Privacy Policy

Privacy Policy

Last updated: 16.08.2026

Data Controller

Xlab Dynamics Inhaber: Ghaith Noman

Rheinstraße 40–42

64283 Darmstadt

Germany

info@xlab-dynamics.de

​

Data Collection on This Page

Server Logs Technical access data (IP address, browser type, timestamp) is automatically logged by our hosting provider to ensure site stability and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Email Waitlist When you enter your email address to join our waitlist, we store it to send you product updates and launch notices. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent and unsubscribe at any time using the link in any email footer.

Double Opt-In We use a double opt-in procedure. Your subscription becomes active only after you click the confirmation link in the verification email. To document your consent, we store the IP address and timestamp of both your sign-up and your confirmation. Unconfirmed email addresses are automatically deleted within 30 days.

Email Tracking Our emails contain a tracking pixel that records whether you opened a message and which links you clicked. We use this to understand which content is useful to our subscribers. Legal basis: Art. 6(1)(a) GDPR (consent), given together with your subscription. You can object at any time by unsubscribing or by contacting us at info@xlab-dynamics.de.

Email Provider & US Data Transfer

We use Kit (ConvertKit, Inc., United States) to host this page and to manage our waitlist and email communication. Kit processes your data on our behalf under a Data Processing Agreement pursuant to Art. 28 GDPR.

Because Kit is based in the United States, your data is transferred outside the European Economic Area. This transfer is safeguarded by the EU Standard Contractual Clauses, which form part of Kit’s Data Processing Agreement, and by Kit’s certification under the EU-U.S. Data Privacy Framework.

Storage Duration

Your email address is stored until you withdraw your consent or request deletion. Unconfirmed double opt-in sign-ups are deleted within 30 days. Server log data is deleted after 30 days.

Your Rights

Under the GDPR you have the right to:

  1. Request information about the personal data we hold about you (Art. 15)
  2. Request correction of inaccurate data (Art. 16)
  3. Request deletion of your data (Art. 17)
  4. Request restriction of processing (Art. 18)
  5. Receive your data in a portable format (Art. 20)
  6. Object to processing based on legitimate interest (Art. 21)
  7. Withdraw your consent at any time with future effect (Art. 7(3))

To exercise any of these rights, contact us at info@xlab-dynamics.de.

Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI) Postfach 3163, 65021 Wiesbaden, Germany poststelle@datenschutz.hessen.de

If you reside in another EU/EEA country, you may also contact the supervisory authority in your country of residence.

​

​

​

​

Built with Kit​