Privacy Policy
Privacy Policy
XONIC-solutions.de
Effective: May 2026
Data Controller
XONIC Solutions GmbH
Wildparkstraße 3
09247 Chemnitz
Email: info@xonic-solutions.de
Phone: 0371-240888-55
You can contact our Data Protection Officer at the address above, adding “Data Protection Officer” to the address, or by email at datenschutz@xonic-solutions.de.
§ 1 General
We process personal data exclusively in accordance with the GDPR and the BDSG. This statement informs you about the nature, scope, and purpose of data collection, as well as your rights as a data subject.
§ 2 Automatic Data Processing / Server Log Files
When you visit our website, the following data is automatically processed for technical reasons:
- Browser type and version
- Operating system used
- Referrer URL
- Date and time of access
- Pages accessed
- Anonymized IP address
Processing is based on Article 6(1)(f) of the GDPR (legitimate interest) to ensure technical stability. The log files are deleted after 14 days.
§ 3 Hosting and Content Delivery Network (CDN)
Hosting: We operate and administer our website on our own, self-managed servers. These are housed in a data center in Germany; the physical server infrastructure (hardware, data center operations, network connectivity, and IP setup) is provided to us by Serverman Webhosting, owned by Thomas Toka, Thüringenstr. 20, 58708 Menden, Germany. To the extent that access to personal data cannot be ruled out in the context of hardware and infrastructure support, we have a contract with the provider for data processing in accordance with Article 28 of the GDPR. The legal basis for the hosting is our legitimate interest in the secure and efficient provision of our online services (Article 6(1)(f) of the GDPR).
Content Delivery Network (Cloudflare): To ensure the secure, high-performance, and fail-safe delivery of our website, we use the content delivery network provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. To this end, Cloudflare processes connection data, including your IP address, to deliver content and defend against attacks (e.g., DDoS). The legal basis is our legitimate interest in the security and availability of our website (Art. 6(1)(f) GDPR). In doing so, data may be transferred to the United States; this transfer is based on the EU–U.S. Data Privacy Framework and, additionally, on the Standard Contractual Clauses (SCCs) of the European Commission. We have a data processing agreement with Cloudflare in accordance with Article 28 of the GDPR.
§ 4 Cookies and Consent
Our website uses cookies and similar technologies. Upon your first visit, a notice will appear via the XONIC Cookie Consent Tool. There, you can specify whether analytics or marketing cookies are enabled.
Processing is carried out exclusively on the basis of your consent (Article 6(1)(a) of the GDPR). Necessary cookies are technically required for the operation of the website. The storage of information on your device and access to it, in the case of non-essential cookies and comparable technologies, occur exclusively on the basis of your consent pursuant to § 25(1) TDDDG; the subsequent processing of the personal data collected in this manner is based on Article 6(1)(a) of the GDPR. For technically necessary cookies, the legal basis is § 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR. You can revoke or change your consent at any time via the “Cookie Settings” link in the footer.
Categories of cookies used:
- Essential: Technically necessary for the website’s basic functions.
- Analytics: Statistical analysis of usage (e.g., Google Analytics, Microsoft Clarity).
- Marketing: Personalized advertising (e.g., Facebook Pixel).
§ 5 Contract Fulfilment (Master Data)
To fulfill contracts, we process personal data such as name, address, email address, and payment information (Art. 6(1)(b) GDPR). Data is disclosed only to the extent necessary for the fulfillment of the contract (e.g., to payment or shipping service providers).
§ 6 Analytics and Tracking Tools
Google Analytics 4
This website uses Google Analytics 4 (Google Ireland Limited). IP addresses are transmitted in truncated form via _anonymizeIp(). Processing takes place only with your consent (Art. 6(1)(a) GDPR).
Data may be transferred to the United States. The transfer is based on the EU–U.S. Data Privacy Framework and, in addition, the Standard Contractual Clauses (SCCs) of the European Commission. Further information: Google Privacy Policy.
Opt-out: Browser add-on
Microsoft Clarity
This website uses Microsoft Clarity to analyze user behavior (e.g., click and scroll behavior). The provider is Microsoft Corporation (U.S.). Data is processed only with your consent (Art. 6(1)(a) GDPR).
Microsoft is certified under the EU–U.S. Data Privacy Framework; the Standard Contractual Clauses (SCCs) also apply. Further information: Microsoft Privacy.
Meta (Facebook) Pixel
We use the Meta Pixel to optimize our advertising on Meta platforms (Facebook, Instagram). The provider is Meta Platforms Ireland Ltd.
Data processing is carried out exclusively with your consent (Art. 6(1)(a) GDPR). Meta is certified under the EU–U.S. Data Privacy Framework; data transfers are also based on Standard Contractual Clauses (SCCs). For more information, see Meta’s Privacy Policy.
Google Ads (Conversion Tracking and Remarketing)
We use Google Ads from Google Ireland Limited to promote our offerings. As part of conversion tracking and remarketing, cookies or similar technologies are used to measure the effectiveness of our advertising and to display interest-based ads to you. Processing takes place exclusively with your consent (Section 25(1) TDDDG, Article 6(1)(a) GDPR). In this context, data may be transferred to Google LLC in the United States; the transfer is based on the EU–U.S. Data Privacy Framework and, additionally, on the Standard Contractual Clauses (SCCs). You may revoke your consent at any time via the cookie settings.
Section 7: Contacting Us
If you contact us via email or through a contact form, we process your information solely for the purpose of handling your inquiry (legal basis: Art. 6(1)(b) or (f) of the GDPR). The data will be deleted as soon as your inquiry has been fully processed, unless statutory retention periods apply.
§ 8 Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of Consent (Art. 7(3) GDPR)
To exercise your rights, please contact us using the contact information provided above. You also have the right to lodge a complaint with a supervisory authority:
Saxon Data Protection and Transparency Commissioner
Postfach 11 01 32
01330 Dresden
www.datenschutz.sachsen.de
§ 9 Retention Period
We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods (e.g., 6 or 10 years under commercial and tax law).
§ 10 Third-Party Content (e.g., YouTube, Google Maps)
If content from third-party providers (e.g., videos, maps) is embedded on our website, data is only transferred to these providers if you have previously given your consent via our Cookie Consent Tool. Without consent, the embedding remains technically blocked. The privacy policies of the third-party providers apply to the respective processing.
§ 11 Automated Decision-Making
No decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR) takes place.
§ 12 Data Security / Encryption
To protect your data, we use state-of-the-art TLS (SSL) encryption during your visit to the website. You can recognize an encrypted connection by the padlock icon in your browser and the “https://” prefix in the address bar. In addition, we implement appropriate technical and organizational measures (Art. 32 GDPR) to protect your data against loss, manipulation, and unauthorized access; these measures are continuously updated to reflect the latest state of the art.
