Privacy Policy

Preamble

We would like to thank you for visiting our website and for your interest in our company, its products and services. The protection of your privacy and your personal data is very important to us. To ensure the highest possible level of transparency and security our privacy policy below informs you about the type, scope and purpose of the data we collect, use and process.

Scope

This privacy policy refers to the website and web application of Thinking Networks AG, in particular https://qvantum-plan.de.

Our data protection principles

  • We treat personal data in a confidential and responsible manner and comply with the statutory provisions on data protection, in particular the General Data Protection Regulation (GDPR).
  • We only process personal data if and to the extent that you provide it to us with your knowledge.
  • We do not sell, lend or give away your personal data; we will only share your personal data with third parties without your consent if we are legally entitled to do so, e.g. if we have a corresponding court order.
  • We use state-of-the-art security technologies to protect your data from abuse.

Controller

Thinking Networks AG
Markt 45-47
52062 Aachen (Germany)
Phone: +49 241 470720
Mailadresse
Web: https://qvantum-plan.de

Data protection officer

If you have any questions, suggestions or comments on the subject of data protection and the enforcement of your rights, please contact our data protection officer:

Thinking Networks AG
Markt 45-47
52062 Aachen (Germany)
Phone: +49 241 470720
Mailadresse

Data collection and storage

You will be connected to our server while visiting our website or our web application. During this process the access paths, the connection time and your current IP address are recorded and stored in order to prevent malfunctions and problems. Cookies may be stored on your computer during your visit to our website to make it easier for you to use our website.

Personal data and purposes of processing

We collect and store personal data exclusively in accordance with the statutory provisions. We store and use your personal data (name, address, e-mail address, bank details, etc.) to process your order, for individual product support and if you like for our newsletter and product information. We do not share your personal data with third parties. Our service partners who require your data for processing such as parcel and letter carriers, letter printers and our banks (for the collection of direct debits) are excluded from this. Your data will only be shared with third parties if this is legally permissible or necessary to assert and enforce our rights and claims.

Information regarding transparency and your rights

Legal basis for the processing of your personal data
We only process your data if at least one of the following conditions applies:
Consent (Art. 6 para. 1 lit. a GDPR): If you give your consent to process data for a specific purpose. One example would be the storage of the data you enter in a contact form.
Contract (Art. 6 para. 1 lit. b GDPR): We process your data to fulfil a contract or pre-contractual obligations with you. For example, if you enter into a subscription (Software as a Service) with us we require personal data in advance.
Legal obligation (Art. 6 para. 1 lit. c GDPR): We process your data if we are subject to a legal obligation. For example, we are legally obliged to keep invoices for accounting purposes. These invoices usually contain personal data.
Legitimate interests (Art. 6 para. 1 lit. f): In case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data to operate our website securely and efficiently. This processing is a legitimate interest.

Right of access, rectification, erasure, restriction of processing
At any time and free of charge you can request access to your data stored by us or the correction, restriction or deletion of your stored data and its processing. If statutory, contractual or commercial or tax retention periods or other statutory reasons prevent deletion your data will not be deleted but restricted.

Right to object
At any time, you have the right to object to the processing of personal data concerning you. In the event of an objection, we will no longer process the personal data unless we can prove compelling reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise, or defend legal claims. This right includes your right to object to data protection consent that you have given us for processing.

Right of data portability
You have the right to receive and transmit your personal data, which we process by using automated procedures, in a structured, commonly used and machine-readable format. Provided this is feasible for technical reasons and no rights and freedoms of other persons are affected, you can request that the personal data be transferred directly from us to another controller.

Duration of the storage of personal data
The deletion of data takes place within the framework of the statutory retention obligations and periods, considering the purpose limitation. The commercial or tax-related data of a completed financial year will be deleted in accordance with the legal regulations after ten or six years unless longer retention periods are prescribed or required for legitimate reasons. Shorter deletion periods are applied in special cases (e.g. in the event of long-term inactivity on your part). If data is not affected by this, it will be deleted when the purposes no longer apply.

Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes applicable data protection law.

Necessity of collecting your personal data
We would like to inform you that the provision of personal data is sometimes required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information on the contract partner). To conclude a contract, it is usually necessary for you to provide us with personal data, which will subsequently be processed by us. Failure to provide personal data would mean that the contract with you could not be concluded.

