Log in Register
← Back to home page

Privacy Policy

This is a convenience translation. The German version is the legally binding one. In case of differences, the German version prevails.

Version dated: October 4, 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation – GDPR (DSGVO) – for the processing of personal data on angebix.com is:

XMS Immobilien UG (haftungsbeschränkt)
represented by its managing director Marek Skowron
Ballindamm 3, 20095 Hamburg
Phone: 015561154491
E-mail: support@angebix.com

A data protection officer has not been appointed, as the statutory requirements for this are not met. If you have questions about data protection, please contact the e-mail address given above.

2. Overview

Angebix is a platform on which customers can find service providers and request quotes and on which businesses present themselves with their services and prices. We process personal data only insofar as this is necessary for providing the website and our services, on the basis of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), to comply with legal obligations (Art. 6(1)(c) GDPR), on the basis of our legitimate interests (Art. 6(1)(f) GDPR) or with your consent (Art. 6(1)(a) GDPR). We do not sell data and do not use advertising or tracking services.

3. Hosting and server log files

The website is hosted by Netlify, Inc. (San Francisco, USA). When the website is accessed, technical access data are processed automatically (including IP address, date and time, page accessed, referrer, browser and operating system). This is necessary for delivering and securing the website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Netlify; the transfer to the USA takes place on the basis of the EU-U.S. Data Privacy Framework or of EU standard contractual clauses (Art. 45, 46 GDPR).

In order to preset country, currency and units of measurement appropriately, our hosting provider determines, when the page is accessed, from the IP address the country from which the access is made. This country code is used exclusively for delivering the respective page and is not stored by us; no cookies are set for this purpose. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a user-friendly presentation).

4. Fonts and program libraries

Fonts and JavaScript libraries (including Supabase client, jsPDF, Leaflet) are loaded locally from our own web server. No connection to Google Fonts or other external content delivery networks is made for this when a page is accessed.

5. Database, user accounts and file storage (Supabase)

Company profiles, services, prices, requests, reviews and user accounts are stored with Supabase Inc. in a data center in Frankfurt am Main (EU). Supabase also handles sign-in (authentication) and the storage of uploaded logos. A data processing agreement pursuant to Art. 28 GDPR is in place with Supabase. Insofar as access from the USA cannot be ruled out, it takes place on the basis of EU standard contractual clauses (Art. 46(2)(c) GDPR).

6. Registration and use as a business

When a business registers on Angebix, we process the data provided, in particular company name, name of the contact person, address, e-mail address, telephone number, industry, services and prices, service areas, logo, website and social media links and, where applicable, tax number or VAT identification number. These data are necessary for the performance of the contract of use (Art. 6(1)(b) GDPR).

The business itself decides which details (e.g. telephone number, address, tax number, social media profiles) are displayed in its public company profile. Public profiles can be accessed by all visitors and by search engines.

We, as the operator, are notified by e-mail of a new registration in order to be able to review the profile and provide support in case of questions (Art. 6(1)(f) GDPR).

Sign-in with Google or GitHub

Businesses can alternatively sign in with a Google or GitHub account. In doing so, you are redirected to the respective provider (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). After your approval, we receive from there your e-mail address and, where applicable, your name. Which data the provider itself processes in this context can be found in its privacy notices. The legal basis is Art. 6(1)(b) GDPR. Signing in by e-mail and password is possible at any time without these services.

Address suggestions (Google Maps Places)

In the business area (/partner) we use the service Google Maps Places of Google Ireland Limited to complete addresses. When this page is loaded and when an address is entered, your IP address and the characters entered are transmitted to Google; a transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-U.S. Data Privacy Framework. The legal basis is our legitimate interest in correct and convenient address entry (Art. 6(1)(f) GDPR). The service is used only in the business area, not on the public pages.

7. Subscription and payment processing (Stripe)

Payment of the subscription for businesses is made via the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. To store the payment method, you are redirected to a payment page of Stripe. In doing so, Stripe processes in particular name, e-mail address, billing address and payment data. Complete card or account data are stored exclusively with Stripe; we receive only information such as subscription status, receipt of payment and the last digits of the payment method. The legal bases are Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR (obligations under tax and commercial law). Stripe may also transfer data to Stripe, Inc. in the USA; Stripe is certified under the EU-U.S. Data Privacy Framework. Further information: stripe.com/de/privacy.

8. Search for service providers and location search

No registration is required for the search. If you enter a place or a postal code, this information is transmitted to the Nominatim service of the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) in order to convert it into coordinates. Your IP address is also transmitted in the process. For the United Kingdom there is an adequacy decision of the EU Commission. The legal basis is Art. 6(1)(f) GDPR (functioning radius search).

Map view: In the results list you can display the businesses found on a map. The map is loaded only when you click “Show map”. Only then are map tiles retrieved from the servers of the OpenStreetMap Foundation (tile.openstreetmap.org, address as above); in the process your IP address, the map region displayed and technical browser data are transmitted. Without a click, no connection is made. We load the Leaflet map library from our own server. The legal basis is Art. 6(1)(a) GDPR (your click on “Show map”) or § 25(2) no. 2 TDDDG. Further information: osmfoundation.org/wiki/Privacy_Policy.

