Legal

Data Protection

This privacy policy explains which personal data we process when you visit this website, for which purposes and on which legal basis we do so, and which rights you have as a data subject.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection legislation is:

QFINITY∞
Wallerfanger Straße 27
66763 Dillingen/Saar, Germany
represented by its owner, Oliver Herrmann

Phone: +49 (0) 6831 5 16 88 50
Email: [email protected]
Website: www.q-finity.de

We have not appointed a data protection officer, as there is no legal obligation to do so.

2. General Information on Data Processing

2.1 Scope of Processing

We process our users' personal data only to the extent necessary to provide a functional website and our content and services, or where you have given your consent.

2.2 Legal Bases

Depending on the specific operation, the processing of personal data is based on one of the following legal bases:

  • Art. 6(1)(a) GDPR - your consent,
  • Art. 6(1)(b) GDPR - performance of a contract or pre-contractual measures,
  • Art. 6(1)(c) GDPR - compliance with a legal obligation,
  • Art. 6(1)(f) GDPR - our legitimate interests.

The storing of information on your device, and access to information already stored there (such as cookies), is additionally governed by Section 25 of the German Act on Data Protection and the Protection of Privacy in Telecommunications and Digital Services (TDDDG).

2.3 Retention Period

Personal data is deleted as soon as the purpose of its storage no longer applies and no statutory retention obligations require otherwise. Specific retention periods are stated for each processing activity below.

2.4 Recipients and Processors

To operate this website, we use service providers that process personal data on our behalf (Art. 28 GDPR). Data processing agreements are in place with these providers. The individual services are described in the following sections.

2.5 Transfers to Third Countries

Where data is transferred to providers located outside the European Union or the European Economic Area, this only takes place on the basis of an adequacy decision of the European Commission (Art. 45 GDPR, in particular the EU-US Data Privacy Framework, DPF) or of appropriate safeguards within the meaning of Art. 46 GDPR, in particular the EU Standard Contractual Clauses.

3. Hosting and Server Log Files

This website is operated by an external hosting provider. Each time the website is accessed, the system automatically collects data and information from the accessing device and stores it in server log files:

  • the user's IP address,
  • date and time of access,
  • the page or file accessed,
  • the website from which the access originated (referrer URL),
  • browser type and version,
  • the user's operating system.

This processing serves to deliver the website, ensure its stability, and safeguard the security of our IT systems; the data is not analyzed for marketing purposes. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted after seven days at the latest, or anonymized so that the accessing device can no longer be identified. The collection of this data is strictly necessary for the operation of the website.

4. Content Delivery and Security: Cloudflare

We use the Cloudflare service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare sits in front of the website as a content delivery network and security service (including protection against denial-of-service attacks and abuse): every request is technically routed through Cloudflare's servers. In the process, Cloudflare processes connection data, including your IP address.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure, stable, and fast operation of the website. A data processing agreement is in place with Cloudflare. Transfers to the USA are based on Cloudflare's certification under the EU-US Data Privacy Framework. Further information: Cloudflare privacy policy.

5. Image Delivery: Optimole

For optimized image delivery we use the Optimole service (Vertigo Studio SRL, Bucharest, Romania). Images on this website are loaded from Optimole servers when a page is accessed; in the process, your IP address is transmitted to Optimole, as delivery to your device is technically impossible without it.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in short loading times and image delivery adapted to the respective device. Further information: Optimole privacy policy.

6. Cookies and Consent Management

6.1 Strictly Necessary Cookies

This website uses cookies. Strictly necessary cookies - without which the website or functions you have expressly requested cannot be provided - are used on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR.

6.2 Cookies Requiring Consent

All cookies and comparable technologies that are not strictly necessary - in particular for web analytics - are used exclusively with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). When you first visit the website, a consent banner asks for your decision; without your active consent, these cookies remain disabled.

6.3 Consent Management with Cookiebot

To obtain, document, and manage your consent, we use the consent management platform Cookiebot (Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark). Cookiebot processes your consent decision, your anonymized IP address, and the date and time of your decision, and stores the decision in a cookie on your device (retention period: 12 months).

