Privacy Policy

Data Privacy Notice

within the scope of the homepage use

 

I. Responsible Party and Contact Information

 

Responsible Party acc. to Art. 4 No. 7 GDPR is:
QEST Quantenelektronische Systeme GmbH (hereinafter referred to as “Responsible Party”)
Max-Eyth-Straße 38
71088 Holzgerlingen
Germany

 

The Data Protection Officer of the Responsible Party can be reached at the following address:
Data Protection Officer
QEST Quantenelektronische Systeme GmbH
Max-Eyth-Straße 38
71088 Holzgerlingen
privacy@draexlmaier.com

 

II. Collection and Processing of Personal Data

 

Accessing the Website

When you visit our website, our web server automatically collects the following data:

  • the name of your Internet service provider
  • the website from which you are visiting us
  • the pages you visit on our site
  • the amount of data transferred and the file size of the page visited
  • the log and the Internet Protocol (IP) address
  • the date, time and duration of the visit
  • the browser language
  • the status code
  • the device type, the device brand, the device model, the screen resolution
  • the operating system, the browser, browser plug-ins
  • internal search terms
  • outbound links
  • downloads
  • search engines

The collection, storage and analyzes of this data is for statistical purposes and to ensure system security. This data is collected anonymously and stored separately from all personal data. A merger does not take place. The legal basis for this processing activity is Article 6 Para. 1 letter f of the GDPR. The aforementioned purposes also constitute our legitimate interests. The IP address collected in the course of this process is deleted immediately after it has been anonymized, unless we are required by law or for other legal reasons to retain it for a longer period.

When a search is performed using the internal search function of the website, the search terms entered, the time of the search query and the IP address of the user who initiated the search are stored for 90 days. The legal basis for data processing when using the internal search function is Article 6 Para. 1 letter f of the GDPR. The purpose of the processing is to handle the search query submitted by you, which also constitutes our legitimate interest.

 

Contact us by Email / using our contact form

Feel free to contact us easily via email or through our contact form. To do this, you must provide a valid email address so that we can respond to your request. You may voluntarily provide additional information here. Data processing for the purpose of contacting us is carried out in accordance with Article 6 Para. 1 S.1 letter a) of the GDPR, based on the consent you voluntarily provided by submitting your data. The purpose of the processing is to handle the inquiry submitted by you. The personal data we collect when you use the contact form will be automatically deleted once your inquiry has been processed, unless we are required by law or for other legal reasons to retain it for a longer period.

 

Sending e-papers and documents on specific topics

We provide e-papers and other documents on specific topics. You can request this from us by registering on our website and providing your first name, surname and a valid email address. In this case, your data is processed for the purpose of sending you the e-papers and other documents you have requested and to enable us to conclude a user agreement with you regarding the use of these e-papers and other documents. The legal basis in this case is Article 6 Para. 1 letter b) of the GDPR.

 

IV. Purpose and Legal Basis of Data Processing

 

We process the personal data specified in more detail above in this Data Privacy declaration in accordance with the provisions of the GDPR, other relevant data protection regulations and only to the extent necessary. To the extent that the processing of personal data is based on Article 6 Para. 1 S.1 letter f of the GDPR, the purposes mentioned also constitute our legitimate interests.

 

V. Disclosure of Personal Data to Third Parties

 

The following categories of recipients, who are generally data processors, may have access to your personal data:

  • Service providers responsible for operating our website and processing the data stored or transmitted by the systems (e.g., for website maintenance and support, data center services and IT security). The legal basis for the disclosure is then Article 6 Para. 1 S 1 letter b or f of the GDPR, provided that the recipients are not data processors;
  • Government agencies and authorities, to the extent necessary to fulfill a legal obligation. The legal basis for the disclosure is then Article 6 Para. 1 S 1 letter c of the GDPR;
  • Persons involved in the conduct of our business operations (e.g., agencies, auditors, banks, insurance companies, legal advisors, regulatory authorities, parties involved in corporate acquisitions or the formation of joint ventures). The legal basis for the disclosure is then Article 6 Para. 1 S 1 letter b or f of the GDPR.


In addition, we will only disclose your personal data to third parties if you have given your explicit consent to do so in accordance with Article 6 Para. 1 S 1 letter a of the GDPR.

