Privacy Policy
Last updated: June 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is: Oliver Drewing Gutenbergstraße 56 50823 Cologne Germany Email: hello@xabiahub.com
2. Data Collected and Purpose
We collect and process the following personal data: • Account data: Name, email address, password (encrypted) upon registration • Profile information: Phone number, business details (optional) • Listing content: Texts, images and other content you publish on the platform • Communication data: Messages between users • Usage data: IP address, browser data, page views (technically necessary) • Payment data: Processed exclusively via Stripe; we do not store credit card data.
3. Legal Basis for Processing
Your data is processed on the following legal bases: • Art. 6(1)(b) GDPR – for the performance of the usage contract • Art. 6(1)(c) GDPR – for compliance with legal obligations • Art. 6(1)(f) GDPR – based on legitimate interests (e.g. platform security)
4. Hosting
The website is hosted by: netcup GmbH Daimlerstraße 25 76185 Karlsruhe Germany netcup is a German-based provider. All server data is processed exclusively in Germany. More information at: https://www.netcup.de/kontakt/datenschutzerklaerung.php
5. Email Delivery
For sending transactional emails (registration, password reset, notifications) we use: UDAG Hosting GmbH Srockmannstraße 2 33335 Gütersloh Germany Emails are only sent for operationally necessary notifications (no advertising without consent).
6. Payment Processing
Payments are processed by: Stripe Payments Europe, Ltd. 1 Grand Canal Street Lower Grand Canal Dock Dublin, Ireland For payments, you will be redirected to Stripe's pages. Stripe processes your payment data according to their own privacy policy: https://stripe.com/privacy
7. Cookies and Local Storage
We use: • Session cookies: For authenticating logged-in users (technically necessary) • localStorage: For storing your language preference We do not use tracking cookies, analytics tools (e.g. Google Analytics), or advertising cookies.
8. Fonts
This website uses the fonts 'Playfair Display' and 'DM Sans' from Google Fonts. The fonts are loaded from our own servers and are not retrieved from Google's servers. No data is transferred to Google.
9. User-Generated Content
When you create listings, messages or reviews, this content is stored on our servers. The content is visible to other users. You are responsible for not publishing personal data of third parties without their consent.
10. Retention Period
Your data is stored: • For as long as your account is active • Up to 30 days after account closure (for any follow-up inquiries) • Payment data: According to statutory retention periods (10 years under German commercial law) After these periods expire, your data will be automatically deleted.
11. Your Rights
You have the following rights regarding your personal data: • Right of access (Art. 15 GDPR) • Right to rectification (Art. 16 GDPR) • Right to erasure (Art. 17 GDPR) — via your profile or by email • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR) — on request by email • Right to object (Art. 21 GDPR) To exercise your rights, contact: hello@xabiahub.com
12. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for North Rhine-Westphalia is: State Commissioner for Data Protection and Freedom of Information NRW Postfach 20 04 44 40102 Düsseldorf https://www.ldi.nrw.de
13. Data Security
We implement technical and organizational measures to protect your data: • HTTPS encryption for all connections • Passwords are stored encrypted only (bcrypt) • Access controls and role management • Regular security updates
14. Changes to This Privacy Policy
We reserve the right to update this privacy policy to reflect changes in the law or changes to the service. The current version is always available on this page.