The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent given). You can change or withdraw your consent at any time with effect for the future: change cookie settings.

7. Web Analytics: Google Analytics 4

If you have given your consent, we use Google Analytics 4 on this website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is integrated via Google Tag Manager. Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website (including pages visited, visit duration, approximate region, and device and browser information). Google Analytics 4 does not store full IP addresses.

We have enabled Google Consent Mode: without your consent, no analytics cookies are set and no personal identifiers are stored; in this state, only aggregated, cookieless signals may be transmitted to Google. Analytics is activated only once you give your consent via the consent banner.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG); you can withdraw it at any time with effect for the future via the cookie settings. In the course of processing, data may be transferred to servers of Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Analytics data is deleted after 14 months at the latest. Further information: Google privacy policy.

8. Contacting Us

8.1 Contact Form

A contact form is available on our website. If you use it, we process the information you enter (name, email address, subject, message) together with the date and time of submission solely to handle your inquiry. Your data is not passed on to third parties for advertising purposes.

The legal basis is Art. 6(1)(b) GDPR where your inquiry is aimed at concluding or performing a contract, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries). The data is deleted once the respective conversation has ended and the matter has been conclusively resolved, unless statutory retention obligations apply.

8.2 Spam Protection with Google reCAPTCHA

To protect the contact form against automated abuse, we use Google reCAPTCHA (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA uses technical characteristics (including IP address, time spent on the page, and interactions on the page) to determine whether the input is made by a human. In the process, resources are loaded from Google servers and the data mentioned is transmitted to Google; a transfer to servers in the USA is possible (certified under the EU-US Data Privacy Framework).

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our website against abusive automated access and spam. Further information: Google privacy policy.

8.3 Email Contact

If you contact us by email, we process the personal data transmitted with the email to handle your inquiry (legal bases as under 8.1). For our email communication we use Microsoft 365, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as a processor. A transfer to the USA is possible; Microsoft is certified under the EU-US Data Privacy Framework.

9. Newsletter

You can subscribe to our newsletter on this website. For this purpose we process your email address and - if provided - your name. Subscription uses a double opt-in procedure: after signing up, you receive an email with a confirmation link, and the subscription only becomes effective once you confirm it. As proof, we log the time of registration and confirmation as well as the IP address used.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the unsubscribe link in every issue or by sending us a message; the lawfulness of the processing carried out before your withdrawal remains unaffected. For dispatch we use the CleverReach service of CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany, as a processor. Further information: CleverReach privacy policy.

10. External Links and Social Media Profiles

Our website contains links to external websites, including our social media profiles and our learning platform. These are plain links: no data is transferred to these providers while you visit our website. Only once you follow a link does the privacy policy of the respective provider apply.

11. Your Rights as a Data Subject

Where your personal data is processed, you have the following rights against the controller:

  • access to the data processed (Art. 15 GDPR),
  • rectification of inaccurate or incomplete data (Art. 16 GDPR),
  • erasure, where its legal requirements are met (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdrawal of consent with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(e) or (f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. The supervisory authority responsible for us is:

Unabhängiges Datenschutzzentrum Saarland
Landesbeauftragte für Datenschutz und Informationsfreiheit
(Saarland State Commissioner for Data Protection and Freedom of Information)
Fritz-Dobisch-Straße 12
66111 Saarbrücken, Germany
Phone: +49 (0) 681 94781-0
Email: [email protected]
Website: www.datenschutz.saarland.de

12. Automated Decision-Making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place on this website.

13. Data Security

This website uses TLS encryption (indicated by the padlock icon in your browser and the "https" prefix in the address bar). In addition, we apply technical and organizational measures to protect your data against loss, destruction, access, alteration, or disclosure by unauthorized persons.

14. Date and Changes to This Privacy Policy

Last updated: July 2026. We will revise this privacy policy whenever the legal situation or the services used on this website change.