Legal · Datenschutz

Privacy Policy

GDPR compliantEffective date: September 1, 2025

Quatelio GmbH (“we”, “us”, “our”) takes the protection of your personal data seriously. We process personal data in accordance with the GDPR and other applicable data protection laws. Please note: data transmitted over the Internet (e.g., email) may have security vulnerabilities. We take appropriate measures, but cannot guarantee 100% protection against third-party access.

01Data controller

02Data we collect and process

AServer log files

Data collected: IP address, date/time of access, referrer URL, browser type/version, operating system
Purpose: Ensure website functionality, security, and availability
Legal basis: Art. 6(1)(f) GDPR – legitimate interest
Retention: Session data deleted after session ends; logs retained for 7 days; encrypted backups retained 14 days

BCookies

Essential cookies: Required for website operation
Non-essential cookies: Used for analytics and performance (requires user consent)
Legal basis: Art. 6(1)(f) GDPR (essential); Art. 6(1)(a) GDPR (non-essential, consented)

You can manage cookies via your browser or our consent tool. Disabling cookies may limit website functionality.

CContact forms & email

Data collected

Name, email, company, message, date/time of contact

Purpose

Responding to inquiries, providing services, and preventing abuse

Legal basis

Consent (Art. 6(1)(a) GDPR) if submitted via form with consent checkbox
Legitimate interest (Art. 6(1)(f) GDPR) for email inquiries
Contract fulfillment (Art. 6(1)(b) GDPR) if related to service agreements

Retention

Data kept only as long as necessary to resolve the inquiry or fulfill legal obligations

03Job applications & expert network

AApplications (Careers page)

Data collected: Name, email, phone (optional), profile link, earliest start date, message, CV file, date/time
Purpose: Processing your application and getting in touch with you
Legal basis: Art. 6(1)(b) GDPR and § 26 BDSG (pre-contractual measures / employment relationship); Art. 6(1)(a) GDPR (consent)
Retention: Deleted automatically 180 days after receipt unless you are hired or agree to a longer storage period

BExpert network & project briefs (Recruiting)

Data collected: Expert network: name, email, profile link, location, areas, experience, availability, CV (optional). Project brief: company, email, project details
Purpose: Matching consultants with projects; answering project requests. Profiles are shared with clients only after asking you.
Legal basis: Art. 6(1)(a) GDPR (consent) for the expert network; Art. 6(1)(b) and (f) GDPR for project briefs
Retention: Expert network: up to 24 months or until you withdraw consent; project briefs: 12 months

05Website chat (AI assistant)

Our website offers an optional AI assistant (“Ask Quatelio”). It only becomes active when you open the chat and send a question.

Data processed: The text of your questions and the assistant’s answers of the current conversation, the page language
Purpose: Answering questions about Quatelio and our services
Processor: The questions are sent to OpenRouter, Inc. (USA), which forwards them to the selected language model provider. Data may be processed outside the EU; transfers are based on the EU Commission’s standard contractual clauses or an adequacy decision where available.
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in answering visitor questions quickly
Storage: We do not store chat conversations on our servers. Your IP address is only used briefly to prevent abuse (rate limiting).
Please note: Do not enter personal or confidential information in the chat. Answers are generated automatically and may be incorrect; they are not binding.

06Cookies we use

q_csrf: Necessary – security token that protects our forms against misuse (session)
q_consent: Necessary – stores your cookie choice (6 months)
q_lang: Preferences – remembers your language, only with your consent (12 months)
q_admin: Necessary – login session for authorised Quatelio staff only (8 hours)

We do not use tracking, analytics or advertising cookies. You can change your choice at any time via “Cookie settings” in the footer.

07Hosting, fonts and media

This website is hosted on servers operated for Quatelio GmbH. All fonts, images and videos are delivered from our own server — no content is loaded from third parties such as Google Fonts or YouTube, and no data is transmitted to them when you visit our website.

08Your rights

Under GDPR, you have the following rights:

AccessRequest information about your dataArt. 15 GDPR

RectificationCorrect inaccurate dataArt. 16 GDPR

ErasureRequest deletion of dataArt. 17 GDPR

RestrictionLimit processingArt. 18 GDPR

Data portabilityReceive data in a machine-readable formatArt. 20 GDPR

ObjectionObject to processing based on legitimate interestsArt. 21 GDPR

ComplaintLodge a complaint with the relevant supervisory authority

To exercise your rights: contact us at contact@quatelio.com

09Advertising and spam

We do not send unsolicited marketing emails. Any use of your contact information for marketing purposes requires your explicit consent.

10Social media & third-party services

Our website may link to social media platforms (LinkedIn, YouTube, etc.). Clicking these links does not automatically share your data. We do not embed videos or other content from social media platforms.

11Data retention

We retain personal data only for as long as necessary to fulfill the purpose of processing or to comply with legal obligations.

12Updates to this privacy policy

We may update this Privacy Policy periodically. Please check this page regularly for the latest version.