Privacy Policy
1. Overview and Data Controller
We only collect the data necessary for the operation of our website and the services you have selected. We do not use any analytics or tracking tools, nor do we embed content from external providers. Data processing is carried out in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications and Digital Services Data Protection Act (TDDDG).
Data controller within the meaning of the GDPR
Qualisys GmbH, Bahnhofstraße 40, 40764 Langenfeld, Germany
Email: info@qualisys.eu
Data Protection Officer
Lukas Natzke, Qualisys GmbH (address as above)
Email: privacy@qualisys.eu
2. Website visits and server log files
Every time our website is accessed, our web server automatically stores the following data in log files:
- IP address of the requesting device
- Date and time of access
- Page or file accessed, amount of data transferred and HTTP status code
- Referrer URL (the page visited previously)
- Browser type and version, and operating system
Purpose: To provide the website, ensure system security and stability, and detect and prevent attacks and misuse.
Legal basis: Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website.
Retention period: The log files are automatically deleted after 90 days. This period is necessary to enable us to detect attack patterns retrospectively and investigate security incidents. Data that must be retained to preserve evidence relating to a specific incident will be kept until the matter has been resolved.
No merging with other data sources or analysis for the purpose of creating user profiles takes place.
Encryption: Our website is accessed exclusively via a TLS-encrypted connection (HTTPS). You can recognise this by the padlock symbol and ‘https://’ in your browser’s address bar.
3. Cookies
Our website uses only three technically necessary cookies. Cookies are small text files that your browser stores on your device. We do not use cookies for analytical, marketing or tracking purposes.
| Cookie | Purpose | Duration |
|---|---|---|
| fe_typo_user | Logged-in user session and temporary storage of form entries | until the browser is closed |
| be_typo_user | Session for our editors in the admin area (not set for normal visitors) | until the browser is closed |
| cookieconsent_status | Records that you have acknowledged the cookie notice | 14 days |
Legal basis: The storage of these cookies is strictly necessary for the provision of the functions you have expressly requested and therefore takes place without consent on the basis of Section 25(2)(2) of the German Telemedia Act (TDDDG). We base the subsequent processing of the data on Article 6(1)(b) of the GDPR (registered users) or Article 6(1)(f) of the GDPR (website functionality).
You can delete or block cookies in your browser settings at any time. Please note that logging in and submitting forms may then not work.
4. Registration and customer area
Registration is required for certain content and services. In doing so, we collect your name and email address . These are linked to data stored within the framework of a contractual relationship. Mandatory fields are marked on the form; registration is not possible without this information.
Purpose: To set up and manage your user account and to provide the services requiring registration.
Legal basis: Article 6(1)(b) of the GDPR (contract or pre-contractual measures).
Retention period: for the duration of the user account. You can amend your details in the customer area at any time and have your account deleted. Where statutory retention obligations apply (e.g. under the German Commercial Code (HGB) or the German Fiscal Code (AO) for invoice data for up to 10 years), we restrict processing and delete the data once the retention period has expired.
5. Registration for events
When you register for an event via our website, we process the data provided in the form, in particular your name, company name, email address and , where applicable, other fields such as billing address or type of participation .
Purpose: Organisation and running of the event, participant management, sending out participation information and, where applicable, invoicing.
Legal basis: Article 6(1)(b) of the GDPR. Where invoicing data must be retained, Article 6(1)(c) of the GDPR.
Retention period: We will delete the registration data 6 months after the end of the event, provided there are no statutory retention obligations to the contrary. The data will only be used for marketing purposes with your separate consent (see newsletter).
6. Newsletter
We require your email address for the newsletter; your name and any other fields are optional.
Legal basis: Your consent in accordance with Article 6(1)(a) of the GDPR.
Proof of consent: We store the time of registration and the IP address used at the time. This serves as proof of your consent (Article 7(1), Article 6(1)(c) and (f) of the GDPR).
Withdrawal: You can unsubscribe from the newsletter at any time by replying informally to a newsletter email. The lawfulness of any processing carried out up to that point remains unaffected.
Retention period: until you unsubscribe. We retain evidence of consent that has been given and withdrawn for up to three years in order to be able to defend against any claims.
The newsletter is sent via our own systems.
7. Contacting us
If you contact us by email or telephone, we process your details in order to deal with your enquiry. The legal basis is Article 6(1)(b) of the GDPR if your enquiry relates to a contract; otherwise, it is Article 6(1)(f) of the GDPR. We delete the data once the enquiry has been fully dealt with and there are no retention obligations.
Unencrypted emails may be read by third parties whilst in transit. For confidential information, we offer encrypted email via S/MIME as well as an encrypted upload portal.
8. Our company page on LinkedIn
On our website, we provide a link to our LinkedIn company page. This is a simple link; no data is transferred to LinkedIn when you visit our website. You are only redirected to LinkedIn once you click on the link.
We are jointly responsible with LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland, for the processing of personal data on our company page (Article 26 of the GDPR). This applies in particular to the statistical analyses (‘Page Insights’) that LinkedIn provides to us in anonymised form. LinkedIn has undertaken, in an agreement, to assume primary responsibility for this processing and to fulfil the rights of data subjects. Information on data processing by LinkedIn can be found in LinkedIn’s Privacy Policy.
The legal basis for our presence is Article 6(1)(f) of the GDPR; our legitimate interest lies in communicating with prospective and existing customers.
9. Recipients and transfers to third countries
We operate our website and our systems ourselves on our own servers and on servers in a data centre in Germany. We do not pass on your data to third parties unless this is necessary for the performance of a contract (see Events), we are legally obliged to do so, or you have given your consent.
We use the following data processors in accordance with Article 28 of the GDPR:
1. Hetzner Online GmbH, Gunzenhausen, Germany
2. STRATO GmbH, Berlin, Germany
All servers used are located in Germany. None of our data processors are subject to the US CLOUD Act. Your data will not be transferred to countries outside the EU or the EEA.
10. Your rights
You have the following rights in relation to your personal data:
- Right of access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
Please contact the data controller or our data protection officer (see point 1) for this purpose.
Right to object under Article 21 of the GDPR
Where we process your data on the basis of legitimate interests (Article 6(1)(f) of the GDPR), you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, or the processing is necessary for the establishment, exercise or defence of legal claims. You may object to processing for the purposes of direct marketing at any time without giving reasons.
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority (Article 77 of the GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information in North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf.
11. Changes to this Privacy Policy
We will update this privacy policy if our services or the legal requirements change. The version published on this page at any given time shall apply. In the event of significant changes to processing activities based on your consent, we will seek your renewed consent.
Last updated: October 2026