XOR Digital

Privacy policy

for homologation.xor.digital and demo.xor.digital · as of October 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
XOR Digital GmbH
Krähenweg 26
82140 Olching
Germany
Email: hello@xordigital.de
Phone: +49 151 1074 6294

2. General

This website is deliberately built to collect as little data as possible: we use no cookies and load no fonts from external servers. To measure reach on the product page and the legal pages, we use only the cookieless service Plausible Analytics (see section 4). The application loads no content from external servers. Personal data is processed only to the extent described below.

3. Visiting the website and server log files

This website is hosted on Microsoft Azure (Microsoft Corporation, Azure Static Web Apps, provided from data centres in the West Europe region, the Netherlands). When you visit the website, the hosting provider processes technically necessary access data that your browser transmits automatically, in particular:

This processing ensures a smooth connection, system security and the technical provision of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). A data processing agreement (Art. 28 GDPR) is in place with the hosting provider. Where data is transferred to third countries, this is based on the EU Standard Contractual Clauses.

4. Audience measurement with Plausible Analytics

We use Plausible Analytics from Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. The data is processed on servers in Germany. Plausible sets no cookies and stores no IP addresses. Only aggregated information is recorded: page visited, referring website, country, browser, operating system and device type. It is not possible to identify individual people. The legal basis is our legitimate interest in data-minimising audience measurement (Art. 6(1)(f) GDPR). The application at demo.xor.digital/app does not include Plausible.

5. Application and browser storage

The application at demo.xor.digital/app shows synthetic data only. It runs entirely in your browser: inputs such as notes or decisions stay in your browser's memory, are not transmitted to us or third parties, and are lost when the page is closed or reloaded.

After sign-in, the application stores a single entry in your browser's session storage (sessionStorage) recording that you are signed in. The entry contains no personal data, is not transmitted, and is deleted when you close the tab or sign out. This storage is strictly necessary for the use you requested (Section 25(2) no. 2 TDDDG).

6. Contact by email

If you contact us by email, we process the data you provide (in particular email address, name and message content) to handle your request. The legal basis is Art. 6(1)(b) GDPR where your request concerns the conclusion or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests). We delete this data once it is no longer needed for that purpose and no statutory retention obligations apply.

7. Booking an appointment (Microsoft Bookings / Outlook)

The “Book a call” button takes you to an online appointment booking service from Microsoft (Microsoft Bookings, part of Microsoft 365). If you book an appointment there, the data you enter (e.g. name, email address and any further details) is processed to organise and hold the appointment. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient scheduling).

The provider is Microsoft Corporation. Data may be transferred to third countries; Microsoft bases such transfers on the EU Standard Contractual Clauses. For more information, see Microsoft’s privacy statement: privacy.microsoft.com/en-gb/privacystatement.

8. Disclosure of data

Your personal data is passed on to third parties only where this is necessary to provide the website and the services named above (hosting, audience measurement, appointment booking), where there is a legal obligation, or where you have consented. We do not sell your data and do not use it for advertising profiles.

9. Your rights

Within the statutory framework, you have the right at any time to:

An informal message to hello@xordigital.de is sufficient to exercise your rights.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

11. Updates

This privacy policy is as of October 2026. Further development of the website or changes in legal requirements may make it necessary to amend it. In case of doubt, the German version applies.