Privacy Policy PrivacyPolicy

The controller responsible for data processing on this website is:

Quavon UG (haftungsbeschränkt), Managing director: Leopold Link

Langbehnstraße 39, 83022 Rosenheim, Germany

Email: contact@quavon.de

Full provider details are available in the Legal Notice.

We process personal data only to the extent necessary to provide a functional website and our content. Processing is carried out on the basis of the legal requirements (Art. 6 GDPR).

When you access this website, our hosting provider automatically collects information transmitted by your browser in so-called server log files. These are:

• anonymised or truncated IP address of the requesting device
• date and time of access
• page / file requested
• amount of data transferred and notification of successful retrieval
• browser type and operating system used

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free and secure operation of the website. This data is not merged with other data sources.

Log files are deleted after 30 days at the latest. Where entries are needed to investigate a specific security incident, those entries are retained until the investigation is closed.

The website runs on server infrastructure located in Germany. Where a hosting provider is used for this, a data processing agreement under Art. 28 GDPR is in place with that provider. No website data is offloaded to an external content delivery network.

All fonts are bundled at build time and served exclusively and locally from our own servers. All icons are embedded SVG graphics that are part of the page. At runtime, no connection is made to Google Fonts or any other external content delivery network, and no personal data is transferred to third parties in this process. Your browser connects to further hosts only for the reach measurement described under section 6 (tracker.quavon.de) and when you use the forms described under sections 8 to 10 (cms.quavon.de). Both hosts are part of our own infrastructure.

This website sets no cookies. We place only a small number of clearly named entries in your browser's local storage (localStorage). They are permitted without consent because they are strictly necessary for the service you explicitly requested (§ 25 (2) no. 2 TDDDG):

• cookie-consent-v1 — stores your choice in the consent banner so that it does not reappear on every page view
• tixfin-motion-paused — stores whether you paused the animations on this website; the entry is only created once you change this setting

Your language is not stored; it follows from the address you open (German under /de).

We do not set tracking or marketing cookies, and no cross-site or cross-device tracking takes place. The reach measurement described under section 6 also places nothing on your device. The legal basis is Art. 6 (1) (f) GDPR.

On your first visit the website shows a consent banner with the categories “Strictly necessary”, “Analytics” and “Marketing”. We currently use no service that depends on consent to the “Analytics” or “Marketing” categories; your choice there does not change any of the processing described in this policy.

We use Rybbit, an open-source analytics tool we run ourselves at tracker.quavon.de on our own infrastructure. The measurement script is loaded from there where reach measurement is enabled for this website in our content management system. No third party receives the data; there is no processor for reach measurement, because the analysis is our own.

Rybbit sets no cookies and stores nothing on your device — nothing is written to or read from local storage or session storage. The following is sent to tracker.quavon.de:

• the page you are on and the page you came from (referrer)
• coarse browser, operating system, device type and screen resolution details
• your browser language
• the country derived from your IP address; the IP address itself is not stored

Because this involves no access to, and no storage on, your terminal equipment, § 25 (1) TDDDG does not apply; no consent is required, and reach measurement does not depend on your choice in the consent banner (section 5). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the statistical evaluation of usage in order to improve this offering.

Under Art. 21 GDPR you have the right to object at any time, on grounds relating to your particular situation, to this processing. Our contact details are in the legal notice.

On some pages we display aggregated figures from the TixFin platform. Our server fetches them from our own interface (api.tixfin.com) while building the page; your browser makes no connection for this. The figures are anonymous and contain no personal data.

If you contact us by email, we process your details (email address, name, message content) solely to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR. The data is deleted once the enquiry has been conclusively processed and no statutory retention obligations apply.

If you use a contact form on this website, your browser sends the details you enter — usually name, email address, subject and message, and depending on the form also telephone number and further fields — directly to our content management system at cms.quavon.de, which we operate ourselves on our own infrastructure. With the enquiry we store the page it was sent from, your browser identifier (user agent), a truncated hash of your IP address and — where the form asks for consent — your consent and its wording. Purpose, legal basis and deletion follow the preceding paragraph. We process the browser identifier and the IP address hash under Art. 6 (1) (f) GDPR; our legitimate interest lies in protecting the form against spam and abuse.

You can subscribe to our newsletter on this website. For this we process your email address and, if you provide them, your first and last name. Subscription uses a double opt-in procedure: you receive an email with a confirmation link that is valid for 48 hours. We send you the newsletter only after you confirm.

To evidence your subscription we store the time of subscription and of confirmation, the wording of the consent given, the page on which you subscribed, your browser identifier (user agent) and a truncated hash of your IP address.

The legal basis for sending is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time with effect for the future — via the unsubscribe link in every issue, via the unsubscribe form on the newsletter page, or by emailing us. We store the evidence data on the basis of Art. 6 (1) (f) GDPR; our legitimate interest lies in demonstrating valid consent. After you unsubscribe, your email address may be kept on a suppression list so that no further newsletter is sent to you.

Subscription and recipient management are handled by our content management system at cms.quavon.de, which we operate ourselves on our own infrastructure; no external newsletter service is used. We do not track whether or when you open a newsletter or click links in it.

You can book a call with us on this website. Your browser loads the available slots from our content management system at cms.quavon.de and, when you book, transmits your name, your email address and the chosen slot and — depending on the appointment type — telephone number, company and notes. With the booking we store the page it was sent from, your browser identifier (user agent), a truncated hash of your IP address and, where requested, your consent and its wording. A personal link then lets you manage or cancel the appointment.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR; for the browser identifier and the IP address hash our legitimate interest lies in preventing abuse. The data is deleted once the appointment and its follow-up are complete and no statutory retention obligations apply.

Your data is not sold or passed on to third parties for advertising purposes.

You have the following rights regarding your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The authority competent for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, https://www.lda.bayern.de

No data protection officer has been appointed. Fewer than twenty persons at the provider are permanently engaged in the automated processing of personal data (§ 38 (1) BDSG), and none of the conditions of Art. 37 (1) GDPR is met. We answer data protection enquiries directly at the address given in the legal notice.

For security reasons and to protect transmission, this website uses TLS/SSL encryption. You can recognise an encrypted connection by “https://” in the address bar of your browser.