Legal
Privacy notice
We treat your data the way we expect our own tools to: only what is needed, traceable, and under your control.
01Controller
The controller for data processing on this website under the General Data Protection Regulation (GDPR) is:
Qcentic GmbHGrüner Weg 2850825 KölnGermany- Managing director
- Siamak Mehraghdam
- Phone
- +49 221 63061911-0
- info@qcentic.com
Actana is a product of Qcentic GmbH.
02Data protection contact
Send questions about data protection and requests about your rights to info@qcentic.com with the subject "Data protection", or by post to the address above.
03Overview
This notice explains what personal data we process when you visit this website, contact us or request a demo, and what rights you have. We process only the data we need for each purpose. We do not sell data and do not use it for advertising on other websites.
How we process data inside the Actana product on behalf of our customers is governed by each customer's data processing agreement (see "Data in Actana").
04Hosting and server logs
This website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands, and delivered through its content delivery network. When you open a page, Framer processes technically necessary data:
- IP address
- date and time of access
- page requested and amount of data transferred
- referrer (the page you came from)
- browser, operating system and language setting
The purpose is to deliver the website and keep it secure and stable, for example by fending off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure, working website. Access to your device is strictly necessary for this (§ 25(2) no. 2 TDDDG).
Framer processes this data as our processor under an agreement pursuant to Art. 28 GDPR and keeps log data only as long as these purposes require. Framer uses sub-processors, including providers based in the USA. For the safeguards, see "Transfers outside the EU".
05Visitor statistics
We use Framer's built-in statistics. They count page views, referring pages, device type and country. They set no cookies and build no profiles across websites, and we see only totals, not individual visitors.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is understanding which content is used and improving the website. You can object at any time (see "Your rights").
07Contact form and demo requests
When you request a demo through our form, we process what you enter: name, work email, company, team size, where you would like to run Actana (our cloud, your cloud, your own systems), your message and, if you tell us, how you heard about us. Required fields are marked.
We use this to answer your request, prepare a demo and arrange a meeting. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request before a contract) and otherwise Art. 6(1)(f) GDPR (answering business enquiries).
Form data is stored with Framer (see "Hosting") and forwarded to our email system. The forms are protected by Framer's automatic spam protection.
08Contact by email or phone
When you contact us by email or phone, we process your contact details and the content of your message to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR, depending on whether your request relates to a contract.
If we meet online, we use the video service named in the invitation; that provider's privacy notice also applies.
09Customers and business partners
For offers, contracts, invoicing and support, we process the names, business contact details, and contract and payment data of the contact persons at our customers and partners. The legal basis is Art. 6(1)(b) GDPR, Art. 6(1)(c) GDPR for statutory retention duties, and Art. 6(1)(f) GDPR for communicating with contact persons.
10Data in Actana
Data that our customers process in Actana (for example documents, tables and messages) we process as a processor under Art. 28 GDPR, only on the customer's instructions. The customer is the controller. The details are set out in the data processing agreement we sign with every customer.
When a customer runs Actana on its own systems, we have no access to that data unless the customer grants it in a specific case, for example for support.
11Fonts
This website loads fonts (Google Fonts) from servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address is sent to Google in the process; a transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework.
The legal basis is Art. 6(1)(f) GDPR; our interest is a consistent presentation of the website. Google's information: policies.google.com/privacy.
12Integration logos
Some integration logos (for example Slack or GitHub) are loaded from the open icon library Simple Icons through the jsDelivr content delivery network, operated by Prospect One sp. z o.o., Poland. Your IP address is sent to jsDelivr and its CDN partners in the process, which may include providers based in the USA.
The legal basis is Art. 6(1)(f) GDPR; our interest is a fast, reliable presentation. More information: jsdelivr.com/terms/privacy-policy-jsdelivr-net.
13Links to other websites
Links, for example to LinkedIn, are plain links. Only when you click one do you leave our website, and that provider's privacy notice applies. We do not embed social media plugins.
14Recipients
Within Qcentic GmbH, only the people who need your data for a given purpose can access it. Outside the company, we share data with processors we have selected carefully and bound by contract (hosting, email, accounting), and with bodies we are legally required to share it with, such as tax advisers and tax authorities.
15Transfers outside the EU
Where data reaches countries outside the EU or EEA, in particular the USA, this happens only when the requirements of Art. 44 et seq. GDPR are met: on the basis of an adequacy decision of the European Commission (for the USA, the EU-US Data Privacy Framework, where the recipient is certified) or the European Commission's standard contractual clauses.
16How long we keep data
We keep personal data only as long as each purpose requires:
- Requests that do not lead to a contract: deleted 12 months after our last contact.
- Contract and billing data: for the term of the contract and then for the statutory retention periods (up to 6 years for business letters under § 257 HGB, up to 10 years for accounting records under § 147 AO).
- Server logs: as set by our hosting provider, only as long as operation and security require.
17Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time, with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. You can object to direct marketing at any time without giving reasons.
A short message to info@qcentic.com is enough. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
18Whether you have to provide data
You are not obliged to give us any data. Without contact details, however, we cannot answer a request. We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
19Security
This website is encrypted throughout with TLS. We protect data with technical and organisational measures under Art. 32 GDPR, which we review regularly.
20Changes
We update this notice when our website, our services or the law change. The version published here applies. Provider: Qcentic GmbH, Grüner Weg 28, 50825 Köln.