Privacy policy
This is the English version of our Datenschutzerklärung. The German version is the legally binding one.
Controller
IQONEX GmbH, Eugen-Richter-Straße 45, 99085 Erfurt, Germany. Contact: info@iqonex.de.
What we process and why
We only process personal data when you actively give it to us — by sending a contact form or booking a meeting via our Brevo Meetings integration. Without these actions we don't collect personal data on this website.
Data protection officer
We are not legally required to appoint a Data Protection Officer (Section 38 BDSG and Article 37 GDPR are not applicable in our current setup). For data-protection enquiries please use the controller contact above.
Server logs
Our hosting provider creates standard server logs (IP address, user agent, timestamp, requested URL) for security and debugging. Logs are deleted or fully anonymised after at most 14 days.
Analytics — “Statistics” category
We use Plausible Analytics (cookieless, EU-hosted) to count page views. No personal data, no cookies, no cross-site tracking. We still load Plausible only after you opt into the “Statistics” category in our cookie banner — without consent the script is not embedded.
Contact form & Brevo
Contact submissions are processed through Brevo (Sendinblue SAS, France) under a Data Processing Agreement per Article 28 GDPR. Mandatory fields: name, email, message — without these we cannot answer your enquiry. Phone, company and request type are optional. Legal basis: Article 6(1)(b) GDPR (pre-contractual measures). Storage: until your enquiry is resolved, then for the duration of any contractual relationship plus statutory retention periods.
Brevo Meetings iframe — “External media” category
The Brevo Meetings booking calendar is only loaded after you click “Load calendar” (which also enables the “External media” cookie category) — by default a placeholder is shown. Loading the iframe transmits IP, user-agent and Brevo-specific cookies to Brevo. Legal basis iframe: Article 6(1)(a) GDPR (consent); booking itself: Article 6(1)(b) (pre-contractual measures).
Google reCAPTCHA v3 — “Functional” category
Google reCAPTCHA v3 (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA / Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) protects the contact form against spam. The reCAPTCHA script is only loaded after you opt into the “Functional” cookie category. Without consent the form cannot be submitted — you can still reach us by email or phone (see legal notice). reCAPTCHA v3 is invisible — instead of a checkbox widget it computes a score (0.0–1.0) in the background. To do so it transmits IP address, user agent, device/browser signals, mouse movement, and a dedicated cookie (_GRECAPTCHA) to Google. The Google Privacy Policy and Terms of Service apply.
International transfer to the US: Google LLC is listed under the EU-US Data Privacy Framework (please verify the current status at dataprivacyframework.gov/list); EU Standard Contractual Clauses apply as a fallback. Legal basis: Article 6(1)(a) GDPR (consent) in conjunction with Section 25(1) TDDDG.
Cookie & consent management
We use a self-hosted, custom-built consent banner (no external CMP vendor, no third-party scripts for the banner logic itself). No consent-relevant scripts or third-party cookies are loaded before you make a choice. Your selection is stored in your browser's local storage (key iqonex-consent) — no cookie is set.
The categories are:
- Necessary (always on): stores your cookie decision (locally), processes form data via Brevo after successful submission.
- Statistics: enables Plausible Analytics (Estonia, EU; cookieless).
- External media: enables the Brevo Meetings iframe (France, EU) on the contact page.
- Functional: enables Google reCAPTCHA v3 (USA) for spam protection on the contact form.
You can change or revoke your selection any time via the “Cookie preferences” link in the footer. We will ask again after at most 12 months.
Automated decision-making / profiling
We do not engage in automated decision-making within the meaning of Article 22 GDPR, including profiling. All enquiries are handled by a human.
Your rights
Under GDPR you have rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and to lodge a complaint with a supervisory authority (Art. 77). To exercise any of these, email us at info@iqonex.de.
Processors and storage mechanisms
This table lists every service we use on iqonex.de — the same list the cookie banner is built from.
| Service | Vendor | Category | Purpose | Processed data | Legal basis | Retention | Third country |
|---|---|---|---|---|---|---|---|
| Consent storage | IQONEX (eigene Infrastruktur / own infrastructure) | Necessary | Stores your cookie selection so the banner does not reappear on every page load. | Selected categories, consent timestamp, banner version (localStorage, key iqonex-consent). | Section 25(2) No. 2 TDDDG (strictly necessary) | 12 months | — |
| Brevo (email delivery for contact form) | Sendinblue SAS / Brevo, Frankreich (EU) | Necessary | Processes contact-form submissions; sends transactional emails to the submitted address and to our sales mailbox. | Form data (name, email, phone, company, request type, message). | Article 6(1)(b) GDPR (pre-contractual measures) | Until your enquiry is resolved; if a contractual relationship results, plus statutory retention periods. | — |
| Plausible Analytics | Plausible Insights OÜ, Estland (EU) | Statistics | Cookieless audience measurement — anonymised page-view statistics, no profiling. | Anonymised page views, referrer, coarse geo (country), hashed browser fingerprint <24h. | Article 6(1)(a) GDPR + Section 25(1) TDDDG (consent) | Aggregated indefinitely; raw data <24h | — |
| Ahrefs Web Analytics | Ahrefs Pte. Ltd., Singapur | Statistics | Cookieless audience measurement for SEO insights — aggregated page views, time on page and traffic sources without personal data. | Anonymised page views, referrer, coarse geo (country/region), device type, browser; no cookies, no fingerprint. | Article 6(1)(a) GDPR + Section 25(1) TDDDG (consent) | Aggregated indefinitely, without personal data. | Singapore — per Ahrefs' privacy policy no personal data is transferred; SCCs available. |
| Brevo Meetings (booking embed) | Sendinblue SAS / Brevo, Frankreich (EU) | External media | Embedded booking calendar at meet.brevo.com on the contact page. Loads only after explicit consent. | IP address, browser data, Brevo session cookies; on booking: name, email and booking details. | Article 6(1)(a) GDPR (consent); for the booking itself (b) (pre-contractual measures) | Determined by Brevo — see Brevo privacy policy | — |
| Meta Pixel (Facebook/Instagram) | Meta Platforms Ireland Ltd., Irland | Statistics | Measures the effectiveness of our ads on Facebook and Instagram (conversion tracking). Loads only after explicit consent. | IP address, user agent, referrer URL, pages visited, fired events (PageView, Lead), Meta cookies (_fbp, _fbc). | Article 6(1)(a) GDPR + Section 25(1) TDDDG (consent) | _fbp cookie: 90 days. Server-side evaluation per Meta's privacy policy. | USA — EU-US Data Privacy Framework + Standard Contractual Clauses |
| Google reCAPTCHA v3 | Google LLC, USA / Google Ireland Ltd., Irland | Functional | Protects the contact form against bot spam (score-based, invisible). Loads only after explicit consent. | IP address, user agent, device/browser signals, mouse movement, reCAPTCHA cookies (_GRECAPTCHA). | Article 6(1)(a) GDPR + Section 25(1) TDDDG (consent) | _GRECAPTCHA cookie: 6 months. Server-side evaluation per Google's privacy policy. | USA — EU-US Data Privacy Framework + Standard Contractual Clauses |
Manage cookie preferences
You can withdraw your consent at any time. The button below re-opens the banner so you can change individual categories.
Updates
We may update this policy when our processing changes (e.g. new tools or new use cases). The current version always lives at this URL.