Privacy Policy

XOVI Privacy Policy

v.9 XOVI – Updated June 30th, 2025

 

A. General Note

 

This Privacy Policy is aimed at worldwide users of WebPros websites and other online services (collectively the “Offerings”). To ensure a proper and secure handling of personal data handed over to us, WebPros has decided to make the principles of the EU General Data Protection Regulation (GDPR) applicable to all its global entities as a common standard in addition to local privacy laws in effect. If your locally applicable data protection law grants you a level of data protection that exceeds that of the GDPR, this stricter level will also apply in the relationship between you and WebPros. However, the level of data protection provided by the GDPR will never be undercut.

This version specifically applies to the WebPros group company XOVI GmbH, Hohenzollernring 72, 50672 Cologne.

Insofar as the terms of the GDPR are used (e.g. “processing” or “personal data”), these are to be understood as having the same meaning in the sense of your local data protection laws, insofar as this is objectively possible.

The aim of this Privacy Policy is to ensure the protection of your personal data in accordance with the fundamental requirements of the GDPR.
Third Country Transfer

 

B. Third Country Transfer

 

Data processing also includes disclosure by transmission to third parties and, where applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Where we transfer data to countries outside the EU or the EEA, we have labelled this below. In the case of data transfer within our group of undertakings, there are generally adequacy decisions by the European Commission pursuant to Art. 45 para. 3 GDPR for the countries in which our group company is located, namely Switzerland, Japan and Canada. In the case of data transfer to our group company based in the USA, such company is certified under Data Privacy Framework standards, a data processing agreement is in place and there are corresponding EU standard contractual clauses, if required.

Unless an adequacy decision or appropriate safeguards are in place, data will only be transferred in exceptional cases, for example if it is necessary to fulfil a contract or if you have given your express consent.

 

C. Joint Data Processing within the WebPros group

1. Joint Data Processing

As part of our business operations and the use of our website, we work closely within the WebPros group and jointly process certain personal data. The goal is to make our internal processes, IT systems, and administration efficient and secure. This may require us to share data within the WebPros group or process it in systems that we operate jointly.
The following entities belong to the WebPros group of companies:

  • WebPros International GmbH, Vordergasse 59, 8200 Schaffhausen / Switzerland
  • WebPros Germany GmbH, Hohenzollernring 72, 50672 Cologne / Germany
  • WebPros International L.L.C., 2550 North Loop W., Suite 4006, Houston, TX 77092 / USA
  • WebPros Spain S.L.U., Carrer d’Aragó, 182, Àtic, 08011 Barcelona / Spain
  • WebPros Bulgaria EOOD, ul. “San Stefano” 22, 1504 Sofia / Bulgaria
  • WebPros Japan K.K., G1 Bldg. 7F-1221, 1-3-3 Ginza, Chuo-ku, Tokyo 104-0061 / Japan
  • WebPros Netherlands B.V., Schiphol Boulevard 369, Tower F, 7th floor, 1118BJ Schiphol / NL
    Canada WebPros International, Ltd., 1055 Dunsmuir Street, Suite 3000, Vancouver, BC V7X 1K8 / Canada
  • XOVI GmbH, Hohenzollernring 72, 50672 Cologne / Germany
  • SocialBee Labs Srl., Poet Grigore Alexandrescu Str, No 51, 400560, Cluj-Napoca / Romania

For data subjects from the EU, this joint data processing is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR in a well-functioning corporate organization and IT infrastructure.

To ensure data protection is maintained, we have established binding agreements within the WebPros group that specify which company assumes which tasks and responsibilities. If you have any questions or wish to exercise your rights, XOVI GmbH is your point of contact.

2. Contact

We have also assigned the fulfillment of data subject rights internally to WebPros International GmbH. You can contact the following point of contact at any time with inquiries or to exercise your data subject rights, and they will forward your request for processing, internally:

WebPros International GmbH
Vordergasse 59
8200 Schaffhausen / Switzerland

E-mail: [email protected].

3. Contact details of the European data protection officer of WebPros

RMPrivacy GmbH, Große Langgasse 1A, 55118 Mainz / Germany

E-mail: [email protected]

 

D. Data Processing

 

The individual data affected by joint data processing, processing purposes, legal bases, recipients and, if applicable, transfers to third countries are listed below:

1. Contacting WebPros

When you contact us, we process the data you provide to us – for example, your name, your contact details (if provided), and your message – to handle your request. The processing is based on our contractual or pre-contractual obligations (Art. 6 para. 1 b) GDPR) or because we have a legitimate interest in responding to your inquiry (Art. 6 para. 1 f) GDPR).

