Privacy policy

This website is built to need as little data processing as possible: no tracking, no analytics tools, no advertising cookies, no consent banners. External content is loaded only after you explicitly click. What data does arise anyway is described here.

1. Controller

Key Moments
Owner: Sascha Pfeuffer
Auf der Eich 7, 63697 Hirzenhain
Phone: +49 6045 3618689
Email: service@xtool.live

2. Visiting the website (server log files)

When you visit www.xtool.live, your browser transmits technically necessary data that our hosting provider stores in log files:

• shortened or full IP address
• date and time of access
• the address requested and the volume of data transferred
• browser type, browser version and operating system
• referring page, where transmitted

Purpose: delivering the site, operational security and error analysis.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in technically sound and secure operation).
Retention: the logs are deleted or anonymised after 30 days at the latest.

3. Hosting

This website is operated for us by:

Grabs Industries e.K.
Längestraße 14, 78176 Blumberg, Germany

The provider processes the data arising when the site is accessed (section 2) on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with them.

Sub-processor: For server operations, Grabs Industries uses ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

Place of processing: Germany. According to ALL-INKL.COM, the servers are located in its own data centres in Germany.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of this website).

The contact form is processed on the same server (section 9). No further service provider is involved.

4. Language selection

The site exists in German and in English. You always get exactly the version whose address you requested — there is no automatic redirect. Your IP address is not evaluated for this, and no external geolocation service is used.

So that we can offer you the other version at all, the page reads the language setting your browser stores for websites (navigator.languages). If it does not match the version you requested, a line appears at the top pointing to the other language. This check runs entirely in your browser; the setting is not transmitted to us, not stored and not evaluated. If you dismiss the line or explicitly pick a language at the top right, your browser remembers that locally so the notice does not come back.

Your choice in the language switch in the header is stored in your browser's local storage (see the next section) and takes precedence over automatic detection.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in delivering the site in a language you understand).

5. Cookies and local storage

We use no cookies for analytics, advertising or tracking. Two entries may be placed in your browser's local storage:

• xtool-live:youtube-ok remembers that you agreed to load the YouTube player, so you do not have to click again on every visit. The entry is only set if you left the corresponding checkbox ticked.
• xtool-live:language remembers whether you chose German or English, so that automatic detection does not override your decision on every visit. The entry is only created when you use the switch.

Both entries stay exclusively in your browser and are never transmitted to us. You can delete them at any time through your browser settings.

Legal basis: Art. 6 (1) (a) GDPR together with section 25 (1) TDDDG (consent) for the YouTube entry; section 25 (2) no. 2 TDDDG for the language choice, because it enables a service you expressly requested.

6. YouTube embedding (two-click solution)

On the live page and on the home page we embed video content from the YouTube service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Important: simply visiting our pages does not open any connection to YouTube. The player is replaced by a placeholder. Only when you actively click "Load the player" is the YouTube content fetched. Thumbnails of past broadcasts are likewise only retrieved from YouTube from that point on.

With that click, your IP address, information about your browser and device and the page you are on are transmitted to Google, among other data. If you are signed in to a Google account, Google may associate your usage with that account. We use the youtube-nocookie.com variant, where according to Google cookies are only set on playback; data is nevertheless transmitted. Transfer to third countries, in particular the USA, cannot be excluded; Google relies on standard contractual clauses and the EU-US Data Privacy Framework for this.

Legal basis: Art. 6 (1) (a) GDPR and section 25 (1) TDDDG. Your consent is voluntary and can be withdrawn at any time with future effect by deleting the local storage entry named above.

The list of live streams on the live page is fetched by our server when the site is built, not by your browser. Reading that list creates no connection between you and YouTube.

Further information is available in Google's privacy policy.

7. Typefaces

The typefaces used (Archivo, Inter, IBM Plex Mono) are served from our own server. No connection to Google Fonts or any other font service is opened, and no data is transmitted to third parties.

