Privacy Policy

Last updated: 15 January 2026

This Privacy Policy explains how Xyqentra AG ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website or use our services. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller Information

The data controller for your personal information is Xyqentra AG, a company registered in Germany with registration number HRB619728. Our registered office is located at Schillerstraße 102, 20305 Hamburg, Germany. For any privacy-related enquiries, please contact us at privacy@xyqentra.top or by telephone at +49 403428411.

Data Collection

We collect personal data that you provide to us voluntarily and information that is automatically collected when you visit our website. The data we collect includes:

  • Contact Information: Name, email address, phone number, and company details when you submit enquiry forms or contact us
  • Technical Information: IP address, browser type, operating system, referring URLs, and pages visited
  • Communication Data: Records of correspondence and communications with our team
  • Cookie Data: Information collected through cookies and similar tracking technologies as described in our Cookie Policy

How We Use Your Information

We use your personal information for the following purposes based on legitimate business interests and legal obligations. How we use your data includes:

  • Responding to your enquiries and providing requested information about our services
  • Delivering our strategic finance planning services and maintaining client relationships
  • Improving our website functionality and user experience through analytics
  • Ensuring compliance with legal and regulatory requirements
  • Protecting against fraud and maintaining the security of our systems
  • Marketing our services where you have provided consent or where we have legitimate interests

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds: (a) Consent - where you have given explicit consent for specific processing activities; (b) Contract - where processing is necessary for the performance of a contract or to take steps prior to entering into a contract; (c) Legal Obligation - where processing is required to comply with legal obligations; and (d) Legitimate Interests - where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell or rent your personal information to third parties. We may share your data with trusted service providers who assist us in operating our website and delivering our services, including web hosting providers, email service providers, and analytics services such as Google Analytics. All third-party service providers are contractually required to protect your data and use it only for the specified purposes. We may also disclose your information where required by law or to protect our rights and interests.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws and regulations. Contact enquiries are typically retained for up to 3 years, client data is retained for the duration of our business relationship plus 7 years for legal and regulatory compliance, and website analytics data is retained according to Google Analytics' default retention periods. When data is no longer needed, we securely delete or anonymise it in accordance with our data retention policies.

International Data Transfers

As we operate primarily within the European Union, most data processing occurs within the EU/EEA. Where we use service providers located outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission. Any international transfers are conducted in compliance with GDPR requirements and with appropriate security measures.

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data. Your rights include:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of processing in certain situations
  • Right to Data Portability: Request transfer of your data in a structured format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption of data in transit and at rest, regular security assessments, access controls and authentication procedures, and staff training on data protection principles. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us using the following methods. You can reach our privacy team at privacy@xyqentra.top, call us at +49 403428411, or write to us at Xyqentra AG, Schillerstraße 102, 20305 Hamburg, Germany. We aim to respond to all enquiries within 30 days.

Complaints and Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the relevant supervisory authority. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (BfDI) or your local state data protection authority. You can find contact information for supervisory authorities at https://edpb.europa.eu/about-edpb/board/members_en.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will notify you by posting the updated policy on our website with a new "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of our website after changes have been posted constitutes acceptance of the updated policy.

Additional Information

This Privacy Policy applies specifically to the website xyqentra.top and services provided by Xyqentra AG. For information about cookies and tracking technologies, please refer to our separate Cookie Policy. Our Terms of Service govern your use of our website and services. If you have specific questions about our data processing activities or need assistance with exercising your rights, our privacy team is available to help.