Controller and scope
The controller responsible for the processing of personal data described in this Privacy Notice is:
Controller Georgy Evgrafov
trading as Quality Associates
Französische Allee 78
14974 Ludwigsfelde
Germany
Email: privacy@qualityassociates.net
This notice applies only to this website and initial business or privacy inquiries sent to us. It does not describe personal information handled during a client engagement. Any engagement-specific processing will be addressed by the relevant agreement, instructions, or privacy information, as applicable.
Information we handle
The information we handle depends on how you interact with us:
- Website and device information: internet protocol (IP) address, request date and time, pages or files requested, response and security information, browser or device type, user-agent information, and the referring page where supplied by your browser.
- Analytics information, if you consent: pages viewed, page title and address, referring source, visit and engagement times, interaction events, approximate location derived from your IP address, browser, operating system, device category, screen information, and pseudonymous client and session identifiers.
- Inquiry, scheduling, and communication information: your name, business contact details, organization and role, meeting details you provide through Microsoft Bookings, the contents of your message and attachments, and our related correspondence.
We receive this information directly from you, through Microsoft Bookings when you choose to schedule a consultation, automatically from your browser through our hosting provider and, if you accept analytics, through Google Analytics, or from a colleague who includes you in an inquiry.
Providing information in an inquiry is voluntary, but we may be unable to respond or assess your request without enough contact and contextual information.
Please keep initial inquiries proportionate
Do not send patient or clinical data, passwords, special-category or highly sensitive personal information, regulated records, or confidential client material in an initial email. We will agree an appropriate secure channel first if that information is genuinely needed.
Why we use information and our legal bases
Where European or UK data protection law applies, we rely on the legal bases described below. Equivalent grounds may apply elsewhere.
Deliver and protect the website
We use technical information to serve pages, maintain availability, prevent abuse, investigate faults, and protect the website and its visitors.
Legal basis: our legitimate interests in operating a reliable and secure business website and, where relevant, compliance with legal obligations.
Respond to inquiries
We use communication information to answer you, understand your organization’s needs, assess whether we can help, and arrange follow-up discussions.
Legal basis: steps taken at your request before entering a contract where you are personally a party, where applicable, and our legitimate interests in communicating with prospective clients and other business contacts.
Understand website use
If you accept analytics, we use Google Analytics to understand visits, popular content, traffic sources, and how visitors engage with the site so we can evaluate and improve it.
Legal basis: your consent. Refusing or withdrawing consent does not affect your access to the website.
Meet obligations and protect legal interests
We may use relevant records to respond to lawful requests, prevent or investigate misuse, and establish, exercise, or defend legal claims.
Legal basis: compliance with legal obligations and our legitimate interests in protecting our business and legal rights.
Except for optional Google Analytics and any other use for which we expressly request consent, we do not rely on consent for the activities described above. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
How long we keep information
We keep personal information only while its purpose and applicable legal requirements continue to apply:
- Website and security information is retained under Cloudflare’s service settings and terms for the period needed to deliver and protect the website, diagnose a problem, or investigate an incident. The static site source does not create a separate visitor database.
- Google Analytics information is retained according to the settings in our Analytics property only while it remains useful for understanding website trends, then deleted or aggregated. Google notes that its user-level and event-level retention control does not apply to standard aggregated reports. Analytics cookies may remain for up to two years unless you withdraw consent or delete them sooner.
- Your analytics choice is stored in your browser’s local storage for up to six months so the website can respect it. It is then removed and you will be asked again.
- Inquiry records are kept while we respond and complete reasonable follow-up, then only while needed to document the exchange, meet a legal obligation, or address a possible legal claim.
- Privacy-request records are kept for the period needed to complete the request and demonstrate how it was handled.
Your privacy rights
Depending on where you live, the law that applies, and the legal basis for processing, you may have the right to:
- ask whether we process your personal information and receive a copy;
- correct inaccurate or incomplete information;
- ask us to delete information or restrict how it is used;
- object to particular uses of your information;
- receive information you provided in a portable format;
- withdraw consent where processing is based on consent; and
- complain to, or seek review by, the privacy or data-protection authority in your jurisdiction.
Your right to object
Where we rely on legitimate interests, you may object at any time on grounds relating to your particular situation. We will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed for legal claims.
Where EU GDPR applies to our processing, you may complain to the supervisory authority where you live or work, or where an alleged infringement occurred. The European Data Protection Board lists EEA authorities. Where UK GDPR applies, you may complain to the Information Commissioner’s Office.
To exercise a right, email privacy@qualityassociates.net. We may ask for information reasonably needed to verify your identity and authority. Rights are not absolute, and lawful exemptions may apply. We will explain our decision and any available appeal route if we cannot fulfill a request.
Security and children
This site is configured as a statically generated website for delivery through Cloudflare. It uses response headers that restrict content-type interpretation, framing, referrer information, and access to selected browser features. No internet transmission or storage system is completely secure, so please use care when deciding what to send by email.
This business website is intended for professionals and is not directed to children. We do not knowingly solicit personal information from children. If you believe a child has sent personal information to us, contact us so we can review and delete it where appropriate.
Changes and contact
We may update this notice when our services, technology, or legal obligations change. We will post the revised notice on this page and update the date above. Where required, we will also provide prominent or direct notice before a change materially affects how we use information already collected.
For questions, rights requests, or concerns about this notice or our handling of personal information, contact:
Quality Associates · Privacy privacy@qualityassociates.net