Privacy Policy

The following privacy policy applies to the use of our online service https://x-montage.de (hereinafter referred to as “Website”). We attach great importance to data protection. The collection and processing of your personal data is carried out in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR). We collect and process your personal data to be able to provide you with the above-mentioned platform. This statement explains how and for what purpose your data is collected and used, and what choices you have in relation to your personal data. By using this website, you agree to the collection, use, and transfer of your data in accordance with this privacy policy.

1. Controller

The controller responsible for the collection, processing, and use of your personal data within the meaning of Art. 4 No. 7 GDPR is: X – Montage GmbH
Friedrich-Karl Str. 4
12103 Berlin
E-mail: info@x-montage.de
Phone: +49 160 500 600 5
Website: https://x-montage.de
Commercial Register: 39309 P, Local Court of Potsdam
Tax Number: 050/121/00606
VAT ID No.: 21/267/01047
Managing Director: Denis Drnda

If you wish to object to the collection, processing, or use of your data by us in accordance with this privacy policy in whole or in part, you may address your objection directly to the controller named above.

You may save and print this privacy policy at any time.

2. General Use of the Website

2.1 Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services, which we use for the purpose of operating the website. In this context, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospects, and visitors to this online offering based on our legitimate interest in an efficient and secure provision of this online offering in accordance with Art. 6 para. 1 sentence 1 f) GDPR in conjunction with Art. 28 GDPR.

2.2 Access Data

We collect information about you when you use this website. We automatically collect information about your usage behavior and your interaction with us, and we record data about your computer or mobile device. We collect, store, and use data about every access to our online offer (so-called server log files). Access data includes:

Name and URL of the accessed file
Date and time of access
Amount of data transferred
Message about successful retrieval (HTTP response code)
Browser type and version
Operating system
Referrer URL (i.e., the previously visited page)
Websites accessed by the user’s system via our website
User’s internet service provider
IP address and the requesting provider

We use this log data without assigning it to your person or creating any other profile for statistical evaluations for the purpose of operation, security, and optimization of our online offer, as well as for anonymous tracking of visitor numbers and click measurements from our partners. This also constitutes our legitimate interest pursuant to Art. 6 para. 1 sentence 1 f) GDPR. We reserve the right to subsequently review log data if there is a justified suspicion of unlawful use based on concrete indications. IP addresses are stored temporarily only to the extent necessary for security or billing purposes. We also store the date of your last visit in your user account.

2.3 Cookies

We use so-called session cookies to optimize our online offering. These are deleted when the browser is closed. Additionally, we use persistent cookies that remain stored for 1 month to 10 years in order to recognize your browser on subsequent visits. Cookies store, for example:

Login information
Language settings
Entered search terms
Information about website visits and usage of functions

These cookies do not contain direct personal data but provide pseudonymized information. You can restrict or disable the use of cookies in your browser settings, although this may limit the functionality of the website.

2.4 Email Contact

When you contact us (e.g., via form or email), we store your information to process the request and for potential follow-up questions. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 f) GDPR.

2.5 Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. Google is certified under the EU-US Privacy Shield. Google uses cookies to analyze your use of our website. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on this website, so your IP address is shortened within the EU. Only in exceptional cases is the full IP address transmitted. You can prevent the storage of cookies by adjusting your browser settings. You can also object to the processing by Google by installing the following plugin: http://tools.google.com/dlpage/gaoptout?hl=de Alternatively, you can click here to set an opt-out cookie that will prevent future tracking of your data on this website.

2.6 Retention Period

Unless otherwise stated, we store personal data only as long as necessary to achieve the respective purposes.

3. Your Rights as a Data Subject

Under applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by email or post with clear identification to the address provided in section 1. Below is an overview of your rights.

3.1 Right to Confirmation and Access

You have the right at any time to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data free of charge and receive the following information:

The purposes of processing
The categories of personal data
The recipients or categories of recipients, particularly in third countries
The planned duration of storage or the criteria used to determine that duration
The existence of the right to rectification, erasure, restriction, or objection
The existence of a right to lodge a complaint with a supervisory authority
All available information about the source of the data if not collected from you
The existence of automated decision-making, including profiling, pursuant to Art. 22 GDPR

3.2 Right to Rectification

You have the right to request the immediate correction of inaccurate personal data or the completion of incomplete personal data.

3.3 Right to Erasure (“Right to be Forgotten”)

You have the right to request the immediate deletion of your personal data if one of the following applies:

The data is no longer necessary for the original purposes
You withdraw your consent and there is no other legal basis
You object to the processing and there are no overriding legitimate grounds
The data has been unlawfully processed
The deletion is necessary to fulfill a legal obligation
The data was collected in connection with information society services

If the data has been made public, we will inform third parties who process the data about your deletion request (Art. 17 GDPR).

