Privacy Policy

Introduction

bluequantium AG ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

As a company based in Germany and operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller Information

The data controller for your personal information is:

Data Collection

The data we collect depends on how you interact with our website and services. We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, company name, and postal address when you contact us or request our services.
• Communication Data: Records of your communications with us, including emails, phone calls, and messages sent through our contact forms.
• Technical Data: IP address, browser type, operating system, referring URLs, and other technical information collected through cookies and similar technologies.
• Usage Data: Information about how you use our website, including pages visited, time spent on pages, and interaction patterns.
• Professional Information: Details about your business requirements, project specifications, and regulatory compliance needs when you engage our services.

How We Use Your Information

We use the personal data we collect for the following purposes, based on legitimate business interests and legal obligations:

• Service Provision: To provide cosmetic ingredient safety assessments, regulatory compliance guidance, and other professional services.
• Communication: To respond to your enquiries, provide customer support, and send important service-related communications.
• Business Operations: To manage our client relationships, process payments, and maintain accurate business records.
• Website Improvement: To analyse website usage patterns and improve our online services and user experience.
• Legal Compliance: To comply with applicable laws, regulations, and professional standards in the cosmetic industry.
• Marketing: With your consent, to send you information about our services, industry updates, and relevant business communications.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Contract Performance: Processing necessary to fulfil our contractual obligations when providing services to you.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and maintaining client relationships.
• Consent: Where you have provided explicit consent for specific processing activities, such as marketing communications.
• Legal Obligation: Processing required to comply with applicable laws and regulations.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and providing our services, under strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or other legal process, or to protect our rights and interests.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our data retention periods are based on:

• The nature of the personal data and the purposes for which it was collected
• Legal and regulatory requirements applicable to our industry
• The need to maintain accurate business records and provide ongoing services
• Your relationship with our company and any ongoing contractual obligations

When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention policies.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request information about how we process your personal data and obtain a copy of your data.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request limitation of how we process your personal data in specific situations.
• Right to Data Portability: Request transfer of your personal data to another organisation in a structured format.
• Right to Object: Object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@bluequantium.top or +49 2312637150.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Staff training on data protection and security practices
• Secure data backup and recovery procedures

International Data Transfers

As we operate primarily within the European Union, your personal data is generally processed within the EU/EEA. If we transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard contractual clauses approved by the European Commission
• Binding corporate rules or certification schemes

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us using the following information:

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable laws.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you by posting the updated policy on our website and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.