Privacy Policy

We value your privacy.

At XPLN GmbH, we take the protection of your personal data very seriously. We want you to feel safe and at ease when visiting our website.

We are committed to respecting your privacy and protecting your personal data and business data. We take this fact into account in all our business processes. Any personal data you supply when visiting our website will be treated confidentially and only processed in accordance with current legislation and regulations.

By accepting, you agree to our Privacy Policy.

We endeavour to ensure that the information we hold is accurate and kept up to date. Should there be any inaccuracies in the data, please inform us as soon as possible in order to rectify them promptly.

If you have any questions about this Privacy Policy or if you want to object to the use of your data, please send us an email.

1) Name and contact details of the controller and the company’s Data Protection Officer

This Privacy Policy applies to data processed by:
Controller: XPLN GmbH (hereinafter: XPLN)
Motorstraße 25, 70499 Stuttgart, Germany
Telephone: +49 711 / 252504–53
Represented by: Michael Fieg, Thomas Sperrfechter, Sebastian Klumpp

You can reach XPLN’s Data Protection Officer under the following email address:

2) Collection, storage and processing of personal data

By default, our web servers store the IP address assigned by the Internet provider, the URL of the website from which our website was accessed (referrer URL), the name and URL of the pages visited on our site, whether you used specific buttons or links such as download offers or videos, search words or search phrases, duration of the visit, used browser as well as date and time of your visit. This information is automatically collected and temporarily stored and will also be automatically deleted. If the visit is a result of online advertising such as, for example, banners or search engine advertising, we also record which banner or Ads ad led to our website being visited. To this end, XPLN uses cookies. This data is collected and stored anonymously, using a pseudonym.

The legal basis for the processing of this data is set out in Art. 6 (1) (1) (f) of the GDPR.

Where you are invited to submit personal information (e.g. email address, name, postal address) the submission of this information is purely voluntary. Personal data is only stored if you voluntarily provide it for a determined purpose, e.g. in connexion with a registration, a survey, a cost-free offer or the execution of a contract. XPLN might use the contact information you provide to us to update you on our products and services. You may unsubscribe from our communications at anytime.

By registering for an event, you expressly consent to our use of your personal information for the purpose of registration and automated processing of the event and, if necessary, to our disclosure of submitted information to our subcontractors. Otherwise, we will not disclose your personal data to third parties and we will not send you any advertising material from third parties.

The legal basis for the processing of this data is Art. 6 (1) (1) (a) of the GDPR.


The provider of this website automatically collects and stores the following information in so-called server log files, which your browser automatically transmits to us:

  • Browser and browser version
  • Operating system
  • Referrer URL
  • IP address and hostname of the accessing computer
  • Date and time of the server request

This information is automatically collected and temporarily stored and will also be automatically deleted.

None of the information stored in the log files can be attributed to a specific person. We will not associate these data with any other information. We reserve the right to retrospectively check the data if there is possible evidence of the use of this site for illegal purposes.

The legal basis for the processing of your data is Art. 6 (1) (1) (f) GDPR.

3) Use and disclosure of personal data and specification of purpose

We recognise the importance of protecting the privacy of the users of our website. We endeavour to collect, process and use any personal information in accordance with the relevant data protection legislation and only to the extent necessary for the purpose of contract execution, to protect legitimate business interests with regard to providing advice and support to our customers as well as to tailor our products and services to suit our customers’ needs.

Furthermore, we process the above-mentioned data for the following purposes:

  • to optimise the connection to our website;
  • to ensure the user-friendliness of our website;
  • to evaluate the security and stability of the system;
  • for other administrative purposes.

Contact Form

If you have any questions or concerns regarding our Privacy Policy, do not hesitate to contact us using the contact form provided on the website. When you contact us via the contact form, we ask you to submit your name and email address, so that we know who sent the request and we can respond to your question or issue. You may provide further information on a voluntary basis. Alternatively, you can always contact us by email.

