Privacy Policy

1. Who we are (Controller)

Controller (data controller) for this website is:

QPlexCloud Management Consultancy
Schwindstraße 13 Rgb.,
80798 München
Germany

Commercial Registration (CR): coming soon
Email: [email protected]
Phone: +49 152 1546 6849
Data Protection Officer (DPO) / Privacy Contact: [email protected]

2. Scope and legal bases

This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit or interact with our website. Depending on your location, our processing may be subject to the EU General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (revFADP) and/or other applicable laws.

Typical legal bases (where applicable) include consent (for optional cookies or analytics), performance of a contract or pre-contractual steps (for example responding to inquiries), legitimate interests (for example security, stability and operation of the website) and legal obligations.

3. Personal data we collect (overview)

Depending on how you use the website, we may process the following categories of personal data:

• Technical access data (server log data): IP address, date/time of access, requested pages/files, referrer URL, browser type/version, operating system and similar technical metadata.
• Contact and communication data: name (if provided), email address, message content and any other information you submit via forms or email.
• Consent data: your cookie preferences and consent records stored via our consent management platform (CookieYes).
• Usage and analytics data: aggregated or pseudonymous usage data collected via Matomo and/or Google Analytics (only where enabled and permitted).4. Server log files (technical access data)

When you access our website, our servers and/or our infrastructure providers automatically record certain information to deliver the site, ensure security and troubleshoot issues. This typically includes IP address, date/time, requested resource, referrer, browser/OS and similar metadata.

Purpose: website delivery, security monitoring, error diagnosis and abuse prevention.

Legal basis: legitimate interests (where applicable).

Retention: 30 days unless longer retention is required for security investigations.

5. Media uploads

If you can upload images or other media to the website (for example in a restricted account area), please avoid uploading media with embedded location data (EXIF GPS). Visitors may be able to download and extract such metadata.

If uploads are not available on our website, this section can be disregarded.

6. Contact forms and email (MetForm)

We use MetForm to provide contact and email forms. When you submit a form, we process the information you provide (for example name, email address, message content and any optional fields).

Purpose: handling inquiries, customer support and business communications.

Legal basis: performance of a contract or pre-contractual steps and/or legitimate interests, consent where required.

Retention: form submissions are retained for 30 days, email correspondence for 15 years and/or as required by law.

7. Cookies and consent management (CookieYes)

We use CookieYes as a consent management platform to obtain, manage and document user choices regarding cookies and similar technologies.

CookieYes may process consent status (accepted or declined categories), timestamp of consent, a consent identifier and potentially IP address depending on configuration.

You can change or withdraw your consent at any time using the cookie settings bar displayed at the bottom of your screen and on the page.

8. Analytics

8.1 Matomo Analytics (Select Matomo Analytics – Ethical Stats. Powerful Insights.)

We use Matomo Analytics to understand how visitors use our website. Depending on our configuration, Matomo may use cookies and/or process usage data such as page views, click paths, device/browser information, approximate location (derived from IP) and timestamps. We may apply IP anonymization and other privacy features.

Legal basis: consent (for analytics cookies or non-essential tracking) and/or legitimate interests for strictly anonymized, cookie-less statistics depending on configuration.

Opt-out: via our cookie settings (CookieYes) and/or a Matomo opt-out mechanism if provided:

Retention: 90 days.

8.2 Google Analytics (Site Kit by Google)

We use Google Analytics via the WordPress plugin ‘Site Kit by Google’ to analyze website usage. Google Analytics typically uses cookies and processes usage data (for example visited pages, interactions and session information), device/browser data and may process IP address subject to configuration such as IP anonymization.

Recipient: Google (typically Google Ireland Limited and affiliated entities).

Legal basis: consent via CookieYes for analytics and statistics cookies.

Retention: 14 months.

More information:

• Google Privacy Policy: https://policies.google.com/privacy
• Google Analytics – Safeguards / Privacy: https://support.google.com/analytics/answer/6004245
• Google – Data Processing Terms (DPA): https://business.safety.google/adsprocessorterms/
• Google – International Data Transfers / SCC and GDPR commitments: https://business.safety.google/gdpr

We use Rank Math SEO to manage technical SEO settings (for example metadata and sitemaps). Rank Math SEO generally does not process personal data of visitors on its own unless specific integrations or tracking features are enabled.

Rank Math features enabled on this website: Content AI, 404 Monitor, Analytics, Instant Indexing, Link Counter, Local SEO, Schema (Structured Data), SEO Analyzer and Sitemap.

