Privacy
This site is run with a deliberately minimal appetite for data. It collects no analytics, sets no tracking or advertising cookies, embeds no third-party trackers, and — at this stage — offers no contact form. What little it does is described plainly below. [ASSUMED]
What data we process
We do not run web analytics and do not profile visitors. Standard server logs may record technical request data (such as an IP address and timestamp) for the short time needed to operate the site securely and reliably; these are not used to identify individuals and are not combined with other data. [ASSUMED]
Cookies
The site sets exactly one functional cookie: it remembers a language you deliberately selected, and it is written only when you explicitly switch language. It carries no identifier, is not used for tracking, and is strictly necessary to honour your own choice across pages. No consent banner is shown because no non-essential cookie is set. [ASSUMED]
Hosting and processors
The site is operated on self-hosted infrastructure under our own control. We do not hand visitor data to third-party analytics, advertising, or content-delivery processors. [ASSUMED]
Our AI assistant (Ix)
Ix is an AI assistant. It answers only from xi2ix’s verified facts and, when it helps, hands your request to Colja Vendel — a person — with a short note already drafted. Ix is a way to reach us; you are always free to email us or use WhatsApp instead. [ASSUMED]
We keep a copy of a conversation only if you explicitly agree, and only in an anonymised form — names, email, phone and identifiers removed — which we use to evaluate and improve Ix. You can preview exactly what would be kept before you decide; declining stores nothing. [ASSUMED]
Ix runs on our own self-hosted infrastructure. Your conversation is not sent to any third-party AI provider and does not leave the EEA, and we do not use anything you tell Ix to train the model. [ASSUMED]
Enquiries and confirmation
When you send us an enquiry — by email, or by asking Ix to pass your request to a person — we process the message and the contact details you provide solely to handle and reply to that enquiry. [ASSUMED]
Where a reply requires us to confirm your email address, we use a double-opt-in step: we send a single confirmation request and only act on the enquiry once you confirm. We keep the raw enquiry only as long as needed to deliver the reply, then remove it. [COUNSEL: confirm lawful basis 6(1)(b)/(f) for enquiry handling and 6(1)(a) for the confirmation copy]
If you choose the WhatsApp link, it opens a chat in your own WhatsApp app. From that point the conversation runs over WhatsApp, where Meta is the controller under its own terms; we receive only the message you send us. Using WhatsApp is always optional — email or Ix reach us just as well. [ASSUMED]
Legal basis for each use
We rely on a legal basis for every use of your data: handling your enquiry and replying; the confirmation step where you have asked us to confirm; operating the site securely; and — only with your explicit agreement — keeping an anonymised conversation copy to improve Ix. [COUNSEL: state the precise Art. 6(1) basis per flow and attach the legitimate-interest balancing test (LIA)]
No transfer outside the EEA
Your data stays within the European Economic Area. The site and Ix run on our own self-hosted infrastructure; we do not transfer your data to any recipient in a third country, and we use no analytics, advertising, or content-delivery processor that would do so. [COUNSEL: confirm no third-country transfer and that no Chapter V transfer mechanism is required]
No automated decision-making
We do not make any decision about you that produces legal or similarly significant effects on the basis of automated processing alone. Ix answers questions and hands your request to a person; it does not decide anything about you. [ASSUMED]
Cookies in detail
The site sets only strictly-necessary cookies — there is nothing to consent to and no consent banner. The table below lists each cookie, its purpose, and why it is exempt from consent. [ASSUMED]
| Cookie | Purpose | Party | Duration | Status |
|---|---|---|---|---|
| csrf_token | Protects forms against cross-site request forgery | First-party | Session | Strictly necessary — no consent required |
| lang | Remembers a language you deliberately selected | First-party | Up to 1 year | Strictly necessary — no consent required |
Your rights
You have the right to ask what data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable form, subject to the legal conditions. To exercise any of these, write to us at the contact address in the Imprint. [ASSUMED]
You may also lodge a complaint with the Croatian supervisory authority, the Personal Data Protection Agency (AZOP). [COUNSEL: confirm AZOP contact details and any German (BfDI / Landes-DSB) parallel competence]
Contact and your rights
If you write to us by email, or reach us through Ix (our AI assistant) or WhatsApp, we use your message and contact details solely to reply. You may ask what data we hold about you, and ask us to correct or delete it. The legal references and the full controller details will be completed alongside the Imprint before launch. [ASSUMED]