Data Protection / Privacy Policy of Xantaro UK

Responsible body

If we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR is the legal basis.

If processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, Art. 6 para. 1 lit. b GDPR is the legal basis.

If processing is necessary for compliance with a legal obligation to which the controller is subject, Art. 6 para. 1 lit. c GDPR is the legal basis.

If processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 para. 1 lit. d GDPR is the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, Art. 6 para. 1 lit. f GDPR is the legal basis.

As a data subject, you have the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR.

The right of access and the right to erasure restrictions apply according to:

• Crime prevention and taxation purposes
  DPA 2018 Schedule 2, Part 1, para 2(3)(c) and DPA 2018 Schedule 2, Part 2, para 6(c)
• Effective immigration control
  DPA 2018 Schedule 2, Part 1, para 4(2)(c)
• Disclosures required by law or made in connection with legal proceedings.
  DPA 2018 Schedule 2, Part 1, para 5

If you have given us your consent, you can object at any time with effect for the future.
In addition, you can complain at any time to a supervisory authority.

Information on your right of object under Article 21 of the General Data Protection Regulation (GDPR)

You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.

If you object, we will no longer process your personal data, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Recipient of objection

You can object (form-free) with the subject “objection” stating your name, address and your company name to the below address:

Xantaro UK Ltd
20 St Dunstan’s Hill
London EC3R 8HL

Or by email to: unsubscribe@xantaro.net

We adhere to the principles of data avoidance and data economy. We therefore only store personal data for as long as it is necessary to achieve the purposes stated here or as provided for in the various storage periods provided for by law. After the respective purpose or expiry of these periods, the corresponding data will be blocked or deleted as a matter of routine and in accordance with statutory regulations.

Purpose, legal basis of data processing and legitimate interest
Our web space provider, HubSpot, Inc, collects data about every access to the website (so-called server log files). Further information on the technologies used by Hubspot Inc. can be found in Hubspot's privacy policy at https://legal.hubspot.com/legal-stuff. Server log files are general information, such as the type of web browser, the operating system used, the domain name of your internet service provider and so on. In addition, our web space provider uses an access log to access our website, which uses the IP address and an error log, which also uses the IP address and serves to report problems that occur on the website.

This information is technically necessary for the correct delivery of requested content from websites and is mandatory when using the internet. They are processed in particular for the following purposes:

• Ensuring a trouble-free connection of the website,
• Ensuring a smooth use of our website,
• Evaluation of system security and stability
• To defend us against and prosecute cyber-attacks, and
• For other administrative purposes.

The processing takes place in accordance with Art. 6 Para. 1 Lit f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as security.

Recipient of the data
We and our web space provider Host Europe GmbH process the personal data as described above.

Purpose, legal basis of data processing and legitimate interest
By providing the contact form on our website, we want to make it easy for users to contact us. The entered data such as name, company and e-mail address are stored for the purpose of individual contact (for example by e-mail) as well as for possible follow-up questions. We will use the data only to respond to your inquiry and subsequently to support any business relationship that may have arisen or may potentially arise.

We process the data entered in the contact form on the basis of a legitimate interest (Art 6 Para. 1 Lit f GDPR).

Recipient of the data
We process the personal data internally.

Purpose, legal basis of data processing and legitimate interest
In order to participate in our events and events of our partners, we provide a contact form for individual contact. The entered data such as first name, last name, company, position / title, email and phone number are saved for the purpose of individual contact and registration at events.

We process the data entered in the contact form on the basis of a legitimate interest (Art 6 (1) lit f GDPR).

Recipient of the data
The personal data is processed internally and, in the case of registration for a partner event, passed on to this partner and processed by them.

This website uses cookies. We use cookies to personalise content and ads on our website, to provide social media features and to analyse our traffic. We also share information about your use of our website with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. You consent to our technically not necessary cookies if you set the respective checkmarks and accept the cookies specified there. You can change or withdraw your consent at any time via the cookie declaration on our website. You can read more about it in our data protection policy.

