Data Privacy

Customer Information

Dear Sir or Madam,
The following information provides an overview of how we process your personal data. We also inform you of your rights under the GDPR and the BDSG.

Website Operator

The operator of this website and the entity responsible under data protection law is:

X-IT GmbH
Bahnhofstraße 1
D-66679 Losheim am See
Phone: +49 6872 9222438
Email: info@x-it-service.de
Website: www.x-it-service.de

If you have any questions or concerns regarding this privacy policy or data protection on our website, please contact our Data Protection Officer:

Email: datenschutz@x-it-service.de

Change your privacy settings for this website

I. General Information on Data Processing

Scope of Personal Data Processing

We appreciate your interest in us and our website. Your privacy is and remains of the utmost importance to us. Here, we would like to inform you about the collection, storage, processing, transfer, blocking, deletion, and use of personal data when you visit our website. This is to help you understand how we collect, process, and use data.

Personal data consists of specific information regarding the personal and factual circumstances of an identified or identifiable natural person.

This privacy policy can be accessed at any time via our website.

Our handling of data and its protection is governed by legal provisions, in particular the EU General Data Protection Regulation (GDPR), the Digital Services Act (DDG), and the Federal Data Protection Act (BDSG).

Personal data is collected and processed only if this is expressly provided for by law, the user has expressly consented to it, it is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the data subject’s request, or if it is necessary to safeguard legitimate interests.

2. Legal Basis for the Processing of Personal Data

To the extent that we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis for such processing.

When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

To the extent that the processing of personal data is necessary to comply with a legal obligation, Article 6(1)(c) of the GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the aforementioned interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

3. Data Deletion and Retention Period

Die personenbezogenen Daten der betroffenen Person werden gelöscht oder gesperrt, sobald der Zweck der Speicherung entfällt. Eine Speicherung kann darüber hinaus dann erfolgen, wenn dies durch den europäischen oder nationalen Gesetzgeber in unionsrechtlichen Verordnungen, Gesetzen oder sonstigen Vorschriften, denen der Verantwortliche unterliegt, vorgesehen wurde. Eine Sperrung oder Löschung der Daten erfolgt auch dann, wenn eine durch die genannten Normen vorgeschriebene Speicherfrist abläuft, es sei denn, dass eine Erforderlichkeit zur weiteren Speicherung der Daten für einen Vertragsabschluss oder eine Vertragserfüllung besteht.

4. Data Security

We take appropriate technical and organizational measures to protect personal data from accidental or unlawful destruction, use, or alteration, as well as from unauthorized disclosure or access.

5. SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

6. Disclosure of Personal Data to Third Parties

As a general rule, we do not disclose your personal data to third parties. Exceptions to this rule apply only if:

  • You have expressly consented to the transfer of your data to third parties
  • If we engage external service providers in connection with the provision of services, their access to the data is limited exclusively to the purpose of providing those services
  • the disclosure is necessary to assert, exercise, or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in the non-disclosure of your data
  • in the event that there is a legal obligation to disclose the data, as well as
  • where this is permitted by law and necessary for the fulfillment of contractual relationships with you.

To the extent that our external service providers come into contact with your personal data, we ensure that they comply with data protection laws in the same manner as we do.

7. Website Hosting

Our website is hosted by Host Europe GmbH. The provider is Host Europe GmbH, Friesenplatz 4, 50672 Cologne, Germany.

To the extent that personal data is processed in the context of hosting, this is done exclusively in accordance with our instructions and within the framework of a data processing agreement pursuant to Art. 28 GDPR.

Further information on data protection at Host Europe can be found at: https://www.hosteurope.de/AGB/Datenschutzerklaerung/

II. Provision of the Website and Creation of Log Files

1. Scope of Personal Data Processing

In general, it is possible to use our website without providing personal data.

However, the functioning of the Internet relies on the exchange of technical information between the user’s device and the website operator’s server to enable communication and data transmission.

When you visit our website, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file.

The following information is collected without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the file accessed
  • Website from which the access originated (referrer URL)
  • Browser used and, if applicable, your computer’s operating system, as well as the name of your Internet service provider

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR.

3. Purpose of Data Processing

The system must temporarily store the IP address in order to deliver the website to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.

We process the aforementioned data for the following purposes:

  • To ensure a smooth connection to the website
  • To ensure a comfortable user experience on our website
  • To ensure the security of our IT systems

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.

The data stored in log files is automatically deleted after 30 days at the latest.

Our legitimate interest arises from the purposes of data collection listed above. The collection and storage of this data is generally anonymous and, in this form, does not allow us to draw any conclusions about your identity.

