Privacy Policy

How personal information is handled when you browse or contact XC Media.

This Privacy Policy describes how XC Media UG (haftungsbeschränkt) (“we”, “us”, “our”) handles personal data when you use xcmedia.co.uk (the “Website”), message us, or set cookie preferences. Processing follows the UK GDPR, the Data Protection Act 2018 and, where relevant, the EU GDPR.

1. Data controller

The data controller is XC Media UG (haftungsbeschränkt), Munckerstraße 6, 95444 Bayreuth, Deutschland. Email: hello@xcmedia.co.uk.

2. Categories of data we may process

  • Technical data: IP address, browser type, device information, referring URL, timestamps and similar connection logs necessary for security and delivery of the Website.
  • Contact data: name, email address, subject line and message content when you submit the contact form or email us.
  • Cookie preference data: your acceptance or rejection of optional cookies stored in local storage on your device.
  • Usage data (if optional analytics are enabled): aggregated pages viewed, approximate location derived from IP and interaction events.

3. Purposes and legal bases

  • Providing the Website — legitimate interests in operating a secure informational service (Art. 6(1)(f) UK GDPR).
  • Responding to enquiries — steps at your request prior to a contract or legitimate interests in corresponding with readers; alternatively consent where a form expressly requests it (Art. 6(1)(b) or 6(1)(a)).
  • Legal compliance — where we must retain records or respond to lawful requests (Art. 6(1)(c)).
  • Optional analytics/cookies — consent where required (Art. 6(1)(a); PECR).

4. Contact form processing

When you send a message, we use the details solely to understand your request and reply. We do not sell contact data. Messages are retained only as long as needed for the conversation and internal record-keeping (typically up to 24 months unless a longer period is required for a dispute or legal claim).

5. Cookies and similar technologies

Essential cookies or local storage entries may be required for basic functions such as remembering cookie choices. Optional cookies are not set until you opt in. Details appear in our Cookie Policy.

6. Recipients and processors

We may use trusted service providers for hosting, email delivery and security monitoring. They process data under instructions and appropriate contractual clauses. We do not sell personal data to third parties for marketing.

7. International transfers

Our organisation is based in Germany. Hosting or tooling may involve transfers outside the UK. Where required, we use appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or the European Commission’s Standard Contractual Clauses, plus transfer risk assessments as needed.

8. Retention

Server logs are typically rotated within 30–90 days unless needed for security investigations. Contact messages follow the period noted above. Cookie consent choices remain until you clear storage or choose again.

9. Your rights

Depending on applicable law, you may have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent at any time without affecting prior lawful processing. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) or another supervisory authority where you live or work.

10. Children

The Website is aimed at adults. We do not knowingly collect data from children under 16. If you believe a child has provided information, contact us and we will delete it promptly.

11. Security

We apply proportionate technical and organisational measures including HTTPS, access controls and least-privilege practices. No method of transmission is perfectly secure; please use caution when sending sensitive information by email.

12. Automated decision-making

We do not use personal data for automated decision-making that produces legal or similarly significant effects.

13. Updates

We may update this Policy to reflect operational or legal changes. The “Last updated” date at the top will change accordingly. Material changes will be highlighted on the Website where appropriate.

14. Contact for privacy questions

Email hello@xcmedia.co.uk or write to XC Media UG (haftungsbeschränkt), Munckerstraße 6, 95444 Bayreuth, Deutschland.