Privacy Policy

This Privacy Policy explains how personal data is processed when you visit the Aqarios website at aqarios.com. It is provided in accordance with the General Data Protection Regulation (GDPR).

1. Controller

The controller for the processing described in this Privacy Policy is:

Aqarios GmbH
Prinzregentenstrasse 120
81677 Munich, Germany
Managing Director: Michael Lachner
Registered with the Local Court of Munich under HRB 266522
Email: info@aqarios.com

For the content of the Investor Relations section and for the Investor Relations newsletter, the controller is:

Aqarios Quantum Technologies AG
Prinzregentenstrasse 120
81677 Munich, Germany
Represented by the Management Board: Michael Lachner
Registered with the Local Court of Munich under HRB 297827

For data protection matters concerning that content, please use the same email address.

2. Processing

Server log data. When you visit our website, our server automatically records your IP address, the date and time of the request, your browser type and version, your operating system, the referrer URL, the page requested and the volume of data transferred. We use this information to deliver the website, to keep it stable and secure, and to investigate technical problems. The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR). We erase this data once it is no longer needed for those purposes; log data held by our hosting provider is retained for its standard retention period.

Contact form. If you write to us through the contact form, we process your first name, last name, company, email address, the subject category you select and your message, in order to receive and answer your enquiry. Where your enquiry concerns a contract or steps taken at your request before entering into one, the legal basis is Art. 6(1)(b) GDPR; otherwise it is our legitimate interest in responding to enquiries addressed to us (Art. 6(1)(f) GDPR). We store this data for as long as we need it to deal with your enquiry and anything arising from it. Where the correspondence forms part of a business relationship, statutory retention periods under German commercial and tax law apply, generally six or ten years.

Business contact data. If we stay in contact with you, we record your name, company, email address, role and notes on our contact history, in order to maintain and document the business relationship. The legal basis is Art. 6(1)(b) GDPR where you are an existing customer, and otherwise our legitimate interest in maintaining business relationships (Art. 6(1)(f) GDPR). We store this data for as long as the business relationship is maintained or we have a legitimate interest in the contact, subject to statutory retention periods.

Newsletters. If you subscribe to our newsletter or to our Investor Relations newsletter, we process your email address, your name where you provide it, and your subscription and delivery status, in order to send you the newsletter you subscribed to. The legal basis is your consent (Art. 6(1)(a) GDPR). We store this data until you withdraw your consent.

Cookies and website analytics. These are described in Section 3. Technically necessary cookies are used on the basis of our legitimate interest in a functioning website (Art. 6(1)(f) GDPR). All other cookies and comparable technologies are used only with your consent (Art. 6(1)(a) GDPR).

Providing the data in the contact form is voluntary. Without it we cannot answer your enquiry. Subscribing to a newsletter is voluntary.

3. Cookies, consent and analytics

We use the consent tool Borlabs Cookie (Borlabs GmbH, Hamburg, Germany) to obtain and document your choices. It is installed on our own servers and transmits no data to its provider. It stores your consent decision in a cookie and keeps a record of it so that we can demonstrate that consent was given.

Technically necessary cookies are used to deliver the website, to remember your consent decision and to operate the contact form. They are required for the website to function and are used without consent.

All other cookies and comparable technologies are only used after you have consented through the consent banner. This applies in particular to website analytics.

For analytics we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It records how visitors use our website, for example which pages are opened and how visitors arrived at the site, and shortens IP addresses before further processing. Google Analytics is only loaded if you have consented. Data collected through it is stored for 14 months. Google Ireland Limited may transfer data to Google LLC in the United States (Section 5).

You can withdraw or change your consent at any time with effect for the future, using the consent settings on the website. The lifetime of each cookie is shown in the consent banner.

4. Recipients

Our website is hosted by WebhostOne GmbH in Germany. Website analytics are provided by Google Ireland Limited in Ireland. Our newsletters, and the subscription form embedded on our newsletter pages, are provided by Brevo GmbH / Sendinblue SAS. Where a contact is recorded in our customer relationship management system, it is processed by Notion Labs, Inc. in the United States. All of these providers process personal data on our behalf and are bound by data processing agreements.

Aqarios Quantum Technologies AG in Munich also receives personal data, for Investor Relations and for internal administrative purposes within the group. It acts as controller for Investor Relations content rather than as a processor.

We do not sell personal data and do not disclose it to third parties for their own purposes. We may in addition disclose personal data where required to do so by law or by order of a court or public authority.

5. Transfers to third countries

Personal data is processed within the European Union and the European Economic Area, with two exceptions.

Google Ireland Limited may transfer data to Google LLC in the United States. Notion Labs, Inc. is established in the United States.

Both transfers are based on the European Commission’s standard contractual clauses and, where applicable, on the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision. You can obtain a copy of the standard contractual clauses from us at info@aqarios.com

6. Your rights

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to have your data erased, to have processing restricted, and to receive your data in a portable format. Contact us at info@aqarios.com.

Right to object (Art. 21 GDPR)

Where we process your personal data on the basis of our legitimate interests, you have the right to object at any time, on grounds relating to your particular situation, to that processing. This applies to the server log data, to enquiries received through the contact form and to the business contact data described in Section 2.

If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

To object, write to info@aqarios.com. No particular form is required.

Withdrawing consent. Where processing is based on your consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. For cookies and analytics, use the consent settings on the website. For the newsletters, use the unsubscribe link in any newsletter email or write to info@aqarios.com.

Complaints. You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for Aqarios is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany. You may also complain to the authority where you live or work.