Editor
Sign in

Privacy Policy

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below.

The data controller responsible for data processing on this website is:

Exifly | rxm solutions GbR
Am Wellsee 20
24146 Kiel
Germany

Email: info@exifly.io

The data controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

We host the contents of our website with an external hosting provider. Personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact requests, metadata, communications data, contractual data, contact information, names, web page access data, and other data generated through a website.

The external hosting serves the purpose of fulfilling our contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security vulnerabilities. Complete protection of your data from third-party access is not possible.

Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You may revoke your consent at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. The respective legal basis on which processing is based can be found in this privacy policy. If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

Right to Lodge a Complaint with the Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability
You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another controller, this will only be done to the extent technically feasible.

Access, Rectification, and Erasure
Within the framework of the applicable statutory provisions, you have the right to free information about your stored personal data, its origin and recipients, the purpose of data processing, and, if applicable, a right to rectification or erasure of this data. For further questions on the subject of personal data, you can contact us at any time.

Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time to exercise this right.

Cookies
Our website uses cookies. Cookies are small data packets that do no harm to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies that are necessary for the electronic communication process, for providing certain functions you have requested, or for optimizing the website (e.g. web audience measurement cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. Insofar as consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); consent can be revoked at any time.

Server Log Files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address.

This data will not be combined with data from other sources. The basis for data processing is Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

Contact Form
If you send us inquiries via contact form, your information from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

Processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this has been requested.

Registration on This Website
You can register on this website to use additional features. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes, such as changes to the scope of the offer or technically necessary changes, we use the email address provided during registration to inform you accordingly.

Processing of the data entered during registration is based on the purpose of implementing the user relationship established by registration and, if applicable, for the initiation of further contracts (Art. 6(1)(b) GDPR).

Subscription / Payment Processing
For the use of our subscription service for editing image metadata, we collect the following data: name, email address, billing address, and payment information. Payment processing is carried out through external payment service providers (e.g. Stripe, PayPal, Mollie). Your payment data is transmitted directly to the respective payment service provider and is not stored by us.

Processing is carried out for the purpose of contract fulfillment (Art. 6(1)(b) GDPR). Your data is stored for the duration of the contractual relationship and beyond in accordance with statutory retention periods (generally 6 or 10 years pursuant to the German Commercial Code (HGB) and the German Fiscal Code (AO)).

Newsletter Data
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. No additional data is collected, or only on a voluntary basis. We use newsletter service providers for the handling of newsletters, which are described below.

Double Opt-In Procedure
Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else’s email address. Newsletter registrations are logged in order to be able to demonstrate the registration process in accordance with legal requirements. This includes storing the registration and confirmation time as well as the IP address.

Legal Basis
Data processing for the purpose of sending the newsletter is based on your consent (Art. 6(1)(a) GDPR). You may revoke your consent to receiving the newsletter at any time, e.g. via the unsubscribe link at the end of each newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Storage Duration
Data stored by us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe or after the purpose has ceased to apply. Data stored for other purposes remain unaffected.

Newsletter Tracking
Our newsletters may contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in emails that enables log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we can see if and when an email was opened and which links were clicked.

Newsletter tracking is based on your consent (Art. 6(1)(a) GDPR). You can object to the tracking at any time by unsubscribing from the newsletter.

Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, duration of visit, operating systems used, and the origin of the user. This data is compiled into a profile assigned to the user.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to a Google server in the USA and stored there.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found at: https://privacy.google.com/businesses/controllerterms/mccs/

IP Anonymization
We have activated IP anonymization on this website. This means that your IP address is shortened by Google within member states of the European Union or other contracting states to the Agreement on the European Economic Area before being transmitted to the USA.

Browser Plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout

For more information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245

Data Processing Agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

We use the following payment providers to process payment transactions. Processing is carried out for the purpose of contract fulfillment (Art. 6(1)(b) GDPR).

PayPal

Data entered during the payment process is processed exclusively by the respective payment service provider. Information about the data protection provisions of the respective providers can be found on their websites.

As a data subject, you have the following rights: Right of access (Art. 15 GDPR), Right to rectification (Art. 16 GDPR), Right to erasure (Art. 17 GDPR), Right to restriction of processing (Art. 18 GDPR), Right to data portability (Art. 20 GDPR), Right to object (Art. 21 GDPR).

To exercise your rights, please contact: info@exifly.io

This privacy policy is currently valid as of February 2026.

Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be viewed and printed at any time on the website.