Data Protection Policy

Last Updated:

1. Introduction

Xunrovarthor ("we," "our," or "us") is committed to protecting and respecting your privacy. This Data Protection Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this policy carefully to understand our views and practices regarding your personal data and how we will handle it.

We are located at Charlottenstrasse 68, 10117 Berlin, Germany, and operate in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our website and services, you acknowledge that you have read and understood this Data Protection Policy.

2. Information We Collect

We collect various types of information in connection with the services we provide, including:

2.1 Personal Information

Personal information is data that can be used to identify you individually. We may collect the following personal information:

Name and contact information (email address, phone number, postal address)
Account credentials (username and password)
Payment and billing information
Company name and job title
Communication preferences
Any other information you choose to provide to us

2.2 Usage Data

We automatically collect certain information when you visit, use, or navigate our website. This information does not reveal your specific identity but may include:

Device and browser information (IP address, browser type, operating system)
Usage details (pages visited, time spent on pages, click data)
Referring website addresses
Date and time stamps
Diagnostic data

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

3. How We Use Your Information

We use the information we collect for various purposes, including:

To provide, operate, and maintain our services
To process your transactions and manage your account
To communicate with you, including responding to your inquiries and providing customer support
To send you technical notices, updates, security alerts, and administrative messages
To provide you with news, special offers, and general information about our services
To monitor and analyze usage and trends to improve your experience
To detect, prevent, and address technical issues and security vulnerabilities
To comply with legal obligations and enforce our terms and conditions
To personalize your experience and deliver content relevant to your interests

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

Consent: You have given clear consent for us to process your personal data for a specific purpose
Contract: Processing is necessary for the performance of a contract with you
Legal Obligation: Processing is necessary to comply with legal obligations
Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. These service providers are contractually obligated to use your personal information only as necessary to provide services to us.

5.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as a court or government agency. We may also disclose your information to protect our rights, privacy, safety, or property, and that of our users or the public.

5.4 With Your Consent

We may share your information for any other purpose with your consent.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Data Protection Policy, unless a longer retention period is required or permitted by law. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data, and applicable legal requirements.

When we no longer need your personal information, we will securely delete or anonymize it. If deletion is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from further processing until deletion is possible.

7. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You have the right to request copies of your personal data
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data
Right to Erasure: You have the right to request deletion of your personal data under certain circumstances
Right to Restrict Processing: You have the right to request restriction of processing your personal data under certain circumstances
Right to Data Portability: You have the right to request transfer of your personal data to another organization or directly to you
Right to Object: You have the right to object to our processing of your personal data under certain circumstances
Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month. Please note that we may need to verify your identity before processing your request.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

Encryption of data in transit and at rest
Regular security assessments and audits
Access controls and authentication mechanisms
Employee training on data protection and security
Incident response procedures

However, please note that no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside Germany and choose to provide information to us, please note that we transfer the data to Germany and process it there. Your consent to this Data Protection Policy followed by your submission of such information represents your agreement to that transfer.

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.

11. Changes to This Policy

We may update this Data Protection Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Data Protection Policy or our data practices, please contact us:

Xunrovarthor
Charlottenstrasse 68
10117 Berlin, Germany
Phone: +49 30 347 4764-0
Email: chat@xunrovarthor.world

You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates applicable data protection laws.

13. Supervisory Authority

If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection authority. In Germany, the relevant authority is:

Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Graurheindorfer Str. 153
53117 Bonn, Germany