1. Introduction and Scope

NVision Quantum Technologies GmbH (“NVision”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store, and share personal data when you visit or interact with our website at www.nvision-quantum.com (the “Website”).

This Privacy Notice applies to all visitors and users of our Website, including individuals who contact us via our contact form, download our resources or gated content, subscribe to our newsletter, or submit a job application.

2. Data Controller

The data controller responsible for the processing of your personal data is:

NVision Quantum Technologies GmbH
Address: Wolfgang-Paul-Straße 2, 89081 Ulm, Germany
Email: privacy@nvision-quantum.com
Website: www.nvision-quantum.com

‍Data Protection Officer: Markus Willert
Email: privacy@nvision-quantum.com

3. Categories of Personal Data We Collect

Depending on how you interact with our Website, we may collect the following categories of personal data:

3.1 Data You Provide to Us Directly

• Contact form: First and last name, email address, company name (optional), and the content of your message.
• Newsletter subscription: Email address, name (where provided), and areas of interest regarding our technologies (e.g., Quantum Computing or Quantum-Enhanced MRI).
• Job applications: Full name, contact details (email, phone), geographic location (required), curriculum vitae, cover letter, work experience, and educational background. You may also voluntarily provide salary expectations, earliest possible start date, and any other information you choose to include in your application. 
• Resource downloads: Business email address, name (where provided), the specific resource or topic requested, and your opt-ins for sales contact or subscriptions to our newsletter, webinars, and events.

3.2 Data Collected Automatically When You Visit Our Website

• Technical data: IP address (anonymised where possible), browser type and version, operating system, device type, referring URL, and pages visited.
• Usage data: Date and time of your visit, time spent on pages, clickstream data.

Cookie data: Data collected via cookies and similar tracking technologies as described in our Cookie Notice. Please see our Cookie Notice.

4. Purposes, Legal Bases, and Retention Periods

The table below provides an overview of each processing activity, the personal data involved, the applicable legal basis under the GDPR, and the retention period.

Providing and Operating the Website

• Purpose: Ensuring technically necessary functions, website security, and functionality.
• Categories of Personal Data: IP address (anonymised), browser/device data, pages visited, session data.
• Legal Basis (GDPR): Art. 6(1)(f) GDPR – Legitimate interests.
• Retention Period: Duration of the browser session; log files are kept for up to 7 days.

Responding to Enquiries

• Purpose: Handling messages submitted via the contact form.
• Categories of Personal Data: Name, email address, company (if provided), message content.
• Legal Basis (GDPR): Art. 6(1)(b) GDPR – Pre-contractual measures; Art. 6(1)(f) GDPR – Legitimate interests; or Art. 6(1)(a) GDPR – Consent.
• Retention Period: Until the enquiry is resolved + 6 months.

Sending Our Newsletter

• Purpose: Marketing communications.
• Categories of Personal Data: Name, email address, company.
• Legal Basis (GDPR): Art. 6(1)(a) GDPR – Consent.
• Retention Period: Until withdrawal of consent; thereafter data is promptly deleted.

Processing Job Applications

• Purpose: Managing the recruitment and application process.
• Categories of Personal Data: Name, contact details, CV, cover letter, qualifications, work experience.
• Legal Basis (GDPR): Art. 6(1)(b) GDPR – Pre-contractual measures; § 26 BDSG (Germany).
• Retention Period: 6 months after the last activity date on your application, unless a longer retention period is explicitly agreed upon.

Use of Cookies and Tracking Technologies

• Purpose: Analyzing website usage and providing necessary site functions.
• Categories of Personal Data: IP address (anonymised), pages visited, session duration, browser/device data, cookie identifiers.
• Legal Basis (GDPR): Art. 6(1)(a) GDPR – Consent (via Cookie Banner); Art. 6(1)(f) GDPR – Legitimate interests for strictly necessary cookies.
• Retention Period: As specified in our detailed Cookie Notice.

Compliance with Legal Obligations

• Purpose: Meeting statutory requirements.
• Categories of Personal Data: Any personal data subject to a statutory retention obligation.
• Legal Basis (GDPR): Art. 6(1)(c) GDPR – Legal obligation.
• Retention Period: As required by applicable law.

5. Newsletter

If you subscribe to our newsletter, we will use your email address (and, where provided, your name) to send you information about NVision’s products, research, news, and events.

We use the double opt-in procedure: after submitting your email address, you will receive a confirmation email and must click the confirmation link before your subscription becomes active. This ensures that only you can subscribe with your email address.

You can unsubscribe from our newsletter at any time, free of charge, by clicking the unsubscribe link included in every newsletter email, or by contacting us at privacy@nvision-quantum.com. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Our newsletter is sent via Mailerlite. Please refer to Section 7 for information on this third-party provider.

6. Job Applications

When you apply for a position at NVision, you may do so via our career portal operated by Personio (personio.de). In this context, we process your application data solely for the purpose of assessing your suitability for the position and conducting the recruitment process.

Your application data will only be accessible to the employees involved in the recruitment process (HR, relevant line managers). We will not share your application data with third parties outside the recruitment process without your explicit consent.

We will not retain your personal data for more than what is necessary to fulfil the aforementioned purposes, however, for business purposes, the data will be retained for 6 months from the last activity date on your application before it will be securely disposed of. Once you request for your data to be deleted, we will stop your data from being processed any further (restriction of processing) and securely dispose it. With your explicit consent, we may retain your data for a longer period and include you in our talent pool for future vacancies.

