Privacy policy
Please note: this English version is a translation provided for convenience. Only the German privacy policy is legally binding. If the two versions differ, the German version prevails.
Controller
The controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:
Chongqing Xingxian Technology Co., Ltd.
Room 2-A051, 34F, No. 28 Minquan Road, Jiefangbei Subdistrict, Yuzhong District, Chongqing, China
Legal representative: Daniel Maximilian Torsten Poles
Contact
Email: contact@cqxingxian.com
Phone Germany: +49 15561 090436
Your rights as a data subject
Using the contact details above, you can exercise the following rights under the GDPR at any time:
- access to the data we hold about you and how it is processed (Art. 15 GDPR),
- rectification of inaccurate personal data (Art. 16 GDPR),
- erasure of the data we hold about you (Art. 17 GDPR),
- restriction of processing where legal obligations do not yet allow us to erase your data (Art. 18 GDPR),
- objection to our processing of your data (Art. 21 GDPR), and
- data portability where you have consented to the processing or have entered into a contract with us (Art. 20 GDPR).
If you have given us your consent, you can withdraw it at any time with effect for the future.
You can lodge a complaint with a supervisory authority at any time, for example the supervisory authority of the German federal state in which you live, or the authority responsible for us as the controller.
A list of supervisory authorities (for the non-public sector) with their addresses is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Processing activities
General information collected when you visit our website
Nature and purpose of processing
When you access our website, that is, when you do not register or otherwise submit information, general information is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system, the domain name of your internet service provider, your IP address and similar data.
It is processed in particular for the following purposes:
- ensuring the website can be used smoothly
We do not use your data to draw conclusions about you as a person. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.
When you open the home page, our server reads the language setting sent by your browser and forwards you to the matching language version. This information is not stored separately for this purpose.
Our website sets no cookies and uses no analytics or tracking tools.
Legal basis and legitimate interest
Processing is based on Art. 6(1)(f) GDPR and our legitimate interest in improving the stability and functionality of our website, ensuring system security and detecting misuse.
Recipients
The recipient of the data is Cloudflare, as the technical service provider for operating and maintaining our website and for processing contact enquiries. Cloudflare acts as a processor.
Storage period
Cloudflare stores server log data only for a short period. Logs of the Cloudflare Worker we use are kept for a maximum of 7 days. HTTP request data in Cloudflare's analytics tools is currently kept for at least 31 days; the exact period depends on the dataset.
In the event of a security incident, server log data may be kept until the incident has been resolved and fully investigated.
Transfer to third countries
The data collected may be transferred to the following third countries:
USA
The following data protection safeguards are in place:
The European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, under which Cloudflare is certified; in addition, EU Standard Contractual Clauses (SCC)
Whether you are required to provide the data
You are not required by law or by contract to provide the personal data above. Without your IP address, however, the service and functionality of our website cannot be guaranteed. Individual services may also be unavailable or limited.
Objection
See the information on your right to object under Art. 21 GDPR below.
Contacting us
Nature and purpose of processing
Our website has a contact form that you can use to contact us electronically. If you use it, the data you enter in the form is transmitted to us and stored.
When the message is sent, the date and time of the enquiry and the language version you used are also stored. Your IP address is processed in the server log data, as described above under "General information collected when you visit our website". For enquiries sent from the Chinese page, we also store your consent to the transfer abroad under China's Personal Information Protection Law (PIPL).
You can also contact us at the email addresses provided. Emails to these addresses and enquiries sent through the contact form are forwarded via Cloudflare to our mailbox at Proton. In that case, the personal data sent with the email is stored. This includes the date and time the email was sent, the email address, IP addresses and information about the servers involved in the email communication.
You can contact us at the phone numbers provided. In that case, we collect log data that includes your phone number and the duration of the call.
On our English and Chinese pages we also give our WeChat ID. If you message us on WeChat, we process your WeChat name, your WeChat ID and the content of your messages. WeChat is operated by Tencent, whose privacy terms also apply.
Whichever way you contact us, we collect the content of your enquiry. Your data is stored so that we can communicate with you individually.
Legal basis
The data is processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest in processing your data is to make it easy for you to contact us.
If you contact us to request a quote, the data is processed to take steps prior to entering into a contract (Art. 6(1)(b) GDPR).
Recipients
The recipients of the data are:
- Cloudflare, as the technical service provider for operating our website, processing contact enquiries and forwarding emails to our mailbox,
- Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland, as the provider of our email mailbox.
Both act as processors.
Transfer to third countries
The data collected may be transferred to the following third countries:
USA (Cloudflare), Switzerland (Proton)
The following data protection safeguards are in place:
USA: as described above. Switzerland: adequacy decision of the European Commission. Proton stores emails encrypted on servers in Switzerland, Germany or Norway.
Storage period
Data is deleted no later than 90 days after your enquiry has been dealt with.
If a contractual relationship is established, we are subject to statutory retention periods. The Chinese rules on bookkeeping and tax are particularly relevant; under them, accounting records must be kept for up to 30 years.
Whether you are required to provide the data
Providing your personal data is voluntary. However, we can only process your enquiry if you give us the necessary data and the reason for your enquiry.
Objection
See the information on your right to object under Art. 21 GDPR below.
Information on your right to object under Art. 21 GDPR
Right to object in individual cases
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR (processing on the basis of a balancing of interests). This also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Recipient of an objection
Daniel Maximilian Torsten Poles
Contact
Email: contact@cqxingxian.com
Phone Germany: +49 15561 090436
Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always meets current legal requirements, or to reflect changes to our services, for example when we introduce new services. The new privacy policy will then apply to your next visit.
Questions about data protection
If you have any questions about data protection, please email the controller named above.
Copyright notice
The German original of this privacy policy was created with the help of activeMind AG – the experts for external data protection officers (version #2024-10-25).