This contact data is explicitly provided on a voluntary basis and with your consent and will be processed in accordance with Article 6 (1) (1) (a) of the GDPR. Once we have provided a response to your enquiry and the purpose has been fulfilled, personal data provided via the contact form will automatically be deleted.

4) Security

We take all reasonable precautions to protect your data from misuse, alteration, loss, destruction, unauthorised access or unauthorised disclosure. We use SSL encryption to ensure sensitive data is protected during transmission over the Internet.

We continually update our security practices in light of new risks and developments in technology.

5) Cookies

We use cookies on our website. Cookies are small text files that are stored by the web browser on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not damage your computer in any way and cannot contain any viruses, Trojans or other malicious software.

The type of information stored in a cookie depends on the device used to access the website. However, this does not mean that we can automatically establish your identity.

Cookies allow us to tailor information to suit your needs and to make your visits more enjoyable.

We use session cookies to recognise you and carry information as you navigate between pages during a single browser session. They are automatically deleted at the end of the user session, when the web browser is closed.

We also use other temporary cookies that are stored on your end device for a limited period of time to make our website more user-friendly. These cookies allow us to recognise your device the next time you visit and to remember your actions and preferences over a period of time, so you don’t have to keep re-entering them whenever you come back to the site.

Furthermore, we use cookies to collect statistics about site usage and review user behaviour patterns to improve the user experience and provide our visitors with information specifically tailored to their interests (see “Analytics and tracking tools”). These cookies allow us to recognise your device the next time you visit. They are automatically deleted after a set period of time.

The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 (1) (1) (f) GDPR and in accordance with (a) based on your consent.

Most web browsers automatically accept cookies, but you can adjust the preferences in your browser to refuse cookies or to prompt you before accepting a cookie. If you disable cookies, though, you may not be able to use all the features on this website in full.

Facebook Custom Audience

We use Facebook Website Custom Audiences on our website and have integrated the so-called Facebook pixel for this purpose. With the help of this pixel, pseudonymized information about the use of this website is collected (e.g. information about content viewed). The data transmitted by the pixel can be used to target you on Facebook with individualized advertising, provided you have a Facebook account. You can find more information about the scope and purpose of data collection in Facebook’s privacy policy at You can deactivate the data collection at any time using the following link:

6) Analytics and tracking tools

We use the tracking tools outlined below in accordance with Article 6 (1) (1)(a) GDPR. With these tracking measures, we want to optimise and personalise your experience of the site. Furthermore, they enable us to monitor and analyse web traffic on our site to help us improve the website’s content. These interests are considered legitimate interests within the meaning of the aforementioned provision. The details of the type of data that is collected by the tracking tools and the respective purpose of the processing are outlined below.

Google Tag Manager

Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

Google Analytics

To improve our website and to provide our visitors with information specifically tailored to their interests, we use Google Analytics, a web analytics service provided by Google, Inc. ( (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). Google Analytics generates pseudonymised usage profiles by means of cookies (see “Cookies”). The information about your use of this website (including your browser type/version, operating system, referrer URL (the previously visited page), host name of the accessing computer (IP address), date and time of the server request) is transmitted to and stored by Google on servers in the United States. This data is used to analyse website traffic, to compile reports on website activity and to provide other services related to website and internet usage for marketing purposes and otherwise to allow us to improve our website. Google may transfer this information to third parties where required by law, or where such third parties process information on Google’s behalf. Under no circumstances will Google associate your IP address with other Google data. Users’ IP addresses are anonymised to prevent tracking of personal data (IP masking).You may prevent the installation of cookies by adjusting the settings of your browser accordingly. However, please note that, if you do so, you may be unable to use all features of this website.Furthermore, you may prevent the collection of data (including your IP address) through cookies while using this website, as well as the processing of such data by Google, by downloading and installing the following browser plug-in: an alternative to the browser plug-in, you can also prevent Google Analytics from collecting data by clicking this link. This will set an opt-out cookie which will prevent your data from being tracked when you visit this website: Disable Google Tracking.The opt-out cookie will be installed on your device and will only prevent tracking on the browser you are currently using and only for our website. If you delete the cookies from this browser, you will have to reinstall the opt-out cookie.For more information about Google Analytics, see (Google Analytics Support).

