Privacy Policy

The controller responsible for processing personal data on XOPlaces is:

Julian Erz
Schwanthalerstraße 111
80339 Munich
Germany

Email: info@xoplaces.com

XOPlaces is hosted by SiteGround. Our email communication via info@xoplaces.com is also provided through SiteGround.

For xoplaces.de, we additionally use the SiteGround CDN to deliver website content quickly and reliably.

When you access our website, technically necessary connection data is processed. This may include, in particular, your IP address, the date and time of access, the requested URL, referrer URL, browser, operating system, user agent and HTTP status code.

This processing is necessary to technically deliver XOPlaces, ensure the stability and security of the website, and detect errors and abusive access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and efficient operation of our website.

The SiteGround CDN may deliver content through geographically distributed server locations. If personal data is processed outside the European Economic Area in this context, this is done in accordance with the legal requirements for international data transfers.

Server log data is stored only for as long as necessary for technical operation, security and error analysis. The specific technical retention periods depend on the respective hosting configuration.

XOPlaces uses Borlabs Cookie to manage cookies and similar technologies and to obtain and document consent.

Information about the choices you make is stored so that your decision can be respected and you do not have to be asked again each time you visit a page.

Where processing is based on your consent, the legal basis is Art. 6(1)(a) GDPR. Information that is not technically necessary is stored on or read from your device only after the corresponding consent has been given.

Technically essential technologies may be used where they are necessary to provide a service you have expressly requested or to ensure the technical functionality of the website.

You can change or withdraw consent you have given at any time with effect for the future. For this purpose, we provide the “Cookie settings” link in the footer.

XOPlaces uses Google Analytics 4, a web analytics service provided by Google, to statistically evaluate the use of our website and improve our offering.

Google Analytics may process information including page views and events, sessions, approximate geographic location, and browser and device information. After you have given your consent, the first-party cookie _ga, containing a randomly generated client ID, may be used to distinguish users and sessions.

For users in the European Economic Area, Google Analytics is generally provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google companies or service providers outside the European Economic Area cannot be completely ruled out. Where such a transfer takes place, it is carried out in accordance with the legal requirements for international data transfers.

According to Google, IP addresses of users in the European Economic Area are not logged or stored. They may be used to derive approximate location information before being deleted.

Google Analytics on XOPlaces is controlled through Borlabs Cookie. We use Google’s basic Consent Mode implementation. The Google Analytics tag is loaded and analytics data is sent to Google only after you have consented to the Statistics category or Google Analytics. The advanced implementation of Consent Mode is not enabled.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on or read from your device, this also takes place only on the basis of your consent. You can withdraw your consent at any time with effect for the future via the cookie settings.

XOPlaces is provided in several languages using WPML.

WPML may store technically necessary information on your device so that the language you selected can be recognised and the appropriate language version of the website can be displayed.

This processing serves to provide our multilingual website functionality.

The legal basis is Art. 6(1)(f) GDPR. Where information is stored on or read from your device for this purpose, this happens only to the extent necessary for the language function you expressly requested.

XOPlaces uses maps based on OpenStreetMap. The maps are integrated into our website using Toolset Maps.

When a map is displayed, map tiles are currently loaded from servers operated by the Association OpenStreetMap France under the domain tile.openstreetmap.fr.

This establishes a direct connection between your browser and the map server. Technically necessary connection data, in particular your IP address, is transmitted to the map server.

The maps are loaded only after you have consented to the use of OpenStreetMap.

The legal basis for processing personal data is your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw consent you have given at any time with effect for the future via the cookie settings.

The provider of the map service used is Association OpenStreetMap France, based in France.

You can contact XOPlaces by email or WhatsApp. We process the personal data you provide in your message to the extent necessary to handle and respond to your enquiry.

Email

Our email communication via info@xoplaces.com is provided through SiteGround.

WhatsApp

On our contact page, we provide an external link to WhatsApp. Simply visiting the contact page does not establish a connection to WhatsApp. You are redirected to WhatsApp only after you click the WhatsApp link.

If you contact us via WhatsApp, the data processed may include, in particular, your telephone number, your message and any other information you provide.

For users in the European Economic Area, WhatsApp is generally provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

WhatsApp is part of the Meta group of companies. When you use WhatsApp, data may be processed by WhatsApp and affiliated companies.

Legal basis

Our processing of your contact details is generally based on Art. 6(1)(f) GDPR. Our legitimate interest is to handle enquiries and communicate with our visitors.

If your enquiry is aimed at entering into or performing a contract, Art. 6(1)(b) GDPR may additionally apply.

Data processed by us in connection with an enquiry is deleted once the enquiry has been fully handled and there are no statutory retention obligations or other legitimate reasons for further storage.

We use UpdraftPlus to back up our WordPress installation. Backup copies are additionally stored in Google Drive.

Backups may contain personal data that is present in our WordPress installation at the time the respective backup is created.

Backups are used to protect against data loss and to restore the website following technical problems or security incidents.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in securely and reliably backing up our website.

For users in the European Economic Area, Google Drive is generally provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processing by Google companies or service providers outside the European Economic Area cannot be completely ruled out. Where such a transfer takes place, it is carried out in accordance with the legal requirements for international data transfers.

Where the legal requirements are met, you have, in particular, the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

To exercise your rights, you can contact us at any time at info@xoplaces.com .

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

The authority responsible for us in particular is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

XOPlaces currently does not use solely automated decision-making or profiling within the meaning of Art. 22 GDPR.

We update this privacy policy if XOPlaces, the technology used or the way personal data is processed changes.

The version published on this website at the relevant time applies.