About Cookies

Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

1. Use of technically necessary cookies

The purpose of using technically necessary cookies is to simplify the use of our website. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change. We require cookies for the following applications:

• Adoption of language settings
• Hubspot Cookie Consent Banner

The following data is stored and transmitted in the cookies:

• Language settings
• Consent on the use of cookies

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our justified interest in a user-friendly design of our website. Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website. For this purpose, we have concluded the corresponding data processing agreements with the providers. The provision of the aforementioned personal data is not required by law or contract. Without this data, however, the service and functionality of our website cannot be ensured.

2. Use of technically not necessary cookies

We use technically not necessary cookies to make it possible to visit our website more comfortable and safer. These cookies are also used to better tailor the offerings on our website to the interests of the visitors or to generally improve them on the basis of statistical evaluations.

We use cookies from the following providers:

• YouTube

The legal basis for this processing is your consent, Art. 6 para. 1 lit. a DSGVO.

The provision of personal data is voluntary. You can also view our website without cookies. However, Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via the settings of your browser. Please note that individual cookie-based functions of our website may not work if you have deactivated the use of cookies or do not give your consent.

The browser settings can be used to delete individual cookies or the entire cookie inventory. Depending on the browser provider, the necessary information can be found under the following links:

• Mozilla Firefox:
  https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
• Internet Explorer:
  https://support.microsoft.com/en-ie/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome:
  https://support.google.com/accounts/answer/61416?hl=en
• Opera:
  https://www.opera.com/help
• Safari:
  https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=en_US

Purpose, legal basis of data processing and legitimate interest
This website uses YouTube videos. YouTube uses so-called “cookies”, text files that are stored on the user’s computer. The purpose is to store the user settings of the website user when the user views the video. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you visit. If you are logged in to your YouTube account, YouTube can personally associate your browsing behaviour with you. You can prevent this by first logging out of your YouTube account.

If a YouTube video starts, the provider uses cookies that collect information about user behaviour.

The data is processed on the basis of your consent (Art 6 (1) lit a GDPR).

For more information, please use the following website https://policies.google.com/privacy.

Recipient of the data
Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA will process the personal data.

Storage duration
Details on the storage duration of the cookies can be found above under the specification of the individual cookies.

Withdrawal of consent
If you have deactivated the storage of cookies for the Google-Ad-Program, you will not have to expect such cookies when watching YouTube videos. YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

Provision of the data
The provision of the aforementioned personal data is not required by law or contract and is based on your freely given consent.

Third country transfer and appropriate safeguards
The data is partly processed in the USA.

Purpose, legal basis of data processing and legitimate interest
On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This enables us to display interactive maps directly on the website and enables you to use the map function conveniently.

For more information, please use the following website https://policies.google.com/privacy.

The legal basis for the integration of Google Maps and the associated data transfer to Google is your freely given consent (Art. 6 (1) lit. a GDPR).

Recipient of the data
By visiting the website, Google receives information that you have called up the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account.

If you do not want the assignment in your profile at Google, you have to log out before activating the button at Google. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing need-based advertising and to inform other users of the social network about your activities on our website.

Third country transfer and appropriate safeguards
The data is processed in the USA.

Withdrawal of consent
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent.

Provision of the data
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Our website uses Google Analytics, a web analysis service provided by Google LLC ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help analyze how you use the website. The information generated by the cookie about your use of the website will typically be transmitted to and stored by Google on servers in the United States.

If IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

For more information on the collection and use of data by Google, please refer to Google's Privacy Policy: https://www.google.com/policies/privacy/

This website uses plugins that allow users to communicate with social media platforms. To protect the privacy of the user, however, the Shariff plugin prevents the scripts of the social media platforms from being executed when the page is loaded, but only activates it when the user explicitly clicks on the corresponding button. This applies to all social media plugins with the exception of the direct integration of Twitter content on the “Latest News” page. Furthermore, this website only initiates data exchange between the user’s browser and social media platforms if the user initiates this data exchange themselves. The user can find information about the collection and use of the data in the social networks in the respective terms of use of the respective provider (http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html).

We have integrated the social media buttons of the following companies on our website:

• Facebook Inc. (1601 S. California Ave – Palo Alto – CA 94304 – USA/ Ltd. 4 Grand Square, Grand Canal Harbour, Dublin 2, Irland)
• Twitter Inc. (795 Folsom St. – Suite 600 – San Francisco – CA 94107 – USA)
• LinkedIn Corporation (2029 Stierlin Court – Mountain View – CA 94043 – USA/ Wilton Plaza, Wilton Place, Dublin 2, Ireland)

Purpose, legal basis of data processing and legitimate interest
This website uses social plugins (“plugins”) of the social network facebook.com, the plugins are recognisable by one of the Facebook logos (grey “f” on dark blue tile with the addition “share”).

