Privacy Policy
As of: August 2026
We take the protection of your personal data very seriously. This privacy policy informs you about the nature, scope, and purpose of processing personal data on our website. The authoritative version of this policy is the German one.
1. Data Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is: XTRONGHOLD GmbH Otto-Heilmann-Straße 18 a 82031 Grünwald Germany Email: [email protected] Managing Director: Mohammad Yousuf
2. General Information on Data Processing
We process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. Processing generally takes place only after the user's consent or where processing is permitted by law.
3. Legal Bases
The processing of personal data is based on the following legal bases: • Art. 6 (1)(a) GDPR — consent of the data subject • Art. 6 (1)(b) GDPR — performance of a contract or pre-contractual measures • Art. 6 (1)(c) GDPR — compliance with a legal obligation • Art. 6 (1)(f) GDPR — protection of legitimate interests
4. Hosting
This website is hosted by a service provider (DigitalOcean) on servers within the European Union. The host processes the data collected via this website on our behalf as a processor pursuant to Art. 28 GDPR. The legal basis is our legitimate interest in the secure and efficient provision of the website (Art. 6 (1)(f) GDPR).
5. Server Log Files
When you visit our website, information is automatically recorded in server log files that your browser transmits: browser type and version, operating system used, referrer URL, page accessed, IP address, and the date and time of the server request. This data serves the technical provision and security of the website. The legal basis is Art. 6 (1)(f) GDPR. Log data is automatically deleted after 30 days at the latest.
6. Partner and Contact Form
When you send us an inquiry via our partner or contact form, we process the data you provide — in particular name, email address, country, and where applicable telephone number, company, website or social-media profile, type of interest, and the content of your message — to process your inquiry and to establish a possible business relationship. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual measures) and Art. 6 (1)(f) GDPR (legitimate interest in handling inquiries). For further processing, the form data is transmitted to our CRM system (Bomps), which is operated by our service provider as a processor pursuant to Art. 28 GDPR within the EU. No further disclosure to third parties takes place. The data is deleted as soon as it is no longer required for the purpose and no statutory retention periods apply.
7. Cookies
This website uses cookies. Technically necessary cookies are required for the operation of the website and are set on the basis of Art. 6 (1)(f) GDPR. Analytics or marketing cookies are set exclusively after your express consent (Art. 6 (1)(a) GDPR). You can revoke your consent at any time with effect for the future.
8. Your Rights as a Data Subject
You have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection to processing (Art. 21 GDPR), and withdrawal of consent given (Art. 7 (3) GDPR). To exercise your rights, an email to [email protected] is sufficient.
9. Right to Lodge a Complaint with the Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
10. Data Storage and Deletion
Personal data is stored only for as long as is necessary for the respective processing purpose or as statutory retention periods (e.g. commercial and tax-law periods) require. Once the purpose no longer applies, the data is deleted or its processing is restricted.
11. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The new privacy policy will then apply to your next visit.