Privacy Policy
This privacy policy informs you, pursuant to Art. 13 GDPR, about the nature, scope and purpose of the processing of personal data on this website. Last updated: October 2026.
1. Controller
Controller within the meaning of the GDPR (see also the Legal Notice):
xDevelop GmbH
Guggenmoosstraße 1b
5020 Salzburg, Austria
Email: office@xdevelop.at,
Phone: +43 662 265973
2. Data Protection Officer
We have not appointed a Data Protection Officer, as the conditions of Art. 37 GDPR are not met. For data-protection questions, please contact us at the address above.
3. Visiting the website (server log files)
When you visit this website, our web server processes technically necessary data sent by your browser: IP address, date and time, requested address, amount of data transferred, referrer, and browser and operating-system details. The purpose is to deliver the website and keep it secure and stable; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation, in particular investigating attacks and misuse). Log files are kept for one year and then deleted automatically.
4. Inquiries via the configuration wizard
If you complete and submit our configuration wizard ("System Builder" or "Camera Module Builder"), we store:
- your contact details: project name, email address and — if provided — your name and company;
- your project description, notes, and any documents you attach (e.g. drawings, specifications, photos); they are sent with your inquiry and stored together with it. Please don't attach documents containing other people's personal data unless the inquiry needs it;
- the full technical configuration (e.g. image sensors, optics, illumination, audio, output format and interfaces, processing chain, power supply, mechanics, software) and commercial details (planned annual volume, preferred licensing model, timeframe);
- technical session metadata (start and last-change time, a random session identifier).
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request). The purpose is to process your inquiry and prepare a quote or an engineering conversation. On receipt, an internal notification email with the key details is sent to our team; you do not receive an automatic email. Your email address and project name are required so we can answer your inquiry; everything else is optional. No automated decision-making takes place.
Retention: we keep inquiries while we are discussing a possible project and then for up to three years after the last contact (limitation period under § 1489 of the Austrian Civil Code, ABGB); if a contract is concluded, the statutory retention obligations apply (in particular seven years under § 132 of the Austrian Federal Fiscal Code, BAO).
5. Recording wizard progress on our server
Anonymous recording. To understand where the wizard is unclear or abandoned, we continuously save your progress on our server while you use it — but only the technical options you choose (e.g. sensor, lens, interfaces, numeric values). Contact details, project name and description, notes, comments, custom component names, file names and all other free text are removed in your browser and never sent; our server removes them again as well. We also store a random session identifier created only for this browser tab, and which step you opened and when. We store no IP address for this and do not combine this data with any other data. The legal basis is our legitimate interest in improving the wizard (Art. 6(1)(f) GDPR); you can object at any time (section 11).
With your consent. Only if you explicitly agree in the wizard ("Allow") do we save your progress in full, including the contact details and free text you enter, together with the time of your consent. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future by choosing "Remove my details" in the wizard; contact details and free text are then removed from the saved progress immediately.
Retention. The saved progress is deleted as soon as you submit your inquiry (section 4 then applies), and at the latest 90 days after its last change. The step log is kept after you submit, so we can compare completed and abandoned sessions, and each entry is deleted 90 days after it was recorded. The wizard works fully without your consent.
6. Recipients / processors
Your data is not sold and is not shared with third parties for advertising. To provide our service we use processors (Art. 28 GDPR):
- Hosting (web server and database): Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; the servers are in data centres in the EU.
- Email (sending the internal notification email, and our mailboxes): Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft 365).
Microsoft generally processes data in the EU but cannot rule out access from third countries, in particular the USA. Any such transfer is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Microsoft is certified, and additionally on standard contractual clauses (Art. 46 GDPR).
7. Product images from Lensation
When you choose a lens in the wizard, product images are loaded directly from the server of
our partner Lensation GmbH (www.lensation.de). For technical reasons, Lensation
receives your IP address and browser details. The legal basis is Art. 6(1)(f) GDPR (legitimate
interest in showing the current lens catalog clearly). Lensation's own privacy policy applies
to its processing.
8. Cookies
This website sets only technically necessary first-party cookies:
xdimg_lang(1-year expiry): stores your chosen language (English/German).PHPSESSID(until you close the browser): set only when you submit the wizard, and used solely to protect the form against forged requests (CSRF protection).
These cookies are strictly necessary for functions you explicitly request (§ 165(3) of Austria's Telecommunications Act, TKG 2021); no consent is required for them. The legal basis is Art. 6(1)(f) GDPR.
9. Storage in your browser (sessionStorage)
While you fill in the wizard, your progress is mirrored to your browser's
sessionStorage (key xdimg.wizard.v1 for the System Builder,
xdimg.cameraModule.v1 for the Camera Module Builder) so an accidental reload
doesn't discard your entries. This copy stays in your browser and is cleared when you choose
"Start over", submit your inquiry, or close the browser tab. Whether any data is sent to us is
governed by sections 4 and 5.
10. No third-party analytics or tracking services
We do not use any third-party analytics, advertising or tracking services. Fonts and program libraries are loaded from our own server. The only connection to a third party is the product images described in section 7.
11. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. You can withdraw any consent you have given at any time with effect for the future. Please contact us at the address above. You also have the right to lodge a complaint with the supervisory authority:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Wien, Austria
https://www.dsb.gv.at
12. Data security
We transmit data between your browser and our servers over an encrypted connection (TLS) and restrict access to stored data through appropriate technical and organizational measures.
13. Changes to this policy
We update this privacy policy when the law or our data processing changes. The version published on this page always applies.