Privacy policy

for demo.xor.digital · as of October 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
XOR Digital GmbH
Krähenweg 26
82140 Olching
Germany
Email: hello@xordigital.de
Phone: +49 151 1074 6294

2. General

This website is deliberately built to collect as little data as possible: we use no cookies, no analytics or tracking services, and load no fonts, scripts or other content from external servers. Personal data is processed only to the extent described below.

3. Visiting the website and server log files

This website is hosted on Microsoft Azure (Microsoft Corporation, Azure Static Web Apps, provided from data centres in the West Europe region, the Netherlands). When you visit the website, the hosting provider processes technically necessary access data that your browser transmits automatically, in particular:

• IP address of the requesting device,
• date and time of access,
• name and URL of the requested file,
• amount of data transferred,
• browser type and operating system,
• the previously visited page (referrer).

This processing ensures a smooth connection, system security and the technical provision of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). A data processing agreement (Art. 28 GDPR) is in place with the hosting provider. Where data is transferred to third countries, this is based on the EU Standard Contractual Clauses.

4. Application and browser storage

The application at demo.xor.digital/app shows synthetic data only. It runs entirely in your browser: inputs such as notes or decisions stay in your browser's memory, are not transmitted to us or third parties, and are lost when the page is closed or reloaded.

After sign-in, the application stores a single entry in your browser's session storage (sessionStorage) recording that you are signed in. The entry contains no personal data, is not transmitted, and is deleted when you close the tab or sign out. This storage is strictly necessary for the use you requested (Section 25(2) no. 2 TDDDG).

5. Contact by email

If you contact us by email, for instance via "Talk to us", we process the data you provide (in particular email address, name and message content) to handle your request. The legal basis is Art. 6(1)(b) GDPR where your request concerns the conclusion or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests). We delete this data once it is no longer needed for that purpose and no statutory retention obligations apply.

6. Disclosure of data

Your personal data is passed on to third parties only where this is necessary to provide the website (hosting), where there is a legal obligation, or where you have consented. We do not sell your data and do not use it for advertising profiles.

7. Your rights

Within the statutory framework, you have the right at any time to:

• access the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing (Art. 21 GDPR).

An informal message to hello@xordigital.de is sufficient to exercise your rights.

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

9. Updates

This privacy policy is as of October 2026. Further development of the website or changes in legal requirements may make it necessary to amend it. In case of doubt, the German version applies.