2. Contact in case of Job Applications

If you send us your application, for example, by email or via a contact form, we will process the data you provide (such as name, email address, desired location) as well as your message and application documents solely for the purpose of processing your application.

For companies based in the EU, data processing is carried out on the basis of Art. 6 para. 1 b) GDPR, with § 26 BDSG (decision on an employment relationship) taking precedence in Germany. If further processing is required after the procedure is completed for legal prosecution, we base this on Art. 6 para. 1 f) GDPR (legitimate interests).

Your application data will be stored for the duration of the application process. After the procedure is completed, we will delete your data within 6 months, unless there are legal retention obligations, consent for longer storage (e.g., for an applicant pool), or further retention is required to protect legitimate interests (e.g., to defend against claims).

3. Contract fulfilment and data management in the context of service provision

For the establishment, execution, and processing of contracts, we process the necessary data (e.g., name, contact details, address, email address, phone number, access data) as well as all information required for fulfilling the contract.

The processing is carried out – where applicable – in accordance with Art. 6 para. 1 b) and c) for contract fulfillment and compliance with legal obligations.

If necessary for contract processing, we transmit data to third parties, e.g., to supervisory authorities for correspondence or to enforce your rights. Additionally, data may be shared with our affiliated companies within the scope of order processing if they are involved in service provision.

4. Log files of Website Visits

We log your website visit. In doing so, we process:

  • The name(s) of our accessed website(s)
  • The date and time of access
  • The amount of data transferred
  • The browser type and version
  • The operating system you use
  • The referrer URL (the previously visited website)
  • Your IP address
  • The requesting provider.

The legal basis for data processing is our overriding legitimate interest in the continuous provision and security of our website in accordance with Art. 6 para. 1 f) GDPR. The log file is deleted after seven days unless it is needed to prove or clarify specific legal violations that have become known within the retention period.

5. Newsletter and Customer Information

To keep you regularly informed about our company and our offers, we offer several email newsletters. For this purpose, we process the data you provide during registration (email address and any voluntary information).

To prevent misuse, we use the double opt-in procedure: After registration, you confirm it through a confirmation email. The registration process is logged to prove its legality (time of registration and confirmation as well as IP address). The legal basis is your consent – for the EU according to Art. 6 para. 1 a) GDPR. The logging and confirmation email are based on our legitimate interest in proving proper registration (Art. 6 para. 1 f) GDPR).

The data is transmitted to HubSpot, Inc. (USA) as part of order processing. HubSpot is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework, ensuring an adequate level of data protection under both EU and Swiss law. Additionally, an EU standard contractual clause exists. European branch: HubSpot Ireland Ltd., 30 North Wall Quay, Dublin 1, Ireland.

Based on WebPros’ legitimate interest in accordance with Art.6 para. 1 f GDPR and the existing customer relationship with XOVI, customers may be provided with information relating to other WebPros products, which may be of interest to them. At any time, customers have the option to opt out of the receipt of such information by using the unsubscribe option in any communication received.

6. Use of Cookies

We use cookies on our website. These are small text files that are stored on your device (e.g., PC, smartphone, or tablet) and contain certain information. You can find out which cookies we use, who provides them, and for what purpose at any time in our consent management platform.

6.1 Our Cookie Consent Management Platform

To document your selection of cookies and similar technologies and to comply with our legal obligations, we use a consent management platform (Usercentrics). When you visit our website, we ask for your cookie preferences. Your decision is stored in a special cookie. The legal basis for this is Art. 6 para. 1 lit. c GDPR and Art. 7 para. 1 DSG (Switzerland), as we are legally required to prove and manage your consent.
For managing your consents, we use the consent management platform “Usercentrics”, provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich / Germany. The following data is processed and transmitted to Usercentrics:

– Your consent or rejection (including date, time, language, consent ID)
– Device data (such as browser information and anonymized IP address)

The processing of this data is also carried out to fulfill our legal obligations according to Art. 6 para. 1 lit. c GDPR and Art. 7 para. 1 DSG (Switzerland).

6.2 Cookie categories in use by WebPros (Essential, Functional, Analytics, Marketing)

Cookie types

Description

Essential

Essential Cookies help make an Offering usable by enabling basic functions like page navigation and access to secure areas of the Offering. The Offering cannot function properly without these cookies.

Functional

Functional Cookies allow the Offering to remember the user’s website preferences and choices they make on the Offering including login details, geo-location, language, and enhanced content. This allows the Offering to provide personalized features for users. Functional Cookies are used to enhance the performance of Offerings, as without them, certain functions of the Offerings may not be available. Functional Cookies are helping to provide services that a user requests.