Personio GmbH processes application data on our behalf as a data processor. For more information, please refer to https://nvision-quantum-technologies.jobs.personio.de/privacy-policy.

7. Third-Party Providers and Data Processors

We use carefully selected third-party providers to operate our Website and services. This does not diminish our responsibility to ensure privacy compliance. We remain fully accountable for the data processing actions of any sub-processor acting on our behalf. We ensure that a data processing agreement (DPA) is in place with sub-processors, which mandates adequate privacy and security measures to protect personal data and address data subject requests.

Webflow, Inc.

• Purpose: Website hosting, infrastructure, and analytics.
• Location / Transfer: USA. Data transfers are secured via Standard Contractual Clauses (SCCs).

Personio SE & Co. KG

• Purpose: Applicant tracking and management of the career portal.
• Location / Transfer: Germany (EU).

Mailerlite

• Purpose: Newsletter delivery and marketing management.
• Location / Transfer: Ireland (EU).

Zeeg

• Purpose: Coordination and management of appointments and scheduling.
• Location / Transfer: Germany (EU).

8. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with Chapter V GDPR, including:

• Standard Contractual Clauses (SCCs) as approved by the European Commission (Decision 2021/914);
• Adequacy decisions by the European Commission, where applicable.

You may request further information about the applicable transfer safeguards by contacting us at privacy@nvision-quantum.com.

9. Cookies and Similar Technologies

Our Website uses cookies and similar tracking technologies. Cookies are small text files stored on your device when you visit our Website. Some cookies are technically necessary for the Website to function; others require your prior consent.

For detailed information about the cookies we use, their purposes, providers, storage durations, and how to manage your preferences, please refer to our Cookie Notice.

You can manage or withdraw your cookie consent at any time via the “Cookie Settings” link in the footer of our Website.

10. Your Rights

10.1 Rights Under GDPR (EU / EEA)

Under the General Data Protection Regulation (GDPR), you have the following rights with respect to your personal data:

• Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy of that data.
• Right to rectification (Art. 16 GDPR): You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure / “right to be forgotten” (Art. 17 GDPR): You have the right to request deletion of your personal data, subject to certain legal exceptions.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your data in certain circumstances.
• Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to object (Art. 21 GDPR): You have the right to object at any time to processing of your personal data based on legitimate interests (Art. 6(1)(f) GDPR), including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right not to be subject to automated decision-making (Art. 22 GDPR): We do not carry out solely automated decision-making, including profiling, that produces legal or similarly significant effects on you.

10.2 Rights Under UK GDPR

If you are located in the United Kingdom, you have equivalent rights under the UK GDPR and the Data Protection Act 2018.

10.3 How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at: privacy@nvision-quantum.com or by post to: NVision Quantum Technologies GmbH, Wolfgang-Paul-Straße 2, 89081 Ulm, Germany.

We will respond to your request within one month of receipt. In complex cases or where we receive a large number of requests, we may extend this period by a further two months, in which case we will inform you accordingly.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority at any time. In Germany, this is the relevant state data protection authority (Landesdatenschutzbehörde). The supervisory authority responsible for NVision Quantum Technologies GmbH, based in Baden-Württemberg, Germany, is: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)

Address: Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Website: www.baden-wuerttemberg.datenschutz.de
Email: poststelle@lfdi.bwl.de

A list of all EU supervisory authorities is available at: edpb.europa.eu. If you are based in the UK, you may also contact the Information Commissioner’s Office (ICO) at ico.org.uk.

12. Additional Information for US Residents (CCPA / CPRA)

We are committed to complying with applicable US state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). If you are a resident of California or another US state with applicable privacy legislation, you may have the following rights:

• Right to Know: You have the right to know what personal information we collect, the purposes for which we use it, and whether we disclose it to third parties.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions (e.g. where we are required to retain it by law).
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Opt Out of Sale / Sharing: We do not sell personal information as defined under the CCPA. We do not share personal information for cross-context behavioural advertising purposes. [Please update this statement if this changes.]
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under the CPRA in the context of our Website.

To exercise your rights under the CCPA/CPRA, please contact us at: privacy@nvision-quantum.com or NVision Quantum Technologies GmbH, Wolfgang-Paul-Straße 2, 89081 Ulm, Germany. We will respond within 45 days, with a possible extension of a further 45 days where necessary.

13. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure, in accordance with Art. 32 GDPR.

14. Links to Third-Party Websites

Our Website may contain links to third-party websites. This Privacy Notice does not apply to those websites. We have no control over the content or privacy practices of third-party websites and encourage you to review their respective privacy notices before providing any personal data.

15. Updates to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our data processing practices, legal requirements, or the structure of our Website. Any changes will be posted on this page with an updated “Last updated” date.

Where changes are material, we will take reasonable steps to inform you (e.g. by placing a prominent notice on our Website). Where required by law, we will seek renewed consent. However, we encourage you to review this Privacy Notice periodically to be informed of how we use your personal information.

16. Contact

If you have any questions, concerns, or requests regarding this Privacy Notice or the processing of your personal data, please contact us:

NVision Quantum Technologies GmbH
Address: Wolfgang-Paul-Straße 2, 89081 Ulm, Germany
Email: privacy@nvision-quantum.com
Website: www.nvision-quantum.com
Data Protection Officer: Markus Willert