X-Powertrain GmbH

Industriestraße 6
61279 Grävenwiesbach
Germany

Phone.: +49 6086 9696799
eMail: info@xpowertrain.com
URL: www.xpowertrain.com

Data Protection Officer (DPO) Contact Details:
Name: Ann-Sophie Grünewald
Email: ann-sophie.gruenewald@xpowertrain.com

​

​

Data protection at a glance​

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified. Detailed information on data protection can be found in our Privacy Policy below.

​

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Note on the Controller” in this Privacy Policy.

How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may be, for example, data you enter in a contact form.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g., browser, operating system, time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right at any time, free of charge, to obtain information about the origin, recipients, and purpose of your stored personal data. You also have the right to request rectification or erasure of this data. If you have given consent to data processing, you can withdraw this consent at any time with future effect. Furthermore, you have the right, under certain circumstances, to request restriction of processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time regarding this or any other questions on the subject of data protection.

​

Hosting

Wix.com Ltd.
Cloud-based web development and hosting services
Headquarters: Tel Aviv, Israel 

Privacy & Security Practices
Wix is committed to compliance with global privacy regulations—including GDPR and CCPA—and provides tools to help you protect your personal data and ensure site security.

SSL/TLS Encryption
Wix automatically provides an SSL certificate for every site, ensuring that data transmitted between you and the site is encrypted and secure.

Privacy Policy
For details on how Wix processes and protects your personal information, please refer to Wix’s official Privacy Policy:
https://www.wix.com/about/privacy

​

General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.
When you use this website, various personal data are collected. Personal data are data that can be used to personally identify you. This Privacy Policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmission over the internet (e.g., communication by email) may have security gaps. Complete protection of data against access by third parties is not possible.

​

Storage period

Unless a more specific storage period is stated within this Privacy Policy, your personal data remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent to processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur after these reasons cease to apply.

 

Legal bases for data processing on this website

If you have consented to processing, we process your personal data on the basis of Art. 6(1)(a) GDPR and, where special categories of data under Art. 9(1) GDPR are processed, on the basis of Art. 9(2)(a) GDPR. In the event of explicit consent to the transfer of personal data to third countries, processing additionally takes place on the basis of Art. 49(1)(a) GDPR.
If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), processing is additionally based on Sec. 25(1) TTDSG (German Telecommunications-Telemedia Data Protection Act). Consent can be withdrawn at any time.
If your data are required for performance of a contract or pre-contractual measures, we process them on the basis of Art. 6(1)(b) GDPR.
Where processing is necessary for compliance with a legal obligation, this is based on Art. 6(1)(c) GDPR.
Processing may also be based on our legitimate interests pursuant to Art. 6(1)(f) GDPR. The applicable legal basis in each individual case is explained in the following sections of this Privacy Policy.

​

Note on data transfers to the USA and other third countries

We may use tools from companies based in the USA or other non-EU/EEA countries with an inadequate level of data protection. If these tools are active, your personal data may be transferred to and processed in these third countries. Please note that these countries may not guarantee a level of data protection comparable to that of the EU. For example, US companies are obliged to hand over personal data to security authorities without you being able to take legal action as a data subject. It therefore cannot be ruled out that US authorities (e.g., intelligence services) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

​

Withdrawal of your consent to data processing

Many data processing operations are only possible with your explicit consent. You may withdraw consent you have already given at any time. The lawfulness of processing performed prior to the withdrawal remains unaffected.

Right to object to processing in specific cases and to direct marketing (Art. 21 GDPR)

IF PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR EACH PROCESSING OPERATION IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEREAFTER NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

​

Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.

​

Right to data portability

You have the right to receive data that we process on the basis of your consent or in performance of a contract in a commonly used, machine-readable format and to have those data transmitted to you or to a third party. Where you request direct transfer to another controller, this will only be done where technically feasible.

​

Access, erasure, and rectification

Within the framework of applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, their origin and recipients and the purpose of data processing, and, where applicable, a right to rectification or erasure of this data. You can contact us at any time regarding this or any other questions on personal data.

​

Right to restriction of processing

You have the right to request restriction of processing of your personal data. You can contact us at any time to do so. The right exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of verification, you have the right to request restriction of processing.

• If processing is unlawful, you may request restriction instead of erasure.

• If we no longer need your personal data but you require them for the establishment, exercise, or defence of legal claims, you may request restriction instead of erasure.

• If you have objected pursuant to Art. 21(1) GDPR, a balancing of interests must take place. Until it is determined whose interests prevail, you have the right to request restriction of processing.
  If processing has been restricted, such data—apart from storage—may only be processed with your consent or for the establishment, exercise, or defence of legal claims or for the protection of the rights of another natural or legal person or for important reasons of public interest of the European Union or a Member State.

​

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content (e.g., applications or inquiries you send to us as the site operator), this site uses SSL/TLS encryption. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser line.
If SSL/TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

​

Objection to unsolicited marketing emails

We hereby object to the use of contact data published within the framework of legal notice obligations for sending unsolicited advertising and information materials. The site operators expressly reserve the right to take legal action in the event of unsolicited marketing information, such as spam emails.

