Privacy Policy

We are pleased to welcome you to our website and appreciate your interest in our services. We take the protection of your personal data very seriously and treat your information confidentially and in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Please note that data transmission over the Internet may be subject to security vulnerabilities. Complete protection against access by third parties cannot be technically guaranteed.

This Privacy Policy explains what personal data we collect when you visit this website and how we use that information. It does not apply to third-party websites to which we provide links.

Data Controller
The data controller within the meaning of Art. 4(7) of the GDPR is:

Aquantec AG
Bülowstr. 27
81679 Munich
Germany

privacy@aquantec.de

Server Log Files / Access Data
When you visit our website, our hosting provider, Microsoft Azure, automatically collects and stores information transmitted by your browser in so-called server log files for technical purposes:

  • IP address from which the website was accessed
  • Date and time of access
  • Name and URL of the file accessed
  • Browser and operating system used
  • Website from which the access originated (referrer URL)

The processing of this data is based on Article 6(1)(f) GDPR. Our legitimate interest is to ensure the stable and secure operation of our website and to prevent and investigate attacks. The log files are automatically deleted unless further retention is necessary to investigate a specific suspicion of misuse.

Use of HubSpot
On our website, we use services provided by HubSpot Ireland Limited, One Sir John Rogerson’s Quay, Dublin 2, Ireland, hereinafter “HubSpot.” We use HubSpot for:

  • providing and processing our online contact form,
  • analyzing user behavior on our website (web analytics/tracking),
  • managing and storing contact and prospect data in our customer relationship management (CRM) system.

HubSpot processes the personal data described below on our behalf as a data processor based on a data processing agreement in accordance with Article 28 of the GDPR. For more information on data protection at HubSpot, please refer to the provider’s privacy policy (legal.hubspot.com/privacy-policy) and, regarding the cookies used, to the (HubSpot Cookie Documentation).

Contact form
If you contact us using the contact form provided on this website, the information you enter in the form—including the contact details you provide (such as your name, email address, company, and telephone number) and your message—will be stored by us and by our data processor, HubSpot, for the purpose of processing your inquiry and handling any follow-up questions. In addition, technical data such as your IP address and the date and time of submission will be processed to prevent misuse.

The processing of this data is based on Article 6(1)(b) GDPR (processing of an inquiry in the context of pre-contractual measures or for the purpose of entering into a contract) where your inquiry is related to entering into a contract. In all other cases, processing is based on Article 6(1)(f) GDPR (our legitimate interest in processing and responding to incoming inquiries).

The data submitted through the contact form is stored in the HubSpot CRM (see below) and retained for as long as necessary to process your inquiry and maintain the business relationship. The data will then be deleted unless statutory retention obligations require otherwise. You may object to the storage of your data at any time with effect for the future by contacting us at info@aquantec.de

Web Analytics with HubSpot (Cookies)

If you have given your consent via our cookie consent banner, HubSpot uses cookies and similar technologies on our website to analyze visitor behavior (e.g., pages visited, time spent on the site, source of traffic, repeat visits). The purpose is to tailor and continuously improve our website and marketing activities to users’ needs and to measure the effectiveness of our marketing efforts.

Cookies used (Excerpt, as of the date specified in HubSpot documentation)

  • __hstc – Primary tracking cookie for visitor recognition; storage duration: approximately 6 months
  • hubspotutk – Unique visitor identifier for contact assignment; storage duration: approximately 6 months
  • __hssc – Session identification; storage duration: approximately 30 minutes
  • __hssrc – detects browser restarts within a session; storage period: end of session
  • __hmpl / hublytics_events_* – temporary storage of tracking events until transmission; storage period depends on the consent granted

HubSpot provides the exact, up-to-date list of cookies at: HubSpot Cookie Documentation.

The legal basis for the use of these non-technically necessary cookies is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG. You may withdraw your consent at any time with effect for the future through our cookie settings.

Storage in the HubSpot CRM

We use HubSpot’s customer relationship management (CRM) system to manage our business relationships and process inquiries. We store and process personal data of prospects and business contacts in the CRM, including information provided to us, for example, through the contact form on this website, by email, by telephone, or during business meetings. This includes, in particular, names, contact details (email address and telephone number), company affiliation, and—where you have given your consent—information about your interactions with our emails and website.

Processing is based on Article 6(1)(b) GDPR where it is necessary for entering into or performing a contract. In all other cases, processing is based on Article 6(1)(f) GDPR (our legitimate interest in systematically managing our business contacts and maintaining efficient sales and customer communications in the institutional B2B sector).

Your data is stored in the CRM for as long as necessary for the purposes of the business relationship or for as long as we have a legitimate interest in maintaining the contact. The data is then deleted or anonymized unless statutory retention periods apply. You may object to the processing of your data for direct marketing purposes at any time pursuant to Article 21(2) GDPR, without providing any reason.

Recipients and transfer to third countries
HubSpot processes the data described above as our data processor. Access to HubSpot’s servers may take place partly at data centers within the EU and, in some cases—in particular as part of intra-group support functions and through HubSpot, Inc., which is based in the United States—outside the EU/EEA. For transfers of data to the United States, HubSpot relies on the EU-U.S. Data Privacy Framework (DPF), where applicable and where HubSpot is certified under the framework. In addition, HubSpot relies on the Standard Contractual Clauses (SCCs) approved by the European Commission as appropriate safeguards within the meaning of Article 46 GDPR.

Data retention periods
In all other cases, we retain personal data only for as long as necessary for the respective purpose or as long as we are legally required or permitted to retain it. The specific retention periods for the individual processing activities are set out in the sections above.

Your rights
Subject to the applicable legal requirements, you have the following rights with respect to your personal data:

  • Access to the data stored about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing, in particular to processing for direct marketing purposes (Art. 21 GDPR)
  • Withdrawal of consent with future effect (Art. 7(3) GDPR); such withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal

To exercise any of these rights, an informal notification to the contact details provided above under “Controller” is sufficient.

Right to file a complaint

Without prejudice to any other administrative or judicial remedies available to you, you have the right to file a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR (Article 77 GDPR).

As a general rule, you may contact the supervisory authority at our registered office or at your place of habitual residence. However, you are also welcome to contact us first with any concerns (see the contact details above under “Controller”).