Privacy Notice
This privacy notice informs you about the nature, scope and purpose of the processing of personal data when visiting our website https://www.q4m.de.
1. Controller
Q4 Media AG
Röntgenstr. 9, 66763 Dillingen/Saar, Deutschland
Phone: +49 6831 76885-0 · Email: info@q4m.de
2. Hosting
This website is hosted in high-performance German data centres (ISO 27001 certified). All personal data is processed exclusively within the EU. A Data Processing Agreement under Art. 28 GDPR is in place. The specific hosting details are disclosed to business clients upon request as part of a DPA (info@q4m.de).
2a. Compliance overview
- Server and data location: Germany / EU only — no third-country transfers
- Encrypted transport: TLS 1.2+ (HTTPS)
- DPA under Art. 28 GDPR with all relevant processors
- Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)
- Responsible under § 18 (2) MStV: Michael Petto, Anschrift wie oben
3. Server log files
When the website is accessed, server log data (IP address, date and time, URL, referrer, user agent) is stored automatically. Legal basis: Art. 6 (1) f GDPR (legitimate interest in stability and security). Logs are deleted or anonymised after 14 days at the latest.
4. Cookies
This website uses only technically necessary cookies / local storage (cookie consent state, CSRF protection of the contact form). We do not use tracking, analytics or marketing cookies. Legal basis: § 25 (2) no. 2 TDDDG.
5. Contact form / email enquiries
If you contact us via the form or by email, the data you provide (name, company, email, phone, project type, message and technical metadata such as IP and user agent) will be processed for the purpose of handling your enquiry. Legal basis: Art. 6 (1) b GDPR (pre-contractual measures) or Art. 6 (1) f GDPR (legitimate interest in answering your enquiry). The data is deleted as soon as it is no longer required, subject to statutory retention periods.
6. Spam protection (self-hosted Altcha)
To protect our contact form from automated abuse we use Altcha — an open-source proof-of-work captcha that we run entirely on our own German servers. No data is shared with third parties. No cookies are set. Your browser solves a small local computation; your IP address, behaviour or any other personal data is neither evaluated nor stored. Legal basis: Art. 6 (1) f GDPR. Source & licence: altcha.org (MIT).
7. Local web fonts
We use locally hosted webfonts (Space Grotesk, Inter, JetBrains Mono). No data is sent to Google Fonts or other third parties.
8. Encryption
This website uses TLS encryption (HTTPS, at least TLS 1.2).
9. Your rights
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent (Art. 7 (3))
Please direct your requests to info@q4m.de.
10. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), e.g. Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany — datenschutz.saarland.de.
11. Data Processing Agreement (Art. 28 GDPR)
For business clients we provide a DPA on request: info@q4m.de.