QuotaforgeQuotaforge Let’s Get to Know Each Other
Legal Information

Privacy Policy

This English version is provided for convenience. The German version is legally binding: Datenschutzerklärung.

1. Data Controller

The data controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Manuel Willert
Nordalbingerweg 31a
22455 Hamburg
Germany
Email: manuel.willert@quotaforge.io

A data protection officer has not been appointed, as there is no legal obligation to do so.

2. Overview

We process personal data only to the extent necessary for the operation of this website, to respond to your inquiries, to provide our whitepaper, for cookieless visitor analytics, or—with your consent—to measure reach. The following sections explain what data this is, what we use it for, on what legal basis, and how long we store it.

3. Hosting and Server Log Files

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit a page, Netlify automatically processes information transmitted by your browser: IP address, date and time of the request, page accessed, referrer URL, browser type and version, and operating system. These server log files are used exclusively for the technical operation and security of the website and are not combined with other data sources.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the technically error-free and secure operation of the website. Netlify processes the data on our behalf based on a data processing agreement (Article 28 of the GDPR). This may involve a transfer of data to the United States; Netlify has committed to complying with the EU Standard Contractual Clauses (Article 46(2)(c) of the GDPR) for this purpose.

4. Fonts

The fonts used on this website (Plus Jakarta Sans and Space Grotesk) are embedded locally on our server. No connection to Google’s servers or those of other font providers is established when the pages are loaded.

5. Contact Form and Email

The contact form on the “Contact” page is processed via the Netlify Forms service (see Section 3). When submitted, the data entered (name, email address, company, and—optionally—provider type, team size, desired format, and your message) is transmitted to Netlify via an encrypted connection, stored there for forwarding to us, and used exclusively to process your inquiry.

If you contact us directly via email, we also process the data transmitted in this manner (name, email address, message content, and any voluntary information) solely for the purpose of handling your inquiry.

The legal basis is Article 6(1)(b) of the GDPR, provided your inquiry relates to a contract or pre-contractual measures; otherwise, it is Article 6(1)(f) of the GDPR (legitimate interest in responding to inquiries).

6. Whitepaper Download and Email Content

To download our whitepaper, we collect your email address and, if you choose, your cell phone number. This information is transmitted to us via Netlify Forms (see Section 3) and additionally to our email service provider MailerLite (see below).

By submitting the form, you consent to our occasionally sending you additional content on the topic of sales qualification via email and, if you have provided your cell phone number, to our contacting you for this purpose. To prevent anyone from signing up someone else’s address, we use a double opt-in process: you first receive an email with a confirmation link, and you are only added to our mailing list once you click it. As proof of your consent, we store the time of sign-up and confirmation as well as the IP address used. You receive the whitepaper download immediately either way.

We send these emails via MailerLite, a service of MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland. MailerLite processes the data on our behalf under a data processing agreement (Art. 28 GDPR); according to MailerLite, the data is stored in data centers in the EU. MailerLite records whether our emails are opened and which links are clicked, so that we can improve our content.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and, for logging the sign-up, Art. 6(1)(c) GDPR (obligation to provide proof). You may withdraw your consent at any time with future effect, for example via the unsubscribe link in any email or by sending an informal email to the address listed above. We store this information until you withdraw your consent. Unconfirmed sign-ups are never used for sending emails.

7. Google Analytics (only with consent)

If you consent via the consent banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to track how visitors use the website, such as pages visited, time spent on the site, approximate location, device type, and the source of the visit. Google Analytics 4 does not store full IP addresses; IP addresses from the EU are used only to derive an approximate location and are subsequently discarded. Advertising features and Google Signals are not enabled.

Google Analytics will not be loaded without your consent. The legal basis is your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. You may withdraw your consent at any time via the “Cookie settings” link in the footer of this website.

The data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision (Article 45 of the GDPR). Google Analytics cookies (“_ga,” “_ga_<ID>”) have a lifespan of up to two years; the event data collected is automatically deleted after the retention period set in Google Analytics. For more information, please see Google’s Privacy Policy at policies.google.com/privacy.

8. Visitor Analytics (sitesignal)

We want to understand which content on this website is being read. For this we use a self-hosted visitor analytics tool called “sitesignal”. When you open a page, a small script sends the page address, its title and the referring page to our own analytics server at Netlify (see Section 3). No cookies are set and no identifiers are stored on your device.

To group several page views of one visit, we create a hash from your IP address and browser identifier together with a random value that changes daily. Visits cannot be linked across days this way. We do not store your IP address itself. Along with the hash we store the page viewed, the referring website, campaign parameters in the address, the country and whether a mobile device was used. We only analyze the data in aggregate and do not combine it with other data.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest is to understand which content is used and to align our website and offering accordingly. We keep page views for 90 days.

Objection: You can object to the visitor analytics at any time. If your browser sends the “Global Privacy Control” or “Do Not Track” signal, nothing is recorded anyway. Otherwise one click is enough: . We then store a note in your browser that no data should be recorded.

9. AI Chat Assistant (CrafterQ)

This website offers an AI-powered chat assistant that answers questions about our services and, if you are interested, points you to our contact form. The assistant is only loaded once you click “Start chat”. Before that, no connection to the provider is established.

The provider is Crafter Software Corporation, USA (“CrafterQ”). When you start the chat, your IP address, technical information about your browser and device, the page you are on and all messages you enter are transmitted to CrafterQ and processed there to generate answers. If you provide your name, email address or company in the chat, we use this information to handle your inquiry as described in Section 5. Please do not enter sensitive data in the chat. We review chat transcripts to improve the assistant and our content.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you give by clicking “Start chat”. You may withdraw it at any time with future effect by no longer using the chat and clearing your browser’s site data, or by emailing the address listed above. CrafterQ processes the data on our behalf under a data processing agreement (Art. 28 GDPR). The data is stored in the United States; the transfer is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). We delete chat transcripts once they are no longer needed for these purposes, at the latest after twelve months.

10. Storage in the Browser

We store in your browser’s local storage (localStorage) whether you have consented to or declined Google Analytics and whether you have started the AI chat assistant so that the banner does not reappear every time you visit a page, and, if you wish, your objection to the visitor analytics (Section 8). In addition, we record in session storage for the duration of your visit that you have already been shown the notice regarding our whitepaper. This information does not leave your device and is absolutely necessary for the website to function as you intend (§ 25(2)(2) TDDDG). You can delete it at any time via your browser settings.

11. Retention Period

Unless a more specific period is stated above, we store personal data only for as long as is necessary for the respective purpose. Server log files are automatically deleted by Netlify after a short, technically determined period. We delete inquiries as soon as they have been fully processed, unless statutory retention requirements (such as under commercial or tax law) prevent this.

12. Your Rights

Under the GDPR, you have the following rights:

  • Access to the personal data we process (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent with future effect (Art. 7(3) GDPR)
  • Lodging a complaint with a supervisory authority, such as the Hamburg Commissioner for Data Protection and Freedom of Information (Art. 77 GDPR)

Right to Object: To the extent that we process data based on Article 6(1)(f) of the GDPR, you may object at any time on grounds relating to your particular situation (Article 21(1) of the GDPR). You may object to the use of your data for direct marketing at any time without providing a reason (Art. 21(2) GDPR).

To do so, simply contact us at the email address listed above.

13. Changes to This Privacy Policy

We will update this Privacy Policy as soon as data processing on this website changes, for example due to the introduction of new services. The version published on this page is always the current one.

As of: October 2026