Privacy policy
This privacy policy explains how personal data is processed when you use this file upload service. For the website https://xl-assembly.com/ the privacy policy published there applies.
1. Controller
XL Assembly GmbH
Steinbachstraße 25
52074 Aachen
Germany
Represented by the managing directors Dr.-Ing. Walter Kimmelmann, M.Sc. Alexander Jahn
Phone: +49 241 894379-90 · E-mail: info@xl-assembly.com
2. Data processed when you use this service
a) Server log data
Each time a page is requested, the server records the IP address, date and time, the requested address (without the secret keys contained in links) and the response status. This is necessary to operate the service securely and to detect misuse (Art. 6(1)(f) GDPR). Log data is deleted as soon as it is no longer needed for these purposes.
b) Uploaded files and descriptions
We store the files you upload, their names and sizes, the description you enter and the time of each upload or change. We process this data to receive and handle the files you send us (Art. 6(1)(b) GDPR, or our legitimate interest in communicating with you, Art. 6(1)(f) GDPR). Please only upload personal data of third parties if you are entitled to do so. You can add, change or delete your submission at any time using your private link. Otherwise the data is deleted once it is no longer needed for the purpose for which it was sent, unless statutory retention periods apply.
c) E-mail notification
When a submission is created or changed, an internal e-mail containing the reference, the description, the file names and a download link is sent to our mailbox. The e-mail is transmitted via our e-mail service provider, which processes the data on our behalf (Art. 28 GDPR).
If you enter your e-mail address in the optional field, we send you a copy of this report with the reference, the file names and your private management link, also after later changes. The address is stored with your submission and deleted together with it (Art. 6(1)(b) GDPR).
d) Cookies
This service uses only two technically necessary cookies and no tracking or analytics:
intake_submissions– remembers the private links to the submissions you made from this browser so you can manage them (up to 400 days).intake_lang– remembers the language you selected (up to 400 days).
These cookies are strictly necessary to provide the service you requested (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). You can delete them in your browser at any time.
3. Recipients
Your data is only accessible to us and to the service providers we use to operate this service and send e-mails. It is not sold or passed on to other third parties.
4. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). To exercise your rights, contact us at info@xl-assembly.com.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
5. Security
This service is provided over an encrypted connection (HTTPS). Links for managing and downloading submissions contain random secret keys; please keep your private link confidential.
There is no automated decision-making or profiling.