Privacy Policy

This privacy policy explains how QuintComputing GmbH ("Quint", "we", "us")processes personal data when you visit our websitewww.quint-computing.com,visit our career site career.quint-computing.com,contact us, apply for a job or visit our LinkedIn company page.

Personal data means any informationrelating to an identified or identifiable natural person (Art. 4 No.1 GDPR), such as your name, email address or IP address.

1. Controller and contact

The controller responsible forprocessing your personal data under the General Data ProtectionRegulation (GDPR) is:

Quint Computing GmbH
Henkestr.91
91052 Erlangen, Germany
Represented by the managingdirectors Prof. Dr. Christopher Eichler and Prof. Dr. MichaelHartmann
Commercial register: Local Court of Fürth (AmtsgerichtFürth), HRB 22160
Email: privacy@quint-computing.com

For any questions about data protectionor to exercise your rights, please email privacy@quint-computing.com.

2. General information on data processing

Legal bases. We only processpersonal data where a legal basis applies. The relevant legal basesare:

• Consent (Art. 6(1)(a) GDPR). Where information is stored on or read from your device, consent is also required under §25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
• Contract or pre-contractual steps (Art. 6(1)(b) GDPR), including the application process.
• Legal obligations (Art. 6(1)(c) GDPR), for example retention obligations under commercial and tax law.
• Legitimate interests (Art. 6(1)(f) GDPR), unless your interests or fundamental rights override ours.

Each section below names the specificlegal basis for that processing.

Storage period. We deletepersonal data as soon as it is no longer needed for the purpose forwhich it was collected. If statutory retention obligations apply, forexample under §257 of the German Commercial Code (HGB) or §147 ofthe German Fiscal Code (AO), we restrict processing to that purposeand delete the data once the retention period ends. Specific periodsare given in the sections below.

Data security. We also takeappropriate technical and organisational measures to protect yourdata against loss, misuse and unauthorised access (Art. 32 GDPR).Please note that regular email is not end-to-end encrypted.

3. Recipients and transfers outside the EU/EEA

Service providers. We use thefollowing service providers, who process personal data on our behalfand are bound by data processing agreements (Art. 28 GDPR):

• Webflow, Inc. (USA): website hosting (section 4)
• HRworks GmbH (Germany): career site and applicant management (section 8)
• IONOS SE (Germany): email communication (section 7)

Other recipients. We only passon personal data to others where we are legally obliged to  or whereit is necessary to establish, exercise or defend legal claims. We donot sell personal data.

Transfers outside the EU/EEA.Some providers are based in the USA or may access data from there.For providers certified under the EU-U.S. Data Privacy Framework,transfers are based on the European Commission's adequacy decision(Art. 45 GDPR). Otherwise, transfers are based on the EuropeanCommission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Thesections below state which applies.

4. Website hosting and server log files

Our website is built and hosted withWebflow, a service of Webflow, Inc., 398 11th Street, 2nd Floor, SanFrancisco, CA 94103, USA. Webflow delivers the website throughcontent delivery networks, so data may be processed on servers in theUSA.

Each time you visit our website, thefollowing data is automatically recorded in server log files:

• IP address
• Date and time of the request
• Page or file requested
• Referring website (referrer URL)
• Amount of data transferred
• Browser type and version, operating system

We need this data to display thewebsite, keep it stable and secure, and detect and defend againstattacks. The legal basis is Art. 6(1)(f) GDPR; our legitimateinterest is the secure and error-free provision of our website. We donot combine this data with other data or use it to identify you.

Log files are deleted after 30 days atthe latest, unless they are needed for longer to investigate aspecific security incident.

Webflow, Inc. is certified under theEU-U.S. Data Privacy Framework, so transfers to the USA are based onthe European Commission's adequacy decision (Art. 45 GDPR).  For moreinformation, see Webflow'sEU privacy policy.

5. Cookies and consent

Cookies are small text files stored onyour device when you visit a website. Similar technologies, such aslocal storage, work in the same way. We distinguish between twotypes:

Technically necessary cookiesare required to operate the website, for example to keep a sessionrunning or to remember your consent choices. We use them on the basisof §25(2) No. 2 TDDDG and Art. 6(1)(f) GDPR; our legitimate interestis providing a functioning website.

Optional cookies, for examplefor web analytics, are only set if you have given your consent viaour cookie banner. The legal basis is §25(1) TDDDG and Art. 6(1)(a)GDPR. You can withdraw or change your consent at any time with effectfor the future.

You can also delete cookies or blockthem in your browser settings. If you block technically necessarycookies, parts of the website may not work properly.

6. Web analytics

To understand how visitors use ourwebsite and to improve it, we may use web analytics services. Theservices are only activated if you have given your consent via ourcookie banner.

The following data may be processed:

• Pages visited, time spent on each page and the order of pages
• How you reached our website (referrer URL)
• Approximate location (country, region)
• Device type, browser, operating system and screen resolution
• Your IP address, which is shortened before storage so that it can no longer be traced back to you

We evaluate this data only inaggregated form. We do not create profiles to identify individualvisitors.

The legal basis is §25(1) TDDDG andArt. 6(1)(a) GDPR. You can withdraw your consent at any time via thecookie settings described in section 5. The data is deleted after 14months.

7. Contacting us by email

If you email us, for example atinfo@quint-computing.com,we process your email address, your name, the content of your messageand any other information you provide. We use this data to answeryour enquiry and any follow-up questions.

