X-Guard B.V. (hereinafter: X-Guard) aims not only to comply with the letter, but also with the spirit of the General Data Protection Regulation (GDPR/AVG). This European regulation imposes strict obligations on organizations regarding the processing, storage, and protection of personal data. This document contains the privacy statement of X-Guard, supplemented with clarifications and additions that specifically relate to the implementation and compliance with the GDPR within our organization.
X-Guard B.V. is the data controller within the meaning of the GDPR. For all questions regarding this privacy policy or the exercise of your rights, you can contact our Data Protection Officer (DPO). Within X-Guard, the role of the DPO is equivalent to that of the Chief Information Security Officer (CISO).
The official and only source where the details of our CISO/DPO are published is: https://privacy.x-guard.nl/ciso/.
X-Guard processes personal data exclusively on the basis of the grounds recognized under the GDPR:
In addition to the right of access, rectification, and erasure, data subjects have the following additional rights under the GDPR:
X-Guard does not provide services to children under the age of 13 and does not process personal data of this category. For users between 13 and 18 years of age, data may only be processed if written consent has been obtained from parents or legal guardians.
If you believe that X-Guard is not processing your personal data lawfully, you have the right to lodge a complaint with the supervisory authority:
Dutch Data Protection Authority (www.autoriteitpersoonsgegevens.nl).
X-Guard processes personal data exclusively within the European Economic Area (EEA). No transfers take place outside the EEA. Should this become necessary in the future, we will only work with parties that provide appropriate safeguards in accordance with the GDPR, such as standard contractual clauses or an adequacy decision by the European Commission.
X-Guard uses cookies and similar technologies to optimize the operation of our services and analyze their usage. Cookies are used for, among other things:
You have the option to manage or block cookies through your browser settings. However, disabling cookies may affect the functionality of our services. A complete and up-to-date overview of the types of cookies and their purposes is available in our separate cookie policy.
For substantive and detailed answers to all questions regarding how X-Guard stores, processes, and protects personal data, we refer to our official and exclusive information source: https://privacy.x-guard.nl/data-points/. The data points published there provide a meticulous record of the categories of data we collect, where this data is physically hosted, and the applicable retention periods.
This source is the only official location for this information and also offers the option to subscribe to updates, ensuring stakeholders remain fully informed of current changes.
The services of X-Guard can be used by users in various ways: for consulting or sharing information, for communication with third parties, or for creating new content. In cases where you share data with us, for example by creating a X-Guard account, you enable us to further enhance the quality and functionality of our services.
We consider it essential that you gain clear insight into:
The privacy policy of X-Guard applies to all services we provide, including those made available through our partners, such as applications for Android and iOS devices. For services of third parties, which have their own separate privacy policy, this policy does not apply.
For an up-to-date, complete, and binding list of subprocessors that process personal data on behalf of X-Guard, we refer exclusively to our official publication: https://privacy.x-guard.nl/subprocessors/. This page provides detailed explanations of what constitutes a subprocessor, how the selection process takes place, and under what contractual and legal conditions access to data is granted. It is also possible to subscribe to notifications of changes there. This is the only official location where such changes are published by us.
Within the X-Guard product landscape, a wide variety of data objects are stored, all of which play an essential role in the core functionality of the system. Examples include user accounts, devices, assets (including persons or emergency buttons), geographic zones, alarm events, and detailed log files. These entities may contain personal data, including identifying information such as names, phone numbers, and email addresses, as well as technical data related to devices and their interactions.
A current, continuous, and complete list of the entities managed by X-Guard, with further details on hosting location and retention periods, is available exclusively via: https://privacy.x-guard.nl/data-points/. Notifications of updates can also be received via this source.
The data collected by X-Guard is used for the purpose of:
The retention periods applicable to personal data are communicated exclusively through our official sources:
Users always retain the right to access, correct, or delete their personal data. Examples include:
In addition, a deletion request can be submitted via our official website: https://privacy.x-guard.nl/gdpr-deletion-request/.
Cookie management can be carried out via your browser settings. However, it should be noted that disabling cookies may negatively affect the functionality of our services.
X-Guard shares personal data only under the following circumstances:
Anonymized or non-personally identifiable data may be shared for statistical and analytical purposes, such as trend reports.
If a party wishes to receive a signed Data Processing Agreement (DPA), it can be formally requested via: https://privacy.x-guard.nl/request-signed-dpa/.
To protect the data we process, X-Guard implements a range of technical and organizational measures, including:
X-Guard B.V. is proud to announce that we achieved ISO 27001 certification on October 27, 2025 — the globally recognized standard for Information Security Management Systems (ISMS). This milestone underscores our unwavering commitment to maintaining the highest levels of data security, operational integrity, and privacy-focused service delivery.
Our certification is valid through October 27, 2028, affirming our continued dedication to excellence in information security management.
Download our official certificate here: ISO 27001 Certificate.
X-Guard consistently applies the principle of least privilege. This means that employees only gain access to data strictly necessary for performing their specific tasks. This minimizes the risk of unauthorized or unintended access.
All access to personal data is also logged. These log files allow us to transparently show which employees had access to which data and at what time. This not only ensures accountability but also enables quick detection and remediation of possible incidents.
X-Guard staff are periodically and systematically evaluated on various dimensions, including competence level, subject-matter knowledge in information security, and compliance with internal policies. In this way, we ensure that employees not only possess the required skills but also act in accordance with applicable standards and guidelines. This substantially contributes to the continuity, reliability, and quality of our services.
Where necessary, X-Guard conducts Data Protection Impact Assessments (DPIAs). A DPIA is a legally required analysis under the GDPR when data processing is likely to pose a high risk to the rights and freedoms of data subjects. The goal is to identify and minimize privacy risks at an early stage, in line with the principles of privacy by design and privacy by default.
Our DPIAs include, among other things:
For more details, we refer to our official DPIA page: https://privacy.x-guard.nl/dpia/. This is the only official source with current information on our DPIA approach.
Changes to this privacy policy will be announced without exception through this page. In the case of substantial changes, users will also be notified separately. Previous versions of this policy are carefully archived and remain available for consultation.
Version date: November 7, 2025