Privacy policy
Version:
This notice explains how we process personal data when you visit this website, contact us, or arrange a meeting. Optional analytics only load after your consent. You can use the website without them.
1. Controller and contact
The controller is Qunevo GmbH, Oestervenn 16, 33758 Schloß Holte-Stukenbrock, Germany. Represented by managing directors Dr. Felix Johannes Grumbach and Stefan Görlitz. Phone: +49 5207 957 3619. Email: info@qunevo.com.
Please contact us directly with privacy enquiries or to exercise your rights. No data protection officer has been appointed.
2. Hosting, delivery, and security
Our website is hosted through Vercel Inc., USA. Requests involve processing IP addresses, timestamps, requested URLs, browser and device information, referrers, and technical status and error data to deliver content, resolve faults, and defend against attacks. Vercel may process data outside the EU or EEA.
The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in a secure, reliable website. Operational and security logs are deleted after the period needed for fault analysis and abuse prevention. Specific security incidents or legal retention obligations may require longer storage.
The public website uses HTTPS encryption. Fonts and website images are served through our website; visiting it does not connect your browser to Google Fonts.
4. Google Analytics
With your consent, we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It analyses page views, usage events, device and browser information, and referral sources to improve our website. Google LLC in the USA may also process data.
According to Google, Analytics 4 does not store individual IP addresses. For EU traffic, IP addresses are used to derive location information and then discarded. This does not mean that all usage data is anonymous.
Cookies _ga and _ga_* distinguish visits and sessions. Our integration limits their lifetime to 180 days without automatic renewal on each visit. Google Signals and advertising personalization are not enabled by our integration. Contact form contents are not sent as analytics events.
Google's retention of user and event data is separate from cookie lifetime and depends on the Analytics property's configuration. Retention is determined by the period needed to evaluate and improve our offering; aggregate reports may remain longer. You can request information about the retention applicable to your data at info@qunevo.com. Withdrawal stops further measurement and removes accessible analytics cookies on our domain, but does not automatically delete data already held by Google.
5. Vercel Web Analytics
With your separate consent, we use Vercel Web Analytics from Vercel Inc., USA. It produces usage statistics from page views, referrers, timestamps, and browser, device, and approximate location information. Our integration removes query parameters and URL fragments from the page address passed for analysis.
Vercel Web Analytics uses no analytics cookies. According to Vercel, the visitor identifier derived from a request is discarded after 24 hours. This does not describe the retention of aggregate statistics, which depends on the analysis purpose and product features used. Withdrawal prevents further analytics events from our integration even if the script has already loaded.
6. Enquiries and HubSpot
When you contact us, we process the information you provide to answer your enquiry and, where relevant, prepare a proposal. The contact form requires your name, email address, and message; company is optional. We cannot process a form enquiry without the required details. You can also contact us by email or phone.
Form enquiries are sent server-side to HubSpot as tickets containing name, email address, company if provided, and message. The service provider is the HubSpot group, including HubSpot Ireland Limited in Ireland and HubSpot Inc. in the USA. Processing in the USA and by subprocessors is possible. We do not load a HubSpot tracking script when you simply visit the website.
The legal basis is Art. 6(1)(b) GDPR for contracts with you or steps before entering a contract. For enquiries on behalf of a company and other matters, Art. 6(1)(f) GDPR applies: our interest in reliably handling and documenting communications. Acknowledging the privacy notice in the form is not consent to advertising.
We retain enquiries for as long as needed to handle them, manage a resulting business relationship, or establish or defend legal claims. Statutory retention obligations remain applicable. Data must then be deleted or its use restricted to legally required retention. You can request access or deletion at info@qunevo.com.
An internal Discord notification may announce a new enquiry. It contains no name, email address, company, or message content, only a notice that a new enquiry is available in a HubSpot ticket.
7. Booking through Cal.com
We link to Cal.com, Inc., USA, for online booking. The booking service is not embedded in this website. Only when you open the link do you visit Cal.com in a new tab and transmit technical connection data to it. Booking involves your name, email address, appointment details, and any additional information you enter.
We use booking data to arrange and prepare meetings. The legal basis is Art. 6(1)(b) GDPR for steps before entering a contract with you, or Art. 6(1)(f) GDPR for our interest in efficient scheduling. Retention depends on handling the appointment, any subsequent enquiry or business relationship, and applicable legal obligations. Cal.com's notice additionally applies to processing on its website. Processing in the USA is possible. You may also arrange meetings by email or phone.
8. Recipients and international transfers
The hosting, analytics, CRM, and scheduling providers named above and their subprocessors may access data as needed for their tasks. Processing on our behalf is subject to agreements under Art. 28 GDPR. Consent to analytics is not blanket consent to arbitrary data sharing.
Transfers outside the EU or EEA must meet Art. 44 et seq. GDPR. Relevant safeguards include adequacy decisions under Art. 45 or standard contractual clauses under Art. 46. The EU-US Data Privacy Framework is only applicable to certified recipients and covered transfers. You may contact us for information about safeguards used for a particular recipient and a copy of the relevant clauses.
9. Your rights
Subject to the legal conditions, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), and portability (Art. 20). You may withdraw consent at any time with effect for the future (Art. 7(3)).
For processing based on Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Art. 21). We will stop processing unless we demonstrate compelling legitimate grounds or processing is needed to establish, exercise, or defend legal claims. You may object to direct marketing at any time.
You may complain to a supervisory authority (Art. 77 GDPR), particularly where you live, work, or believe an infringement occurred. Our competent authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, phone +49 211 38424-0.
This website does not make solely automated decisions with legal or similarly significant effects within Art. 22 GDPR. We update this notice when the services used change.