The legal basis is Art. 6(1)(b) GDPR ifyour enquiry relates to a contract or steps before one. Otherwise, itis Art. 6(1)(f) GDPR; our legitimate interest is responding toenquiries addressed to us.

We delete the data once your enquiryhas been fully resolved, unless statutory retention obligationsrequire longer storage, for example for business correspondence under§257 HGB.

Ouremail is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur,Germany, which processes the data on our behalf under a dataprocessing agreement.

8. Career site and job applications

Career site. Our job postingsand application form are hosted at career.quint-computing.comusing the HR WORKS software of HRworks GmbH, Waldkircher Str. 28,79106 Freiburg, Germany. HRworks processes applicant data on ourbehalf under a data processing agreement and stores it in datacentres in Germany.

The career site uses technicallynecessary cookies. The legal basis is §25(2) No. 2 TDDDG and Art.6(1)(f) GDPR; our legitimate interest is providing a functioningapplication process.

What data we process. We processthe data you enter in the application form or upload: your name andcontact details, CV, cover letter, certificates and any otherdocuments or information you choose to share. During the process, wealso record our communication with you and notes from interviews.

Purpose and legal basis. We useyour data only to assess your application and decide whether to hireyou. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering anemployment contract). If you voluntarily share special categories ofpersonal data, such as information on a severe disability, we processit under Art. 9(2)(b) GDPR. Please only share such information if itis relevant to your application.

Who has access. Only the peopleinvolved in the hiring decision: our managing directors and the teamlead responsible for the position, and the people in our HR team.

Retention. If we do not hireyou, we delete your data 6 months after we have informed you of ourdecision. We keep it for this period to be able to defend ourselvesagainst possible claims under the German General Equal Treatment Act(AGG); the legal basis is Art. 6(1)(f) GDPR. If you withdraw yourapplication, we delete your data without undue delay.

Talent pool. When applying, youcan tick an optional checkbox to have your application kept in ourtalent pool. We then store it for 12 months after the applicationprocess ends and may contact you about other suitable positions. Thelegal basis is your consent (Art. 6(1)(a) GDPR). Not giving consenthas no effect on your current application. You can withdraw yourconsent at any time by emailing privacy@quint-computing.com;we will then delete your data.

If you are hired. Yourapplication data becomes part of your personnel file and is processedfor the purposes of the employment relationship (Art. 6(1)(b) GDPR).We will provide you with separate information about this.

Is providing data required? Youare not legally or contractually obliged to provide your data.Without it, however, we cannot consider your application.

9. Our LinkedIn company page

Link on our website. Our websitelinks to our LinkedIncompany page. This is a plain link, not a plugin: no data istransferred to LinkedIn unless you click it.

Our company page. We maintain acompany page on LinkedIn, a service of LinkedIn Ireland UnlimitedCompany, Wilton Place, Dublin 2, Ireland. When you visit our page,LinkedIn processes your personal data under its own privacypolicy, which may include transfers to the USA.

LinkedIn provides us with pagestatistics (Page Analytics) about visits and interactions. We onlyreceive these statistics in aggregated form and cannot identifyindividual visitors from them. For this processing, LinkedIn and weare joint controllers (Art. 26 GDPR). LinkedIn has taken primaryresponsibility under its PageInsights Joint Controller Addendum, including for handling datasubject requests. You can still contact us at any time.

If you interact with us on LinkedIn,for example by commenting or sending a message, we process that datato communicate with you and present our company. The legal basis isArt. 6(1)(f) GDPR; our legitimate interest is communicating withinterested parties and potential applicants.

10. Your rights

Under the GDPR, you have the followingrights regarding your personal data:

• Access (Art. 15 GDPR): to know whether and which data we process about you.
• Rectification (Art. 16 GDPR): to have incorrect data corrected or incomplete data completed.
• Erasure (Art. 17 GDPR): to have your data deleted, unless we are required to keep it.
• Restriction (Art. 18 GDPR): to have the processing of your data restricted.
• Data portability (Art. 20 GDPR): to receive data you provided to us in a structured, machine-readable format.
• Withdrawal of consent (Art. 7(3) GDPR): to withdraw any consent at any time with effect for the future. Processing carried out before the withdrawal remains lawful.

To exercise your rights, emailprivacy@quint-computing.com.

Right to object (Art. 21 GDPR).Where we process your data on the basis of legitimate interests (Art.6(1)(f) GDPR), you have the right to object at any time on groundsrelating to your particular situation. We will then stop processingyour data unless we can demonstrate compelling legitimate groundsthat override your interests, or the processing serves to establish,exercise or defend legal claims.

Right to lodge a complaint (Art. 77GDPR). You can lodge a complaint with a data protectionsupervisory authority. The authority responsible for us is theBavarian Data Protection Authority for the private sector:Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade18, 91522 Ansbach, Germany, www.lda.bayern.de.

11. Other information

Obligation to provide data.Unless stated otherwise in the sections above, you are not legally orcontractually obliged to provide personal data. Without the data inserver log files, however, we cannot display our website.

Automated decision-making. We donot use automated decision-making, including profiling, within themeaning of Art. 22 GDPR.

Changes to this policy. Weupdate this policy when our website, our services or the legalrequirements change. The current version is always available on ourwebsite.

Last updated: 06.10.2026