Privacy policy
This Privacy Policy describes the manner in which XEXAM collects, uses, maintains, discloses and otherwise processes personal data collected from its customers and website visitors (each, a "User"). XEXAM is the “controller” of the Users’ personal data, as defined in the European General Data Protection Regulation (“GDPR”).

Users who have signed up for an account on our website (“Site”) can create content on the Site, which content can be accessed and used by the Users’ participants (“Participants”). With regard to the personal data of the Participants, XEXAM is regarded as “processor” as defined in the GDPR. XEXAM’ terms and conditions cover the processing by XEXAM of the Participants’ personal data.

What personal data do we collect?
We collect and use the following personal data about our Users:

Username (obligatory)
Your email address (obligatory)
Your password (obligatory, however we hash your password so that it is not legible for us or anyone else)
Cookie ID
Are you obliged to provide certain personal data?
Yes, we require the obligatory personal data set out above to be able to conclude and perform the agreement with you and to fulfil our legal obligations for administration and tax purposes. If you do not provide this personal data, we cannot conclude the agreement with you.

What do we use the collected personal data for?
We use the personal data for the following purposes:

To enable you to sign up for, and maintain an account (user / profile name, email address)
To enable you to see your account activities and the content you have created
To secure your account (password)
To send you an email confirmation of your order
To process your order and payments
To know in which country you are located, for invoicing, to know your time-zone for support purposes and for identifying your telephone number’s country code (the country of your, or your company’s location)
To be able to offer you our services
For administration and tax purposes
To send service updates by email
To keep you up-to-date about our service and/or our company by email
To be able to communicate with you and provide support
To improve our services and user friendliness (surveys)
To know more about our website visitors and to improve the user friendliness of our website (we only use functional cookies and analytical cookies for which no consent is required)
To know more about our customers and their use of our services
To maintain a commercial relationship with our customers
On what legal grounds do we use your personal data?
We use your personal data to be able to conclude and perform the agreement we have with you, to fulfil our legal obligations and for our legitimate interests. These legitimate interests are set out in this Privacy Policy.

We can ask your consent for specific types of use of your personal data.

With whom do we share your personal data?
We do not sell, trade, or rent your personal data to others.

We use third party service providers to help us operate the services:

We use an internet service provider to host the Site and our email functionality
We use a mailing service provider to send mailings by email
We use payment service providers to process customers’ payments (payment providers used by customers through their own account with such payment provider, are not our service providers)
We use an online customer relationship management (CRM) system
We use a service provider for analyzing our customers’ use of the Service
Incidentally, we may be obliged pursuant to a legal obligations, to share certain personal data with government authorities or third parties.

Are your data transferred to outside the EEA?
Yes, we transfer your data to outside the European Economic Area (‘EEA’).

Our internet service provider, mail service, support tool, chat tool, and analytics providers are located in the United States of America and have a Privacy Shield certification (www.privacyshield.gov).

If you are yourself located outside the EEA, when accessing and receiving your own personal data, it will be transferred to you for the purpose of concluding and performing the agreement we have with you or your company.

How long do we store your personal data?
We only store the personal's username and password in your account as long as you have registered an account with us. Others info we don't store.

What rights do you have?
Pursuant to the GDPR, you have the following rights with regard to your personal data:

To ask for access and a copy of your personal data;
To receive information about the manner in which we process your personal data;
To have incorrect personal data corrected;
To have incomplete personal data completed, taking into account the purposes for which they were collected and/or used;
Under certain conditions to have your personal data deleted;
Under certain conditions to have your personal data restricted;
Under certain conditions to object to certain use of your personal data;
If you have given consent, to revoke your consent, without affecting the lawfulness of the earlier processing based on your consent;
If you have provided or created the personal data yourself and the processing is based on your consent or for the conclusion and/or performance of the agreement with you, and the personal data are processed by automated means: to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;
To lodge a complaint with the competent data protection authority.
We may in some cases be entitled to refuse to comply with your request. We will then inform you of the reasons for the refusal. We will not be able to perform the agreement with you if we no longer have the obligatory personal data about you, which we will notify you of as well.

If you have questions, requests or complaints about your personal data, please use the contact details below.

How to contact us
If you have any questions, requests or complaints about this Privacy Policy or your personal data, please contact us at:

XEXAM TECH LLC.
(US) 1-888-357-8338 / (UK) 0-800-088-5156 / (China) 170-021-33899
[email protected]

Changes to this Privacy Policy
This document was last updated on 25/9 2018.

We reserve the right to update this privacy policy. We will notify you of important changes to the Privacy Policy by sending you a notification through the Site.