Privacy Policy

Thank you for your interest in our website. The protection of your personal data is of paramount importance to us. In this Privacy Policy, we inform you in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR) about the nature, scope, and purpose of the collection and use of your data.

1. Data Protection at a Glance

General Information
The following provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified. For detailed information, please refer to the subsequent sections of this policy.

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in Section 2 of this policy and in our Legal Notice (Impressum).

How do we collect your data?
On one hand, your data is collected when you provide it to us (e.g., by entering it into a contact form). Other data, particularly technical data (e.g., IP address, browser, operating system), is collected automatically by our IT systems when you visit the website.

What do we use your data for?
A portion of the data is collected to ensure the technically error-free and secure provision of the website (legitimate interest). Other data may be used to analyze your user behavior, subject to your consent. If you contact us, we use your data to process your request.

What are your rights?
You have the right to access, rectify, erase, and restrict the processing of your data at any time. You also have a right to object, a right to data portability, and a right to lodge a complaint with a supervisory authority. You may withdraw any consent you have given at any time with future effect.

2. Controller and Contact Information

The controller within the meaning of the GDPR is:

THE IQ COMPANY UG (haftungsbeschränkt)
Bilker Straße 34
40213 Düsseldorf
Germany
Phone: +49 (0) 211 54203308
Email: business@theiqcompany.de

We are not legally required to appoint a Data Protection Officer (DPO). For all questions and concerns regarding data protection, you can contact us directly.

3. Your Rights as a Data Subject

As a data subject affected by data processing, you have the following rights:

Right of access (Art. 15 GDPR): You can request information about your personal data processed by us.
Right to rectification (Art. 16 GDPR): You can request the immediate correction of inaccurate or the completion of your data stored by us.
Right to erasure (Art. 17 GDPR): You can request the erasure of your data stored by us, to the extent that processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data if you contest the accuracy of the data, the processing is unlawful, we no longer need the data, or you have objected to the processing.
Right to data portability (Art. 20 GDPR): You can request to receive the data you have provided to us in a structured, commonly used, and machine-readable format or request its transmission to another controller.
Right to withdraw consent (Art. 7 (3) GDPR): You can withdraw your consent at any time. This will mean that we may no longer continue the data processing that was based on this consent for the future.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence, your place of work, or our company’s registered office. The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestr. 2-4, 40213 Düsseldorf, Germany
Phone: +49 (0) 211/38424-0, Email: poststelle@ldi.nrw.de

Right to Object pursuant to Art. 21 GDPR

IF YOUR DATA IS PROCESSED ON THE BASIS OF LEGITIMATE INTERESTS PURSUANT TO ART. 6 (1) (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA PURSUANT TO ART. 21 GDPR, PROVIDED THERE ARE GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOUR DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE A GENERAL RIGHT TO OBJECT, WHICH WE WILL IMPLEMENT WITHOUT THE NEED TO SPECIFY A PARTICULAR SITUATION.

IF YOU WISH TO EXERCISE YOUR RIGHT OF WITHDRAWAL OR OBJECTION, AN EMAIL TO business@theiqcompany.de IS SUFFICIENT.

4. Data Collection on Our Website

4.1. Hosting and Server Log Files
Our website is hosted by an external service provider. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. To ensure data protection-compliant processing, we have concluded a Data Processing Agreement (DPA) with IONOS in accordance with Art. 28 GDPR.

Each time you access our website, the host automatically collects data in so-called server log files. This includes:

Browser type and version
Operating system used
Referrer URL (the previously visited page)
Hostname of the accessing computer
Date and time of the server request
IP address

Our host stores the IP address for security and stability reasons. To protect your privacy, the IP address is anonymized after 7 days by truncating the last octets. A direct personal reference is no longer possible thereafter.

The processing of this data is based on our legitimate interest in the secure, stable, and performant provision of our website pursuant to Art. 6 (1) (f) GDPR.

4.2. Cookies and Consent Management with Complianz
Our website uses cookies, which are small text files stored on your terminal device. We use the consent tool from Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, The Netherlands, to obtain and manage your consent.

We distinguish between two types of cookies/technologies:

Technically Necessary Cookies: These are essential for the basic operation and security of the website (e.g., to store your consent decision). Access to information on your terminal device is based on Section 25 (2) No. 2 of the German Telecommunications Telemedia Data Protection Act (TTDSG). The subsequent data processing is based on our legitimate interest in a functional website (Art. 6 (1) (f) GDPR).
Analytics, Marketing & Other Cookies: All other cookies and services (e.g., for statistical analysis) are only activated after you have given your active and explicit consent. The legal basis for storing and accessing information on your terminal device is your consent pursuant to Section 25 (1) TTDSG, and for the subsequent processing of personal data, your consent pursuant to Art. 6 (1) (a) GDPR.

Your consent is voluntary and can be revoked or adjusted at any time with future effect via the privacy settings icon or a link in our website’s footer. Detailed information about the services used can be found in our consent banner and the linked Cookie Policy.

4.3. Analytics Tool: Burst Statistics
We use the Burst Statistics plugin for the statistical analysis of visitor traffic. The provider is Really Simple Plugins, The Netherlands. We operate this tool in a privacy-friendly configuration:

No personal data is stored.
IP addresses are fully anonymized before processing.
No tracking cookies that would allow identification are set.

The use of Burst Statistics is based on our legitimate interest in an anonymized analysis of user behavior to optimize our web offering pursuant to Art. 6 (1) (f) GDPR. As no personal data is processed, your legitimate interests are not affected.

4.4. Contact (Email, Phone, Contact Form)
If you contact us by email, phone, or via a contact form, the data you provide (e.g., name, email address, phone number, content of your request) will be stored and processed by us to handle your inquiry.

If your request is for the purpose of initiating or fulfilling a contract with you, the legal basis for processing is Art. 6 (1) (b) GDPR.

In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (Art. 6 (1) (f) GDPR).

Your data will remain with us until the purpose for data storage no longer applies (e.g., after your request has been fully processed), you request its erasure, or you withdraw your consent to storage. Mandatory statutory retention periods remain unaffected.

4.5. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock icon in your browser line.

As of: June 2025

Get in touch

Back to Homepage