In these privacy policies, XTRPY GmbH outlines its approach regarding the data collected from users who access our website at or provide us with personal information in other ways (together: "Users").

The responsible authority under the General Data Protection Regulation (GDPR) is the supervisory authority of the Bavarian State Office for Data Protection. You can access the Website of the supervisory authority here.

Address of the supervisory authority:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach

user rights

You have the following rights:

Please note, however, that these rights are not unlimited but are subject to our own legitimate interests and regulatory requirements. If you would like to exercise any of the rights listed here or would like further information, please contact the supervisory authority mentioned above.


We will store your personal data for as long as necessary to provide our services, comply with legal obligations, settle disputes, and enforce our policies. The retention periods are based on the nature of the data collected and the purpose for which the data was collected, taking into account both the specific circumstances and the need to delete outdated, unused information as soon as possible. We store records containing personal data of customers, documents related to account setup, communications, and other data in accordance with applicable laws and regulations.

We may correct, complete, or remove incomplete or inaccurate data at any time and at our sole discretion.

basis for data collection

The processing of your personal data (i.e. any data that can reasonably be used to identify you; "personal data") is necessary for us to fulfill our contractual obligations to you and to provide you with our services, protect our legitimate interests, and comply with legal and financial regulatory obligations that we are subject to. By using this website, you consent to the collection, storage, use, disclosure, and other use of your personal data as described in these privacy policies.

Please read the privacy policies carefully before making any decisions.

Which data is being collected?

We collect two types of data and information from users.

The first category includes non-identifying and non-identifiable user data that is provided or collected through the use of the website ("Non-personal Data"). We do not know the identity of the user from whom non-personal data was collected. Non-personal data that may be collected includes aggregated usage data and technical data transmitted from your device, including certain information about software and hardware (such as browser and operating system used on the device, language settings, access time, etc.). Based on this data, we improve the functionality of our website. We may also collect data about your activity on the website (such as pages viewed, browsing behavior, clicks, actions, etc.).

The second category includes personal data, i.e., data that identifies an individual or can be identified through appropriate measures. Such data includes:

Device data: We collect personal data from your device, including geolocation data, IP address, unique identifiers (such as MAC address and UUID), and other data that arises from your activity on the website.

Registration data: When you register on our website, you will be asked to provide certain information, such as your first and last name, email address, address, or other information.

How do we obtain data about you?

We obtain your personal data from various sources:

How are the data used? To whom are the data disclosed?

We do not share user data with third parties except as described in these privacy policies.

In addition to the various purposes listed above, we may also disclose personal data to our subsidiaries, affiliated companies, and subcontractors.

Besides the purposes stated in these privacy policies, we may also transfer personal data to our trusted external providers who are located in different jurisdictions around the world for the following reasons:

In addition to the various purposes listed above, we may also disclose personal data to our subsidiaries, affiliated companies, and subcontractors.

Besides the purposes stated in these privacy policies, we may also transfer personal data to our trusted external providers who are located in different jurisdictions around the world for the following reasons:

We may also disclose data if we believe in good faith that it is helpful or appropriate to


For the provision of corresponding services, we and our partners use cookies. This also applies when you visit our website or access our services.

A "cookie" is a small data packet that is assigned to your device when you visit a website from that website. Cookies are useful and can be used for different purposes. These include, for example, facilitating navigation between different pages, automatically activating certain functions, saving your settings, and providing optimized access to our services. The use of cookies also allows us to display relevant advertising tailored to your interests and to collect statistical information about your use of our services.

This website uses the following types of cookies:

Cookies do not contain personally identifiable information, but the personal data we store may be linked to the data contained in cookies. You can remove cookies through the device settings of your device. Follow the instructions accordingly. Note that disabling cookies may restrict certain functions when using our website.

