Privacy policy

1. Controller

Xvisia Nexus UG (haftungsbeschränkt) i.Gr., represented by the managing director Thomas Weseloh

Prandtlstraße 23, 85354 Freising, Germany

Email: info@xvisia.ai

2. Hosting and server log files

This website is hosted by an external service provider. When you open the site, the host automatically processes information your browser transmits: IP address, date and time of access, page requested, volume of data transferred, referrer URL, and browser and operating system identifiers.

This processing is based on Art. 6 (1) (f) GDPR. The legitimate interest lies in the technically sound and secure operation of the website. Log files are deleted automatically after a short period.

A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

3. Fonts

The fonts used, Inter and IBM Plex Mono, are served locally from this server. No connection is made to Google Fonts or any other third-party server, and no data is transferred to third parties in the process.

4. Cookies, analytics and tracking

This website sets no cookies. There is no audience measurement, no tracking and no profiling. No consent banner is required, because there is nothing to consent to.

5. Contact form

When you submit the contact form, the data you entered is transmitted to this server and delivered from there to me by email: name, email address, your description of your challenge and your goal, and — where you provide them — your website and your selection of how you found me.

Delivery is handled by the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes the data solely on instruction, for the purpose of sending the message. A data processing agreement pursuant to Art. 28 GDPR is in place; it forms part of Resend’s terms of service as a Data Processing Addendum. The transfer to the USA is based on the EU Standard Contractual Clauses incorporated into that addendum and on Resend’s certification under the EU-U.S. Data Privacy Framework. Messages are not stored on this server.

The legal basis is Art. 6 (1) (b) GDPR for pre-contractual measures and Art. 6 (1) (a) GDPR for the consent you give. You may withdraw that consent at any time with effect for the future. The data is deleted once your enquiry has been dealt with and no statutory retention periods apply.

The form contains a field invisible to you that blocks automated submissions. It processes no personal data and sets no cookies. No captcha is used.

You are welcome to write to me directly at info@xvisia.ai instead.

6. Booking calls via Calendly

For booking calls I link to the service Calendly (Calendly LLC, USA). Calendly is not embedded in this website: a connection to Calendly is only established when you actively click the link.

From that point onwards Calendly's privacy policy applies. The data entered there — typically name, email address and preferred time — is processed by me to conduct the call, on the basis of Art. 6 (1) (b) GDPR.

Calendly: https://calendly.com/privacy

7. Encryption

This website uses TLS encryption. You can recognise an encrypted connection by the address bar of your browser beginning with "https://".

8. Your rights

You have the right at any time to information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing (Art. 21).

You may withdraw consent you have given at any time with effect for the future. An informal email to info@xvisia.ai is sufficient to exercise your rights.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany.