Privacy policy
This is the English version of our Datenschutzerklärung. The German version is the legally binding one.
Controller
IQONEX GmbH, Eugen-Richter-Str. 45, 99085 Erfurt, Germany. Contact: info@iqonex.de.
What we process and why
We only process personal data when you actively give it to us — by sending a contact form or booking a meeting via our Brevo Meetings integration. Without these actions we don't collect personal data on this website.
Data protection officer
We are not legally required to appoint a Data Protection Officer (Section 38 BDSG and Article 37 GDPR are not applicable in our current setup). For data-protection enquiries please use the controller contact above.
Server logs
Our hosting provider creates standard server logs (IP address, user agent, timestamp, requested URL) for security and debugging. Logs are deleted or fully anonymised after at most 14 days.
Analytics — “Statistics” category
We use Plausible Analytics (cookieless, EU-hosted) to count page views. No personal data, no cookies, no cross-site tracking. We still load Plausible only after you opt into the “Statistics” category in our cookie banner — without consent the script is not embedded.
Contact form & Brevo
Contact submissions are processed through Brevo (Sendinblue SAS, France) under a Data Processing Agreement per Article 28 GDPR. Mandatory fields: name, email, message — without these we cannot answer your enquiry. Phone, company and request type are optional. Legal basis: Article 6(1)(b) GDPR (pre-contractual measures). Storage: until your enquiry is resolved, then for the duration of any contractual relationship plus statutory retention periods.
Brevo Meetings iframe — “External media” category
The Brevo Meetings booking calendar is only loaded after you click “Load calendar” (which also enables the “External media” cookie category) — by default a placeholder is shown. Loading the iframe transmits IP, user-agent and Brevo-specific cookies to Brevo. Legal basis iframe: Article 6(1)(a) GDPR (consent); booking itself: Article 6(1)(b) (pre-contractual measures).
hCaptcha — “Functional” category
hCaptcha (Intuition Machines, Inc., USA) protects the contact form against spam. The hCaptcha script is only loaded after you opt into the “Functional” cookie category. Without consent the form cannot be submitted — you can still reach us by email or phone (see legal notice). International transfer to the US: Intuition Machines is, per our review, listed under the EU-US Data Privacy Framework (please verify the current status at dataprivacyframework.gov/list); EU Standard Contractual Clauses apply as a fallback. Legal basis: Article 6(1)(a) GDPR (consent) in conjunction with Section 25(1) TDDDG.
Cookie & consent management
We use a self-hosted, custom-built consent banner (no external CMP vendor, no third-party scripts for the banner logic itself). No consent-relevant scripts or third-party cookies are loaded before you make a choice. Your selection is stored in your browser's local storage (key iqonex-consent) — no cookie is set.
The categories are:
- Necessary (always on): stores your cookie decision (locally), processes form data via Brevo after successful submission.
- Statistics: enables Plausible Analytics (Estonia, EU; cookieless).
- External media: enables the Brevo Meetings iframe (France, EU) on the contact page.
- Functional: enables hCaptcha (USA) for spam protection on the contact form.
You can change or revoke your selection any time via the “Cookie preferences” link in the footer. We will ask again after at most 12 months.
Automated decision-making / profiling
We do not engage in automated decision-making within the meaning of Article 22 GDPR, including profiling. All enquiries are handled by a human.
Your rights
Under GDPR you have rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and to lodge a complaint with a supervisory authority (Art. 77). To exercise any of these, email us at info@iqonex.de.
Processors and storage mechanisms
This table lists every service we use on iqonex.de — the same list the cookie banner is built from.
| Service | Vendor | Category | Purpose | Processed data | Legal basis | Retention | Third country |
|---|---|---|---|---|---|---|---|
| Consent storage | IQONEX (eigene Infrastruktur / own infrastructure) | Necessary | Stores your cookie selection so the banner does not reappear on every page load. | Selected categories, consent timestamp, banner version (localStorage, key iqonex-consent). | Section 25(2) No. 2 TDDDG (strictly necessary) | 12 months | — |
| Brevo (email delivery for contact form) | Sendinblue SAS / Brevo, Frankreich (EU) | Necessary | Processes contact-form submissions; sends transactional emails to the submitted address and to our sales mailbox. | Form data (name, email, phone, company, request type, message). | Article 6(1)(b) GDPR (pre-contractual measures) | Until your enquiry is resolved; if a contractual relationship results, plus statutory retention periods. | — |
| Plausible Analytics | Plausible Insights OÜ, Estland (EU) | Statistics | Cookieless audience measurement — anonymised page-view statistics, no profiling. | Anonymised page views, referrer, coarse geo (country), hashed browser fingerprint <24h. | Article 6(1)(a) GDPR + Section 25(1) TDDDG (consent) | Aggregated indefinitely; raw data <24h | — |
| Brevo Meetings (booking embed) | Sendinblue SAS / Brevo, Frankreich (EU) | External media | Embedded booking calendar at meet.brevo.com on the contact page. Loads only after explicit consent. | IP address, browser data, Brevo session cookies; on booking: name, email and booking details. | Article 6(1)(a) GDPR (consent); for the booking itself (b) (pre-contractual measures) | Determined by Brevo — see Brevo privacy policy | — |
| hCaptcha | Intuition Machines, Inc. (IMI), USA | Functional | Protects the contact form against bot spam. Loads only after explicit consent. | IP address, browser fingerprint, mouse/keyboard interactions, hCaptcha cookies. | Article 6(1)(a) GDPR + Section 25(1) TDDDG (consent) | Duration of form session; hCaptcha logs <30 days | USA — EU-US Data Privacy Framework + Standard Contractual Clauses |
Manage cookie preferences
You can withdraw your consent at any time. The button below re-opens the banner so you can change individual categories.
Updates
We may update this policy when our processing changes (e.g. new tools or new use cases). The current version always lives at this URL.