Privacy Policy
Last updated: September 2026
This English translation is provided for convenience. The German version is legally binding.
1. Privacy at a glance
General notes
The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the imprint of this website.
How do we collect your data?
Your data is collected, on the one hand, when you provide it to us, for example via the project request form or when booking a call.
Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. This website does not use any analytics or tracking tools; your usage behaviour is not analysed.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time using the address given in the imprint for this purpose, as well as for any further questions about data protection. You also have the right to lodge a complaint with the competent supervisory authority.
2. General information and mandatory disclosures
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various pieces of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We would like to point out that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Controller
The controller responsible for data processing on this website is:
XR Essential GmbH
Am Sandtorkai 27
20457 Hamburg, Germany
Phone: +49 40 2383064 80
Email: info@xr-essential.com
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. An informal email to us is sufficient for this purpose. The lawfulness of data processing carried out prior to the withdrawal remains unaffected by the withdrawal.
Right to lodge a complaint with the competent supervisory authority
In the event of a breach of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the data protection officer of the German federal state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
SSL and TLS encryption
For security reasons and to protect the transmission of confidential content, such as requests you send to us via the project request form, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.
If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Information, blocking, deletion
Within the scope of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of the data processing, and, if applicable, a right to correction, blocking or deletion of this data. You can contact us at any time using the address given in the imprint for this purpose, as well as for any further questions on the subject of personal data.
Objection to promotional emails
We hereby object to the use of contact data published in the context of the imprint obligation for the purpose of sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as spam emails.
3. Data collection on our website
Hosting
This website is hosted on servers in Germany. When you visit the website, the provider automatically collects and stores information in so-called server log files, as described under "Server log files".
Cookies
This website does not use cookies for analytics or marketing purposes. No cookies are currently set by the website itself. Should technically necessary cookies be used in the future, they will serve solely to make the offering more user-friendly and secure; the legal basis for this would be Art. 6 (1) (f) GDPR.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources.
The basis for data processing is Art. 6 (1) (f) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
Project request form
Via the project request form we collect name, company, email address, optionally phone number, the type of task, your message, optionally a desired date, and optionally a file upload. Transmission is encrypted (TLS). The request is sent to our mailbox via the email service provider Resend (Resend, Inc., USA).
The legal basis for processing is Art. 6 (1) (b) GDPR (pre-contractual measures). Your information is stored until your request has been processed, and beyond that where statutory retention periods require it. Your data is not used for advertising purposes.
Call booking
On the /termin page we embed a booking calendar from termin.xr-essential.com, which we operate ourselves and which runs on servers in Germany. When you use the calendar, the data you enter (name, email address, chosen appointment) is processed in order to schedule the call. The legal basis is Art. 6 (1) (b) GDPR.
Processing of data (customer and contract data)
We collect, process and use personal data only to the extent necessary to establish, structure the content of, or amend a legal relationship (inventory data). This is done on the basis of Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
Customer data collected is deleted upon completion of the assignment or termination of the business relationship. Statutory retention periods remain unaffected.
4. External services and fonts
The fonts used on this website are hosted locally. There is no connection to Google Fonts or other external font providers. This website does not use any external tracking or analytics services.