The tool we use is based on the technology of Snowplow Analytics. Data we collect on the use of our website includes, for example, how often users visit the website or which areas are accessed. The tool we use does not collect personally identifiable information and is used exclusively by our web hosting provider and service provider to improve their own offerings.

Cookie overview:

USage of script libraries (google web fonts)

To ensure that our content is displayed correctly and graphically appealing in every browser, we use script and font libraries such as Google Web Fonts for this website. Google Web Fonts are transferred to the cache of your browser so that they only need to be loaded once. If your browser does not support or denies access to Google Web Fonts, the content will be displayed in a standard font. When accessing script or font libraries, a connection to the operator of the library is automatically established. There is a theoretical possibility for this operator to collect data. It is currently not known whether and for what purpose the operators of the corresponding libraries actually collect data.

Here you can find the privacy policy of the operator of the Google library.

Collection of data by third parties

This policy only addresses the use and disclosure of information that we collect from you. If you post data on other websites or disclose it to third parties on the Internet, different terms may apply. Therefore, always read the terms and conditions and privacy policy carefully when disclosing data.

This Privacy Policy does not apply to the business practices of companies that we do not own or control, or to anyone other than our officers and employees, including third parties, to whom we disclose this information as described in this Privacy Policy.


We implement the security measures on the website with great care and protect your data.  We use industry standard practices and policies to ensure the protection of data collected and stored, and prevent the unauthorized use of such data. We also require third parties to adhere to similar security requirements in accordance with this Privacy Policy. Although we take reasonable steps to protect data, we cannot be held responsible for the actions of those who gain unauthorized access to or misuse our website, and we make no warranty, express or implied, that we can prevent such access.


Please note that some recipients may not be located in the European Economic Area. If this is the case, we will only transfer your data to countries approved by the European Commission with an adequate level of data protection or ensure an adequate level of data protection through a legal agreement.


When you access our website, we may serve ads using ad technology from third-party vendors. This technology uses your Services usage data to serve ads (for example, by placing third-party cookies in your web browser).You can opt out of many third-party ad networks, including networks operated by members of the Network Advertising Initiative ("NAI") and the Digital Advertising Alliance ("DAA"). For information about the practices of NAI and DAA members, the options you have regarding the use of such data by these companies, and how to opt out of third-party ad networks operated by NAI and DAA members, please visit their respective websites here and here.


We may use your personal information such as your name, email address, phone number, etc. ourselves or share it with an outside subcontractor to provide you with promotional materials regarding our services that may be of interest to you.

We respect your right to privacy. Therefore, these marketing materials will always provide you with the opportunity to unsubscribe from further mailings. If you unsubscribe, your email address or phone number will be removed from our marketing distribution lists.

Be aware that even if you unsubscribe from receiving our marketing emails, we will continue to send you emails with important information that do not include an unsubscribe option. This includes maintenance messages or administrative notifications.


Wir können Daten im Fall einer Unternehmenstransaktion (z. B. beim Verkauf wesentlicher Unternehmensteile, bei einer Fusion, einer Konsolidierung oder einem Anlagenverkauf) weitergeben. Falls ein oben genannter Fall eintritt, übernimmt der Erwerber oder das entsprechende Unternehmen die in dieser Datenschutzerklärung dargelegten Rechte und Pflichten.


The protection of children's data is very important, especially in the online area. The website is not designed for children and is not aimed at them. The use of our services by minors is only permitted with the prior consent or authorization of a parent or guardian. We do not knowingly collect personal information from minors. If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, he or she may contact us at the e-mail address stated here.


We reserve the right to change or review this Privacy Policy from time to time. You can find the date of the current version under "Last modified on". Your continued use of the Platform following the posting of such changes on our website constitutes your consent to such changes to the Privacy Policy and is deemed to be your agreement to be bound by the amended terms.

Contact us at the e-mail address stated here with general questions about the website, the information we collect about you, or our use of that information.

XTRPY GmbH, Heßstr 89, D-80797 München

Last modified on 11.04.2023