Skip to content

We answer fast and to the point.

Privacy policy

PRV 01

General

This policy sets out how Ciqualia UG processes your personal data, which rights you have and which choices are open to you. It covers this website and the forms offered on it.

It covers both the data you send us directly and the data derived from what you send.

To protect what you submit, every connection to this site is SSL/TLS-encrypted, and the encryption is enforced: a request over HTTP is redirected to HTTPS.

Controller
Ciqualia UG
Address
Otto-Lilienthal-Straße 36
71034 Böblingen
Deutschland
Data protection requests
[email protected]
PRV 02

Processing of personal data

When you visit this website

Opening a page makes the server record technical details in a log file:

  • the page you came from (referrer)
  • the address requested
  • browser type and version
  • operating system and device type
  • time of access
  • IP address, in anonymised form

These entries keep the site running and auditable — attacks and faults show up in them. They are not combined with other sources, not used for advertising, and not used to recognise individual visitors.

The provider that hosts this site for us processes these entries under a data processing agreement.

Legal ground Art. 6(1)(f) GDPR — legitimate interest in secure operation.
Erasure After eight weeks at the latest.

Contact forms

When you submit one of these forms we process what you entered — name, work email address, company, role and the standard in question — together with the time, the IP address, the browser string and the page you submitted from.

The request is stored with us and forwarded to the mailbox that handles it. Legitimate requests (not spam) are recorded in our CRM system (HubSpot) for follow-up — with name, email address and company.

Legal ground Art. 6(1)(b) GDPR where your request leads towards a contract, otherwise Art. 6(1)(f) GDPR — legitimate interest in handling it and in keeping automated submissions out.
Erasure Once the request is dealt with, unless a statutory retention period applies.

Contact by email

If you write to us we process your address, the time and the content of your message including attachments — to deal with your request and to answer it.

Legal ground As for the form.
Erasure Once dealt with; anything sent beyond that as a rule after seven days at the latest.

Contact by post

For letters we process your postal details — name, address, date of receipt — and the content of the letter.

Legal ground As for the form.
Erasure Once dealt with; anything sent beyond that after seven days at the latest.

Contact by telephone

If you call, we process what you tell us: telephone number, name and the content of the call as far as it is needed to deal with the matter. Calls are not recorded.

Legal ground As for the form.
Erasure Once your request is dealt with.
PRV 03

Disclosure of personal data

We pass personal data on where the law allows it, a contract requires it or you have consented — and only as far as the purpose demands. Recipients may be:

  • STRATO AG (Berlin), which hosts this website and through whose servers the notification emails are sent
  • Microsoft (Microsoft 365), where our mailboxes are hosted
  • the anti-spam providers, where configured (Cloudflare, Automattic/Akismet)
  • our CRM system (HubSpot)
  • public authorities, where we are legally obliged to give information

Providers work for us under a data processing agreement and strictly on our instructions. We do not sell data and do not pass any on for third-party advertising.

Legal ground Art. 6(1)(a), (b), (c) or (f) GDPR, depending on the recipient and the purpose.
PRV 04

Cookies and analytics

This site sets no cookies that need consent — which is why there is no cookie banner. Fonts, images and scripts are served from our own server; nothing is loaded from anyone else’s.

Reach may be measured by a Matomo instance we run ourselves. It sets no cookies, does not recognise you across devices, and truncates the IP address before storing it. We do not use Google Analytics or anything comparable.

We use no social media plug-ins. Where we point to LinkedIn, XING or another network, we do so with a plain link; a connection to that provider is made only once you click it, and from then on its own privacy policy applies.

Legal ground Art. 6(1)(f) GDPR — legitimate interest in a working, abuse-resistant website measured without cookies.
PRV 05

Your rights

You have the following rights against Ciqualia UG:

Art. 15 GDPR
access to the data we hold about you
Art. 16 GDPR
rectification of inaccurate and completion of incomplete data
Art. 17 GDPR
erasure, unless a statutory retention duty stands in the way
Art. 18 GDPR
restriction of processing
Art. 20 GDPR
your data handed over in a common, machine-readable format
Art. 21 GDPR
objection to processing that rests on a legitimate interest
Art. 7(3) GDPR
withdrawal of a consent given, with effect for the future
Art. 77 GDPR
complaint to a supervisory authority

[email protected] — An informal message is enough — there is no form for it. We answer within one month.

Competent supervisory authority

The competent authority is the one at Ciqualia UG’s seat. You may instead approach the supervisory authority where you live or work.

PRV 06

Changes to this policy

We update this policy when the law changes or when we change something about the processing. The version in force is the one on this page; we will send you an earlier one on request.

Last revised: August 2026
Request price list