This Privacy Policy explains how raw.org collects, uses, stores, and protects personal data when you visit or use this website.
Controller for data processing on this website is XOR Ventures GmbH, Meißner Str. 2C, 01665 Klipphausen, Germany. For legal notice and contact details, see the Imprint page.
Scope
This policy applies only to pages and services on the raw.org domain that are operated by XOR Ventures GmbH. A third-party website does not become covered by this policy merely because it links to raw.org or to this Privacy Policy. Third-party websites and services remain solely responsible for their own privacy notices and data processing.
Data We Process
We process personal data only where necessary for technical operation, security, analytics, and communication.
Data You Provide
If you contact us or otherwise submit information, we may process data such as your name, email address, message content, and related metadata.
Data Collected Automatically
When you access this website, technical data may be processed automatically, including IP address, date and time of request, requested URL, referrer URL, browser type and version, operating system, language settings, and similar access data.
Purposes and Legal Bases
- Provision of the website and IT security (Art. 6(1)(f) GDPR, legitimate interest).
- Performance measurement and optimization (Art. 6(1)(f) GDPR, legitimate interest), provided this is legally permissible in the applicable jurisdiction.
- Communication and handling inquiries (Art. 6(1)(b) and/or Art. 6(1)(f) GDPR).
- Compliance with legal obligations (Art. 6(1)(c) GDPR).
Cookies and Similar Technologies
We use cookies and similar technologies where technically necessary and, where applicable, for analytics functions. You can restrict or delete cookies in your browser settings. Depending on your configuration, certain site features may be limited.
Third-Party Services
We use the following third-party services:
| Service Name | Function | Privacy Policy |
|---|---|---|
| Google Analytics | Analytics service | privacy policy |
| Cloudflare | Content Delivery Network and caching | privacy policy |
These providers may process technical and usage data as independent controllers or processors under their own data protection terms.
Recipients of Data
Personal data may be disclosed to technical service providers where required for hosting, content delivery, analytics, and secure operation of the website. Access is limited to what is necessary for the respective purpose.
Legal Disclosure Obligations
We may disclose personal data if required to do so by applicable law, enforceable governmental request, court order, or other binding legal process.
Misuse Prevention and Enforcement
We may process and, where necessary, disclose relevant data to detect, prevent, and investigate abuse, fraud, unauthorized access, service attacks, or other security incidents, and to assert or defend legal claims.
Service-Specific Notes
Google Analytics
Google Analytics scripts are integrated on this website and are loaded when pages are requested. Google may process usage and device data and may set cookies or similar identifiers. IP anonymization is enabled in our Analytics configuration. You can restrict processing through browser settings and, where available, by using Google's opt-out tools (for example: https://tools.google.com/dlpage/gaoptout).
Cloudflare
Cloudflare is used for content delivery and caching. In that context, technical request data (for example IP address and request metadata) can be processed to ensure delivery stability and performance.
International Data Transfers
Data processing by third-party providers may involve transfers to countries outside the European Union/European Economic Area. Where required, such transfers are based on appropriate safeguards, for example the EU Standard Contractual Clauses.
Storage Period
We store personal data only as long as necessary for the stated purposes, to meet legal retention duties, or to resolve legal claims.
Server Log Storage
We do not keep persistent server access logs under normal operation. Short-lived technical processing may still occur transiently within infrastructure components for delivery and security purposes.
Your Rights
Under applicable law, you may have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent at any time with effect for the future.
How to Exercise Your Rights
To exercise your data protection rights, contact us via the contact details listed on the Imprint page. We may request additional information to verify your identity before processing your request.
Deletion on Request
You may request deletion of personal data concerning you. We will evaluate and process such requests in accordance with applicable law. Deletion may be limited where retention is required for legal obligations, security purposes, or the establishment, exercise, or defense of legal claims.
No Automated Decision-Making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR in connection with this website.
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
Competent supervisory authority for this website operator is generally:
Sächsischer Datenschutz- und Transparenzbeauftragter (SDTB)
Devrientstraße 5
01067 Dresden
Germany
Website: https://www.datenschutz.sachsen.de/
External Links
This website may contain links to external websites or services not operated by us. We are not responsible for the content or data processing practices of those external services. Please review their privacy notices separately.
Security
We use technical and organizational measures designed to protect personal data against unauthorized access, loss, destruction, or manipulation. Data transmission between your browser and our website is protected via encrypted HTTPS connections.
Changes to This Policy
We may update this Privacy Policy to reflect legal, technical, or organizational changes. The current version published on this page applies.
Last updated: 22 July 2026