Privacy Policy - Xanadu Frames EN

1) Introduction and Contact Details of the Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. The following information informs you about the handling of your personal data when using our website. Personal data includes all data with which you can be personally identified.

1.2

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Xanadu Evolution e.K.
Owner: Karsten Wagner, Dorotheenstrasse 62, 09113 Chemnitz, Germany,
Tel.: +49 371 / 23 451 306, Email: kontakt@xanadu-evolution.de.
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1

When you visit our website purely for informational purposes, meaning without registering or otherwise transmitting information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, the following data is collected, which is technically necessary for us to display the website:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Used browser
Used operating system
Used IP address (if applicable: in anonymized form)

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to retrospectively review the server log files if there are concrete indications of unlawful use.

2.2

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.

3) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are deleted automatically after you close your browser (so-called “session cookies”), while others remain stored on your device to allow us to recognize your settings (so-called “persistent cookies”). The storage duration of persistent cookies can be found in your browser’s cookie settings.

If personal data is also processed by individual cookies used by us, processing is carried out either pursuant to Art. 6(1)(b) GDPR for contract fulfillment, pursuant to Art. 6(1)(a) GDPR in case of given consent, or pursuant to Art. 6(1)(f) GDPR for our legitimate interest in ensuring the best possible functionality of the website and a customer-friendly user experience.

You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contacting Us

4.1 Crisp

This website uses a live chat system provided by: Crisp IM SARL, 2 Boulevard de Launay, 44100 Nantes, France.

The processing of personal data transmitted via chat is carried out either pursuant to Art. 6(1)(b) GDPR because it is necessary for contract initiation or execution, or pursuant to Art. 6(1)(f) GDPR due to our legitimate interest in effectively assisting our website visitors.

We have concluded a data processing agreement with the provider to ensure the protection of visitor data and to prohibit unauthorized disclosure to third parties.

4.2 CusRev

For review reminders, we use the services of: CUSTOMER REVIEWS LTD, 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ.

Based solely on your express consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address and, if applicable, other customer data to the provider so that they can send you a review reminder via email.

You can revoke your consent at any time with effect for the future.

5) Comment Function

When using the comment function on this website, the time of comment creation, the name you chose as a commentator, and your IP address are stored in addition to your comment. This IP address storage is necessary for security reasons and in case the affected person violates the rights of third parties through a comment or posts illegal content. Your email address is needed to contact you if a third party objects to your posted content as unlawful.

The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR.

6) Data Processing for Order Processing

Personal data is collected and processed when you provide it to us during order placement or when opening a customer account. The scope of the required data is displayed in the respective input forms. Data processing for contract execution is based on Art. 6(1)(b) GDPR.

7) Rights of the Data Subject

The applicable data protection law grants you the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

8) Storage Duration of Personal Data

The duration of personal data storage depends on the respective legal basis, processing purpose, and statutory retention period.

If processing is based on explicit consent (Art. 6(1)(a) GDPR), data will be stored until consent is withdrawn.

Otherwise, personal data will be deleted when it is no longer necessary for its original purpose.