8. Maps and map links

The location maps on the site pages, in the showroom and in the imprint are not an embedded map from a map service but a drawing served from our own server. Loading the page builds no connection to OpenStreetMap, Google Maps or any other provider, no tiles are fetched, and no data is transmitted to third parties.

The drawing is based on map data from OpenStreetMap. We retrieve that data once whenever we renew a map; afterwards it is part of our website and sits on our server. The data is licensed under the Open Database License (ODbL 1.0); the attribution it requires appears on every map and points to openstreetmap.org/copyright. That reference is an ordinary link: it is only called up when you click it.

Alongside this, the addresses of our locations remain ordinary links to Google Maps (“Plan route”). Data is transmitted to Google only when you click such a link and thereby open the Google page.

9. Getting in touch and the enquiry form

If you contact us by email, telephone, WhatsApp or through the enquiry form on this website, we process the data you send us (for example name, contact details, the content of your enquiry) in order to deal with the enquiry.

The enquiry form in detail: we process your name, email address, optionally your phone number, the topic and the preferred form of consultation you select, your message, and any images or PDF files you choose to attach. We also record which page the enquiry was sent from and in which language. The details are processed exclusively on our own server and delivered from there by email to service@xtool.live. No form service, no analytics tool and no recipient outside this path is involved. No newsletter results from it, and nothing is passed on to third parties.

Protection against automated submissions: the form contains a field invisible to you that only programs fill in, and it measures the time between page load and submission. Both stay within your browser or within the submitted enquiry. So that the same origin cannot send an unlimited number of enquiries, we additionally store a shortened, non-reversible checksum of your IP address together with the time of submission; that entry is deleted automatically after one hour. A third-party spam service such as reCAPTCHA is deliberately not used.

Legal basis for the form: Art. 6 (1) (a) GDPR (your consent, given via the checkbox in the form and revocable at any time with future effect) and Art. 6 (1) (b) GDPR where the enquiry relates to the initiation of a contract. For the measures against automated submissions: Art. 6 (1) (f) GDPR (legitimate interest in keeping the form working and free of abuse).

• Legal basis: Art. 6 (1) (b) GDPR where the enquiry relates to a contract or its initiation; otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).
• Retention: we delete the data as soon as it is no longer needed for the purpose, at the latest once statutory retention periods have expired.

If you contact us via WhatsApp, the privacy terms of WhatsApp Ireland Limited apply in addition. We have no influence over the processing that takes place there. If you would rather avoid it, please use the phone or email.

10. Demo booking through xTool

A demo appointment is not booked on this website but through the external xTool demo system. The button opens our short link sascha.xtool.host. It forwards you through the xTool partner programme (operated by Impact, xtool.pxf.io) to the booking page support.xtool.com and assigns the appointment to our demo room. During that redirect a click identifier is generated and cookies may be set. From the moment you click, the privacy policies of the providers involved apply; we are not responsible for the processing of your details there. The appointment request is then passed to us as the host so that we can get back to you.

We are registered in the xTool partner programme. If an order results from this link, it may earn us a commission. The price does not change for you.

The redirect only starts when you click the button. Until then this page loads nothing from a third-party provider, and that is why there is no consent banner here.

11. No automated decision-making

The machine finder and the payback calculator on this website run entirely in your browser. Your entries are transmitted neither to us nor to third parties, are not stored, and disappear as soon as you leave the page. No automated decision-making within the meaning of Art. 22 GDPR takes place.

12. Your rights

You have the following rights in relation to us:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)
• withdrawal of consent with future effect (Art. 7 (3) GDPR)

An informal message to service@xtool.live is enough.

13. Right to lodge a complaint

Independently of the above, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.

14. Encryption

This website uses TLS encryption. You can recognise it by the address bar of your browser beginning with https://.

15. Changes to this policy

We adapt this privacy policy when the website or the legal situation changes. The version published here is the one that applies.

Note: this policy describes the technical state of this website. It is not legal advice. Before going live, the hosting provider details should be filled in and the text reviewed by a lawyer.