Privacy Policy

Privacy Policy

The data controller responsible for the processing of your personal data on our website is X TIMBER AG. You can find the details of X TIMBER AG in the Imprint. When this privacy policy refers to "we", "us", "our" or similar, it means X TIMBER AG.

General

We take the protection of your personal data very seriously. We process your personal data in accordance with the applicable data protection regulations. This privacy policy informs you about the purposes for which your personal data is processed, the processing duration, the corresponding legal bases, the categories of recipients if applicable, your data protection rights (so-called "data subject rights") and other data protection circumstances of the processing of your personal data.

The use of our website is generally possible without providing personal data. Insofar as personal data is collected on our pages, this is done on a voluntary basis, in particular based on your browser settings, or because it is technically necessary.

Data We Collect Automatically

When visiting our website, we may automatically process data. This may include IP address, date and time of your use, hardware, software or browser type, operating system of your computer, language settings and information about clicks and which pages are displayed to you.

If you use our service with your mobile device, we may process additional information: type of mobile device and operating system, device-specific settings and properties, geographic location and other system activities.

The legal basis for this processing is the fulfilment of the agreed services or the technical necessity of the processing or our legitimate interests, namely the traceability and optimisation of our services, provided that the interests or fundamental rights of the data subject do not prevail (Art. 6 para. 1 lit. f GDPR). The data is processed or stored until the aforementioned purposes cease to apply.

Processors, Recipients

We process your personal data with the support of processors who assist us in providing the services. These include: web hosts, email newsletter dispatch services. These processors are obliged to strictly protect your personal data and may not process your personal data for any purpose other than to provide our services.

Your personal data is also only transferred to typical business service providers such as banks, tax advisors, shipping service providers, etc., which are themselves subject to data protection regulations.

Cookies

This website uses cookies. Cookies make websites more user-friendly and efficient for the user. A cookie is a small text file used to store information. When visiting a website, the website can place a cookie on the visitor's computer.

How the web browser handles cookies, which cookies are accepted or rejected, can be set by the user in the web browser settings. If the use of cookies is restricted, not all functions of this website may be fully available.

Services we use

We use the following third-party services on our website:

  • Google Fonts (Google Ireland Limited): loads fonts; visiting the page establishes a connection to Google servers.
  • Supabase (Supabase Inc.): stores website content and media as part of our content management system.
  • Mailjet (Mailjet SAS): sends emails triggered via our contact form.
  • Elfsight (Elfsight Inc.): displays our social media posts (Instagram/Facebook), only after your consent via the cookie notice.

Server Log File

This website processes the following personal data in a server log file for the purpose of monitoring the technical function and increasing the operational security of the web server:

  • Accessed content
  • Time of server request
  • Browser type / browser version
  • Operating system used
  • Referrer URL
  • IP address (anonymised)
  • Hostname

Whistleblowing

The European Union has renewed the legislation for the protection of persons who report breaches of EU law with Directive 2019/1937. Italy has implemented the European directive with Legislative Decree No. 24 of 10 March 2023. By adopting this directive, X TIMBER and Holz Pichler Forst commit to fulfilling the regulatory requirements and the related ANAC guidelines.

The aim is to provide the whistleblower with clear operational guidance on the subject, content, recipients and transmission channels of the reports. The whistleblowing procedure guarantees the confidentiality of the identity of the whistleblower from the moment of receipt and at every subsequent contact.

Security

Our administrative, technical and physical security measures are continuously improved to protect your data from unauthorised access, loss, destruction or alteration. The security measures used include firewalls and data encryption as well as access controls for shared information.

Your Rights

You have the right to information and, where applicable, to rectification, erasure and restriction of the processing of personal data. Where the legal basis for the processing of your personal data is your consent or a contract concluded with you, you also have the right to data portability.

You have the right to withdraw any consent given for the processing of your personal data. You have the right to object to the processing of your personal data for the purpose of direct marketing.

To exercise your data subject rights, please contact: info@xtimber.com

Supervisory Authorities

You have the right to lodge a complaint with the supervisory authorities:

  • Deutschland: Federal Commissioner for Data Protection, Husarenstr. 30, 53117 Bonn
  • Österreich: Data Protection Authority, Wickenburggasse 8, 1080 Vienna
  • Italia: Garante per la protezione dei dati personali, Piazza di Monte Citorio 121, 00186 Roma

Management Policy

We listen carefully to our customers and are thereby able to translate their needs and expectations into individually tailored solutions in the form of high-quality products, processes and services. All agreements are of handshake quality. In our management policy, the executive board commits to fair and performance-based remuneration, regardless of gender, origin or other personal orientation. Transparent salary structures ensure trust and appreciation within the team.