Existence of automated individual decision-making
We do not use your data for automatic individual decision-making or profiling.

Use of cookies and similar technologies

We use cookies and similar technologies to make our services more user-friendly and to provide our customers with a more customized experience. Cookies are small files that make it possible to store specific, device-related information on the user’s access device. On the one hand they serve the user-friendliness of websites (e.g. storage of login data). On the other hand they are used to collect statistical data on website usage and to analyse it for the purpose of improving the offer.

The following cookie types and functions can be used:

  • Temporary cookies (including session cookies): Temporary cookies are deleted at the latest after a user has left an online service and closed his browser. The purpose of these cookies is to identify your computer during a visit to our websites and to be able to determine the end of your visit.
  • Persistent cookies: Persistent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. The interests of users that are used for reach measurement or marketing purposes can also be stored in such a cookie. In addition, we also use persistent cookies to recognize returning visitors even after a longer period and to be able to offer needs-based information on our product and services.
  • First-party cookies: First-party cookies are set by us.
  • Third-party cookies: Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
  • Necessary (also: essential or absolutely necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g. to save logins, a shopping cart or other user inputs and to detect security risks).
  • Pixel: A pixel is a transparent, one-pixel graphic embedded in a website or message. It is usually used to track whether the corresponding website or message has been accessed or opened.
  • Statistics, marketing and personalization cookies: Cookies are also generally used to measure the reach of a website and when the user’s interests or behavior (e.g. viewing certain content or using functions) are stored on individual websites. This involves collecting standard information that your browser sends to our website, such as browser type, access times or the address of the website that referred you to our website. If you enter personal data on our websites and give us your express consent, we will use this data to provide you with targeted, personalized information about our products and services. Of course you can also withdraw your consent at any time with effect for the future as described in more detail below. This process is also referred to as “tracking”, i.e. tracking the potential interests of users. If we use cookies or “tracking” technologies, we will inform you separately in our privacy policy or when obtaining consent.

International data transfer
We may also use technologies from companies based in USA. By using these tools, your IP address, for example, may be forwarded to US servers of the respective companies (e.g. Google), which is associated with corresponding risks, e.g. data access for control and monitoring purposes by US authorities. In such cases, processing is carried out in accordance with Art. 44 et seq. GDPR based on the adequacy decision of the European Commission (EU-US Data Privacy Framework) with corresponding certification of the provider or because of suitable guarantees (e.g. encryption or standard contractual clauses in the respective contracts). We try to use server locations within the EU where possible.

We will ask for your consent before using cookies that are not technically necessary. We use a tool from Usercentrics GmbH, Sonnenstrasse 23, 80331 Munich (“Usercentrics”) to display the cookie banner and to store, manage and document your selection of cookies. In connection with Usercentrics, we use a cookie that stores your selection of cookie settings. The use of the Usercentrics tool is technically necessary to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

With your consent, you enable us to monitor and continuously optimize our website. Statistical data, including the number of visitors, duration of visits and visitor behavior, help us to draw meaningful conclusions about the strengths and weaknesses of our website. Of course, you can opt out to such cookies and any associated data traffic to the USA by simply clicking on the highlighted word “Settings”. In the following pop-up, all but the permitted technically necessary cookies are already deselected. You can save this setting or adjust the cookies according to your preferences. You can withdraw or change your cookie settings at any time. To do this, call up the cookie settings again via the corresponding links on our pages.

Cookies we use

You have full control of whether and which cookies are used. You can modify the settings in your browser to deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent. The technically necessary cookies are usually deleted when the browser is closed.

Albacross

We use the services of Albacross Nordic AB, company registration number 556942-7338, Epicenter Malmskillnadsgatan 42, 111 57 Stockholm, Sweden (“Albacross”) on our website to identify visitors to our website and to obtain information about the respective company (lead generation). We also use Albacross for targeted advertising to companies (ad targeting). When you visit our website, an Albacross cookie is stored on your computer, which enables an analysis of your surfing behavior. Albacross processes personal data such as your IP address and other technical information on usage behavior (e.g. browser information, operating system version, time stamp). Your data will be deleted as soon as the purpose of processing no longer applies. The processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time. We have concluded a data processing agreement with Albacross, available at https://albacross.com/data-processing-agreement/. Further information about data processing by Albacross can be found here: https://albacross.com/privacy-policy/.

We also use Google Ads Conversion Tracking, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), to draw attention to our offers with advertising material (so-called Google Ads) on external websites. This service records what happens after a click on an ad placed by us via Google Ads when users subsequently visit the website. With conversions, we measure whether users perform a specific action on the website specified by us (e.g. whether services are ordered) after clicking on an ad placed by us via Google Ads. This allows us to track which keywords, ads, ad groups or campaigns lead to the desired user interaction. If you have reached our website via an ad placed by Google, a cookie will be placed on your computer. These cookies lose their validity after 30 to 90 days. The following data may be collected, for example IP address, access duration, browser language, browser type, date and time of visit, user behavior. The legal basis for processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time. Your data will be deleted as soon as it is no longer required for the processing purposes.

We have concluded a data processing agreement with Google for the use of this and other Google services listed in this privacy policy, which obliges Google to protect the data of our website users and to ensure that the data is not passed on to third parties. To ensure compliance with the European level of data protection, including in the event of any transfer of data from the EU or the EEA to the USA and possible further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google. In addition, Google is a certified participant in the EU-US Data Privacy Framework. Further legal information, including a copy of the standard contractual clauses, can be found at https://policies.google.com/privacy.

Google Analytics 4

We use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) to analyse the use of our website. Google Analytics 4 uses “cookies”. Cookies are text files that are stored on your end device and enable your use of a website to be analysed. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server, where it is stored and processed. This may also result in information being transmitted to the servers of Google LLC based in USA and further processing of the information there. Google Analytics 4 collects and processes the IP address transmitted by your end device while you are using the website by default and automatically only in anonymized form, so that the information collected cannot be directly linked to a person. This automatic anonymization is achieved by Google shortening the IP address transmitted by your device within member states of the European Union (EU) or other parties to the Agreement on the European Economic Area (EEA). Google uses this and other information on our behalf to evaluate your use of the website, to compile reports on your website activities and usage behavior and to provide us with other services related to your website and internet usage. The shortened IP address transmitted by your device as part of Google Analytics 4 will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for 14 months and then deleted. Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the use of third-party information via a special function, the so-called “demographic characteristics”. This makes it possible to determine and differentiate between user groups of the website for the purpose of target group-optimized marketing measures. However, data collected via the “demographic characteristics” cannot be assigned to a specific person and therefore not to you personally. This data collected via the “demographic characteristics” function is stored for 14 months and then deleted. All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent to do so in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service via the “Cookie Consent Tool” provided on the website. We use Google Signals service as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports (so-called “cross-device tracking”). If you have activated “personalized ads” in your Google account settings and linked your Internet-enabled devices to your Google account, Google can analyse usage behavior across devices and create database models based on this if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. This takes into account the logins and device types of all website users who were logged into a Google account and carried out a conversion. The data shows, among other things, on which device you clicked on an ad for the first time and on which device the relevant conversion tooks place. We do not receive any personal data from Google, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the “personalized ads” function in the settings of your Google account and thus deactivating the cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de.

Google Double Click

We use the online marketing tool DoubleClick from Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland (hereinafter: Google) on our website. DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are shown in which browser. This prevents ads from being shown more than once. DoubleClick can also use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser’s website using the same browser and makes a purchase there. Your browser establishes an automatic connection with the Google server based on the marketing tools we use. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of DoubleClick, Google receives information that you have accessed the corresponding part of our website or clicked on the advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address. The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time. Further information can be found at https://www.google.de/intl/de/policies/privacy.

Google Dynamic Remarketing

This website uses Google’s remarketing function. Remarketing allows us to show users of the website interest-based advertisements on other websites within the Google Display Network (e.g. in Google Search or on YouTube). For this purpose, user interactions are analysed, e.g. about the products and services in which a user is interested in. This allows us to show the user targeted advertising on other websites even after visiting the website. The following data may be stored by Google, for example visited pages, duration of visit, IP address, device information, date and time of visit. The data is deleted as soon as it is no longer required for processing purposes. The basis for processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time. Further information can be found at https://www.google.de/intl/de/policies/privacy.

Google Tag Manager

Google Tag Manager is also a product that allows us to manage website tags from applications such as Google Analytics via an interface. The Tag Manager is a cookie-free domain and does not collect any personal data.

