Privacy Policy

1. Welcome!

Welcome to axxtas GmbH ("axxtas", "we", "us", "our", or the "Company"). We are from Germany and committed to protecting your privacy and ensuring that your personal data is handled in compliance with applicable data protection laws, including the General Data Protection Regulation ("GDPR").

This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you visit our website.

2. Data collection on this website

In this part of the privacy policy, we explain to you how and why we are collecting your data on this website.

2.1 How do we collect data?

We can collect data from you in two ways:

• You provide data to us via a contact form, an email, or something similar.
• We collect data that you don't manually provide to us. This could be for example your IP address for security reasons. These are mostly technical information (e.g. browser, operating system, time of visit...). We collect this sort of data automatically as soon as you visit the website.

2.2 For what are we collecting this data?

We collect this data to ensure a secure website and improve the user experience.

2.3 What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have opted into some sort of data processing, you can always opt out again.

Under certain circumstances, you are allowed to request a restricted processing of your personal data. Furthermore, you have the right to lodge a complaint at the responsible supervisory authority. If you still have questions about your rights, feel free to contact us at any time.

2.4 Analytics

We use Google Analytics with Consent Mode V2 Basic. This means there is no data sent to Google at all when you deny the use of Google Analytics through the cookie banner.

If you accept the Google Analytics services through accepting it in the cookie banner, your personal data will be used for analytics purposes. The legal basis for this is Art. 6(1)(a) GDPR. The data that gets collected may be transferred to the US. Google Analytics may collect and process certain data per its privacy policy.

You can opt out, withdraw or change your Google Analytics preferences with the cookie button in the bottom left of the page.

3. Hosting

In this section, we explain to you where our website is hosted and how this affects your personal data.

3.1 External hosting

We're using an external hosting provider. The personal data that gets collected by this site gets stored on servers at the provider. To host our website we chose Firebase Hosting (https://firebase.google.com/docs/hosting). The legal basis for an external hosting provider is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. An external hosting provider allows us to provide a good user experience worldwide with low latency.

Firebase Hosting may collect and process certain data per its privacy policy. You can review Firebase's privacy policy here: https://firebase.google.com/support/privacy/. By using the Firebase Hosting service, we agreed to the "Firebase Data Processing and Security Terms" which you can find here: https://firebase.google.com/terms/data-processing-terms/. This is an agreement that describes how Firebase / Google is processing data.

3.2 Content delivery network (CDN)

Firebase Hosting uses a global content delivery network (CDN) to deliver content fast and securely. Firebase Hosting may collect and process your personal data, such as your IP address, browser type, and device information, to provide and improve the service.

For more information, please refer to the Privacy Policy of Firebase (https://firebase.google.com/support/privacy/) or the Firebase Data Processing and Security Terms (https://firebase.google.com/terms/data-processing-terms/). All content is served over an SSL connection.

4. More information

4.1 General information

This website collects personal data. This data can be used to identify you as a person. We take the security of this sort of data extremely seriously. Transferring data on the internet is not 100% safe and can have security vulnerabilities.

4.2 Contact person

The following person is the person who decides how to handle and process the personal information that this website collects:

Feel free to reach out if you have any further questions.

4.3 How long do we store your data?

If we don't specify something different in this privacy policy, we keep your data as long as the use case for them exists. An exception for that is when we have legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods). In these cases, we will delete the data as soon as the reasons don't apply anymore.

4.4 On which legal basis do we process your data?

The legal basis on which we process your data depends. There are multiple options for different scenarios:

• 4.4.1 Consent (Art. 6(1)(a) GDPR) – You have given us your consent to process your data for a specific purpose. You can revoke this consent at any time. An informal email is sufficient for this.
• 4.4.2 Contract fulfillment (Art. 6(1)(b) GDPR) – The processing of your data is necessary for the fulfillment of a contract or the implementation of pre-contractual measures.
• 4.4.3 Legal obligations (Art. 6(1)(c) GDPR) – The processing of your data is necessary to fulfill a legal obligation to which we are subject. For example, we are required to store certain data for tax purposes.
• 4.4.4 Legitimate interests (Art. 6(1)(f) GDPR) – The processing of your data is necessary to protect our legitimate interests, provided that your interests or fundamental rights and freedoms do not prevail. For example, we process your data to ensure the security of our website.

4.5 Case of violation and lodging a complaint

In the case of a violation of the GDPR, those affected have the right to lodge a complaint at a supervisory authority.

4.6 Revocation of your consent

If you have already given any consent regarding data processing, you can revoke it at any time. You can do this via an email to: hello@axxtas.com.

4.7 Data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to any third party. If you request the data to be transferred directly to another person responsible, this will only be done if it is technically possible.

4.8 Correction, information and deletion of your data

You have the right to request the origin, recipient, and purpose of the personal data stored about you. If you have any further questions regarding your data or want to inform yourself about your data, delete your data, or correct your data please contact us. You can contact the contact person whose contact information you can find under "Contact person".

