1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Quavon UG (haftungsbeschränkt)

Managing director: Leopold Link

Langbehnstraße 39

83022 Rosenheim

Germany

Email: contact@quavon.de

Phone: +49 (0) 175 4251056

2. Appointment booking

This website has no user accounts. There are two ways to send us data: the appointment booking on the contact page, and the newsletter signup in the footer (see section 3). When you book, we process:

name and email address
phone number, company and a free-text note, where you choose to provide them
the appointment type and the slot you selected
your confirmation of the consent notice shown at the booking step

We use this data solely to arrange, confirm and, if necessary, cancel the appointment. The legal basis is Art. 6 para. 1 lit. b GDPR (steps prior to entering into a contract). Your IP address is passed on to the booking backend to limit abuse and automated requests, based on our legitimate interest under Art. 6 para. 1 lit. f GDPR.

Bookings are not stored in the website itself. The browser talks only to this website, which forwards the request to our own booking backend at cms.quavon.de. The data is not passed on to third parties.

3. Newsletter

You can subscribe to our notes in the footer of any page. We use a double opt-in: after you submit the form we send one email with a confirmation link, and nothing is sent to you until you follow it. An address that is never confirmed is deleted.

We process for this purpose:

your email address
the date, time and IP address of the subscription and of the confirmation — kept as evidence that the consent was given, which is the only way we can demonstrate it if it is ever disputed
whether an email could be delivered, so we stop sending to addresses that bounce

The legal basis is your consent, Art. 6(1)(a) GDPR, together with § 7(2) no. 3 UWG. You can withdraw it at any time using the unsubscribe link at the foot of every email, or by writing to the address in section 1. Withdrawing does not affect the lawfulness of the processing carried out until then.

After you unsubscribe, your address is moved to a suppression list and kept there. That is deliberate: it is the only way to make sure you are not signed up again by a later import, and it rests on our legitimate interest in honouring your objection, Art. 6(1)(f) GDPR. The list holds nothing but what is needed for that purpose.

The newsletter is sent from our own mail server. There is no tracking pixel in our emails and we do not record whether you opened one or which links you followed.

The subscription is stored in our content management system at cms.quavon.de, which we operate ourselves on servers in Germany. No newsletter provider receives your data.

4. Cookies and reach measurement

This website uses no advertising cookies and no tracking cookies. The only cookie set here is a technically necessary one that stores your language selection, so the site opens in the right language on your next visit.

For reach measurement, our websites use Rybbit, an open-source analytics tool. It is not a third-party service: it runs on an instance we operate ourselves at tracker.quavon.de, and the data is not passed on to ad networks or anyone else.

Rybbit sets no cookies and stores nothing on your device — nothing is written to or read from local storage or session storage. Since there is therefore no access to your terminal equipment within the meaning of Section 25 para. 1 TDDDG, no consent is required for it. That is why we show no consent banner.

Processed are: the page viewed and the time of the visit, the referring page (referrer), an approximate origin at country and region level as well as device type, screen size, browser, operating system and language.

The legal basis is Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the statistical evaluation of usage in order to improve our offering.

Right to object: under Art. 21 GDPR you have the right to object at any time, on grounds relating to your particular situation, to this processing. You will find our contact details in the imprint.

5. Contact by email and phone

If you contact us by email or phone, we process the data you provide there — usually your name, your contact details and the content of your message — solely to answer your enquiry. The legal basis is Art. 6 para. 1 lit. b GDPR where the enquiry concerns a possible contract, otherwise Art. 6 para. 1 lit. f GDPR.

6. Spam protection

The appointment and newsletter forms are protected by ALTCHA, which we host ourselves. Before a form can be submitted, your browser solves a small arithmetic puzzle. This sets no cookie, stores nothing on your device, builds no profile and contacts no third party — unlike the widely used alternatives, which is why we chose it. The legal basis is our legitimate interest in defending these forms against automated abuse, Art. 6(1)(f) GDPR.

7. Images and our content management system

Photographs and articles on this website are managed in our own content management system at cms.quavon.de, which we operate on servers in Germany. When a page shows an image from it, your browser requests that file from cms.quavon.de, which necessarily means that server receives your IP address and the usual request data. It is our own system; no third party is involved.

Photographs showing identifiable people are published only with their consent under § 22 KunstUrhG. Anyone shown may withdraw that consent at any time — see the image rights section of our terms.

To write alternative text for images, we can have a picture described automatically by an AI service (OpenRouter, routing to a pinned model). This is not automatic: it happens only for individual images that an editor has explicitly released for it, and the release is refused for any picture showing identifiable people. The suggested text is never published unedited — a person reviews and accepts it. The legal basis is our legitimate interest in accessible images, Art. 6(1)(f) GDPR. Where an image nonetheless contains personal data, it is transferred on the basis of standard contractual clauses, and the provider is contractually bound not to retain the image or use it for training.

8. Your rights

As a data subject you have extensive rights regarding your personal data:

Right of access to the processed data
Right to rectification of inaccurate or incomplete data
Right to erasure, unless statutory retention obligations apply
Right to restriction of processing
Right to data portability
Right to object to processing based on legitimate interests, which here means the reach measurement
Right to lodge a complaint with a supervisory authority

To exercise these rights, or if you have any questions, please contact us at contact@quavon.de.

9. Retention and deletion

We store personal data only for as long as required for the respective purpose or to comply with statutory retention obligations. Once the purpose no longer applies and no retention obligations remain, your data will be deleted.

10. Security

This website is delivered exclusively over a TLS-encrypted connection. Beyond that, we implement technical and organisational measures to protect your data against manipulation, loss, destruction, or unauthorised access.

Privacy Policy