Privacy

Protecting your data matters to us, and we like to keep it short: this website sets no cookies, uses no analytics or tracking services and loads no third-party content. We process personal data only when you send it to us yourself, for example via the contact form or by email. Below we explain what happens then.

1. Controller

X10 Event IT GmbH Gürtelstraße 25 10247 Berlin, Germany Email: hello@x10.de

Represented by the managing director Christen Jansen. We are not required by law to appoint a data protection officer. For all questions about data protection, you can reach us at the email address above.

2. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers in Germany. We have concluded a data processing agreement with Hetzner under Art. 28 GDPR.

When you access the website, technically necessary data is automatically processed in server log files: the IP address of your device, date and time of access, the page requested, the amount of data transferred, the page you came from (referrer), and your browser type and operating system. This data is required to deliver the website, to ensure its stability and security and to detect attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log files are not merged with other data and are usually deleted after 14 days at the latest.

3. No cookies, no tracking

This website sets no cookies and uses no analytics, tracking or advertising services. There is no audience measurement, no social media plugins and no embedded third-party content. Fonts and scripts are served from our own server; no connections to third parties are established. A cookie banner is therefore not necessary.

4. Contact form

If you write to us via the contact form, we process the details you provide there: name, email address, optionally organisation and area of interest, your message and the language you selected. We use this data solely to handle and answer your inquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures at your request) and, for general questions, Art. 6 (1) (f) GDPR; our legitimate interest lies in answering your inquiry.

To deliver the form message to our mailbox, we use the email service Brevo, provided by Brevo SAS, 7 rue de Madrid, 75008 Paris, France. Brevo processes the form data on our behalf on servers in the European Union and solely to deliver the message; the data is not used for newsletters or advertising. A data processing agreement under Art. 28 GDPR is in place with Brevo. Further information is available in Brevo's privacy policy.

We store your inquiry for as long as necessary to handle it. If no collaboration results, we delete it no later than six months after the last communication, unless statutory retention obligations apply. If an order results, the retention periods of commercial and tax law apply.

5. Appointment booking

On the "Book an appointment" page you can arrange a call with us directly. For this we process the chosen slot, your name, your email address, optionally organisation and topic, and the chosen language. We use this information solely to arrange, confirm and hold the appointment. The legal basis is Art. 6 (1) (b) GDPR.

To check free slots, the website queries our calendar. Only busy time spans are transmitted, never the content of other appointments. Your request is stored as an event in our calendar, which runs in a self-hosted Nextcloud instance on servers of Hetzner Online GmbH in Germany. Unconfirmed requests are deleted automatically after two hours. The confirmation emails and the calendar invitation are sent via Brevo (see section 4). The call takes place via Google Meet; the Google privacy policy applies to the use of Google Meet. You can suggest a phone call instead at any time.

To protect against automated requests we store the IP address for one hour in a shortened, hashed form and ask you to confirm your email address. We keep appointment data for as long as the collaboration requires, at most according to the periods described in section 4.

6. Contact by email

If you email us directly, we process your email address and the content of your message in order to reply. The legal basis is Art. 6 (1) (b) GDPR where a possible collaboration is concerned, otherwise Art. 6 (1) (f) GDPR. Our mailbox is operated on servers in Germany. The retention period corresponds to that described under point 4.

7. Applications

If you apply to us, in particular by email as an unsolicited application, we process the data you send us solely to assess your application and to communicate with you. The legal basis is Art. 6 (1) (b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG). If no collaboration results, we delete your documents no later than six months after the process is concluded, unless you agree to longer storage for future projects. Please do not send us special categories of personal data, such as health data, unless they are required for the application.

8. Links to other websites

This website contains links to external sites, for example the websites of our clients and friends, Codeberg, LinkedIn and Mastodon, as well as Apple's App Store and Google Play. Simply viewing our pages transfers no data to these providers. Only when you click a link do you leave our website; from then on the privacy policy of the respective provider applies.

9. Recipients and transfers to third countries

Within our company, only those people who need your data to handle your inquiry have access to it. As processors we use the service providers named under points 2 and 4, both based in and processing within the European Union. No data is transferred to countries outside the EU or the European Economic Area. We pass your data on to other third parties only where we are legally obliged to do so.

10. Your rights

Under the GDPR you have the following rights:

You may withdraw any consent you have given at any time with effect for the future. To exercise your rights, an informal email to hello@x10.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, datenschutz-berlin.de.

11. Data security

This website is delivered exclusively over encrypted HTTPS. Our systems are protected against loss, manipulation and unauthorised access by technical and organisational measures and are updated regularly.

12. Changes

We will update this privacy policy if the website or the legal situation changes. The version published here applies.

Last updated: September 2026

This English version is provided for convenience. The German version is legally binding.