Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

VRtual X GmbH
Hegestraße 40
20251 Hamburg
Germany

Phone: +49 15679 111200
Email: contact@xairo.io

Given our company size, we are not currently legally required to appoint a data protection officer (Art. 37 GDPR, § 38 BDSG). For any data protection questions, please contact us directly using the details above.

This website is operated with a hosting provider whose servers are located in Germany. When you visit the website, the hosting provider automatically processes technically necessary information in what are known as server log files, transmitted by your browser: IP address, date and time of the request, page requested, amount of data transferred, browser type and version, operating system used, and the previously visited page (referrer URL).

This processing is carried out to ensure the website runs smoothly and securely (detecting and defending against attacks), and thus to safeguard our legitimate interests; the legal basis is Art. 6(1)(f) GDPR. Log files are retained only for as long as necessary for this purpose. They are not combined with other data sources.

The fonts used on this website are self-hosted, meaning no connection is made to external font providers (e.g. Google Fonts) and no data is transmitted to third parties in this respect.

To remember your choice regarding the third-party content described below, we use your browser’s local storage (localStorage), not cookies in the technical sense. This information stays on your device, is not transmitted to us, and can be deleted or reset at any time via your browser settings or via "Cookie settings" in the footer of this page. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(2) no. 2 TTDSG), to the extent this isn’t already a strictly necessary function.

This website embeds content from YouTube (videos) and Calendly (appointment booking) in a few places. This content is not loaded automatically when the page is opened, but only once you actively confirm this via the cookie banner or directly at the relevant piece of content. Only then is a connection made to the respective provider, which may process your IP address and set cookies, among other things.

Providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (YouTube), and Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA (Calendly). Both providers may transfer data to the USA; this may take place on the basis of standard contractual clauses or under the EU-US Data Privacy Framework. The legal basis for embedding this content is your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG). You can change your choice at any time via "Cookie settings" in the footer of this page.

If you contact us by email, phone, or via the Calendly booking tool, we process the data you provide (e.g. name, contact details, content of your inquiry) to handle your request and in case follow-up questions arise. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or, where no business inquiry is involved, Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). We delete this data once it is no longer required for the purposes for which it was collected, and at the latest once statutory retention periods expire.

We only share your data with third parties as part of the embedded services described above, to fulfill legal obligations, or where you have expressly consented. We use carefully selected processors (e.g. for hosting) who are contractually bound to comply with the GDPR.

As a data subject, you have the following rights:

• Right to access the personal data we process about you (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Right to withdraw any consent given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to the contact details above is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str. 22, 7th floor, 20459 Hamburg, Germany
datenschutz-hamburg.de

We update this privacy policy whenever the legal situation, the website, or our data processing changes. The version currently published on this page always applies.