This is a courtesy translation. Only the German version is legally binding.
1. Controller
X-Mon Germany GmbH
Röntgenstr. 37
71229 Leonberg
Germany
Phone: +49 7152 76593-60
Email: service (at) xmongermany.de
2. Hosting
Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes the data on our behalf exclusively in data centres in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.
The website is transmitted in encrypted form (HTTPS/TLS). Data you enter in our forms therefore cannot be read by third parties in transit.
3. Server log files and access statistics
Each time our website is accessed, the web server automatically records the following data:
- IP address of the accessing device
- date and time of access
- page or file accessed, status code and amount of data transferred
- website from which you came to us (referrer)
- browser and operating system used
- domain of your internet access provider
This data is needed to deliver the website and to detect and fend off attacks. For this purpose, STRATO stores the full IP address for no more than seven days.
STRATO also produces access statistics for us from the log files. In doing so, the IP address is anonymised: part of the address is replaced by a hash value that is regenerated after 24 hours at the latest. We can retrieve the anonymised log files for six weeks. The statistics themselves contain only aggregated figures, such as page views, visits, frequently viewed pages and referring pages, and can be viewed for up to 400 days. No cookies are set, no scripts or tracking pixels are loaded and no usage profiles are created for these statistics.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and reliably and in understanding which content is used.
4. Contact form and contacting us
If you contact us via the contact form, by email or by phone, we process the details you provide solely to handle your enquiry. In the contact form, these are your name, company, email address, the selected topic and your message, plus your phone number on a voluntary basis. We cannot handle your enquiry without the mandatory details.
The form data is not stored on the web server but sent as an email via STRATO’s mail server to our mailbox (see section 6).
This processing is based on Art. 6(1)(b) GDPR where pre-contractual or contractual matters are concerned, and otherwise on Art. 6(1)(f) GDPR. Our legitimate interest is answering your enquiry.
5. Downloading articles as PDF
You can read our articles freely on the website. To download an article as a PDF, we ask for your name, your email address and, optionally, your company or organisation. These details are sent by email to our mailbox together with the title of the article and the time of the download (see section 6). They are not stored on the web server.
We use them to understand who is interested in our articles. You will not receive a newsletter or advertising emails as a result. This processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in being able to gauge interest in our specialist topics.
6. Email mailbox (Microsoft 365)
We run our email mailbox on Microsoft 365, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Your emails and the details from the contact form and the PDF download are received and handled there. Microsoft processes the data as a processor under an agreement pursuant to Art. 28 GDPR and, according to its own information, stores it in data centres in the European Union.
Access by the parent company Microsoft Corporation in the USA, for example for support or maintenance, cannot be completely ruled out. Microsoft Corporation is certified under the EU-US Data Privacy Framework, so transfers to the USA are covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, Microsoft has agreed to the European Commission’s standard contractual clauses (Art. 46 GDPR).
7. Cookies and storage in the browser
Our website does not set any cookies and does not store any information in your browser or on your device. We do not use any analytics, tracking or marketing services and do not load any content, fonts or scripts from third parties. Consent is therefore not required. You can view the current status at any time via the “Privacy settings” link in the footer.
Should we use services in future that store information in your browser or transfer data to third parties, these will only be loaded after you have given your consent and will be described in this privacy policy.
8. Recipients
Your data is only received by our processors STRATO (hosting, log files, sending emails) and Microsoft (email mailbox). Data is only passed on to other third parties where this is permitted or required by law. Data is transferred to countries outside the European Union only to the extent described in section 6.
9. Storage period
- Server log files: full IP addresses for no more than seven days, anonymised log files for six weeks. The access statistics no longer contain any personal data.
- Enquiries via contact form, email or phone: we delete them once your enquiry has been fully handled and no business relationship results, at the latest three years after the last contact. If an order results, we keep business correspondence for as long as commercial and tax law requires (six or ten years under § 257 HGB and § 147 AO).
- Details provided for a PDF download: no later than twelve months after the download.
10. Your rights
Within the scope of the statutory provisions, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). An informal message to service (at) xmongermany.de is sufficient.
11. Right to object
Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can send your objection informally to service (at) xmongermany.de.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. Competent authorities include, in particular, the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
13. Automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
14. Updates
We reserve the right to amend this privacy policy as required, for example if the website or the services we use change.
Last updated: 11 November 2026