Legal

Privacy Policy

Last updated: 1 September 2026

We treat the protection of personal data as a structural requirement, not a marketing claim. This website is built to collect as little data as is legally and technically possible.

Controller

XBANQ GmbH, Neuhofer Weg 2, 91257 Pegnitz, Germany. E-mail: hello@xbanq.com.

Data protection officer

XBANQ GmbH is not required to appoint a data protection officer under Art. 37 GDPR and §38 BDSG, as the relevant thresholds are not met. Please direct data protection enquiries to hello@xbanq.com.

Hosting

This website is hosted on infrastructure operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place.

SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the padlock symbol and the https:// prefix in your browser's address bar. Data transmitted between your device and the server cannot be read by third parties.

Server logs

The hosting provider creates technical access logs containing the IP address, timestamp, requested resource, HTTP status code and user agent. These serve security and operational purposes only and are deleted after 14 days at the latest. Legal basis: Art. 6 (1) (f) GDPR.

Storage on your device (§25 TDDDG)

This website neither stores information on your device nor accesses information already stored there. Consent pursuant to §25 (1) TDDDG is therefore not required. Exception: if you change the language or theme setting, that preference is stored locally in your browser only and is never transmitted to us; it is strictly necessary to provide that function within the meaning of §25 (2) no. 2 TDDDG.

Cookies

This website sets no cookies. No strictly necessary cookies, no analytics cookies, no marketing cookies.

Analytics & tracking

This website uses no analytics tools, no tracking pixels, no fingerprinting and no third-party scripts. Apart from the security logs described above, no usage data is processed.

Contacting us by e-mail

If you contact us by e-mail (for example at hello@xbanq.com), we process the personal data you provide — in particular your e-mail address, your name where given, and the content of your message — solely in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise Art. 6 (1) (f) GDPR (our legitimate interest in responding to your enquiry). Your data is not passed to third parties unless we are legally obliged to do so. Business correspondence is retained for up to ten years under commercial and tax retention obligations (§147 AO, §257 HGB); all other enquiries are deleted once they are no longer required for their purpose, and after twelve months at the latest.

External links

External links open in a new tab. We have no influence over the data processing practices of external sites and accept no responsibility for them.

Transfers to third countries

No personal data is transferred to third countries outside the European Economic Area (EEA). Both the registered office of XBANQ GmbH and the hosting infrastructure used are located in Germany.

Your rights under the GDPR

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7 (3)). Please address requests to hello@xbanq.com.

Supervisory authority

You have the right to lodge a complaint with the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.