Privacy
Privacy information
Last updated: 11 October 2026
This English version is provided for information. The German privacy policy is the authoritative version.
1. Controller
CodePartner GmbH
Twisterlingsbogen 5
26160 Bad Zwischenahn
Germany
Phone: +49 441 1813 1820
Email: kontakt@xr-agentur.de
2. Hosting and server logs
XR-Agentur.de is hosted using classic web hosting provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Technical connection and log data are processed when the website is accessed. Processing is based on Art. 6(1)(f) GDPR for the secure and reliable operation of the website.
According to Hetzner's current documentation, IP addresses in web-server logs are anonymised. Apache access and error logs are retained for seven days by default in classic web hosting, although the account setting can be changed. Backups are retained in encrypted form for 14 days. The actual production-account configuration is decisive.
3. Contact by email or phone
If you contact us by email or phone, we process the information you provide in order to handle your inquiry and subsequent communication. Pre-contractual inquiries are processed under Art. 6(1)(b) GDPR; other business inquiries are processed under Art. 6(1)(f) GDPR based on our legitimate interest in handling communications.
4. Contact form
When you submit the contact form, we process the information you provide. Name, email address and message are required. Company, phone number and project topic are optional. The information is used solely to handle your project inquiry and related communication.
The privacy checkbox only confirms that you have read this privacy information. It is not consent and is not the legal basis for processing your inquiry.
5. Email delivery via Postmark
We use Postmark, a service of AC PM LLC, USA, to deliver contact-form messages. The form data is sent from our web server to Postmark and delivered to kontakt@xr-agentur.de. Your email address is used as the Reply-To address.
Postmark processes the contact data, message content and technical delivery information required for this purpose as our processor. Its current Data Processing Addendum provides for participation in the EU-U.S. Data Privacy Framework and, where required, the European Commission's Standard Contractual Clauses.
According to Postmark, message content and related activity/metadata are retained for 45 days by default. A retention option can configure the period between 7 and 365 days. The setting in the production account is decisive. Open and link tracking are disabled for messages sent through this website's contact form.
6. Form protection
The form uses server-side validation, a request-size limit, a same-origin check and an invisible honeypot field to reduce automated or abusive submissions. No external CAPTCHA provider is used.
7. Cookies, device access and tracking
The current website does not use analytics or advertising trackers, social-media embeds, external web fonts, or non-essential cookies and similar optional device-storage mechanisms. If this changes, any required consent mechanism and this privacy information must be updated before such services are enabled.
8. Recipients
Personal data is accessible only to persons who require it for the relevant purpose. External processors include Hetzner Online GmbH for hosting and AC PM LLC / Postmark for delivery of contact-form messages.
9. Retention
We retain personal data only for as long as necessary for the relevant purpose or as required by statutory retention obligations. Inquiries that do not lead to a contractual relationship are deleted when the communication is complete unless statutory requirements or overriding legitimate interests justify longer storage. Technical provider retention periods are described above.
10. Your rights
Subject to the applicable statutory requirements, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and, where processing is based on Art. 6(1)(f), objection under Art. 21 GDPR.
11. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for the company location is:
Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany
Phone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de
12. Security and updates
We apply appropriate technical and organisational measures to protect personal data. This privacy information will be updated when the website, hosting, contact delivery or other relevant processing changes.