Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Email: info@xcustomshh.de
Phone: +49 178 3363340

2. General information about data processing

We process personal data only to the extent necessary to provide this website, to handle enquiries and to communicate with prospective and existing customers.

Personal data is any information by which a person can be identified directly or indirectly, for example name, email address, telephone number or IP address.

Processing takes place in particular on the basis of Art. 6(1)(b) GDPR, where it is necessary to take steps prior to entering into a contract or to perform a contract, and on the basis of Art. 6(1)(f) GDPR, where there is a legitimate interest in the secure and functional operation of this website.

3. Hosting through Vercel

This website is provided using services of Vercel Inc.

When the website is accessed, technically necessary connection and usage data may be processed. This may include in particular:

• IP address
• date and time of access
• page or resource accessed
• browser type and operating system
• technical device and connection information
• error and diagnostic data

The processing serves to provide the website securely, reliably and with good performance.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

Where personal data is processed outside the European Union or the European Economic Area, this is done in compliance with the applicable data protection requirements and appropriate safeguards.

4. Server and security logs

Server and runtime logs may be created to ensure technical operation.

This data is used in particular for:

• error analysis
• the prevention of misuse
• ensuring technical availability
• the investigation of security-related events

As things currently stand, this data is not combined with other data sources for advertising or profiling purposes.

The legal basis is Art. 6(1)(f) GDPR.

The data is processed only for as long as is necessary for the respective technical or security-related purpose, or for as long as statutory obligations exist.

5. Appointment request and contact form

You can submit an appointment or project request on our website.

In doing so, the following data in particular may be processed:

• name
• email address
• telephone number
• vehicle or vehicle model
• selected service
• preferred date or period
• content of your message

Some fields are optional. Mandatory fields are marked accordingly.

The data is used exclusively to handle your request, to contact you and, where applicable, to take steps prior to entering into a contract.

The legal basis is Art. 6(1)(b) GDPR, where the request is aimed at concluding or preparing a contract.

In other cases, processing may be based on Art. 6(1)(f) GDPR, our legitimate interest being the handling of your enquiry.

A time requested via the form does not yet constitute a binding appointment confirmation.

6. Email delivery through Resend

For the technical transmission of requests by email we use Resend, a service of Plus Five Five, Inc.

When you submit an appointment request, the data you have entered is transmitted server-side to Resend so that the message can be delivered to the X CUSTOMS email address designated for this purpose.

In doing so, the following in particular may be processed:

• name
• email address
• telephone number, if provided
• vehicle details
• content of the request
• preferred date
• technical delivery and log data

Our current technical configuration uses:

Sender: termine@xcustoms.de
Recipient: info@xcustomshh.de

The email address of the person making the request is used as the reply address, where available.

Processing in connection with a request takes place on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Where data is processed outside the European Union or the European Economic Area, the data protection safeguards provided for this purpose apply.

7. Direct contact by email or telephone

If you contact us by email or telephone, we process the data you provide in order to handle your request.

This may include in particular:

• name
• email address
• telephone number
• content of the message
• information about your vehicle or project

The legal basis is Art. 6(1)(b) GDPR, where the contact concerns the initiation or performance of a contract.

In other cases, processing takes place on the basis of Art. 6(1)(f) GDPR.

8. Retention

As a rule, personal data is stored only for as long as is necessary for the respective processing purpose.

Requests may in particular be stored for as long as is necessary to handle the matter and to conduct a possible business relationship.

Where statutory retention, evidence or documentation obligations exist, longer storage may be required.

Once the processing purpose no longer applies and statutory periods have expired, the data concerned is deleted, unless there is another legal basis for further processing.

9. Cookies and similar technologies

As things currently stand, we do not use any optional marketing or analytics cookies on this website, nor any comparable tracking technologies for advertising purposes.

In particular, the following are currently not active:

• Meta Pixel
• Google Analytics
• Google Tag Manager for marketing purposes
• session replay services
• personalised advertising trackers

Technically necessary storage or access may be used where it is required to provide the website functions expressly requested by the user.

Should analytics or marketing services be integrated in the future, this Privacy Policy will be updated accordingly before they are activated and, where required, a consent solution will be set up.

10. Language selection

The website is available in German and English.

The selected language is determined primarily by the URL accessed.

German: https://xcustoms.de/
English: https://xcustoms.de/en

As things currently stand, switching the language does not involve any processing for advertising or profiling purposes.

Should local storage of the language preference be used in the future, this technical processing is to be reflected accordingly in this Privacy Policy.

11. External links

Our website may contain links to external websites or social networks.

Merely accessing our website does not cause any content from the respective third-party provider to be loaded automatically through ordinary external links.

Only when you select such a link do you leave our website. The subsequent data processing is governed by the terms of the respective provider.

12. No automated decision-making

As things currently stand, no automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

13. Recipients of personal data

Where necessary for the respective purposes, personal data may be transmitted in particular to the following categories of recipients:

• hosting and infrastructure service providers
• email delivery service providers
• technically integrated processors
• authorities or other bodies, where there is a statutory obligation to do so

As things currently stand, data is not passed on to third parties for their own advertising purposes.

14. International transfers

The use of individual technical service providers may involve the processing of personal data outside the European Union or the European Economic Area.

Where required, appropriate safeguards within the meaning of the GDPR are relied upon, for example applicable adequacy decisions or standard contractual clauses.

15. Your rights

Subject to the statutory requirements, you have in particular the following rights:

• access to your personal data
• rectification of inaccurate data
• erasure
• restriction of processing
• data portability
• objection to certain processing
• withdrawal of any consent given, with effect for the future

A withdrawal does not affect the lawfulness of processing carried out up to the time of the withdrawal.

To exercise your rights, you can contact:

info@xcustomshh.de

16. Right to object

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

In the event of a justified objection, the personal data concerned will no longer be processed on this basis, unless there are compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defence of legal claims.

17. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

In particular, you can contact the data protection supervisory authority responsible for the controller.

18. Security

We use appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access or unauthorised disclosure.

The measures used are adapted in line with the state of the art and the respective risk.

19. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if technical functions, service providers used or legal requirements change.

The current version published on this website applies.