Privacy Policy


Privacy Policy


Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for entering into a contract. You are not obligated to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided in the following processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.


Server log files

You can visit our websites without providing any personal information.

Each time you access our website, your internet browser transmits usage data to us or our web host/IT service provider, which is then stored in log files (server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. This processing is based on Article 6(1)(f) GDPR, as it is in our overriding legitimate interest to ensure the smooth operation of our website and to improve our services.


Payment service provider


Using PayPal

All PayPal transactions are subject to the PayPal Privacy Statement. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full



Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again.

We use these cookies to make our website more user-friendly, effective, and secure. Furthermore, cookies allow our systems to recognize your browser even after you navigate to a different page and to offer you services. Some features of our website cannot be offered without the use of cookies. For these features, it is necessary that the browser is recognized even after a page change.

The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

Cookies are stored on your computer. Therefore, you have full control over their use. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to fully utilize all the functions of this website.

The links below provide information on how to manage (including disable) cookies in the most common browsers:

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablassen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac


analysis


The data processing described below in this section, in particular the setting of cookies, is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest:


- in the needs-based and targeted design of the website, e.g. in analysis and statistics tools


You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR.



Use of Google Analytics

We use the web analytics service Google Analytics from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our website.

The data processing serves the purpose of analyzing this website and its visitors. For this purpose, Google, on behalf of the operator of this website, will use the information obtained to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google Analytics uses cookies to analyze how you use this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. IP anonymization is activated on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google has certified itself under the US-EU data protection agreement “Privacy Shield” and has thus committed to complying with European data protection guidelines.

You can prevent Google from collecting and processing data generated by the cookie relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: [https://tools.google.com/dlpage/gaoptout?hl=de].

To prevent data collection and storage by Google Analytics across all devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You must perform the opt-out on all systems and devices you use for it to be fully effective. If you delete the opt-out cookie, requests will again be sent to Google. Click here to set the opt-out cookie: Disable Google Analytics

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/.



Plug-ins


Using YouTube

We use the YouTube video embedding function on our website, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

This feature displays videos hosted on YouTube within an iFrame on the website. The "Enhanced Privacy Mode" option is enabled. This means that YouTube does not store any information about website visitors. Information is only transmitted to and stored by YouTube when you actually watch a video. Your data may be transferred to the USA. Google is certified under the EU-US Privacy Shield framework and is therefore committed to complying with European data protection regulations.

Further information on the collection and use of data by YouTube and Google, your related rights and options for protecting your privacy can be found in YouTube's privacy policy (https://www.youtube.com/t/privacy).

Using Google Maps

We use the Google Maps embedding feature on our website, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Ireland Limited is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

This function enables the visual display of geographical information and interactive maps. When pages containing embedded Google Maps are accessed, Google also collects, processes, and uses data from website visitors.

Your data may also be transferred to the USA. Google has certified itself under the EU-US Privacy Shield framework and has therefore committed to complying with European data protection regulations.

The processing is based on Art. 6 para. 1 lit. f GDPR due to the legitimate interest in the needs-based and targeted design of our website.

Further information on the collection and use of data by Google can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. There, in the Privacy Center, you also have the option to change your settings so that you can manage and protect your data processed by Google.


Data subject rights and storage period


Storage duration

After complete contract fulfillment, the data will initially be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.


Rights of the data subject

Provided the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.

Furthermore, pursuant to Article 21 Paragraph 1 GDPR, you have the right to object to processing based on Article 6 Paragraph 1 f GDPR, as well as to processing for direct marketing purposes.


For questions or concerns, please contact us directly at: info@xfoil.de


Right to lodge a complaint with the supervisory authority

According to Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.


Right to object

If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.

After an objection has been lodged, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.


If your personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. Upon receipt of your objection, we will cease processing the data in question for direct marketing purposes.

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that helps marketers

You can manage website tags through a single interface. The Tag Manager tool itself (which manages the tags)

(implemented) is a cookieless domain and does not collect any personal data. The tool ensures

the triggering of other tags, which in turn may collect data. Google Tag Manager intervenes.

do not access this data. If deactivation has been carried out at the domain or cookie level,

This setting will remain in place for all tracking tags implemented with Google Tag Manager.


Information on data processing in connection with Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller for this website is located outside the European Economic Area or Switzerland, then the Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are referred to below as "Google".


Google Analytics uses so-called "cookies," text files that are stored on the website visitor's computer and enable an analysis of the visitor's use of the website. The information generated by the cookie about the visitor's use of this website (including the truncated IP address) is generally transmitted to and stored on a Google server.


Google Analytics is used on this website exclusively with the extension "_anonymizeIp()". This extension ensures the anonymization of IP addresses by truncation, thus preventing direct identification of individuals. The extension shortens the IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the browser as part of Google Analytics will not be merged with other Google data.


On behalf of the website operator, Google will use the collected information to evaluate website usage, compile reports on website activity, and provide the website operator with other services related to website and internet usage (Art. 6 para. 1 lit. f GDPR). The legitimate interest in data processing lies in optimizing this website, analyzing website usage, and adapting its content. The interests of users are adequately protected through pseudonymization.


Google LLC guarantees an adequate level of data protection based on standard contractual clauses. Data transmitted and linked to cookies, user identifiers (e.g., user ID), or advertising IDs is automatically deleted after 50 months. Data whose retention period has expired is automatically deleted once a month.


Tracking by Google Analytics can be prevented by adjusting the cookie settings for this website. Furthermore, the collection and storage of IP addresses and data generated by cookies can be objected to at any time with effect for the future. The corresponding browser plugin can be downloaded and installed from the following link: https://tools.google.com/dlpage/gaoptout.


Website visitors can prevent tracking by Google Analytics on this website by clicking on the following link. This will set an opt-out cookie that prevents future data collection when visiting this website.


Further information on data usage by Google, setting and opt-out options, can be found in Google's privacy policy (https://policies.google.com/privacy) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).


reCAPTCHA

To protect your inquiries submitted via our online form, we use the reCAPTCHA service provided by Google LLC (Google). This query serves to distinguish whether the input is made by a human or abusively by automated, machine processing. The query involves sending your IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and further processed there. However, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other Google data. Google's separate privacy policy applies to this data. You can find more information about Google's privacy policy at: https://policies.google.com/privacy?hl=de