Google Ads Conversion Tracking

We use Google Conversion Tracking to help us measure website effectiveness and thus improve our website. Google Ads places a cookie (see “Cookies”) on your computer when you access our website via a Google ad.These cookies lose their validity after 30 days and are not intended to identify you personally. If you access specific pages on our website and the cookie has not yet expired, Google and we can recognise that you, the user, have clicked on an advertisement that we placed with Google and were forwarded to our website.Each Google Ads customer is assigned a different cookie. Thus, by default, cookies cannot be tracked across websites of different Ads customers. The information obtained with the conversion cookie is used to compile conversion statistics for Ads customers who have opted for conversion tracking. As a result, Ads clients are informed about the total number of users who clicked on their ads and were forwarded to a conversion tracking tag page. However, they do not receive any information that would identify the user personally.If you do not wish your activity to be tracked, you can block the Google Ads conversion-tracking cookie, e.g. by changing your browser settings to disable third-party cookies in general. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the “” domain.For more information about privacy and conversion tracking at Google, see:

Google Remarketing

We also use Google’s re-marketing technology. This technology will display to users who have previously visited our site and shown an interest in our services, relevant ads for our services as they navigate websites that are part of the Google Display Network (GDN). Cookies are used to track and analyse user behaviour when visiting the website and, subsequently, to make product recommendations and display targeted advertisements based on the user’s interests.If you would prefer not to receive any targeted advertising, you can do so by disabling Google’s use of cookies for this purpose here: Alternatively, users can opt out of a third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page. Furthermore, we respect the “Do-Not-Track” setting on your browser.


We use HubSpot, a service of HubSpot Inc. to statistically capture the use of our website. The legal basis for the data processing is Art. 6 (1) (1) (a) GDPR. For this purpose, so-called “web beacons” and “cookies” are used, which are stored on your computer and which enable us to analyse your use of the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of the visit and pages viewed) on our behalf in order to generate reports on your visit and the pages viewed. 

If you do not wish to participate in the tracking process, you can refuse the setting of a cookie required for this – for example, by means of a browser setting that generally deactivates the automatic setting of cookies or by refusing this in the cookie settings.

Furthermore, we use HubSpot to process enquiries on our website. For this purpose, the personal data you provide is processed in contact profiles and, if necessary, manually supplemented by us in order to provide you with targeted information on your preferred topics.

We also use HubSpot to send marketing emails. This also includes the provision of content that you request via our website (e.g. white papers or webinars). For the purpose of designing and continuously optimising our emails according to your needs, we also analyse openings and clicks. You can unsubscribe from our marketing emails at any time by clicking on the corresponding unsubscribe link in each email.

You can find more information about the way HubSpot works in the HubSpot Inc. privacy policy.

8) Use of social plug-ins

Some of our web pages include social plug-ins of the social networks Facebook, LinkedIn, Xing and Twitter to promote our company and services.The legal basis for the processing of this data is Art. 6 (1) (1) (a) GDPR (data processing for the purposes of legitimate interests). Responsibility for compliance with data protection rules lies with the respective social media provider.

Facebook, Linkedin, XING, Twitter

Our website uses social plug-ins (“Plug-Ins”) of the following social networks: (Facebook Inc., Palo Alto, USA, „Facebook“), (LinkedIn Inc., Mountain View, USA, „LinkedIn“), (XING SE, Hamburg, Deutschland, „XING“) and (Twitter Inc., San Francisco, USA, „Twitter“). The provider of the Plug-In can be identified by the respective logo or the words “Facebook”, “LinkedIn”, “XING”, “Twitter” or “Like” or “Share”. On our website, Plug-Ins are deactivated by default. They will only be activated if you click on the respective symbol/button. By enabling an initially disabled Plug-In, your browser will connect to the corresponding social network servers, and you will thereby automatically give your consent to your data being transferred to the respective provider from that time forward. If you are logged in to the respective social network, it may link information about your visit to this website to your personal user account. If you interact with the Plug-Ins, the corresponding information will be transmitted directly from your browser to the social network platform and saved there. For more detailed information on the scope, type, and purpose of processing of this data by Facebook, LinkedIn and Xing, and on your rights and setting options for the protection of your privacy, please refer to the privacy policies of the respective social media provider. If you do not wish to have information transferred to the social media provider, you should log out of the respective social media provider’s site before visiting our website.For further information on the data protection of the respective social media providers, please refer to

