EU GDPR Compliance
Privacy Policy
Information pursuant to Articles 12, 13, and 14 of the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for the processing of personal data on this website under Article 4(7) GDPR is:
Sole Proprietorship / Software Development
Brüderstraße
59494 Soest, Germany
(Relocating to Paderborn, Germany in October 2026)
Email: support@exeebit.com / emran@exeebit.com
Phone: +49 175 5075508
2. Web Hosting & Server Logs
Our website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA).
When you access our website, Vercel servers automatically record connection logs transmitted by your browser:
- IP address of the requesting device
- Date and time of server access
- Requested page or resource URL
- HTTP status code and volume of data transferred
- Browser type, operating system, and referral URL
Legal Basis: Art. 6(1)(f) GDPR (our legitimate interest in ensuring system security, technical stability, and delivery performance). Vercel is certified under the EU-US Data Privacy Framework (DPF) and complies with Standard Contractual Clauses (SCCs).
3. Payment Processing via Stripe
We process commercial software licenses and subscription transactions through Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland).
When purchasing a license, payment details (including name, email address, billing country/postal code, and credit card credentials) are securely transmitted directly to Stripe. We do not store full credit card numbers or security codes on our servers.
Legal Basis: Performance of a purchase contract under Art. 6(1)(b) GDPR, and compliance with statutory financial and tax record-keeping requirements under Art. 6(1)(c) GDPR (§ 147 German Fiscal Code / AO).
For international transfers, Stripe relies on the EU-US Data Privacy Framework and EU Standard Contractual Clauses. For more details, consult the Stripe Privacy Policy.
4. License Key Issuance & Support
Upon successful order completion, we store your purchase email, generated license key, purchased plan (Single Site, Unlimited, Lifetime), and active domain activations.
This data is required to validate license activations, push automatic software updates to your WordPress installation, and provide customer support (Art. 6(1)(b) GDPR).
When you email us for support, your correspondence and contact details are stored to resolve your query and maintain service history (Art. 6(1)(f) and Art. 6(1)(b) GDPR).
5. Analytics & Cookies (Google Analytics 4 / Consent Mode v2)
We use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand aggregated site usage and optimize user experience.
We implement Google Consent Mode v2. Analytics tracking cookies are strictly disabled until you explicitly consent by selecting "Accept all" in our cookie banner.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes unique website visitors | 2 years |
| _ga_* | Maintains session state and navigation events | 2 years |
Legal Basis: Art. 6(1)(a) GDPR (Consent). You may withdraw or modify consent at any time by clearing your browser local storage or cookies for exeebit.com.
6. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Order & License Records: Retained for 7 to 10 years to comply with statutory German tax and commercial laws (§ 147 AO, § 257 HGB).
- Analytics Data: Retained for 14 months (standard Google Analytics event retention).
- Support Inquiries: Retained until the inquiry is resolved and subsequently archived or deleted.
7. Your Rights under the GDPR (Articles 15–21)
As a data subject, you have the following guaranteed rights:
- Right of Access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
- Right to Erasure (Art. 17 GDPR): Request deletion of your data, provided no legal retention obligations apply.
- Right to Restriction (Art. 18 GDPR): Restrict the processing of your data under certain conditions.
- Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21 GDPR): Object to processing carried out based on legitimate interests (Art. 6(1)(f) GDPR).
- Right to Withdraw Consent (Art. 7(3) GDPR): Revoke previously granted consent at any time without affecting past processing.
To exercise your rights, contact us at: support@exeebit.com.
8. Right to Lodge a Complaint with a Supervisory Authority
If you believe our data processing violates data protection law, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority.
Our competent lead data protection authority is:
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
Website: https://www.ldi.nrw.de
Last updated: 14 September 2026