Privacy Policy

How we collect, use, and protect your personal information.

RockQ Technologies GmbH ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

This policy is compliant with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

RockQ Technologies GmbH
Schelmenwasenstraße 32
70567 Stuttgart, Germany
Email: stefan.hoehenberger@rockq.com
Phone: +49 1517 2055287

2. Information We Collect

2.1 Personal Data You Provide

We may collect personal information that you voluntarily provide to us when you:

  • Register for an account or use our services
  • Subscribe to our newsletter or marketing communications
  • Contact us via email, phone, or contact forms
  • Request a demo or consultation
  • Attend our events or webinars

This may include: name, email address, phone number, company name, job title, and any other information you choose to provide.

2.2 Automatically Collected Data

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

  • IP address (anonymized)
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on pages
  • Referring website
  • Date and time of access

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and maintain our services: Processing your registration, managing your account, and delivering our platform
  • To communicate with you: Responding to inquiries, sending service updates, and providing customer support
  • To send marketing communications: Newsletters, product updates, and promotional materials (with your consent)
  • To improve our website and services: Analyzing usage patterns and user behavior to enhance user experience
  • To comply with legal obligations: Meeting regulatory requirements and protecting our legal rights
  • To detect and prevent fraud: Monitoring for security threats and unauthorized access

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent: When you have given explicit consent (e.g., newsletter subscriptions)
  • Contract: When processing is necessary to fulfill our contractual obligations to you
  • Legitimate interests: When we have a legitimate business interest (e.g., improving our services, security)
  • Legal obligation: When we must comply with legal or regulatory requirements

5. Third-Party Services

We use trusted third-party services to help us operate our website and deliver our services:

Google Tag Manager & Analytics

We use Google Tag Manager to manage tracking scripts and Google Analytics to understand website traffic and user behavior.

Data shared: Anonymized IP address, browser information, pages visited, interaction data

Privacy Policy: Google Privacy Policy

Mailchimp

We use Mailchimp to manage our email marketing campaigns and newsletters.

Data shared: Email address, name, subscription preferences, email engagement metrics

Your control: You can unsubscribe at any time using the link in our emails

Privacy Policy: Mailchimp Privacy Policy

These third parties have their own privacy policies and we have no control over how they use your information. We recommend reviewing their privacy policies.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Account data: For the duration of your account plus 3 years for legal and accounting purposes
  • Marketing data: Until you withdraw consent or unsubscribe
  • Website analytics: Up to 26 months (Google Analytics default)
  • Legal documents: As required by applicable law (typically 10 years in Germany)

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (SSL/TLS)
  • Secure server infrastructure
  • Access controls and authentication
  • Regular security assessments
  • Employee training on data protection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

Some of our third-party service providers (e.g., Google, Mailchimp) may process data outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other legally recognized transfer mechanisms under GDPR

9. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

  • Right of access: You can request a copy of the personal data we hold about you
  • Right to rectification: You can request correction of inaccurate or incomplete data
  • Right to erasure ("right to be forgotten"): You can request deletion of your personal data under certain conditions
  • Right to restriction of processing: You can request that we limit how we use your data
  • Right to data portability: You can request your data in a structured, machine-readable format
  • Right to object: You can object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent: You can withdraw consent at any time where processing is based on consent
  • Right to lodge a complaint: You can file a complaint with your local data protection authority

To exercise any of these rights, please contact us at stefan.hoehenberger@rockq.com. We will respond to your request within one month.

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

RockQ Technologies GmbH
Schelmenwasenstraße 32
70567 Stuttgart, Germany
Email: stefan.hoehenberger@rockq.com
Phone: +49 1517 2055287

Last Updated: December 21, 2025

Privacy Policy | RockQ Technologies