Legal
Privacy Policy
Last updated: 1 September 2026
We treat the protection of personal data as a structural requirement, not a marketing claim. This website is built to collect as little data as is legally and technically possible.
Controller
XBANQ GmbH, Neuhofer Weg 2, 91257 Pegnitz, Germany. E-mail: hello@xbanq.com.
Data protection officer
XBANQ GmbH is not required to appoint a data protection officer under Art. 37 GDPR and §38 BDSG, as the relevant thresholds are not met. Please direct data protection enquiries to hello@xbanq.com.
Hosting
This website is hosted on infrastructure operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place.
SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the padlock symbol and the https:// prefix in your browser's address bar. Data transmitted between your device and the server cannot be read by third parties.
Server logs
The hosting provider creates technical access logs containing the IP address, timestamp, requested resource, HTTP status code and user agent. These serve security and operational purposes only and are deleted after 14 days at the latest. Legal basis: Art. 6 (1) (f) GDPR.
Storage on your device (§25 TDDDG)
This website neither stores information on your device nor accesses information already stored there. Consent pursuant to §25 (1) TDDDG is therefore not required. Exception: if you change the language or theme setting, that preference is stored locally in your browser only and is never transmitted to us; it is strictly necessary to provide that function within the meaning of §25 (2) no. 2 TDDDG.
Cookies
This website sets no cookies. No strictly necessary cookies, no analytics cookies, no marketing cookies.
Analytics & tracking
This website uses no analytics tools, no tracking pixels, no fingerprinting and no third-party scripts. Apart from the security logs described above, no usage data is processed.
Contacting us by e-mail
If you contact us by e-mail (for example at hello@xbanq.com), we process the personal data you provide — in particular your e-mail address, your name where given, and the content of your message — solely in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise Art. 6 (1) (f) GDPR (our legitimate interest in responding to your enquiry). Your data is not passed to third parties unless we are legally obliged to do so. Business correspondence is retained for up to ten years under commercial and tax retention obligations (§147 AO, §257 HGB); all other enquiries are deleted once they are no longer required for their purpose, and after twelve months at the latest.
External links
External links open in a new tab. We have no influence over the data processing practices of external sites and accept no responsibility for them.
Transfers to third countries
No personal data is transferred to third countries outside the European Economic Area (EEA). Both the registered office of XBANQ GmbH and the hosting infrastructure used are located in Germany.
Your rights under the GDPR
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7 (3)). Please address requests to hello@xbanq.com.
Supervisory authority
You have the right to lodge a complaint with the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.