3.4 Right to Restrict Processing

You have the right to request restriction of processing if:

You contest the accuracy of the data
The processing is unlawful but you oppose deletion
We no longer need the data, but you require it for legal claims
You have objected and the verification is still pending

3.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, provided that:

The processing is based on consent or a contract
The processing is carried out by automated means

Upon request, we will transfer your data directly to another controller, where technically feasible.

3.6 Right to Object

You have the right to object at any time to the processing of your personal data if it is based on Art. 6 para. 1 sentence 1 e) or f) GDPR. This particularly applies to direct marketing or profiling in connection with it. Objection is also possible for processing for scientific, historical, or statistical purposes, unless the processing is necessary for a task carried out in the public interest.

3.7 Automated Decisions Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects or similarly significantly affects you. We do not use such automated procedures.

3.8 Right to Withdraw Consent

You have the right to withdraw your previously given consent to data processing at any time.

3.9 Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace, or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.

4. Data Security

We strive to ensure the security of your data within the framework of applicable data protection laws and technical capabilities. Your personal data is transmitted to us in encrypted form. This applies to both orders and customer logins. We use the SSL (Secure Socket Layer) encryption system. However, please note that data transmission over the Internet (e.g. communication by email) can have security vulnerabilities. A complete protection of data from access by third parties is not possible. To safeguard your data, we implement technical and organizational security measures in accordance with Art. 32 GDPR, which we regularly adapt to reflect the state of the art. We also do not guarantee that our website will be available at all times. Disruptions, interruptions, or failures cannot be ruled out. The servers we use are maintained and secured regularly with great care.

5. Disclosure of Data to Third Parties, No Data Transfer Outside the EU

As a general rule, we use your personal data only within our company. If and to the extent that we engage third parties in the fulfillment of contracts (e.g., logistics service providers), these third parties receive personal data only to the extent necessary for the respective service. In the event that we outsource certain parts of data processing (“commissioned data processing”), we contractually obligate the processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subjects. Data transfers to entities or individuals outside the EU – apart from the cases mentioned in Section 2 – do not take place and are not planned.

Notes on Data Processing

5.1. Name and Contact Details of the Controller

X – Montage GmbH
Friedrich-Karl Str. 4
12103 Berlin
Mail: info@x-montage.de
Tel: +49 160 500 600 5

The data protection officer can be reached at the above address.

5.2. Collection and Purpose of Processing Personal Data

When you engage us, we collect the following information:

Salutation, first name, last name
Valid email address
Address
Phone number (landline and/or mobile)
Information necessary for asserting and defending your rights in connection with the mandate

Purposes of processing:

Identification as a client
Legal advice and representation
Correspondence
Invoicing
Handling potential liability claims

Data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR.

Personal data will be stored until the statutory retention period expires (6 years after the end of the mandate), unless a longer retention obligation exists under Art. 6 para. 1 sentence 1 lit. c GDPR or you have consented to further storage under Art. 6 para. 1 sentence 1 lit. a GDPR.

5.3. Disclosure to Third Parties

Disclosure occurs solely for the purpose of fulfilling the contract, for example to:

Opponents in proceedings and their representatives (e.g., attorneys)
Courts and authorities

Attorney-client privilege remains unaffected. Disclosure of data subject to this privilege will only occur with your consent.

5.4. Your Rights

Withdrawal of consent (Art. 7 para. 3 GDPR)
Access to stored data (Art. 15 GDPR)
Correction of incorrect data (Art. 16 GDPR)
Deletion (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

5.5. Right to Object (Art. 21 GDPR)

If your data is processed based on legitimate interests, you have the right to object to the processing at any time, provided that reasons exist which arise from your particular situation.

Need Help ? Talk to an experts

Need Help ? Talk to an experts

Privacy Policy

Privacy Policy

1. Controller

2. General Use of the Website

2.1 Hosting

2.2 Access Data

2.3 Cookies

2.4 Email Contact

2.5 Google Analytics

2.6 Retention Period

3. Your Rights as a Data Subject

3.1 Right to Confirmation and Access

3.2 Right to Rectification

3.3 Right to Erasure (“Right to be Forgotten”)

3.4 Right to Restrict Processing

3.5 Right to Data Portability

3.6 Right to Object

3.7 Automated Decisions Including Profiling

3.8 Right to Withdraw Consent

3.9 Right to Lodge a Complaint with a Supervisory Authority

4. Data Security

5. Disclosure of Data to Third Parties, No Data Transfer Outside the EU

Notes on Data Processing

5.1. Name and Contact Details of the Controller

5.2. Collection and Purpose of Processing Personal Data

5.3. Disclosure to Third Parties

5.4. Your Rights

5.5. Right to Object (Art. 21 GDPR)

Information

Services

Quick Contact

Follow Us -

Newsletter