5. Right to Object and Right to Erasure

The collection of data for the provision of the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, the user has no right to object.

III. Use of Cookies

Like many other websites, we also use so-called “cookies.” These are small text files that are stored on your device (computer, smartphone, etc.). Some of the cookies we use are deleted at the end of the browser session, i.e., when you close your browser (so-called session cookies). Other cookies remain permanently on your device and allow us or our partner companies to recognize your browser on your next visit (persistent cookies). However, you can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to exclude the acceptance of cookies in specific cases or generally. If you do not accept cookies, the functionality of our website may be limited.

Cookie Consent with Complianz

This website uses the consent management tool Complianz to obtain your consent for the storage of certain cookies on your device and for the use of certain technologies, and to document this in compliance with data protection regulations.

When you visit the website, technically necessary cookies are set (e.g., cmplz_banner-status and other cmplz_* cookies) to store your cookie consents. These cookies are necessary to save your selected settings and to display the cookie banner properly.

The cookies set in this context do not store any personal data, but only your consent preferences.

You can revoke your consent at any time by deleting the relevant cookies in your browser or by revisiting and adjusting the cookie settings on this website. After deleting the cookies or upon revisiting the website, you will be asked for your consent again.

Alternatively, you can also adjust your settings via the following link:

The consent management tool Complianz Cookie Technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

Technically Necessary Cookies

Legal Basis and Legitimate Interest

Processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in ensuring our website is user-friendly.

Purpose of data processing

We use cookies to make our website more user-friendly. Some elements of our website require that the browser accessing the site can be identified even after a page change. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles.

Duration of Storage

Cookies are stored on the user’s computer and transmitted from there to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

Objection

Please read the information below regarding your right to object under Article 21 of the GDPR

IV. Contact Form and Email Contact

1. Scope of Personal Data Processing

Our website features a contact form that can be used to contact us electronically. If a user chooses this option, the data entered in the form is transmitted to us and stored. At the time the message is sent, the following data is also processed:

– The user’s IP address – Date and time

Alternatively, you may contact us via the provided email address. In this case, the user’s personal data transmitted with the email will be stored.

In this context, the data will not be disclosed to third parties. The data will be used exclusively for the purpose of processing the correspondence.

2. Legal basis for data processing

The legal basis for processing the data is Article 6(1)(a) of the GDPR, provided the user has given consent.

The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR.

3. Purpose of data processing

We process the personal data from the contact form solely for the purpose of handling the contact request. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data entered in the contact form and data sent via email, this occurs once the respective conversation with the user has ended. The conversation is considered concluded when it is clear from the circumstances that the matter in question has been definitively resolved.

5. Right to object and right to erasure

The user has the right to withdraw their consent to the processing of personal data at any time.

If you contact us via email, you may object to the processing of your personal data at any time. In such a case, the conversation cannot be continued.

You can send your withdrawal of consent and objection to storage, for example, by email to datenschutz@x-it-service.de. In this case, the personal data processed in the course of the contact will be deleted.

V. Plugins and Tools

1. Web Fonts (Fonts)

This website uses web fonts to ensure a consistent and visually appealing presentation of content. Specifically, we use the typeface “Fira Sans”, which is hosted locally on our own server. When you access the website, the required font files are loaded from our own server directly into your browser cache to display text correctly.

No connection is made to external providers such as Google Fonts. In particular, no personal data — such as your IP address — is transmitted to third parties.

The legal basis for serving these fonts is Article 6 (1) (f) GDPR. Our legitimate interest lies in the technically reliable and consistent presentation of our website.

VI. Social Media Presence

We offer online services on various social media platforms to provide you with information and stay in touch with you. These platforms include:

These links are static links that take you directly from our website to the service provider’s website. You can easily verify this by checking the address bar of your browser, which will display the new website’s address in a new window or tab once the link has been clicked. When opening the links via a device with the service app installed, you may also have the option to access the desired service directly through the app. We have no influence over the processing of personal data by the platform operator.

Data processing by the respective social media platform may also affect individuals who are not registered as users there. If you click on a link to an offer, personal data may be transferred to providers in countries outside the European Economic Area that, from the European Union’s (“EU”) perspective, do not guarantee an “adequate level of protection” for the processing of personal data in accordance with EU standards. Please keep this in mind before clicking on a link and thereby triggering the transfer of your data. In this case, data subject rights and requests for information should be asserted with the operators of the respective networks. Further information on this can be found in the privacy policies linked above.

Further information, particularly regarding Facebook

You may exercise your rights as a data subject by contacting Meta Platforms Ireland Limited at the address provided above or by contacting us.

