Data protection

Privacy Policy

This Privacy Policy describes how personal data is processed when you visit our website or contact XOLUTION.

Last updated: July 13, 2026

1. Controller

XOLUTION Consulting AG, Goethestraße 3, 63128 Dietzenbach, Germany

Phone: +49 (0)6074 2152217

2. Hosting with IONOS

Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When a page is requested, IONOS processes the requested page or file, referrer, browser type and version, operating system, device type, access time and IP address. According to IONOS, the IP address is anonymised immediately upon collection. Visitor data is retained for no longer than eight weeks.

IONOS WebAnalytics is part of the web hosting service and statistically evaluates this anonymised data. The service does not use cookies. Its purpose is the stability, security and technical optimisation of the website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.

Further information about data processing in IONOS web hosting is available at https://www.ionos.de/hilfe/datenschutz/datenverarbeitung-durch-ihr-ionos-produktes/datenverarbeitung-durch-webhosting-produkte/ and about IONOS WebAnalytics at https://www.ionos.de/hilfe/datenschutz/datenverarbeitung-durch-ihr-ionos-produktes/webanalytics/.

3. Contact and forms

If you contact us by form, email, telephone or post, we process the information you provide to handle your enquiry. Depending on the contact method, this may include your name, email address, telephone number, subject, message and selected form type.

The website submits forms to our own endpoint on the same domain. The message is sent by email to info@xolcon.com and is not stored in a website database. A timing check, honeypot and request rate limit protect the forms against automated submissions. For this purpose, the technical sender address is converted into a non-reversible verification value and held in the temporary server directory for no longer than 15 minutes. Technical logs contain only the result code and form type.

If your enquiry concerns a contract or steps before entering into a contract, the processing is based on Art. 6(1)(b) GDPR. In other cases, we rely on Art. 6(1)(f) GDPR and our legitimate interest in responding to enquiries and protecting the forms against misuse.

4. Email with Microsoft 365

The info@xolcon.com mailbox uses Microsoft 365 and Exchange Online. Form messages and direct emails are therefore processed by Microsoft as our email service provider. Message content and contact details remain in the mailbox until the enquiry has been completed and no statutory retention duty remains.

The Microsoft Products and Services Data Protection Addendum applies to Microsoft 365. Microsoft generally includes European Microsoft 365 customers in the EU Data Boundary. Microsoft provides contractual safeguards for limited processing outside that boundary. Further information is available at https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA and https://learn.microsoft.com/en-us/privacy/eudb/eu-data-boundary-learn.

Your analytics decision is stored with a version number and selection time in your browser's local storage for no longer than 180 days. This necessary setting allows the website to remember your selection on later visits. You can reopen and change it at any time through Cookie settings in the footer.

Google Analytics 4 starts only if you select Accept in the banner. If you select Reject, analytics remains off. A later withdrawal stops further measurement and deletes analytics cookies that the website can access.

6. Google Analytics 4

After your consent, we use Google Analytics 4 with measurement ID G-2509MRGP5M. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The analysis shows us which pages and navigation paths are used and where we can improve the website.

The processed data may include pages viewed, the time and duration of a visit, referrer, browser and device information, an approximate region and pseudonymous identifiers. According to Google, the IP address of European users is used only to derive an approximate region and is discarded before further storage.

We also measure important contact paths through abstract events. Email and telephone clicks contain only the type of contact method. Important buttons contain a fixed technical identifier. After successful confirmation of a contact or seminar form, only the form type is sent. The information entered in the form remains part only of the message sent to XOLUTION.

After your consent, Google Analytics may set the cookies _ga and _ga_<measurement ID> for no longer than twelve months. The legal basis is Art. 6(1)(a) GDPR and, for access to your device, Section 25(1) TDDDG. You can withdraw consent at any time through Cookie settings in the footer with effect for the future.

Google may process analytics data in the United States. According to Google, such transfers rely on the EU-U.S. Data Privacy Framework and, where required, Standard Contractual Clauses. Further information is available at https://business.safety.google/adsdatatransfers/ and https://policies.google.com/privacy.

7. Retention

We retain personal data only for as long as it is needed for the relevant purpose or statutory retention duties apply. The specific periods for IONOS, the cookie setting and Google Analytics are stated in the relevant sections.

8. Your rights

Subject to the applicable legal requirements, you have in particular the following rights:

Access under Art. 15 GDPR
Rectification under Art. 16 GDPR
Erasure under Art. 17 GDPR
Restriction of processing under Art. 18 GDPR
Data portability under Art. 20 GDPR
Objection under Art. 21 GDPR
Withdrawal of consent with future effect
Complaint to a data protection authority

You can exercise your rights by contacting info@xolcon.com.