Precision, trust and speed in cyber defense.
Precision, trust and speed in cyber defense.
QUIRSO GmbH ("QUIRSO"), as the operator of this website, takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection laws and this privacy policy. When you use this website, various personal data may be collected. Personal data is data that can identify you personally. This policy explains which data we collect, why we use it, and how and for what purpose this happens.
Please note that data transmission on the Internet, for example when communicating by email, may have security gaps. Complete protection of data against access by third parties is not possible.
Company: QUIRSO GmbH
Represented by: Stefan Zimmermann, Denis Szadkowski, Cagatay Yurekli
Address: August-Bebel-Strasse 26-53, 14482 Potsdam, Germany
Data protection contact: datenschutz@quirso.de
Some data is collected to ensure that the website can be provided without errors. Other data may be used to analyze how visitors use the site and to improve the reliability and usefulness of our online offering.
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time for the future. In certain circumstances, you may also request that processing of your personal data be restricted. You also have the right to lodge a complaint with the competent supervisory authority.
For these rights and for any further questions about data protection, you may contact us at the address listed in the legal notice or at the email address of our data protection contact.
If you contact us to exercise your rights, we may need to verify your identity to make sure that personal data is disclosed only to the person entitled to receive it. We process requests as quickly as possible and within the legally required time limits. If a request is complex or if statutory retention obligations prevent immediate deletion, we will explain the reason and restrict processing where required.
Personal data is collected only when you provide it to us voluntarily. Any processing beyond what is permitted by law takes place only on the basis of your express consent.
Processing purposes: contract initiation and contract performance.
Categories of recipients:
Third-country transfers: processors outside the European Union may also be used in connection with
contract performance.
Storage period: the storage period is based on statutory retention obligations and is generally 10 years.
The legal basis depends on the specific processing activity. Processing may be necessary for contract initiation or performance, for compliance with legal obligations, on the basis of legitimate interests such as secure operation and efficient communication, or on the basis of consent. Where processing is based on consent, consent is voluntary and may be withdrawn at any time with effect for the future.
We store personal data only as long as it is required for the respective purpose or as long as statutory retention periods apply. If data is no longer required and no legal obligation prevents deletion, it is deleted or anonymized. Where deletion is not possible immediately, for example because commercial or tax retention periods apply, processing is restricted to the legally required purposes.
If you contact us by email or phone, your inquiry, including all personal data arising from it such as name and request details, will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.
Processing is based on Art. 6 para. 1 lit. b GDPR if your request is related to performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently handling inquiries addressed to us under Art. 6 para. 1 lit. f GDPR, or on your consent under Art. 6 para. 1 lit. a GDPR where requested.
Data submitted to us via contact requests remains with us until you ask us to delete it, withdraw consent to storage, or the purpose for storage no longer applies, for example after your request has been handled. Mandatory statutory provisions, especially retention periods, remain unaffected.
When you access our website, your browser transmits data to our web server for technical reasons. During an active connection, the following data may be recorded:
For reasons of technical security, especially to defend against attacks on our web server, this data is stored briefly. We cannot identify individual persons from this data. After no more than seven days, the data is anonymized by shortening the IP address at domain level. In anonymized form, the data may also be processed for statistical purposes; it is not combined with other datasets or passed on to third parties.
This website uses cookies to improve usability. Cookies are data records sent by the web server to the user's browser and stored there for later retrieval. We do not store personal data in our own cookies. You can generally prevent the use of cookies by disabling cookie storage in your browser.
Cookies from third-party companies may also be stored on your device when you visit our site. These allow us or you to use certain third-party services. Many cookies are technically necessary because specific website functions would not work without them. Other cookies may be used to evaluate user behavior or to display advertising.
Cookies required to optimize the website are stored on the basis of Art. 6 para. 1 lit. f GDPR unless another legal basis is stated. If consent to store cookies has been requested, the relevant cookies are stored exclusively on the basis of that consent under Art. 6 para. 1 lit. a GDPR; consent may be withdrawn at any time.
You can configure your browser so that you are informed when cookies are set, allow cookies only in individual cases, exclude cookies for certain cases or in general, and activate automatic deletion of cookies when closing the browser. If cookies are disabled, some website functions may be limited. You can also delete existing cookies at any time through your browser settings.
Where analytics or advertising cookies are used, they help us understand how the website is used and how we can improve structure, content and performance. We aim to keep such processing proportionate and do not use cookie data to identify individual visitors unless this is technically necessary, legally permitted and transparently communicated.
Our website links to third-party services such as LinkedIn, X, Instagram, TikTok and Medium. When you use these links or buttons, a connection to the respective provider may be established and data such as your IP address may be transmitted to that provider, potentially outside the European Union. The provider is responsible for the purpose and scope of data collection and further processing. Please consult the privacy policies of the respective providers for details and settings options.
