Privacy Policy
Last updated: June 6, 2026
1. Controller
The controller responsible for data processing on this website is: Xellux Owner: Can Yigit Bgm.-Reuter-Str. 10 28327 Bremen Germany Email: [email protected]
2. Data collection
2.1 When visiting the website When you access our website, your browser automatically sends information to our server. This information is temporarily stored in a log file: • IP address of the requesting device • Date and time of the request • Name and URL of the retrieved file • Referrer URL • Browser and operating system used 2.2 When using our contact form When you contact us through the form, a valid email address is required so that we can assign and respond to your request. All further details are voluntary.
3. Data sharing
Your personal data will not be shared with third parties, except in the following cases: • You have given your explicit consent • Disclosure is necessary to assert, exercise or defend legal claims • Disclosure is legally required • It is necessary for the execution of contractual relationships
4. Cookies
We use cookies on our website. These are small files that your browser automatically creates and stores on your device when you visit our site. Most of the cookies we use are session cookies that are automatically deleted after your visit. Other cookies remain on your device until you delete them, in particular technically necessary cookies for sign-in and session management (e.g. the session token of the Xellux ID). The legal basis for technically necessary cookies is § 25 (2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6 (1) lit. b and f GDPR.
5. Web analytics (Umami)
We use the web analytics software Umami, which we operate ourselves on our own infrastructure under the subdomain unami.xellux.com. Umami works without cookies and without cross-device tracking and collects only aggregated usage statistics (e.g. pages visited, referrer, browser and device type, country). No data is transferred to third parties and no full IP addresses are stored permanently; identifying individual visitors is not possible. The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the privacy-friendly, low-footprint analysis of how our website is used in order to improve our offering. As no personal profiles are created and no cookies are set, consent pursuant to § 25 TDDDG is not required.
6. AI features
Where our products include artificial intelligence features, these process personal data only to the extent necessary to provide the respective feature (Art. 6 (1) lit. b GDPR) or where there is a legitimate interest in providing and improving the feature (Art. 6 (1) lit. f GDPR). AI features are labelled as such (cf. Art. 50 of Regulation (EU) 2024/1689). We do not use our users' personal data to train our own AI models. Where external AI providers are engaged as processors, this takes place on the basis of contracts pursuant to Art. 28 GDPR; the providers used in each case are transparently disclosed in the respective product. Decision-making based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR) does not take place.
7. Your rights
You have the right to: • Request information about the data we process (Art. 15 GDPR) • Request correction of incorrect data (Art. 16 GDPR) • Request deletion of your data (Art. 17 GDPR) • Request restriction of processing (Art. 18 GDPR) • Receive your data in a portable format (Art. 20 GDPR) • Object to processing (Art. 21 GDPR) • File a complaint with a supervisory authority (Art. 77 GDPR)
8. Data security
When you visit our website, we use SSL encryption (Secure Socket Layer) with the highest level of encryption supported by your browser. You can recognise an encrypted transmission by the lock icon in the status bar of your browser.
9. Changes to this policy
This privacy policy is current as of June 2026. Due to the further development of our website or changes to statutory or regulatory requirements, it may become necessary to update this privacy policy.