4.9 Restricting the processing of your data

In certain situations, you have the right to restrict your data from being processed. You can request that in these cases:

• In the case that we don't need your data anymore but you still have to keep it (e.g. to defend legal claims), then you can restrict us from processing it.
• You think your data is incorrect. To verify this we might need some time. During this verification time, you have the right to restrict us from processing your data.
• If you have made use of GDPR article 21, section 1 (lodging an objection), a balance between your and our interests has to be made. In a time where it isn't clear yet which interests are more important, you can restrict us from processing your data.
• If we process your data unlawfully, you can restrict us from further processing your data.

Once you restrict your data from being processed we will use your data only if you give your consent, or we need to assert, exercise or defend legal claims or for the reason of important public interest.

4.10 SSL / TLS

To improve security on this site, we use SSL or TLS encryption. This protects the transfer of confidential content such as orders or inquiries that you send to us. You can see the encryption in your browser address line when the address starts with "https" instead of "http" as well as by the lock symbol next to the address.

4.11 Advertising emails

We object to the use of the information that we published as part of the site notice and this privacy policy for advertising purposes. We reserve the right to take legal action if unsolicited advertising material is received (e.g. spam emails).

4.12 Data transfer to the US and the Data Privacy Framework

We transfer data to the US because we are using Firebase Hosting. This data transfer is based on the Data Privacy Framework. The data recipient is Firebase / Google. Google LLC is an active participant in the Data Privacy Framework program. You can check its certification here: https://www.dataprivacyframework.gov/list.

5. More information about the data we collect

5.1 Cookies

We eventually use cookies on this website. Cookies are small text files that get stored on your device. This can happen as soon as you visit this page.

There are two variations of cookies:

• Permanent cookies: These cookies will remain on your device until either you or your web browser deletes them.
• Session cookies: These cookies are stored temporarily and will be deleted at the end of your visit.

Some cookies we store are technically necessary. This means without them our site wouldn't work. Thus there is no opt-in / opt-out option for you. Unless we state it differently these necessary cookies are stored based on Art. 6(1)(f) GDPR & TTDSG article 25(2). The website operator has a legitimate interest in the technically error-free and optimized usage of its services.

Cookies can come directly from us (first-party cookies) or they can come from third parties (third-party cookies). Cookies that you can opt out from are listed in the cookie banner. There you can also give or withdraw your consent.

5.2 Server log files

We store technical information about your visit in server log files. These files can include:

• Browser and browser version
• Operating system
• Referrer URL
• Hostname
• Time of the request
• IP address
• Site visits
• Cache information
• Protocol
• Response size
• Latency of your request
• Request method and URL
• Response status
• Request data

The legal basis for collecting this data is Art. 6(1)(f) GDPR because the website operator has a legitimate interest in the technically error-free presentation and optimization of their website.

5.3 How we share your data

We do not share or sell your personal information for third-party marketing purposes. However, we may share your information in the following situations:

• With Firebase: We use Firebase for hosting our website. Firebase is certified under major privacy and security standards like ISO 27001, SOC 1, SOC 2, and SOC 3. You can find out more about Firebase and its data privacy here: https://firebase.google.com/support/privacy.

5.4 Contact via email or telephone

If you contact us via either telephone or email, all resulting personal data will be stored in order to process your request. We won't share this data without your consent.

The legal basis for this is Art. 6(1)(b) GDPR (pre-contractual measures), Art. 6(1)(f) GDPR (legitimate interest in processing requests directed to us) or Art. 6(1)(a) GDPR (your consent, which you can revoke at any given time). We store this data until you request that we delete it, you revoke your consent to storage or the purpose no longer applies for this data. If we face mandatory legal provisions regarding this data, the data will remain unaffected.

6. Tools we use

6.1 HubSpot

We use HubSpot as our customer relationship management tool. If you are contacting us, we may store your data in HubSpot to process your request. You can always request that we delete your data from HubSpot.

We signed a data processing agreement with HubSpot. You can find out more about HubSpot's privacy policy here: https://legal.hubspot.com/privacy-policy.

7. Social media profiles

7.1 LinkedIn

axxtas is also visible on LinkedIn. Here you can find the privacy policy for our company page "axxtas" and "axxtas for consumers" as well as for every other company page affiliated with our company.

We, axxtas, have an account on LinkedIn. LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland) is the provider of these services. We remind you that you use LinkedIn and its functions at your own risk. When you visit LinkedIn, LinkedIn may collect data from you. We have no access to what data is collected and how it is processed. It is possible that your data will be transferred to other countries.

To find out more about this, we recommend that you read LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

If we collect data through LinkedIn forms (e.g. Lead Gen Forms), we use your data solely to process your request unless otherwise stated in the LinkedIn Lead Gen Form. You can always request that we delete your data collected through LinkedIn forms. We store LinkedIn form data in our CRM system HubSpot, as described above.