HubSpot

We use the HubSpot and Hubspot Forms service from HubSpot Inc, 25 First Street, 2nd Floor Cambridge, MA, 02141 USA on our website. This is an integrated software solution which helps us to control and optimize our email marketing through so-called workflows. HubSpot works with cookies to enable recognition and to personalize communication with you. User data such as name, email address or IP address are stored in the process. The basis for processing in HubSpot is your consent in accordance with Art. 6 para. 1 lit. a GDPR or our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR for the provision of any contact forms and simplified communication with interested parties. You can withdraw your consent at any time. We would like to point out that when using HubSpot Forms, there is no personal tracking as with HubSpot itself. If you generally do not want HubSpot to collect data, you can prevent the storage of cookies at any time by changing your browser settings accordingly. We have concluded a data processing agreement with HubSpot (https://legal.hubspot.com/de/dpa). HubSpot is also an active participant in the EU-US Data Privacy Framework. Further information on the topic of “HubSpot and data protection” can be found at: http://legal.hubspot.com/de/privacy-policy.

jsDelivr CDN

To display our website, we use the Content Delivery Network (CDN) jsDelivr from Volentio JSD Limited, company registration number 14984373, Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB. A CDN is a service that helps us to deliver the content of our online offer, in particular large media files such as graphics or scripts, more quickly with regionally distributed servers connected via Internet. We process data solely for the aforementioned purposes and to maintain the security and functionality of the CDN. For this purpose, the browser you use must connect to the CDN servers. As a result, the CDN becomes aware that our website has been accessed via your IP address. The use is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, i.e. our interest in the secure and efficient provision, analysis and optimization of our online offer. Further information can be found in the privacy policy of jsDelivr: https://www.jsdelivr.com/privacy-policy-jsdelivr-net/.

LinkedIn Insight-Tag

The LinkedIn Insight Tag provides us with information about visitors to our website. The service provider is the American company LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. If a website visitor is registered with LinkedIn, we can, for example, analyse the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus tailor our website to the respective target groups more effectively. We can also use LinkedIn Insight Tags to measure whether visitors to our website make a purchase or take another action (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that we can use to display targeted advertising to visitors to our website outside the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place. The processing takes place on the basis of your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. LinkedIn itself collects log files (URL, referrer URL, IP address, device and. browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). You can object to the analysis of your usage behavior by LinkedIn and the display of interest-based recommendations (“opt-out”). To do so, follow this link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. We have concluded a data processing agreement with LinkedIn Corporation (https://de.linkedin.com/legal/l/dpa). You can find more information at: https://de.linkedin.com/legal/privacy-policy.

Pendo

We use Pendo.io, Inc, 150 Fayetteville St., Raleigh, NC 27601, USA (“Pendo”) tools to optimize our web application and increase usability by displaying guides in the web application and to determine which product areas and functions are used the most and to analyse how customers use our application. This enables us to identify opportunities to improve user-friendliness and direct users to relevant functions. These purposes also constitute our legitimate interest in the processing of data in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. When using Pendo, our web application uses hashed and therefore anonymous user IDs that do not allow any conclusions to be drawn about your person. The data is only processed within the European Union. We have concluded an data processing agreement with Pendo. You can find more information about Pendo here.

Smarketer FAST Tracking

We use Smarketer FAST Tracking from Smarketer GmbH, Alte Jakobstraße 83/84, 10179 Berlin, Germany, to correctly allocate the success of an advertisement displayed via Google Ads and to bill it accordingly. For this purpose, FAST establishes a connection between a click on an advertising medium (e.g. an advertisement) and an action (e.g. a purchase or a login or registration). FAST does not store any cookies on your end device. When generating the device fingerprint, only non-personal parameters are merged (browser settings, time zone, CPU class, color depth, browser language, etc.). During an action, the order number and the shopping cart value of the order are usually also transmitted and stored by us for 90 days. Personal data such as name, telephone number or address are expressly not recorded or stored. The following values may also be transmitted: ID (consecutive number), ClickID, time of purchase, currency, conversion name (store order or lead). The information transmitted to us serves the sole purpose of correctly assigning the success of an advertising medium and the corresponding billing and is justified by our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. You can prevent tracking by deactivating FAST Tracking via an opt-out link on the respective page. You can find further information at: https://www.smarketer.group/de/datenschutzerklaerung/.

Amendment of the privacy policy

We reserve the right to amend this privacy policy at any time in compliance with data protection regulations.

Effective Date: 02/23/2024