Privacy Policy

Version: 11 October 2026

1. Controller

QAZAR eGbR, Albertstraße 2, 27793 Wildeshausen, Germany, represented by the partners Lennard Zieten and Jeremy Gocht.
Email: office@qazar.app
Phone: +49 152 55376673

2. Overview

Our website uses no cookies, no analytics and no tracking. It loads no content from third parties; fonts are served from our own server. We store nothing on your device. We process personal data only to deliver the website, to keep it secure and to answer inquiries.

3. Hosting and delivery (Firebase Hosting)

Our website is hosted on Firebase Hosting. The provider is Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland.

When you open a page, your browser sends technical data to the servers that deliver it: IP address, date and time, requested URL, referrer URL, browser and operating system (user agent) and transferred data volume. Google delivers pages through a global network of servers. Google acts as our processor and keeps its own security logs.

Purpose: delivering the website and keeping it stable and secure. Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is a secure and working website. Retention: according to Google, it keeps the IP data from delivery for a few months and then deletes it. We have a data processing agreement with Google (Art. 28 GDPR).

4. Contact form

If you send an inquiry, we process the data you enter: name, email address, company, project type, budget, timeline and message.

Processing path: The form sends your data to our own function on Google Cloud in Frankfurt, Germany (region europe-west3). The function forwards your inquiry by email to our mailbox. It does not write your inquiry to a database. To prevent spam, the function keeps your IP address in working memory for up to one hour.

Server logs: Google Cloud automatically records each request to the function in a log. The log contains your IP address, user agent, requested URL, time and status. We keep these logs for 30 days, then they are deleted.

Purpose: answering your inquiry and preparing a contract; preventing abuse. Legal basis: Art. 6 (1) (b) GDPR for inquiries about a possible contract; Art. 6 (1) (f) GDPR for spam protection and logs. Our legitimate interest is a secure form. Providing data is voluntary. Without an email address we cannot answer.

5. Email and our mailbox (Google Workspace)

We receive inquiries from the form and direct emails in our Google Workspace mailbox. The provider is Google Cloud EMEA Limited. Google acts as our processor under a data processing agreement.

Retention: If no contract follows, we delete your inquiry 6 months after our last contact. If a contract follows, we keep business correspondence for 6 years and documents relevant for accounting for 8 years, as required by tax and commercial law (§ 147 AO, § 14b UStG). The legal basis for storage under these duties is Art. 6 (1) (c) GDPR.

6. Storage on your device

We do not store information on your device and do not read information from it. For that reason, this website needs no consent banner.

7. Recipients and transfers outside the EU

Recipients are only the processors named above. Google may access data from the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. The European Commission has found that certified US companies ensure an adequate level of protection (Art. 45 GDPR). In addition, our agreements with Google include the EU Standard Contractual Clauses (Art. 46 GDPR).

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given with effect for the future (Art. 7 (3)).

Right to object (Art. 21 GDPR)

Where we process data under Art. 6 (1) (f) GDPR, you may object at any time for reasons arising from your particular situation. We will then stop, unless we have compelling legitimate grounds or need the data for legal claims.

To use your rights, email office@qazar.app.

You may also complain to a data protection authority. Our authority is Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

9. No automated decisions

We make no automated decisions or profiling under Art. 22 GDPR.

10. Security

We transmit our website and the form over encrypted connections (TLS).

11. Notice for US visitors (California, Delaware and other states)

This section applies to visitors from the United States. The categories of personally identifiable information we collect are listed in sections 3 to 5. We share it only with the service providers named there. We do not sell or share personal information for cross-context behavioral advertising.

Do Not Track: we do not track visitors across websites. We therefore do not change our behavior in response to Do Not Track signals or Global Privacy Control, because no tracking takes place. You may review or request correction of your information by emailing office@qazar.app. We will post any changes to this policy on this page with a new version date.

12. Changes

We update this policy when our processing or the law changes. The version date at the top shows the current version.