Facebook bears primary responsibility for the processing of personal data resulting from the use of the fan page, and Facebook is obligated to fulfill all obligations under the GDPR with regard to the processing of this data.

We have entered into a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

Please note that despite our joint responsibility with the social media platforms, we do not have full control over the data processing operations of the social media platforms. Our options are largely determined by the corporate policies of the respective provider.

User Rights

You have the right:

  • pursuant to Article 15 of the GDPR, to request information about your personal data that we process. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
  • in accordance with Article 16 of the GDPR, to request without delay the correction of inaccurate personal data or the completion of your personal data stored by us;
  • to request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • to request the restriction of the processing of your personal data pursuant to Article 18 of the GDPR, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR;
  • in accordance with Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller;
  • In accordance with Article 7(3) of the GDPR, you may withdraw your consent at any time. As a result, we may no longer continue processing the data based on that consent in the future, and
  • to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. As a general rule, you may contact the supervisory authority in your usual place of residence, your place of work, or the location of our company headquarters.

The following link provides a list of data protection officers and their contact information:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already provided at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) of the GDPR (data processing in the public interest) and Article 6(1)(f) of the GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision under Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If your objection is directed against the processing of data for the purpose of direct marketing, we will cease processing immediately. In this case, it is not necessary to specify a particular situation. This also applies to profiling insofar as it is related to such direct marketing.

If you wish to exercise your right to object, simply send an email to datenschutz@x-it-service.de.

Privacy Policy for Job Applicants / Online Job Applications / Publication of Job Postings

Thank you for your interest in our online job posting. The protection of your personal data is very important to us. Therefore, we provide the following information regarding the collection, processing, and use of your data in connection with your online application, in accordance with applicable data protection regulations.

Description and Scope of Data Processing

We offer you the opportunity to apply for a position with us via our website. In the case of these digital applications, we collect and process your applicant and application data electronically to handle the application process.

As part of your online application, we collect and process the following personal application data from you:

  • Last name, first name
  • Address
  • Phone number
  • Email
  • Application documents

Legal Basis for Data Processing

If an employment contract is concluded following the application process, we will store the data you provided during the application in your personnel file. The legal basis for this processing is Section 26(1), Sentence 1 of the German Federal Data Protection Act (BDSG) in conjunction with Article 88(1) of the General Data Protection Regulation (GDPR).

If an application is rejected, we automatically delete the data submitted to us six months after notification of the rejection. However, deletion will not occur if legal provisions, in particular retention and evidence obligations under the General Equal Treatment Act (AGG), preclude longer storage. In this case, deletion will only take place after the conclusion of the relevant proceedings.

The legal basis in this case is Art. 6(1)(f) GDPR and § 24(1)(2) BDSG. Our legitimate interest lies in the defense or enforcement of legal rights.

If you expressly consent to the longer storage of your data, e.g., for inclusion in a candidate pool (24 months), the data will be further processed based on your consent.

The legal basis in this case is Article 6(1)(a) of the GDPR. However, you may of course revoke your consent at any time in accordance with Article 7(3) of the GDPR by notifying us, with effect for the future.

Purpose of Data Collection

Your personal application data is collected and processed solely for the purpose of filling positions within our company.

Your application data will not be used for any other purpose or disclosed to third parties.

Duration of storage

Your personal application data is generally deleted automatically six months after the conclusion of the application process. This does not apply if legal provisions preclude deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer-term storage.

Options for Objection and Correction

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, or deletion of data, or to withdraw your consent, please contact our Data Protection Officer.

Privacy Notice pursuant to Article 13 of the GDPR regarding the processing of personal data for video surveillance (on-site visits)

As part of video surveillance, video recordings of the entrance area are processed on the basis of Article 6(1)(f) of the GDPR (legitimate interest). The processing of video recordings is carried out exclusively for the specific purpose of enforcing property rights, as well as for the purposes of threat prevention and law enforcement.

There is no automated analysis of the video recordings.

Any further use or disclosure of the video recordings is based on the legal grounds of Article 6(4) of the GDPR, Article 23(1)(d) of the GDPR in conjunction with Section 24(1)(1) of the Federal Data Protection Act (BDSG) (prosecution of criminal offenses), to the extent that this is necessary in the context of potential criminal prosecution. In this case, the recipients are the competent law enforcement authorities or related authorities.

The stored video recordings are deleted after 72 hours, unless the circumstances described above (in particular criminal prosecution) preclude this.

Information regarding the controller and the rights of data subjects can be found in the above sections of the Privacy Policy.

Current Status of the Privacy Policy

This Privacy Policy is currently in effect as of June 2026. Due to ongoing developments to our website and the services offered through it, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. You can view and print the most current version of the Privacy Policy at any time on our website.