1. Controller and Data Protection Contact
4X-Digital GmbH
Am Herrschaftswald 2
68305 Mannheim
Germany
Managing Director & Controller: Sandra Bartels
Data Protection Contact: webmaster@4x-digital.com
Data Protection Officer: Not legally required; for questions please contact: webmaster@4x-digital.com.
Competent supervisory authority: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg), Königstraße 10a, 70173 Stuttgart
2. Principles of Data Processing (Art. 5 GDPR)
We process your personal data in accordance with the following principles:
- Lawfulness, fairness, and transparency
- Purpose limitation – data collected for specified, explicit, and legitimate purposes
- Data minimisation – only what is necessary
- Accuracy – kept up to date
- Storage limitation – deleted when no longer needed
- Integrity and confidentiality – appropriate security measures
3. Legal Bases for Data Processing
We process personal data on the following legal bases:
- Art. 6(1)(a) GDPR – Consent (e.g., for optional features such as location, push notifications, analytics)
- Art. 6(1)(b) GDPR – Performance of a contract (providing the App)
- Art. 6(1)(c) GDPR – Legal obligation
- Art. 6(1)(f) GDPR – Legitimate interests (e.g., security, fraud prevention)
4. Storage Period and Deletion
We store personal data only as long as necessary for the purpose for which it was collected, or as required by law:
- Account data – until account deletion + 30 days
- Usage logs (Matomo) – 90 days
- Purchase data – up to 10 years (legal retention obligations, tax records)
- Server logs – 7 days (IT security, diagnostics)
5. Your Rights as a Data Subject (GDPR Art. 15–22)
You have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure / "right to be forgotten" (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR) – without affecting the lawfulness of prior processing
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) – in Germany: the Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg
6. Disclosure to Third Parties and Data Flows
We do not sell your data. Data may be shared with:
- App store providers (Apple / Google) for payment processing and crash reporting
- Cloud infrastructure providers (Hetzner, Strato) for hosting
- Authorities, if legally required
All service providers are bound by data processing agreements (Art. 28 GDPR). Data transfers to the US (Apple Inc., Google LLC) are conducted on the basis of the EU-US Data Privacy Framework.
7. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction, including:
- Encrypted transmission (TLS/HTTPS)
- Access controls and authentication
- Regular security reviews
8. Cookies and Tracking
Our website (www.4x-digital.com) uses technically necessary cookies only. No tracking or analytics cookies are used. The App itself does not use third-party tracking SDKs unless separately stated and consented to.
9. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy to reflect legal changes or new features. The current version is always available at www.4x-digital.com. We will notify you of material changes within the App.
10. Contact and Information
To exercise your rights or for questions about data protection, contact:
4X-Digital GmbH, Am Herrschaftswald 2, 68305 Mannheim
Email: webmaster@4x-digital.com
We will respond within 30 days.
Version: 2 July 2026
Last updated: 2 July 2026
Next scheduled review: 2 July 2027