Price calculator and labels: The price calculator and the labels “Verified” and “Recently active” are calculated exclusively in your browser from the publicly stored company data. Your entries in the price calculator are not stored and not transmitted to us.

9. Quote and contact requests

If you submit a request via a company profile, we process the data you enter (e.g. name, e-mail address, telephone number, place, desired services and quantities, and your message). The request is stored and forwarded to the selected business so that it can make you an offer and contact you. The quote as a PDF is created directly in your browser. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request).

The business to which the request was sent is itself responsible for the further processing of your data by it.

Appointment proposal (XMS Calendar). If a business has connected its calendar in our app XMS Calendar with Angebix, we display free time slots of that business in the contact form. For this purpose we receive from the calendar exclusively free time slots, no calendar contents. If you select an appointment, we transmit your requested appointment together with your details from the request (name, e-mail address, where applicable telephone number, address and messenger) to the business’s calendar. The appointment is binding only once the business confirms it; we inform you by e-mail of confirmation or rejection. XMS Calendar is likewise operated by XMS Immobilien UG and hosted by Cloudflare; details can be found in the privacy policy of XMS Calendar. The legal basis is Art. 6(1)(b) GDPR.

We send notification e-mails about new requests via the service Resend (Resend, Inc., San Francisco, USA). A data processing agreement is in place with Resend; the transfer to the USA takes place on the basis of EU standard contractual clauses (Art. 46(2)(c) GDPR).

10. Group request and quote comparison

In the case of a group request (quote comparison of several businesses), your details on service, quantity and place are matched against the stored prices of suitable businesses. For summarizing and classifying the results, the AI service of Anthropic may be used (see Section 11). The legal basis is Art. 6(1)(b) GDPR.

11. AI assistant (Anthropic)

Angebix offers a digital assistant that helps with the search for service providers, with setting up the company profile and in the “Know-how” area, as well as an AI-supported evaluation in the quote comparison. The texts you enter into the assistant and the context needed for the answer (e.g. industry, available services) are transmitted to Anthropic, PBC (San Francisco, USA) and processed there to generate the answer. According to the contractual terms, Anthropic does not use these data to train its models. The transfer to the USA takes place on the basis of EU standard contractual clauses (Art. 46(2)(c) GDPR).

Use of the assistant is voluntary. Please do not enter any sensitive personal data there. Answers of the assistant are generated automatically and may be incomplete or incorrect. The legal basis is Art. 6(1)(b) GDPR or our legitimate interest in convenient operation (Art. 6(1)(f) GDPR).

The assistant’s voice output is provided via the speech synthesis of your browser or operating system.

12. Videos (YouTube)

On the home page and on the “Guide” page we embed an explanatory video from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the privacy-enhanced mode (youtube-nocookie.com) and load the video only when you click on the preview or the play button. Before that, only a preview image from our own server is displayed; no data are transmitted to YouTube.

Only after your click does your browser establish a connection to the servers of YouTube or Google. In the process, in particular your IP address, device and browser information and the page accessed are transmitted; YouTube may also use cookies or comparable technologies. If you are signed in to Google, YouTube can assign the playback to your account. A transfer to the USA may take place in the process; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent given by clicking on the video (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Further information can be found in Google’s privacy policy: https://policies.google.com/privacy

13. Reviews

Customers can review businesses. In doing so, we process the name provided, the star rating, the comment and the date. Name, rating and comment are displayed publicly in the company profile; please therefore provide only a name whose publication you agree to (e.g. first name and initial). Businesses can hide individual comments; the star rating remains included in the average. The legal basis is Art. 6(1)(a) and (f) GDPR (your voluntary publication and our interest in a transparent platform).

14. Cookies and local storage

Angebix does not set any tracking or advertising cookies. Only technically necessary information is stored in the local storage of your browser, such as the sign-in status of business accounts, the selected language and the notice about app installation. In addition, a service worker stores icons and the app manifest so that Angebix can be installed as an app. The storage is strictly necessary for the functions you have requested (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR).

15. Contact by e-mail or telephone

If you contact us, we process your details in order to handle your matter (Art. 6(1)(b) or (f) GDPR).

16. Storage period

We store personal data for as long as this is necessary for the respective purpose. Data of a business account are removed after termination and deletion of the account, insofar as no statutory retention obligations exist (e.g. six or ten years for invoicing and accounting records under the German Commercial Code (HGB) and the German Fiscal Code (AO)). Requests are deleted as soon as they are no longer needed for processing or the business account is deleted. Server log files are automatically deleted after a short time.

17. Overview of recipients

18. Your rights

You have the right

Right to object (Art. 21 GDPR)

Insofar as we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. An informal e-mail to support@angebix.com is sufficient.

19. Obligation to provide data

Use of the search is possible without providing personal data. For a request to a business we need contact details so that the business can reply. For a business account, the details marked as mandatory in the registration form are required.

20. Changes

We adapt this Privacy Policy when our services or the legal situation change. The version published here at the given time applies.

Further information: Legal notice (Impressum) · Terms · xmsgroup.de