Privacy policy · Quantum Health IO

Protecting your personal data matters to us. Here you can read which data we process, what we need it for and what rights you have. This website uses no tracking or analytics services and loads no fonts or content from third-party servers.

1. Controller

Ronny Welzel, Quantum Health IO, Voerder Str. 137, 46535 Dinslaken, Germany
Email: strengthening@quantum-health.io, phone: 0208 / 309 982 74

2. Hosting and server log files

The website is operated by a hosting provider in Germany. When you visit the pages, the server automatically stores technical data in log files (IP address, date and time, page requested, browser type, referrer). This is necessary for the operation and security of the website (Art. 6(1)(f) GDPR). Log files are deleted automatically after a short time.

3. Cookies and session

We only use technically necessary cookies. A session cookie remembers your shopping cart and protects forms against abuse. It contains no personal data and is deleted when you close your browser. The legal basis is Art. 6(1)(f) GDPR and § 25(2) TDDDG. To choose the language automatically, we read your browser’s language setting on your first visit without storing it.

4. Orders and contract processing

When you order, we process your first and last name, email address, the order details and – for larger amounts or on request – your billing address. We need this data to fulfil the contract, to send you your download and invoice and to answer your enquiries (Art. 6(1)(b) GDPR). We retain invoice data in line with statutory retention obligations (Art. 6(1)(c) GDPR, up to ten years).

For your download, we store a secret access key, the expiry date and the number of downloads per file. This protects the files from unauthorised distribution.

5. Individual offers and requests

When you request or order an individual offer (Individual Quantum AI Strengthening, Personally Recorded Strengthening or Live Session), we process your name, email address, topic, the desired language, any preferred times and further wishes, as well as the times at which you agreed to the terms and to early commencement. We need this data to handle your request and perform the contract (Art. 6(1)(b) GDPR). We store the records of your consents to meet legal obligations and to be able to prove them if necessary (Art. 6(1)(c) and (f) GDPR).

Your topic may allow conclusions about your health. This is a special category of personal data. We only process it if you expressly consent in the form (Art. 9(2)(a) GDPR). Providing it is voluntary; please only share what is necessary for your topic. You can withdraw your consent at any time with effect for the future, for example by email to strengthening@quantum-health.io. We do not enter your details into external AI services and do not pass them on to third parties, except to the service providers named in this notice that we need for payment, delivery and sessions.

Retention: requests that do not lead to a contract (declined or not paid) are deleted after six months. For concluded contracts, we delete your topic and wishes no later than twelve months after the service is completed. We retain invoice data in line with statutory retention obligations (up to ten years).

6. Delivery via Dropbox

We deliver individual strengthenings as a download link via Dropbox (Dropbox International Unlimited Company, One Park Place, Upper Hatch Street, Dublin 2, Ireland; group: Dropbox, Inc., USA). We send you the link by email. When you open it, Dropbox processes technical data such as your IP address. The legal basis is Art. 6(1)(b) GDPR. Data may be transferred to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses. More information: dropbox.com/privacy.

7. Online sessions

For live sessions we use, as agreed, Zoom (Zoom Communications, Inc., USA) or Google Meet (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; group: Google LLC, USA). The providers process your participation details (for example name and email address) and technical connection data. The legal basis is Art. 6(1)(b) GDPR. Data may be transferred to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses. More information: zoom.us/privacy and policies.google.com/privacy.

8. Payment processing

Payment is handled by a payment service provider on its own encrypted payment page: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland (group: Stripe, Inc., USA). You enter your payment details there directly; we do not receive them. Stripe only sends us the confirmation of payment. The legal basis is Art. 6(1)(b) GDPR. Data may be transferred to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses. More information: stripe.com/privacy.

9. Sending emails

We send order and download emails and our replies via the mail server of our hosting provider or an email service we have commissioned. Processing is based on Art. 6(1)(b) and (f) GDPR.

10. Newsletter

If you subscribe to our newsletter, we process your email address, optionally your first name, the chosen language and the time and source of the subscription. We use the double opt-in procedure: only when you click the link in the confirmation email do we add you to the list. The basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example via the unsubscribe link in every newsletter email.

For sending, we use the service Mailjet (Mailjet SAS, 13-13 bis Rue de l’Aubrac, 75012 Paris, France) as a processor. A data processing agreement is in place with the provider.

If you tick the newsletter option when ordering, the same procedure applies.

11. Contact form and email

If you write to us via the form or by email, we store your name, email address and message to answer your request (Art. 6(1)(b) and (f) GDPR). We delete the data once the request is dealt with and no statutory retention obligations apply.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent at any time. Simply write to strengthening@quantum-health.io.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

13. Changes

We update this notice when our offering or the legal situation changes. The version published here applies.