Privacy Policy

Thank you for visiting our website www.quointelligence.eu and your interest in our services. When you use our services, your personal data may be processed. The protection of personal data is very important to us. This privacy policy explains how we process personal data and what rights you have.
This privacy policy can be accessed and printed out at any time on our website.

General Information
This privacy policy informs you about the handling of your personal data when using our website. In particular, it explains which data we collect and what we use it for. It also informs you about how and for what purpose this is done. Please note that only the German version of the Privacy Policy applies and this English translation is for information purposes only. In the event of any discrepancies, the German version shall prevail.
Personal data (“data”) is any information relating to an identified or identifiable person. “Processing” of data means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The legal basis for data protection can be found in particular in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) as well as in the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the German Act on Data Protection in Telecommunication and Telemedia (Telekommunikation-Telemedien-Datenschutz-Gesetz, TTDSG).

Controller

The Controller of your personal data is
QuoIntelligence GmbH
Sebastian-Kneipp-Str. 41
60439 Frankfurt am Main
Phone: +49 69 33997938
Email: [email protected]

Controller is any natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
If you have any questions with regard to the processing of your data, feel free to contact us at any time by using the following e-mail: [email protected]

Scope of Data Processing
We treat your personal data strictly confidential and in accordance with the statutory data protection regulations and on the basis of this privacy policy. We process your data only as necessary for the purpose of providing a functional and user-friendly internet presence or website and for the provision of our content and services. Failure to provide the data may have legal disadvantages, such as the impracticability of a contract. As part of our data processing, we use various third-party providers in the areas of hosting, online marketing, mailing services and customer relationship management (CRM), each of which processes data on our behalf. We have concluded corresponding data processing agreements with these third-party providers, insofar as the third parties are processors, which ensure that an adequate level of data protection is guaranteed (Art. 28 GDPR).

Data Security
Furthermore, we have taken technical and organizational measures to ensure that the regulations on data protection are observed both by us and by external service providers. For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption.

Processing of Personal Data
The following overview lists all types of data processed by us, their purposes of their processing, as well as the legal basis for their processing.

1. Visiting the Website
If you use our website without otherwise transmitting data to us (e.g. by using the contact form or via email), we collect the following data on our web server temporarily and anonymously via server log files:

• website from which our website was requested (so-called referrer URL)
  
• name and URL of the requested website
  
• date and time of access to the website
  
• description of the type, language and version of the web browser used
  
• IP address of the requesting computer, which is shortened in such a way that it is no longer possible to establish a personal reference.
  
• message whether access was successful (access status/ HTTP status code)
  
• internet service provider of the accessing system
  
• amount of data transferred in each case
  
• operating system used and its interface
  
• the GMT time zone difference
  

when using a mobile device, if applicable, additionally: country code, language, device name, name of the operating system and version
This processing is technically necessary in order to be able to display our website to you. We also use the data for statistical evaluations to ensure the operational security and stability of our website. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f GDPR. The processing of the aforementioned data is necessary for the provision of the website and to ensure the stability and operational security of the website and thus serves to protect a legitimate interest of our company.

We also use the data to fulfil our legal obligations for reasons of data security. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. c GDPR.

2. Registration

You can register on our website to use our Mercury platform. Your email address is required for signing up. After registration, you will receive an email to confirm the registration (“double opt-in”). As part of the registration process, you will be provided with the required mandatory data. The processed data includes in particular the login information (name, email address, password).
Within the scope of the use of our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as those of the users in protection against misuse and other unauthorised use. As a matter of principle, this data is not passed on to third parties unless it is necessary for the prosecution of our claims or there is a legal obligation to do so. We process the following data in connection with registration, login and the user account:

• inventory data (e.g. name, address)
  
• contact data (e.g. email address, telephone number if applicable)
  
• content data (e.g. entries in the online form)
  
• device data (device name, country code if applicable, language, name of operating system and version)
  
• connection data (IP address, mail provider)
  
• date and time of registration and confirmation
  

Processing during registration is carried out on the basis of our legitimate interests for the performance and/or initiation of a user contract, for the provision of customer service, for the administration and/or answering of enquiries, and as a security measure (legal basis: Art. 6 para. 1 p. 1 lit. b GDPR contract performance and pre-contractual enquiries; Art. 6 para. 1 p. 1 lit. f GDPR legitimate interests).

If you have terminated your user account, your data relating to the user account will be deleted, subject to any legal permission, obligation or consent on your part. It is your responsibility to back up your data if you have terminated your account before the end of the contract. Subject to any legal permission, obligation or consent on your part, we are entitled to irretrievably delete all data stored during the term of the contract.

