Precision, trust and speed in cyber defense.
Precision, trust and speed in cyber defense.
How QUIRSO GmbH handles your data when you visit this website or contact us. For privacy questions, email datenschutz@quirso.de.
Company: QUIRSO GmbH
Represented by: Stefan Zimmermann, Denis Szadkowski, Cagatay Yurekli
Address: August-Bebel-Strasse 26-53, 14482 Potsdam, Germany
Data protection contact: datenschutz@quirso.de
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time for the future. In certain circumstances, you may also request that processing of your personal data be restricted. You also have the right to lodge a complaint with the competent supervisory authority.
For these rights and for any further questions about data protection, you may contact us at the address listed in the legal notice or at the email address of our data protection contact.
If you contact us to exercise your rights, we may need to verify your identity to make sure that personal data is disclosed only to the person entitled to receive it. We process requests as quickly as possible and within the legally required time limits. If a request is complex or if statutory retention obligations prevent immediate deletion, we will explain the reason and restrict processing where required.
If you contact us by email or phone, your inquiry, including all personal data arising from it such as name and request details, will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.
Processing is based on Art. 6 para. 1 lit. b GDPR if your request is related to performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently handling inquiries addressed to us under Art. 6 para. 1 lit. f GDPR, or on your consent under Art. 6 para. 1 lit. a GDPR where requested.
Data submitted to us via contact requests remains with us until you ask us to delete it, withdraw consent to storage, or the purpose for storage no longer applies, for example after your request has been handled. Mandatory statutory provisions, especially retention periods, remain unaffected.
Data concerned: data provided for contract initiation and contract performance, and where applicable additional data processed on the basis of your express consent. Processing purposes include offers, orders, sales, invoicing, quality assurance and customer communication.
Recipients may include public bodies where overriding law applies, external service providers or other contractors, and other external parties where consent has been given or transfer is otherwise permitted. Processors outside the European Union may also be used, including email providers. Storage is based on statutory retention obligations and is generally 10 years.
B2B customer data may include names, business contact details, role or function, company affiliation, contract information, offer and order history, billing data, communication metadata, support requests, project documentation and information that is required to provide our cybersecurity services. Depending on the service, this may also include incident-related coordination data, emergency contacts, escalation information and documentation required for transparent cooperation during an engagement.
Processing is carried out to prepare offers, conclude and perform contracts, coordinate services, process invoices, document quality and maintain business relationships. In addition, we may process data where we have a legitimate interest in secure, efficient and traceable communication with customers and partners, or where legal obligations require documentation, retention, tax processing or cooperation with public authorities.
Access to B2B customer data is limited to employees and contractors who need the data for sales, delivery, finance, support, security, legal or management purposes. Service providers may be used for email, document management, accounting, hosting or operational support. Where data is transferred to third countries, we use appropriate safeguards where required by law.
QUIRSO GmbH operates this website using hosting infrastructure provided by Microsoft. The hosting service provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; other Microsoft companies may participate in technical delivery. Microsoft processes technical access data to deliver and secure the website. When you use our contact form, we process the information you provide to handle your inquiry. The legal bases are Article 6(1)(f) GDPR for secure operation and Article 6(1)(b) GDPR for contract-related inquiries. See the Microsoft privacy statement for further processing and international-transfer information.
Delivering this website requires processing technical data such as IP address, request time, requested address, browser information and transmission status. Our hosting provider Microsoft may process these data in logs for operation, security and troubleshooting. We use technical access data to deliver and secure the website under Article 6(1)(f) GDPR. Retention depends on the operational or security purpose and applicable legal retention requirements.
We load optional Google services only after your consent. You can allow or reject Google Ads measurement, Google Maps and YouTube independently. Without consent these services stay disabled; contact forms and service information remain available. You can change or withdraw your choices at any time through “Privacy settings” in the footer of every page. Withdrawal applies to future processing and does not affect the lawfulness of processing before withdrawal.
We store your selection, its timestamp and the consent version under quirsoConsent in your browser’s Local Storage. This storage is necessary to respect your choices under section 25(2)(2) TDDDG. Processing to manage your choices is based on Article 6(1)(c) GDPR. The selection applies to this browser and website, not automatically to other devices or subdomains. After 180 days we ask again on your next visit; you can also delete the entry through your browser settings. Earlier “OK” confirmations are not treated as consent.
| Entry | Purpose | Duration / condition |
|---|---|---|
quirsoConsent (Local Storage) | Remember your selection and its timestamp/version | Valid for 180 days; removed or replaced on the next visit after expiry |
_gcl_au and, where applicable, other _gcl_* cookies | Google Ads measurement and attribution of advertising clicks | Typically 90 days; only after Google Ads consent |
With your consent, we use the Google tag for Google Ads to determine whether advertisements lead to inquiries through this website. Google may receive technical access data such as your IP address, browser information, page URL, advertising-click identifiers and information about a successful form inquiry. We do not send names, email addresses, phone numbers or form messages through this conversion event. Depending on the page URL, URL parameters may also be processed. This website does not enable personalized advertising or a Google Analytics service.
The legal bases are section 25(1) TDDDG for storage/access requiring consent and Article 6(1)(a) GDPR for the associated processing of personal data. Without consent, we do not load the Google tag or send Google Ads measurement events. On withdrawal we delete accessible _gcl_* cookies on this website and reload the page without the advertising tag. We cannot delete cookies on Google’s domains ourselves; you can remove these through your browser.
Google Maps displays our location in Potsdam. The embedded map loads only when you allow “Google Maps”. YouTube players are embedded only when you allow “YouTube videos” and open a video. We use youtube-nocookie.com; this does not prevent all processing by Google. Loading a map or player transmits your IP address, browser information and information about the requested content to Google. Google may use cookies or similar storage and may associate usage with a signed-in Google account. We remove embedded content when you withdraw consent. The legal bases for processing initiated by us are Article 6(1)(a) GDPR and, where your device is accessed, section 25(1) TDDDG.
The provider of Google services in the EEA is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other Google companies may participate in processing; Google specifies separate responsibilities for some services. Data may be processed outside the EU/EEA. See Google’s privacy policy, its cookie information and its advertising and measurement cookie list for processing purposes, retention, responsibilities and transfer mechanisms. Retention of Google’s own cookies and data depends on the service, purpose and your Google settings.
Our website contains links to LinkedIn, X, Instagram, TikTok and Medium. We do not use embedded social media plugins for these links. Merely displaying the links does not load content from those platforms. Following a link takes you away from our website; the respective provider receives data including your IP address. Further information about how your data is processed is available in the respective provider’s privacy notice.