• • SEO configuration (Sitemap, Schema, Local SEO, SEO Analyzer and Link Counter): These modules are used to generate and manage on-site SEO elements such as XML sitemaps, structured data (schema markup) and local business information. They are not intended to collect personal data from visitors by themselves. When generating sitemaps and schema, the website may expose page URLs and publicly available content as part of normal website operation.

• • 404 Monitor (logging of broken or invalid page requests): The 404 Monitor can record technical information about requests that result in page not found errors (for example requested URL, referrer and timestamp and depending on configuration or server setup potentially IP address and user agent). This helps us identify broken links, improve site quality and enhance security. Legal basis: legitimate interests (security, maintenance and improvement of the website). Retention: 90 days unless needed longer for security investigations.

• • Rank Math Analytics module: If connected to Google services, Rank Math may retrieve aggregated performance data (for example from Google Analytics and/or Google Search Console) and display it inside the WordPress dashboard. Rank Math does not replace our cookie consent controls. Any visitor tracking is governed by the underlying analytics tools (for example Google Analytics) and only runs where consent has been given via our consent management platform. Connection data such as authentication tokens and related configuration may be stored in WordPress to maintain the connection.

• • Instant Indexing: If enabled and configured with search engine APIs, Instant Indexing can submit page URLs to supported search engines (for example Google and/or Bing) to request faster indexing. This transmits the submitted URLs and technical request data to the respective provider(s). Legal basis: legitimate interests (improving discoverability of our content).

• • Content AI: Content AI is used internally to assist with creating and optimizing website text and content. It is not intended to process visitor data. If Content AI communicates with external services, data is limited to the content and prompts used by site administrators for content creation.

10. Caching and performance (Super Page Cache)

We use Super Page Cache to improve performance and reduce load times. The plugin may process technical information needed to deliver cached pages (for example cache keys and cache status). It is not intended to collect personal data but may process technical request data where required for delivery and security.

Legal basis: legitimate interests (performance, stability and efficiency).

11. CDN and security (Cloudflare)

We use Cloudflare to provide content delivery (CDN), performance optimization and security (for example DDoS protection and firewalling). Cloudflare may process IP addresses, request metadata (headers, URLs and timestamps) and security events to provide these services. Cloudflare may also set cookies that are necessary for security features.

Purpose: secure and efficient website delivery and protection against malicious traffic.

Legal basis: legitimate interests, consent where required for non-essential technologies.

Cloudflare privacy information: https://www.cloudflare.com/privacypolicy/

12. Embedded content from other websites

Pages or articles may include embedded content (for example videos, images and maps). Embedded content behaves as if you visited the other website directly. Those providers may collect data about you, use cookies and track your interaction especially if you have an account with and are logged into that provider.

13. Who we share your data with (recipients and processors)

We do not sell personal data. We may share data only as necessary for operating the website and providing services including with:

• Hosting and infrastructure providers: OVH SAS
• Cloudflare (CDN and security)
• Matomo: self-hosted
• Google Analytics / Google (via Site Kit)
• IT and administrative service providers supporting operation, maintenance and security of the website

We retain personal data only for as long as necessary to fulfill the purposes described in this policy or as required by law.

Typical retention periods:

• Server and security logs: 30 days
• Contact form submissions: 30 days
• Email communications: 15 years
• Analytics records: Matomo 90 days, Google Analytics 14 months
• Consent records (CookieYes): 30 days
• 404 Monitor logs: 90 days

Depending on applicable law and your location, you may have the right to request access to, correction of, deletion of or restriction of processing of your personal data, to object to processing based on legitimate interests, to withdraw consent at any time with effect for the future and to request data portability (GDPR).

To exercise your rights, contact us at: [email protected]

16. International data transfers

Some service providers (for example Google and Cloudflare) may process or store data in countries outside the EU/EEA/Switzerland (for example the United States). Where required, we rely on appropriate safeguards such as contractual protections (for example Standard Contractual Clauses) and additional technical and organizational measures.

17. Security measures

We implement appropriate technical and organizational measures to protect personal data including TLS/SSL encryption, access controls, timely updates of WordPress and plugins and security monitoring and controls including via Cloudflare.

18. Data breach handling

In the event of a personal data breach, we assess the incident, take mitigation measures and notify affected individuals and/or competent authorities where required by law.

19. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our website, services or legal requirements. The latest version will always be available on this page.

20. Contact

For privacy-related requests or questions, contact:
[email protected]
or by mail:
QPlexCloud Management Consultancy
Schwindstraße 13 Rgb.,
80798 München
Germany