Only when a user clicks on such a plugin, their browser establishes a direct connection to the Facebook servers. The provider has no influence on the amount of data Facebook collects with the help of this plugin and therefore informs users according to it’s level of knowledge:

By activating the plugin, Facebook receives information that a user has called up the corresponding page of the offer, the date of the visit and some information in connection with the browser used. If the user is logged into Facebook, Facebook can assign the visit to the users Facebook account. Every interaction with the plugin, for example the sharing of a post, causes the corresponding information from the user’s browser to be transmitted directly to Facebook and stored there. If the user is not a member of Facebook, it is still possible for Facebook to obtain and store the user’s IP address. According to Facebook, only an anonymised IP address is stored in Germany.

If a user is a Facebook member and does not want Facebook to use this offer to collect data about him or her and link it to his or her membership data stored on Facebook, he or she may not press the button of the social media plugin. Further settings and objections to the use of data for advertising purposes can be made within the Facebook profile settings: https://www.facebook.com/settings?tab=ads.

Facebook uses the “Facebook Insight” function on the fan page we use. This function is an indispensable part of our user relationship. This allows Facebook to receive anonymised statistical data of users. The data is collected using cookies, each of which contains a unique user code that is active for two years. Facebook collects and processes the user code on the fan page.

The purpose and scope of data collection and the further processing and use of the data by Facebook as well as the relevant rights and setting options for the protection of users’ privacy can be found in Facebook’s data protection information: https://www.facebook.com/about/privacy/.

Recipient of the data
Facebook Ireland Ltd. 4 Grand Square, Grand Canal Harbour, Dublin 2, Ireland and Facebook .1601 S. California Ave – Palo Alto – CA 94304 – USA processes the personal data of the user.

Purpose, legal basis of data processing and legitimate interest
This website uses web page elements (https://dev.twitter.com/web/overview), such as buttons or integrated content of the Twitter service. With the help of the website elements it is possible, for example, to share a contribution or page of this offer on Twitter or to follow the provider on Twitter. The Twitter plugin can be recognised by the grey Twitter logo on light blue tile with the addition “tweet”. As further contents individual tweets can be merged into the website.

When the user calls up a subpage on which Twitter content is integrated, the browser establishes a direct connection to the Twitter servers. On all other areas of the website, the plugin is not activated until the user clicks on it.

The provider has no influence on the amount of data Twitter collects with the help of the website elements and informs users according to their level of knowledge. After this, only the IP address of the user as well as the URL of the respective website is transmitted when using the button, but is not used for purposes other than the presentation of the website element.

Further information can be found in Twitter’s privacy policy at https://twitter.com/en/privacy.

Recipient of the data
Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA („Twitter“) processes the user’s personal information.

Purpose, legal basis of data processing and legitimate interest
This website uses social plugins of the social network “LinkedIn”. The plugins of LinkedIn can be recognised by the grey “in” on blue tile and the addition “communicate”.

Only when a user clicks on such a plugin, the plugin establishes a connection between the user’s browser and the LinkedIn server. The provider has no influence on the amount of data, LinkedIn collects with the help of this plugin and therefore informs the user according to their level of knowledge.

By activating the plugin, LinkedIn receives the information that a user has called the corresponding page of the offer, from which page they come and to which page they change. In addition, further information (e.g. device identifier, operating system, web browser, installed add-ons, proxy server, ISP and, if applicable, location data) is collected about the user’s terminal device. If the user is logged into LinkedIn, LinkedIn can assign the visit to the users LinkedIn account. Every interaction with the plugins, for example by pressing the “Share” button, results in the corresponding information from the user’s browser being transmitted directly to LinkedIn and stored there. Even if the user is not a member of LinkedIn, this user data is collected and stored by LinkedIn.

Recipient of the data
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA processes the user´s personal data. Privacy matters outside the USA are the responsibility of LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.