Analytics

Analytic Cookies collect information about your use of the Offering and enable us to improve the way it works. These cookies give us aggregated information that we use to monitor site performance, count page visits, spot technical errors, see how users reach the site, and measure the effectiveness of advertising (including emails we send to you).

Marketing

Marketing Cookies allow us and other trusted advertisers to select advertisements that are based on your interests, including those expressed or inferred by visits to our Site or apps or across other Offerings, online services, and apps over time. Others help prevent the same advertisement from continuously reappearing for you. These types of cookies also help us provide you with content on the Site that is tailored to your interests and needs. Some Marketing Cookies and other technologies are used in part to also facilitate advertising. Please be aware that Marketing Cookies in some cases have a direct relation to Social Cookies. These Social Cookies are used to enable you to share content, which is a matter of your own interest as well as may participate in the process of authorization via social media services to gain access to 3rd party apps/websites, if you choose to do so. Social cookies may also be used for advertising/analytics purposes.

 

6.3 Note on Google Services

We use various services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website. This may also involve data transfers to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

For data subjects in the EU, the transfer is based on the EU-U.S. Data Privacy Framework. Google is certified for this and is subject to the EU Commission’s adequacy decision for the USA.

For Switzerland, the transfer is based on the Swiss-U.S. Data Privacy Framework (Swiss DPF). Google is also certified for this, so Switzerland recognizes an adequate level of data protection for transfers to the USA.
If, in exceptional cases, there is no certification or adequate protection, we additionally ensure the protection of your data through standard contractual clauses (SCC) or other suitable measures.

5.4 This specific Offering uses the following cookies and other technologies

E. Duration of Data Processing

 

We store personal data only as long as it is necessary to achieve the respective purpose or until you revoke your consent.

If there are legal retention obligations – for example, under commercial, tax, or social security law in Germany – the retention of certain data may be required for up to 10 years or longer, regardless of the processing purpose.

To ensure that no data is stored longer than necessary, we conduct regular reviews and delete personal data as soon as the purpose of storage ceases to exist and there are no legal obligations or legitimate interests remaining.

 

F. Your rights as a Data Subject

 

1. Request for Information

Upon request, you can receive information about all personal data we have stored about you at any time, free of charge.

2. Rectification, Erasure, Restriction of Processing (Blocking), Objection

If you no longer agree with the storage of your personal data or if it has become incorrect, we will delete or block your data upon your instruction or make the necessary corrections (as far as this is possible under applicable law). The same applies if we should only process data in a restricted manner in the future. You have the right to object, particularly in cases where your data is required for the performance of a task carried out in the public interest or based on our legitimate interest, including profiling based on these grounds. You also have the right to object to data processing for direct marketing purposes.

3. Right to withdraw consent with effect for the future

You can withdraw your consent at any time with effect for the future. Your withdrawal will not affect the lawfulness of the processing up to the time of withdrawal.

4. Data Portability

If data processing is based on a contract, pre-contractual negotiations, consent, or automated procedures, you have the right to data portability. Upon request, we will provide your data in a common, structured, and machine-readable format, so that you can transfer the data to another controller if desired.

5.Restriction of Processing

Data for which we are unable to identify the data subject, for example, if it has been anonymized for analysis purposes, is not covered by the aforementioned rights. Information, deletion, blocking, correction, or transfer to another company may be possible for such data if you provide us with additional information that allows us to identify you.

6. No Automated Decision-making or Profiling

Your data is not used by us for automated decisions which have legal consequences for you or significantly affect you in a similar way – as described in Art. 22 GDPR (EU).

We also do not conduct so-called profiling. This means that we do not create automated evaluations of your data to analyze or predict personal characteristics such as interests, behavior, or preferences. Should we exceptionally use automated decisions or profiling, we will inform you transparently in advance and obtain your explicit consent where necessary.

7. Exercising your rights as a Data Subject and right to lodge a complaint

If you have any questions regarding the processing of your personal data, information, rectification, blocking, objection or deletion of data, or if you wish to transfer your data to another enterprise, please contact [email protected].

 

You also have the option of complaining to a supervisory authority about your rights as a data subject. In the case of XOVI GmbH, you have the right to lodge a complaint with the LDI Federal Data Protection and Information Commissioner (FDPIC).

Version: v9 XOVI (30.06.2025)

This policy is subject to periodic revisions and may be amended by WebPros from time to time if necessary. Please come back periodically and check for updates.