Corisq

Privacy Policy

The German version of this page is authoritative.

This policy explains which personal data is processed when you visit this website, for what purpose, and which rights you have.

1. Controller

The controller for the processing of personal data on this website is:

Corisq GmbH
Im Mediapark 5
50670 Köln

Email: contact@corisq.com

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Principles of processing

We process personal data only to the extent described in this policy. The applicable legal basis is stated separately in each section.

Data is not passed on to third parties, with the exception of the processors named in section 6 that operate this website and receive the contact form on our behalf. We do not use automated decision-making, including profiling.

3. Legal bases at a glance

The processing of personal data on this website is based on the following legal bases under the General Data Protection Regulation:

  • Art. 6(1)(a) GDPR: where we obtain your consent for individual processing operations, that consent is the legal basis. You may withdraw a consent given at any time with effect for the future.
  • Art. 6(1)(b) GDPR: where processing serves to initiate or to perform a contract with you, for instance an enquiry sent to the email address stated above, the performance of that contract or of pre-contractual measures is the legal basis.
  • Art. 6(1)(f) GDPR: for the operation, the stability and the security of this website we process data on the basis of our legitimate interest, provided that your interests and fundamental rights do not override it.

Which legal basis applies in an individual case is stated in the respective section of this policy.

4. Provision of the website and server log files

Each time this website is accessed, technically necessary connection data is processed and stored in server log files. The following data is recorded:

  • IP address of the requesting device
  • date and time of the request
  • name of the requested file
  • referrer URL, that is the previously visited page
  • browser type and browser version
  • operating system used
  • volume of data transferred
  • status code of the request

The purpose of this processing is the provision of the website, the stability of its operation and the security of the systems.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in operating this website reliably and securely.

Processing this data is technically necessary. Without it the website cannot be delivered, and there is no option to object in this respect.

Hosting provider: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. A data processing agreement pursuant to Art. 28 GDPR is in place with this provider.

Retention period for log files: 7 days, after which the log files are deleted automatically.

Server location: Germany (Germany West Central region, Frankfurt am Main).

5. Contacting us

When you submit the contact form on this website, the details you entered are transmitted to our contact endpoint and processed there on our behalf. We process them solely in order to handle your enquiry. To operate that endpoint we use a processor pursuant to Art. 28 GDPR; the details are stated below. To guard against automated submissions, the form evaluates an additional field that is invisible to you as well as the time taken before sending; no cookies are set in the process.

If you write to us by email, we process your details solely in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where the enquiry serves to initiate or perform a contract. For general enquiries the legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in responding to the matters addressed to us.

We store the details for as long as they are needed to handle the enquiry and delete them afterwards, unless statutory retention obligations apply.

Processor operating the contact form: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. A data processing agreement pursuant to Art. 28 GDPR is in place with this provider.

Place of processing: Germany (Germany West Central region, Frankfurt am Main).

The contact endpoint keeps a technical log of its runs which includes the details you entered. It is deleted automatically once the stated period has elapsed.

Retention in the processing log: 7 days; the entries are then deleted automatically.

6. Recipients and transfers to third countries

The only recipients of personal data are processors bound pursuant to Art. 28 GDPR that process the data solely on our instructions: the hosting provider that operates this website on our behalf (details in the section on server log files) and the operator of the contact endpoint that receives the details from the contact form for us (details in the section on contacting us). Data is not passed on to any other third parties.

A transfer of personal data to a third country outside the European Union and the European Economic Area is not intended. The server location stated in the section on server log files is decisive in this respect.

7. Retention period

We store personal data only for as long as it is required for the respective purpose. Once the purpose of the processing ceases to apply, we delete the data. The specific period is stated in the respective section of this policy.

Statutory retention obligations, in particular under commercial and tax law, remain unaffected. For the duration of such an obligation we restrict the processing to storage.

8. Your rights

As a data subject you have the following rights:

  • access to the data processed about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to the processing (Art. 21 GDPR)

We point out the right to object separately: where we process data on the basis of Art. 6(1)(f) GDPR, you may object to that processing on grounds relating to your particular situation (Art. 21 GDPR).

Irrespective of this, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority.

To exercise your rights, a message to the email address stated above is sufficient.

9. Encryption

This website is delivered over a connection encrypted with TLS, indicated by https in the address bar of your browser. Data transferred between your browser and the server is thereby protected against being read by third parties.

10. Web analytics with Matomo

This website uses Matomo, a software for measuring reach. We operate Matomo on our own servers. The data collected does not leave our systems and is not passed on to third parties.

The purpose of this processing is to measure the reach of this website and to improve what we offer. We evaluate which pages are accessed and by which route visitors find their way to us.

The following data is processed:

  • the IP address, shortened by at least 2 bytes
  • the pages accessed and the time spent on them
  • the referrer URL, that is the previously visited page
  • browser type, browser version and the kind of device used
  • date and time of the request

For this purpose Matomo stores two cookies on your device: "_pk_id" to recognise the device, with a lifetime of 13 months, and "_pk_ses" for the current session, with a lifetime of 30 minutes.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Measurement takes place only if you have agreed to the statistics category in the consent banner. You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer of this page; the cookies set by Matomo are deleted when you do so.

Your IP address is shortened by at least 2 bytes before it is stored. It is therefore not possible for us to attribute the data to you. The data is not matched against other sources.

Retention period for the raw data: 180 days; the raw data is then deleted automatically, aggregated reports are retained.

Server location of the analytics: Germany.

11. No further third-party content

Beyond the reach measurement described above we use no analytics or tracking services. When you open these pages, no third-party content is loaded, in particular no maps, videos or social network elements. The fonts used are served from our own server; no connection to external font services is established.

12. Status and changes

Status: September 2026

We update this policy as soon as the website or the processing behind it changes.