3. Contact and Emails

If you write to us, e.g. by sending us an email or contacting us via the contact form, we store the contact data provided by you in the process, such as name, address, mobile phone number, email and the information provided in your enquiry.

If you contact us within the scope of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the data and information you provide will be processed for the purpose of processing and responding to your contact request on the legal basis of Art. 6 para. 1 p. 1 lit. b GDPR. If you have consented to processing for the purpose of answering your enquiry, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. In addition, we process your data to protect our legitimate interests in accordance with Art. 6 para. 1 p. 1 lit. f GDPR for the appropriate response to customer/contact enquiries.

4. Use of Service

We have developed the platform Mercury, a proprietary collaborative security operations and analytics platform to detect, track, analyze and defend critical or confidential information, including personal data. All information we receive during the performance of our service will be kept strictly confidential. As far as the confidential information contains personal data, e.g. names or email addresses of your employees or customers the processing of such personal data is based on Art. 6 para 1 lit. b GDPR serves as the legal principle.
Art. 6 para 1 lit. b GDPR also serves with regard to any personal data we might detect and process prior to a potential customer relationship are required for the implementation of precontractual measures.

5. Cookies

On our website, we use cookies that are either provided by ourselves or by third parties.
Cookies are small data records that are stored on the device you are using and that the browser saves. Cookies serve to make our offer more user-friendly, effective and secure. There are different types of cookies that are used for different purposes. Some cookies ensure that our offers function properly or that you are recognised on your end device after successful registration (“necessary cookies”). By placing these necessary cookies, we make it easier for you to visit our offers and use the services available there. We place other cookies to analyse user preferences and thus improve our offers (“advanced cookies”).

We only place advanced cookies with your prior consent, which you can give us via the cookie consent banner when you access the website. Further information on the cookies we use can be found in our Cookie Policy. You can configure your browser so that no cookies are stored on your device, or that a message always appears before a new cookie is created. However, the complete deactivation of cookies may result in you not being able to use all the functions of our website.

The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 para. 1 p. 1 lit. f GDPR.

The storage period depends on the cookie used and cannot be generally specified here. We therefore refer to the relevant Cookie Policy.

Legal Basis for Processing

In summary, the legal bases for data processing on this website are as follows:
The data subject has given their consent to the processing of their personal data for one or more specific purposes (Art. 6 para. 1 p. 1 lit. a GDPR). The processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures (Art. 6 para. 1 p. 1 lit. b GDPR). The processing is necessary for compliance with a legal obligation to which the controller is subject (Art. 6 para. 1 p. 1 lit. c GDPR). The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (Art. 6 para. 1 p. 1 lit. f GDPR).

Data Transfers
If we disclose data to other persons and companies (contract processors or third parties) in the course of our processing, transfer data to them or otherwise grant them access to the data, this will only be done if a legal basis exists (e.g. if a transfer of data to third parties is necessary for the performance of a contract pursuant to Art. 6 para. 1 p. 1 lit. b GDPR), you have given your consent, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, hosting providers, tax, business and legal advisors, customer care, accounting, billing and similar services that allow us to efficiently and effectively fulfil our contractual obligations, administrative tasks and duties).
We enter into corresponding data processing agreements with third parties, insofar as they process data on our behalf as contract processors, pursuant to Art. 28 GDPR.

Insofar as we transfer data to third countries, i.e. countries outside the European Union (EU) or the European Economic Area (EEA), this will only be done if it is necessary for the fulfilment of our contractual obligations, if it is required by law or if you have given us your consent. We will inform you about the respective details separately, insofar as this is legally required.

In the event that we process data in a third country or have data processed there, the processing will only take place if the special requirements of Art. 44 et seq. GDPR are met. This means that processing is carried out, for example, on the basis of special guarantees, such as the officially recognised establishment of a level of data protection equivalent to that in the EU (e.g. for the USA by the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

Deletion of Data

The data processed by us will be deleted in accordance with the statutory provisions as soon as their processing is revoked or other permissions no longer apply (e.g. if the purpose of the processing of this data has ceased or it is not required for the purpose).
If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons or whose storage is necessary for the assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person.
Further information on the specific deletion periods for the respective data can be found in our Cookie Policy.

Your Rights

In accordance with the GDPR, you have the following rights:

Right to information (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (“Right to be forgotten”) (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw your consent (Art. 7 para. 3 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

You can exercise your rights at any time by contacting us by email at [email protected] or by post at the address provided above. In particular, you can object to the processing of your data if we process your data on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR or if we use your data for direct marketing purposes.

Changes to this Privacy Policy

We reserve the right to adapt this data protection declaration in order to always comply with the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.