PRIVACY POLICY OF INDECA 4D GMBH

The basis of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). Therefore we would like to inform you,

• When and for which actions we process data
• Which data we process and why
• Who receives data
• Which rights you have because of the data processing by us.

This data protection declaration only regulates the use of personal data on our website https://xrgo.io including the sub-pages (hereinafter: “website”). If you leave our website via a link or visit our presence on a social media platform, you also leave the scope of this data protection declaration.

The transmission of information to or from this website is secured with TLS encryption.

You can call up, print out or download this data protection declaration permanently and at any time at https://xrgo.io/privacy-policy

I. Contact information

The person responsible for data processing within the framework of this website within the meaning of the Basic Data Protection Ordinance (DSGVO) is

Phone: +49 7131 79990
Mail: contact@xrgo.io

II. general information on data processing

1. scope of processing of personal data

The provision of the website requires the processing of various information. In addition, the extent of data processing depends on your use of the functionalities of the website, for example if you communicate with us via the contact form or consent to the processing of data. You are not obliged to provide us with personal data. However, to the extent that the provision of this data is technically imperatively connected with the access to our website, refusal to do so will prevent you from entering and using our website. As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 DSGVO.

2. legal basis for the processing of personal data

The legal basis for the processing of personal data is described below.

Processing reason	Legal basis in the DSGVO	Explanation
Performance of contract or implementation of pre-contractual measures	Art. 6 para. 1 b)	Processing shall only take place to the extent necessary for the exercise and fulfilment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data processing by us shall only take place to this extent.
Legitimate interest	Art. 6 para. 1 f)	A processing takes place, as far as we have a justified interest and no conflicting predominant interests of the concerning person are evident. The concrete interest is explained in this data protection declaration in the context of the processing representation.
Consent	Art. 6 para. 1 a)	Processing takes place if you have expressly agreed to the type and scope of data processing. You can revoke your consent at any time with effect for the future. However, the processing carried out up to this point in time will not be affected by this.
Legal obligation	Art. 6 para. 1 c)	A processing takes place, as far as this is necessary for the fulfilment of German or European legal obligations.

3. data erasure and storage duration

We will delete your personal data as soon as the legal basis for its processing no longer applies. In some cases, however, legal bases may exist in parallel or, if a legal basis no longer exists, a new one may intervene, such as, for example, the obligation to store certain data in order to fulfil a statutory storage obligation.
III. data processing for the provision of the website

In order for us to display the website to you, it is necessary to process certain information. This already happens when you access our website. In addition, we offer various functions on our website that require further data processing.

1. log files

When you visit our website, your browser sends various information, so-called server log files, to our server. We need these to establish and maintain the connection. This data also includes your IP address, which we treat as a personal date. In addition, the following data is collected:

• Connection data of the requesting computer
• IP address
• The identification data of the browser and operating system type used,
• the pages you visit on our site
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• Date of your visit

This data will not be merged with any other data about you. The storage of the log files including your IP address serves the legitimate interest of the provision of our website and the prevention of its misuse. Stored log files are deleted after 30 days at the latest, unless a longer storage period is necessary, for example to fend off or clear up an attack on our website.

2. technical cookies

We use cookies to establish and maintain the connection. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. Cookies may be necessary for establishing a connection or improving the use of the website.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
The use of technically required cookies and the associated data processing is based on our justified interest in a technically flawless and comfortable use of our website. Technical cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage duration of persistent cookies is determined by the provider and can be viewed by you in your browser, for example.

3. contact form

You can use the contact form on our website to send us an enquiry at any time. The following information will be requested:

• salutation
• name
• email address

The data are marked as mandatory fields. All other data which you transmit to us within the scope of the inquiry are voluntary.
We use these data exclusively for answering your inquiry and the communication connected with it. The legal basis for this processing of your data depends on the content of your request. In principle, our legitimate interest in providing the contact functionality and the response to your query transmitted via it applies here. If your inquiry is directed to the conclusion of a contract with us, the processing takes place within the framework of this pre-contractual obligation.
Your data will be deleted as soon as your request has been processed. In the event that a contract is concluded, we may process the data further to fulfil the contract.

IV. Usage analysis and tracking

We would like to further improve the usability of this website and the attractiveness of its services. For this reason, when you visit our website, we also collect data on user behaviour which we evaluate for this purpose. Therefore, in addition to the technically required cookies shown above, the tracking and analysis cookies shown below are also used on our website.
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google uses a cookie to collect information about your use of the website (including your IP address) in the United States and to store that information. However, we use Google Analytics exclusively with an anonymization function, in which the IP address is shortened by Google before transmission within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. Google analyses the information collected and provides us with reports on usage activities on our website and provides us with further services in this respect. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
In addition to blocking all cookies by your browser, you can prevent Google from processing your data by downloading and installing the browser plug-in available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser plug-in or within browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent Google Analytics from collecting cookies from this site in the future (this opt-out cookie only works in this browser and only for this domain, delete your cookies in this browser, you must click this link again): Disable Google Analytics
For more information about Google Analytics, please see Google’s privacy statement:
https://support.google.com/analytics/answer/6004245?hl=d.

V. Possibility of opposition and removal

If the data processing is based on your consent or our legitimate interest, you have the right at any time to object to the processing or to revoke your consent. Your objection or revocation has only effect for the future. If the analysis cookies used offer their own technical possibilities for deactivation, this is shown there. You can contact hello@4d.gmbh at any time to exercise your right of objection or revocation. If you object to a processing based on our legitimate interest, we may nevertheless continue the processing if we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms.

VI. Rights of data subjects

If data relating to your person are processed, you are the data subject within the meaning of Art. 4 Para. 1 DSGVO. As a data subject, you are entitled to the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details given above.
Right to information according to Art. 15 DSGVO

You have a right to information about your personal data processed by us. This includes the mandatory information set out in Art. 15 DSGVO.
Right to rectification pursuant to Art. 16 DSGVO
You have the right to have false personal data corrected without delay and to complete inaccurate personal data.
Right to deletion according to Art. 17 DSGVO

You have the right to demand the deletion of your personal data if one of the reasons stated in Art. 17 DSGVO applies, in particular if there is no longer a legal basis for the processing.
Right to limitation of processing pursuant to Art. 18 DSGVO
You have the right to demand the restriction of the processing of your personal data if one of the reasons stated in Art. 18 DSGVO applies, in particular at your request instead of deletion of the data.
Right to data transfer pursuant to Art. 20 DSGVO

You have the right to request that all personal data we hold about you be disclosed to us in a structured, common and machine-readable format and to transfer this data to another responsible person without interference from the responsible person to whom the personal data was provided.
Right of complaint to the competent supervisory authority, Art. 77 DSGVO

Pursuant to Art. 77 DSGVO, you have the right to file a complaint with the supervisory authority responsible for you.

VII. recipient of data

The processing of your personal data within the framework of the website is also partly carried out by contract processors, in particular the hosting of the website and the use of analysis tools. These are included exclusively on the basis of an agreement to an order agreement in accordance with Art. 28 Para. 3 DSGVO.

VIII. Data transfer to third countries

The personal data which we collect from you within the framework of the website will not be transferred to third countries outside the European Economic Area. Only when Google Analytics is used may your IP address be transmitted in full to Google LLC in the exceptional cases described above and only shortened there.
Google LLC is located in the USA and thus in a so-called “third country” according to Art. 44 DSGVO. Google LLC is certified under the data protection agreement “EU-US Privacy Shield”, which guarantees compliance with a European data protection level.

Status: May 2018