🎄 Christmas Shipping Information 2025 🎅

Dear customers, please note that from December 22, 2025, to January 2, 2026, no shipments will be made. Thank you for your understanding. We wish you a Merry Christmas, relaxing holidays, and a happy New Year! ✨

Privacy Policy | EXC


Privacy Notice

Thank you for your interest. The protection of your privacy and personal data is very important to us. The collection and use of your data is always in compliance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR) and relevant national laws. Below, we inform you as the data controller on which data we collect and how we process it.

1. Data Controller

The data controller pursuant to Article 4(7) of the GDPR is:
EXC GmbH
Am Lenzenfleck 17b
85737 Ismaning
Germany
Phone: +49 89 125033980
Fax: +49 89 125033999
E-Mail: info@exc.de
Website: www.exc.de

2. Legal Basis for Processing Personal Data

If we obtain consent to process personal data, Article 6(1)(a) of the GDPR serves as the legal basis. For processing personal data that is necessary for the performance of a contract with the data subject, Article 6(1)(b) of the GDPR is the legal basis. This also applies to processing operations required to take steps prior to entering into a contract. If processing is required to fulfill a legal obligation, Article 6(1)(c) of the GDPR applies. If processing is necessary to protect vital interests, Article 6(1)(d) of the GDPR applies. If processing is necessary for the purposes of legitimate interests pursued by the controller or a third party and those interests do not override the data subject’s rights and freedoms, Article 6(1)(f) of the GDPR applies.

3. Data Retention and Deletion

Personal data will be deleted or blocked as soon as the purpose of storage is no longer applicable. Data may also be stored if required by European or national law. Data will also be deleted or blocked once statutory retention periods have expired, unless further storage is required to fulfill a contract.

4. Logfiles

When visiting our website, information is automatically collected by the user’s computer system. The following data is collected:

  • Date and time of access
  • IP address of the user
  • Browser type and version (User-Agent)
  • Operating system
  • Cookies set by www.exc.de
  • Visited pages
  • Data transmitted in bytes
  • Status and referrer (previously visited website)

This data is temporarily stored for statistical purposes and anonymized after 10 days. Legal basis: Article 6(1)(f) of the GDPR.

5. Webshop

To place an order, you must provide personal data and register. Mandatory fields are marked, optional fields are not required.

Collected personal data:

  • Company name
  • Customer number
  • VAT ID
  • Salutation
  • Name
  • Department
  • Company address
  • Phone/Fax
  • E-mail

For ordering persons, we process:

  • Salutation
  • Name
  • E-mail

Invoice delivery is done by email. SSL encryption is used. Legal basis for order processing: Article 6(1)(b) of the GDPR; for email invoice delivery: Article 6(1)(a) of the GDPR. Data will be deleted after use, and legal retention obligations will be stored for 10 years.

6. Registration

Collected registration data:

  • Salutation
  • Name
  • Company
  • Customer number
  • Company address
  • VAT ID
  • E-mail
  • Phone

Additional stored data:

  • IP address
  • Date and time
  • HTTP referrer
  • Browser type

Data will only be shared with service providers necessary for order processing. Legal basis: Article 6(1)(a) of the GDPR. Data will be deleted after registration cancellation.

6.1 Contact Form

Data collected through the contact form:

  • Full name
  • Company
  • Email
  • Phone
  • Message

Used only for processing inquiries. Legal basis: Article 6(1)(f) of the GDPR. Data will only be stored as long as necessary for processing.

7. Newsletter

Data collected:

  • Company
  • Salutation
  • First name/Last name
  • Email
  • IP address
  • Country

Legal basis: Article 6(1)(a) of the GDPR. Only sent with consent. Unsubscribe link in every newsletter.

8. Complaints

Data collected:

  • Company
  • Name
  • Address
  • Phone/Fax
  • Email
  • Customer number

Legal basis: Article 6(1)(b) of the GDPR. Data will be deleted after use, and statutory retention obligations will be stored for 10 years.

9. Applications

We process applicant data for suitability checks. Legal basis: § 26(1) of the German Data Protection Act + Article 6(1)(b) of the GDPR. Data will be stored for a maximum of 6 months after rejection, if legal interests exist.

10. Minors

Minors are not allowed to transmit personal data to us without the consent of their parents. We do not process data from minors.

11. Right to Access

Rights include Article 15 (Right of Access), Article 16 (Right to Rectification), Article 17 (Right to Erasure), Article 18 (Right to Restriction), Article 20 (Right to Data Portability), Article 7 (Right to Withdraw Consent), Article 77 (Right to Lodge a Complaint). Contact:

EXC GmbH
Am Lenzenfleck 17b
85737 Ismaning
Email: info@exc.de

12. Transfers to Third Countries

Transfers are only made if necessary for contracts, legally required, or with consent. Transfers outside the EU are only made with appropriate safeguards (Article 45) or adequate guarantees (Article 46).

13. Rights to Information and Erasure

You have the right to request information about the personal data we hold about you, as well as the right to rectification, erasure, or restriction of processing. If you wish to exercise your right to access or erasure, please contact us using the contact details provided above.