 

VI. Requirements for the Transfer of Personal Data to Third Countries

 

Within the scope of our business relationships, your personal data may be shared with or disclosed to third-party companies. These may also be located outside the European Economic Area (EEA), that is, in third countries. Such processing is carried out solely to fulfill contractual and business obligations and to maintain your business relationship with us.


Through so-called adequacy decisions, the European Commission certifies that certain third countries have data protection standards comparable to those of the EEA (A list of these countries and a copy of the adequacy decisions are available here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. To the extent that this is the case, we ensure that data protection is adequately guaranteed. This can be achieved through binding corporate rules, the European Commission's standard contractual clauses for the protection of personal data, certificates or recognized codes of conduct.

 

VII. Security

 

We implement technical and organizational security measures to protect the data you provide from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously being improved in line with technological advancements.

 

SSL or TLS encryption

For security reasons and to protect the transmission of confidential information, such as inquiries you send to us as the website operator, this site uses SSL or TLS encryption.

An encrypted connection can be recognized by the fact that the browser address bar changes from "http://" to "https://," and by the lock icon in your browser address bar. If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

 

VIII. Use of Cookies

 

Cookies are not used on our website. 

 

IX. Your Rights

 

You may exercise your rights as a data subject with respect to your processed personal data at any time by contacting us using the contact information provided above under I. As a data subject, you have the right:

  • pursuant to Article 15 of the GDPR, to request information about your data that we process. In particular, you may request information regarding the purposes of processing, the categories of data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, deletion, restriction of processing, or objection, the existence of a right to file a complaint, the origin of your data if it was not collected by us, as well as information regarding the existence of automated decision-making, including profiling, and where applicable, meaningful information regarding its details;
  • pursuant to Article 16 of the GDPR, to request without delay the correction of inaccurate data or the completion of your data stored by us;
  • pursuant to Article 17 of the GDPR, to request the deletion of your data stored by us unless processing is necessary for exercising the right to freedom of expression and information, for fulfillment of a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
  • pursuant to Article 18 of the GDPR, to request the restriction of the processing of your data provided that you contest the accuracy of the data or the processing is unlawful;
  • pursuant to Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller (“data portability”);
  • pursuant to Article 21 of the GDPR, to object to the processing provided that the processing is based on Article 6 Para. 1 S 1 letter e or letter f of the GDPR. This is particularly the case if the processing is not necessary to fulfill a contract with you. Unless the objection is related to direct marketing, if you exercise such an objection, we please ask you to explain the reasons why we should not process your data in the manner we currently do. If your objection is justified, we will review the circumstances and either cease or adjust the data processing, or explain to you our compelling legitimate grounds for continuing the processing;
  • pursuant to Article 7 Para. 3 of the GDPR, you may revoke your consent - that is, your voluntary, informed and unambiguous expression of will, made clear through a statement or other unambiguous affirmative action, indicating that you consent to the processing of the relevant personal data for one or more specific purposes - at any time, provided you have given such consent. As a result, we may no longer continue processing data based on this consent in the future; 

  • pursuant to Article 77 of the GDPR, you have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data by our company.

     

X. No automated decision-making (including profiling)

 

We do not intend to use the personal data we collect from you for automated decision-making (including profiling).

 

XI. Social Media Plugins

 

We do not use any social media plugins on our website. If our websites contain icons from social media providers (e.g., Facebook, Instagram, Kununu, LinkedIn, Xing), we use them solely to provide passive links to the respective sites of the providers.

 

XII. Use of the Sentry Error Analysis Tool

 

On our website, we use the open-source error analysis tool “Sentry.” The software is operated on our behalf by our Internet agency as a so-called self-hosted version on their servers in Germany.
This tool is designed to ensure the technical stability of our website by logging system errors and programming errors in the source code. Sentry collects purely technical metadata at the time of the error (e.g., the operating system used, the browser type, the URL accessed and the technical cause of the error).
Sentry does not store cookies on your device and does not use tracking technologies. Neither we nor our agency are able to link the error logs to a specific person.
The legal basis for this data processing is Article 6 Para. 1 S 1 letter f of the GDPR. Our legitimate interest lies in ensuring IT security, technical functionality and the continuous optimization of our website. For more information, visit: https://develop.sentry.dev/self-hosted/. For more information about the Sentry privacy policy, visit https://sentry.io/privacy/.

 

XIII. Actuality and Changes to this Data Privacy Declaration

 

This data privacy declaration is currently in effect and is valid as of August 2026.