Privacy Policy

Introduction

QuantaNexus AG ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information when you visit our website or use our services.

As a company registered in Austria, we comply with the General Data Protection Regulation (GDPR) and Austrian data protection laws. This policy applies to all personal data we collect through our website quantanexus.world and our business operations.

Data Controller Information

The data controller for your personal information is:

Data Collection

We collect personal data that you provide directly to us and information that is automatically collected when you visit our website. The types of data we collect include:

Information You Provide

• Contact information (name, email address, phone number, company name)
• Business information and project details when requesting our services
• Communication preferences and correspondence with us
• Any other information you choose to provide through our contact forms or direct communication

Automatically Collected Information

• Website usage data and analytics information
• IP address, browser type, and device information
• Pages visited, time spent on our website, and referral sources
• Cookies and similar tracking technologies (see our Cookie Policy for details)

How We Use Your Information

We use your personal data for the following purposes, based on legitimate business interests and your consent where required:

• To provide our skincare manufacturing cost analysis services and respond to your enquiries
• To communicate with you about our services, appointments, and business matters
• To improve our website functionality and user experience
• To analyse website usage patterns and optimise our digital presence
• To comply with legal obligations and protect our legitimate business interests
• For marketing purposes, including targeted advertising, where you have provided consent

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for marketing communications or cookies
• Contract: When processing is necessary to provide our services or respond to your requests
• Legitimate Interest: For website analytics, business communications, and service improvement
• Legal Obligation: When required by Austrian or EU law

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with:

• Service providers who assist with website analytics (Google Analytics) and advertising (Google Ads)
• Professional service providers (legal, accounting, IT support) bound by confidentiality agreements
• Authorities when required by law or to protect our legal rights
• Business partners when necessary to provide our services, with your consent

All third-party service providers are required to maintain appropriate data protection standards and use your information only for specified purposes.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and provide analytics insights. For detailed information about the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Contact enquiries and business communications: 3 years from last contact
• Client project data: 7 years as required by Austrian commercial law
• Website analytics data: 26 months (Google Analytics default)
• Marketing consent records: Until consent is withdrawn plus 1 year for legal compliance

After the retention period expires, we securely delete or anonymise your personal data unless longer retention is required by law.

Your Rights

Under GDPR and Austrian data protection law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request limitation of processing in specific situations
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing based on legitimate interests or for marketing purposes
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise your rights, please contact us at privacy@quantanexus.world or +43 732 555 1787. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure data storage and backup procedures

International Data Transfers

Some of our service providers (such as Google Analytics and Google Ads) may transfer your data outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including adequacy decisions by the European Commission or appropriate contractual clauses.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy regularly.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following contact information:

Supervisory Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe we have not handled your personal data in accordance with applicable law: