Data Protection

1) Introduction and Data Controller contact details

This privacy policy explains how we process personal data when you use our website. Personal data includes any information that can be used to identify a person.

The data controller within the meaning of the GDPR is Sebastian Reudenbach, Mlynska 6, 82-230 Nowy Staw, Poland, tel.: +48 788 446 138, e-mail: contact@xentros.net. The data controller is the natural or legal person who decides, alone or jointly with others, the purposes and means of processing personal data.

2) Data collection when you use our website

When you simply browse our website, i.e. without registering or providing other information, we only collect data transmitted by your browser to our server (so-called server log files). When you visit our website, we collect the following data, which are technically required to display the site:

• Visited page
• Date and time of access
• Amount of data transferred
• Source/referrer from which you came to the page
• Browser used
• Operating system used
• IP address (possibly in anonymized form)

Processing is based on Art. 6(1)(f) GDPR. The data are not passed on or used in any other way. However, we reserve the right to check server log files at a later time if there are concrete indications of unlawful use.

3) Contacting us

If you contact us (e.g. via contact form or email), personal data will be collected. These data are processed to handle your request and related technical administration.

The legal basis is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If the contact is aimed at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR. Your data will be deleted after the final processing of your request, provided there are no statutory retention obligations.

4) Functions on the website

Google Customer Reviews

We cooperate with Google within the Google Customer Reviews program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The program enables collecting customer feedback from users of our website.

If you give consent in accordance with Art. 6(1)(a) GDPR, we will pass your email address to Google. You will receive an email requesting feedback. The review may be used within Google Customer Reviews and Google Seller Ratings. Using this service may involve transfers of personal data to Google LLC in the USA.

You can withdraw your consent at any time by contacting the data controller or directly Google.

Transfers to third countries may take place based on appropriate safeguards provided for under the GDPR.

5) Rights of data subjects

Applicable data protection law grants you the following rights:

• Right of access under Art. 15 GDPR
• Right to rectification under Art. 16 GDPR
• Right to erasure under Art. 17 GDPR
• Right to restriction of processing under Art. 18 GDPR
• Right to be informed under Art. 19 GDPR
• Right to data portability under Art. 20 GDPR
• Right to withdraw consent under Art. 7(3) GDPR
• Right to lodge a complaint under Art. 77 GDPR

5.2 Right to object

If we process your personal data on the basis of our legitimate interests, you have the right to object at any time for reasons arising from your particular situation.

If you exercise your right to object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

If personal data are processed for direct marketing purposes, you have the right to object at any time.

After your objection, we will stop processing your data for direct marketing purposes.

6) Retention period for personal data

The retention period is determined based on the relevant legal basis, the purpose of processing and, where applicable, statutory retention periods (e.g. under commercial and tax law).

If processing is based on consent, data are stored until the consent is withdrawn.

In other cases, personal data are deleted when they are no longer necessary for the purposes for which they were collected, unless legal obligations require further storage.

Data controller

Sebastian Reudenbach

Xentros

Mlynska 6

82-230 Nowy Staw

Poland