​

 

Data collection on this website​

Cookies

Our web pages use cookies. Cookies are small data packets that do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit. Persistent cookies remain stored until you delete them yourself or your web browser automatically deletes them.
Cookies may be set by us (first-party cookies) or by third-party companies (third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites (e.g., cookies for processing payment services).
Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., shopping cart or video display). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies necessary for electronic communication, the provision of certain functions you desire (e.g., shopping cart), or the optimization of the website (e.g., audience measurement) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of services. Where consent to the storage of cookies and comparable technologies has been requested, processing is based exclusively on this consent (Art. 6(1)(a) GDPR and Sec. 25(1) TTDSG); consent can be withdrawn at any time.
You can set your browser to inform you about the setting of cookies and allow cookies only in individual cases, to exclude acceptance of cookies for certain cases or in general, and to activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Which cookies and services are used on this website can be found in this Privacy Policy.

​

Data Processing Agreement (DPA)

We have concluded a Data Processing Agreement (DPA) with the above provider. This legally required agreement ensures that personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.

​

Server log files

The provider of the pages automatically collects and stores information in server log files that your browser automatically transmits to us. These include:

• Browser type and version

• Operating system used

• Referrer URL

• Hostname of the accessing device

• Time of the server request

• IP address
  This data will not be merged with other data sources.
  The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website—for this, server log files must be recorded.

​

Contact form

If you send us inquiries via the contact form, the data you enter, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
Processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where requested; consent can be withdrawn at any time.
The data you enter in the contact form remain with us until you request deletion, withdraw consent, or the purpose for storage no longer applies (e.g., after the inquiry has been fully processed). Mandatory statutory provisions—especially retention periods—remain unaffected.

​

Inquiries by email, telephone, or fax

If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.
Processing is based on Art. 6(1)(b) GDPR if your inquiry is related to contract performance or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where requested; consent can be withdrawn at any time.
The data sent to us via contact inquiries remain with us until you request deletion, withdraw consent, or the purpose for storage no longer applies. Mandatory statutory provisions—particularly statutory retention periods—remain unaffected.

​

Social Media (LinkedIn)

We maintain a company profile on LinkedIn to present our business, products, and services, and to communicate with customers, partners, and interested parties.
When you visit our LinkedIn page, certain personal data is processed both by us and by LinkedIn.

Data processing by LinkedIn
LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. When you visit our LinkedIn page, LinkedIn processes your personal data (e.g., IP address, user behavior, interests). LinkedIn may use this data for market research and advertising purposes. Please note that data may also be transferred to the USA and other third countries. We have no influence over this data processing. For details, please refer to LinkedIn’s Privacy Policy:
👉 https://www.linkedin.com/legal/privacy-policy

Data processing by us
We receive aggregated statistics (“Page Insights”) from LinkedIn about visits to our company page. This data is anonymized and does not allow us to identify individual users. We use this information to analyze reach and improve our content.
If you contact us via LinkedIn (e.g., by message, comment, or “Follow”), we process your personal data solely to respond to your inquiry or to interact with you on LinkedIn.

Legal basis
Data processing is based on our legitimate interest in an effective external presentation of our company and communication with interested parties (Art. 6(1)(f) GDPR).

Controller responsibility
According to Art. 26 GDPR, we and LinkedIn are joint controllers for the processing of Page Insights data. The joint controller agreement can be viewed here:
👉 https://legal.linkedin.com/pages-joint-controller-addendum

​

 

Plugins and tools

​Google Fonts (local hosting)

This site uses Google Fonts for uniform display of typefaces. The Google Fonts are installed locally. No connection to Google servers is established.
Further information about Google Fonts: https://developers.google.com/fonts/faq
Google Privacy Policy: https://policies.google.com/privacy?hl=de

​

Processing of customer and contract data

We collect, process, and use personal customer and contract data to establish, define the content of, and amend our contractual relationships. We collect, process, and use personal data about the use of this website (usage data) only to the extent necessary to enable the user to utilize the service. The legal basis is Art. 6(1)(b) GDPR.
Collected customer data will be deleted after completion of the order or termination of the business relationship and expiration of any applicable statutory retention periods. Statutory retention periods remain unaffected.

​

​

Our own services​

Handling of applicant data

We offer you the opportunity to apply to us (e.g., by email, post, or via an online application form). Below we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that collection, processing, and use of your data are carried out in accordance with applicable data protection law and all other legal provisions, and that your data will be treated strictly confidentially.

Scope and purpose of data collection
If you submit an application, we process the associated personal data (e.g., contact and communication data, application documents, notes taken during interviews) to the extent necessary to decide on the establishment of an employment relationship. The legal bases are Sec. 26 BDSG (German Federal Data Protection Act), Art. 6(1)(b) GDPR, and—if you have given consent—Art. 6(1)(a) GDPR. Consent may be withdrawn at any time. Within our company, your personal data will only be shared with persons involved in processing your application.
If the application is successful, the data you have submitted will be stored in our systems for the purpose of implementing the employment relationship on the basis of Sec. 26 BDSG and Art. 6(1)(b) GDPR.

Retention period
If we are unable to offer you a position, you reject an offer, or you withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months after the end of the application process (rejection or withdrawal). Thereafter, the data will be deleted and physical application documents destroyed. Retention serves, in particular, as evidence in the event of legal disputes. If it is apparent that the data will be required after expiry of the 6-month period (e.g., due to a threatened or pending legal dispute), deletion will only take place when the purpose for further retention no longer applies.
Longer retention may also occur if you have given corresponding consent (Art. 6(1)(a) GDPR) or if statutory retention obligations preclude deletion.

​

Your rights

You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to object, to data portability, and to lodge a complaint with the competent supervisory authority. Furthermore, you may request rectification, blocking, erasure, and, under certain circumstances, restriction of processing of your personal data.