Privacy policy
This policy explains what personal data exablo.com processes, why, on what legal basis, and what rights you have under the GDPR.
1. Controller
The controller responsible for data processing on this website is the provider named in the Impressum. Contact details for data protection enquiries are the same.
2. What this site processes
exablo.com is a public marketing site. It has no user accounts and no login -
those live in the application at app.exablo.com, which has its own privacy
policy.
Server log files
When you open a page, the hosting provider automatically records a log entry containing the requested page, referrer, browser type and version, operating system, and the time of the request. IP addresses are processed for the technical delivery of the page and are not merged with other data.
- Purpose: delivering the site securely and reliably
- Legal basis: Art. 6(1)(f) GDPR - legitimate interest in a functioning site
- Retention: deleted or anonymised by the hosting provider after a short period
Analytics
We use Google Analytics 4 to understand how the site is used. It sets cookies and transmits usage data to Google, which may involve transfer to servers outside the EU under the EU-US Data Privacy Framework.
- Purpose: measuring which pages and campaigns bring visitors
- Legal basis: Art. 6(1)(a) GDPR - your consent
- Retention: as configured in the Google Analytics property
Analytics only runs after you consent. No analytics cookie is set and no data is transmitted to Google before you accept in the cookie banner. You can withdraw consent at any time, with effect for the future, using the same banner.
Campaign parameters
If you arrive through a link carrying UTM parameters, those values are stored in your browser's session storage so we can attribute a later click through to the application. This is first-party, session-scoped, deleted when you close the tab, and contains no personal data.
- Legal basis: Art. 6(1)(f) GDPR - legitimate interest in understanding which channels work
3. Cookies
The site sets no cookies before consent. Analytics cookies are set only if you accept them in the banner. Session storage used for campaign attribution is not a cookie and is strictly necessary for the function you initiated.
4. Processors and recipients
We use the following processors, each under a data processing agreement:
- Hosting provider - delivery of the website
- Google Ireland Ltd. - analytics, only after consent
We do not sell personal data and do not pass it on for advertising purposes.
5. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw consent at any time, without affecting past lawfulness (Art. 7(3))
To exercise any of these, contact us using the details in the Impressum.
You also have the right to lodge a complaint with a supervisory authority. In Germany this is the data protection authority of the federal state in which the controller is established.
6. Links to the application
Links to app.exablo.com take you to a separate service with its own privacy
policy. This policy does not cover processing that happens there.
7. Changes
We may update this policy to reflect changes in the site or in the law. The date above shows when it was last revised.