Plot It

1. Data Controller

Controller (Art. 4(7) GDPR):
QuantEnion
Munich, Germany
Website: https://quantenion.de

Contact details are provided on the Website.

2. General principles of data processing

We process personal data in accordance with the following principles:

Lawfulness, fairness, and transparency
Purpose limitation
Data minimization
Accuracy
Storage limitation
Integrity and confidentiality

We only process personal data where there is a valid legal basis under Article 6 GDPR.

3. Data collected when visiting the Website

3.1 Server log files

When you access the Website, the hosting provider automatically collects the following data:

IP address (possibly anonymized)
Date and time of the request
Requested page or file
HTTP status code
Browser type and version
Operating system
Referrer URL

This data is technically necessary to ensure Website stability, security, and performance.

Legal basis: Article 6(1)(f) GDPR (legitimate interest)
Legitimate interest: Secure and reliable operation of the Website

4. Cookies and similar technologies

We use cookies and similar technologies in accordance with GDPR and the EU ePrivacy Directive.

Details on:

Types of cookies used
Purposes
Consent management

are provided in our Cookie Policy, which is available on the Website.

Legal bases:
Article 6(1)(f) GDPR for strictly necessary cookies
Article 6(1)(a) GDPR for optional cookies (consent)

5. Contact requests

If you contact us via email or a contact form, we process the personal data you provide (e.g. name, email address, message content).

Purpose:

Responding to inquiries
Business communication

Legal basis:

Article 6(1)(b) GDPR (pre-contractual measures or contract)
Article 6(1)(f) GDPR (legitimate interest in communication)

Data is deleted once the inquiry has been fully processed and no legal retention obligation applies.

6. Business and client data

If you engage our services, we process personal data necessary for:

Contract execution
Invoicing and accounting
Project communication
Legal compliance

Legal basis: Article 6(1)(b) GDPR
Retention: In accordance with statutory commercial and tax retention periods under German and EU law.

7. Analytics and third-party services

If analytics or third-party services are used (e.g. website analytics, embedded content), they are activated only with your explicit consent via the cookie banner.

Legal basis: Article 6(1)(a) GDPR (consent)

Details of specific providers, data categories, and retention periods are disclosed in the Cookie Policy.

8. Data transfers to third countries

Where personal data is transferred outside the EU/EEA, we ensure compliance with GDPR Chapter V through appropriate safeguards, such as:

EU Standard Contractual Clauses
Adequacy decisions of the European Commission

9. Data retention

We store personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Once the purpose no longer applies, data is deleted or anonymized.

10. Data security

We implement appropriate technical and organizational measures to protect personal data, including:

Encryption where appropriate
Access controls
Regular security updates
Protection against unauthorized access, loss, or manipulation

11. Your rights under GDPR

You have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent at any time (Art. 7(3) GDPR)
Right to lodge a complaint with a supervisory authority

12. Supervisory authority

You may lodge a complaint with a data protection supervisory authority, in particular:

In Germany, the authority of your place of residence, workplace, or the place of the alleged infringement.