9) YouTube

Our website uses the video platform (YouTube LLC, San Bruno, CA, USA, „YouTube“). YouTube is a platform that enables playback of audio and video files. When you view a web page on our site with an embedded YouTube video, the player will establish a connection to YouTube in order to ensure the technical transmission of the video or audio file. When a connection to the YouTube servers is established, data is transferred to YouTube.For more detailed information on the scope, type, and purpose of processing of this data by YouTube and on your rights and setting options for the protection of your privacy, please refer to YouTube’s Privacy Policy.

10) SalesViewer®

 This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

11) External links

This website contains links to websites operated by third parties that are not affiliated with or otherwise connected with us. If you use these links, you will leave this site and we will have no influence on the collection, storage and processing of data by these third parties (such as, for example, the IP address or URL of the page that contains the link), as websites operated by third-party companies are, by nature, beyond our control. In no event shall XPLN be responsible for the processing of personal data by third parties.

12) Right of objection

You have the right to object to the processing and use of your personal data pursuant to Art. 21 GDPR at any time by simply writing to XPLN GmbH (address) or by sending us an e-mail. We will, however, retain your personal information for as long as it is reasonably necessary for the fulfilment of contractual obligations, for billing and accounting purposes and where such retention is required for compliance with a regulatory or legal obligation to which we are subject.

13) Rights of data subjects (access, deletion, blocking etc.).

At any time, you have the right to access your personal information, its origin and recipient and the purpose for which it is processed and you have the right to have your data updated, blocked or deleted. If you have any questions about any of the above or need further information concerning personal data, you can contact us at any time by email. In particular, you have the right:

  • pursuant to Art. 15 GDPR, to request information regarding your personal data processed by us. In particular, you may request detailed information about the purposes of processing, the type of personal data and recipients to whom your data has been or will be disclosed, the planned retention period, about the right to rectification, erasure, restriction of processing or objection in general, about the right to lodge a complaint, about the origin of your data (if we did not collect it) and the existence of automated decision-making procedures, including profiling;
  • pursuant to Art. 16 GDPR, to have any inaccurate personal data about you rectified and to have any incomplete personal data about you and stored by us completed without undue delay;
  • pursuant to Art. 17 GDPR, to request erasure of your personal data stored by us unless where processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or the establishment, exercise or defence of legal claims.
  • pursuant to Art. 18 GDPR, to restrict the processing of your personal data in the following cases: in as far as you dispute the accuracy of the data; if the processing is unlawful, but you object to the erasure of the data; if we no longer need the data for the purposes of our processing, but you require such data in order to assert, exercise or defend legal claims; or if you have filed an objection to processing pursuant to Art. 21 GDPR;
  • Pursuant to Art. 20 GDPR, to receive the personal data you have provided us with in a structured, commonly used and machine-readable format and to request transfer of this data to another controller;
  • pursuant to Art. 7 (3) GDPR, to the extent that the legal basis for our processing of your personal information is consent, to withdraw your prior consent at any time. As a result, we will no longer be permitted to continue processing your data based on this consent. Withdrawal will not affect the lawfulness of processing before the withdrawal;
  • and pursuant to Art. 77 GDPR, to lodge a complaint with a data protection supervisory authority. For this purpose, you can generally contact the regulatory authority at your place of residence, your place of work or our company’s registered office.

14) Updates of and amendments to this Policy

This version of the Data Privacy Statement is effective as of May 2018.We reserve the right to update and amend all or parts of this Privacy Statement to ensure that it complies with current legal requirements or where it is necessary due to changes to our website and services.

15) Cookiebot