LinkedIn is operated by LinkedIn Corporation and related group companies. You can recognize a LinkedIn link or button by the "in" symbol. If you activate or follow this link, your browser may connect to LinkedIn servers and transmit technical information about your visit. LinkedIn may also connect this information with your member account if you are logged in. If you do not want LinkedIn to associate your visit with your account, please log out before visiting our website or using the link.
X is operated by X Corp. and related companies. You can recognize an X link or button by the "X" symbol. If you activate the link, your browser may connect to servers operated by X and transmit your IP address, browser information and information about the page from which you opened the link. QUIRSO has no influence over the type and scope of data collected by X or how X processes that data. Please refer to X's privacy notices for information about processing purposes, storage periods and settings.
Instagram is operated by Meta Platforms and related companies. You can recognize an Instagram link by the Instagram symbol. When you activate the link, a connection to Instagram may be established and content may be loaded directly by Instagram into your browser. Your IP address and other technical metadata may be transmitted to Meta group companies, including entities outside the European Union. If you are logged into Instagram, Meta may be able to associate your visit with your profile.
TikTok is operated by ByteDance group companies. You can recognize a TikTok link or button by the TikTok symbol. When you use this link, TikTok may receive technical access data and information about the page from which the link was opened. QUIRSO does not control the subsequent data processing by TikTok. Please consult TikTok's privacy policy for information about processing purposes, legal bases and your rights.
Medium is operated by Medium group companies. You can recognize a Medium link by the Medium symbol. When you activate the link, your browser may establish a connection to Medium servers and transmit technical information such as IP address, browser type, referrer and time of access. If you are a Medium member and do not want Medium to connect the visit to your account, please log out of Medium before using the link.
For all social media providers, the respective provider is responsible for its own data processing after you leave our website or activate an embedded link. We do not receive full insight into the data collected by these platforms and cannot control their storage periods, analytics methods or international transfers. You can reduce association with your personal profile by logging out of the provider, deleting cookies or using browser privacy settings before opening third-party links.
This website is hosted by us. Personal data collected on this website is stored on servers operated by us. This may include IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website access data and other data generated through a website.
Hosting is used for contract initiation and performance with prospective and existing customers or applicants under Art. 6 para. 1 lit. b GDPR and in our legitimate interest in providing a secure, fast and efficient online offering.
Server-side processing is necessary to deliver the pages, maintain the availability of the website, diagnose technical errors, prevent misuse and document security-relevant events. Access logs are evaluated only where needed for technical operation, security, troubleshooting or legally required documentation. Where external service providers support infrastructure, email, monitoring or maintenance, they act under appropriate contractual arrangements and receive only the access required for their specific task.
Data concerned: application data. Processing purpose: carrying out application procedures. Recipients may include public bodies where overriding law applies, external service providers or other contractors, and other external parties where consent has been given or transfer is otherwise permitted.
Application data is generally deleted within four months after notification of the decision, unless consent has been given for longer storage, for example in a talent pool. To ensure data protection-compliant processing, we maintain data processing agreements with relevant service providers.
Application data may include contact details, CV information, certificates, professional qualifications, interview notes, salary expectations, communication history and any documents that applicants voluntarily provide. Processing is carried out to decide whether to establish an employment relationship, to conduct interviews, to communicate during the process, to document decisions and to comply with legal obligations.
Access to application data is limited to persons involved in the selection process and to service providers that support applicant management or communication. If an application is successful, relevant data may be transferred into the personnel file. If we would like to retain an application for future opportunities, we will ask for separate consent unless another legal basis applies.
Data concerned: data provided for contract initiation and contract performance, and where applicable additional data processed on the basis of your express consent. Processing purposes include offers, orders, sales, invoicing, quality assurance and customer communication.
Recipients may include public bodies where overriding law applies, external service providers or other contractors, and other external parties where consent has been given or transfer is otherwise permitted. Processors outside the European Union may also be used, including email providers. Storage is based on statutory retention obligations and is generally 10 years.
B2B customer data may include names, business contact details, role or function, company affiliation, contract information, offer and order history, billing data, communication metadata, support requests, project documentation and information that is required to provide our cybersecurity services. Depending on the service, this may also include incident-related coordination data, emergency contacts, escalation information and documentation required for transparent cooperation during an engagement.
Processing is carried out to prepare offers, conclude and perform contracts, coordinate services, process invoices, document quality and maintain business relationships. In addition, we may process data where we have a legitimate interest in secure, efficient and traceable communication with customers and partners, or where legal obligations require documentation, retention, tax processing or cooperation with public authorities.
Access to B2B customer data is limited to employees and contractors who need the data for sales, delivery, finance, support, security, legal or management purposes. Service providers may be used for email, document management, accounting, hosting or operational support. Where data is transferred to third countries, we use appropriate safeguards where required by law.
You may assert your rights to information, correction, deletion, restriction of processing, objection to processing and data portability at any time. You can contact us by email or letter. You also have the right to contact the competent data protection supervisory authority with complaints.