google Analytics will be deleted after 14 months.
We use Google Analytics to analyse and continually improve the use of our website. The resulting insights and statistics help us to provide you, the user, with better and more interesting content and service. For those exceptions where personal data is transmitted to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework. The legal basis for the use of Google Analytics is Article 6 (1) 1 lit. f GDPR, in as much as our legitimate interests arise from the pursuit of the aforementioned purposes.
Third Party Information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
This website uses Google Fonts to integrate fonts. Google Fonts is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US,. To display our site, Google servers are called up, namely fonts.googleapis.com and fonts.gstatic.com. In order to display those fonts on our site as quickly and efficiently as possible, such requests are stored by Google resulting in fonts and preferences being cached by your browser. The use of Google Web Fonts follows from our interest in a uniform and appealing online presentation of our services. This represents a legitimate interest within the scope of Article 6 (1) 1 lit. f GDPR. With regard to the transfer of personal data to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. More information about Google Fonts and privacy can be found here: https://developers.google.com/fonts/faq [...]
Google Maps
Some pages of this website use Google Maps to depict interactive maps and generate directions. This allows us to provide you with these maps directly on our website and with a convenient way to use the map function. Google Maps is a map service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US.
If you access a web page which includes Google Maps within our online presentation, your browser establishes a direct connection with Google’s servers. Google thus receives information about your visit of the corresponding subpage of our website. Additionally, the data mentioned under point 4.1 of this policy will be transmitted. This takes place regardless of whether Google provides a user account that you are logged in with or whether no such user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the function. Google will store your data within a usage profile and use it for purposes of advertising, market research and/or demand-oriented design of its website. Your data will thus be evaluated (even that of users who are not logged in), notably to provide demand-oriented advertising and to inform other users of Google’s social network about your activities on our website. You have the right to object to the creation of such user profiles, however you must contact Google to exercise this right.
Regarding the purpose and scope of this data collection and the further processing and use of this data by Google as well as your rights in this regard and any option settings to protect your private sphere, please consult the Google privacy policy: https://policies.google.com/privacy. Google will partially process your data in the US and has submitted to the EU-US Privacy Shield framework, https://www.privacyshield.gov/EU-US Framework
Embedded YouTube videos
We have embedded YouTube videos within our website. These are stored on http://www.youtube.com and can be viewed directly from our website. The videos have been embedded using the so-called extended date protection mode. This means none of your user data will be transmitted unless you play these videos. Data specified under paragraph 2 will be transmitted only upon playback of one of these videos. We have no influence on the scope of data collected by YouTube in this manner.
Upon playback of these videos YouTube will receive information about your visit on the corresponding subpage of our website. Furthermore, the following data will be transferred
IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Website transmitting the request
Websites accessed by the user's system via our website
bytes downloaded
Browser
Operating system and interface
Language and version of the browser software.
This takes place regardless of whether YouTube provides a user account that you are logged in with or whether no such user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the function. YouTube will store your data within a usage profile and will use it for purposes of advertising, market research and/or demand-oriented design of its website. Your data will thus be evaluated (even that of users who are not logged in), notably to provide demand-oriented advertising and to inform other users of Google’s social network about your activities on our website. You have the right to object to the creation of such user profiles, however you must contact YouTube to exercise this right.
The integration of these videos allows us to provide these videos to you, whereby this provision is deemed to be in our legitimate interest. The legal basis for the provision of these videos is Article 6 (1) 1 lit. f GDPR.
Regarding the purpose and scope of said data collection and further processing and use of this data by YouTube, as well as your rights and optional settings with regard to the protection of your privacy, please consult the Google privacy policy:https://policies.google.com/privacy. Google will partially process your data in the US and has submitted to the EU-US Privacy Shield framework, https://www.privacyshield.gov/EU-US-Framework.
Additional Information on the handling of personal data as part of a job application
We are pleased that you are taking an interest in us and in applying for a position in our company. Here we would like to provide you with information on the processing of your personal data in connection with your job application.
You may apply by contacting us at . We recommend sending the documents in an encrypted email. We strongly recommend encrypting the documents attached to your e-mail by using a data compression program such as 7Zip and forwarding the password to us by phone.
We will process any information sent by you in connection to your job application in order to assess your suitability for the position (or any other open positions in our companies) and to carry out the subsequent application process.
Primarily, our legal basis for the processing of your personal data with regards to this application procedure is § 26 BDSG (version valid from 25.05.2018). Thereafter, any processing of data which is necessary in connection with our decision to establish an employment relationship is permitted.
Should any data be necessary for legal prosecution after completion of the application procedure, data may be processed on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard our legitimate interests pursuant to Art. 6 (1) 1 lit. f GDPR, these interests being the assertion of or defence from any claims.
In the event that we should turn down your application, your data will be deleted within 6 months at the latest. If, however, the application process results in you taking up employment with us, we will transfer your data from our application process over to our human resources data.
If you have expressly consented to the further storage of your personal data, we will add your data to our database of applicants, where it will be stored and deleted after two years.
Social Media Profiles
We maintain a company profile on the following social networks and platforms: Facebook, Twitter. We maintain these profiles in order to communicate with our customers, users and interested parties and in order to provide further information about our products and activities. In the case of any messages or contributions we receive on these profiles, we will process your data to enable us to communicate with you. This is a legitimate interest; the legal basis is Article 6 (1) 1 lit f GDPR. No further storage of this communication takes place outside of these networks on our part. The terms and conditions of the platform operators apply. Regarding the purpose and scope of said data collection and further processing and use of this data by the operators of these social platforms, as well as your rights and optional settings with regard to the protection of your privacy, please refer to the respective privacy statements: https://www.facebook.com/about/privacy https://twitter.com/de/privacy
