Privacy Policy for QuantPi

Date of publication: 11.12.2025

QuantPi GmbH operates this career site and manages employer branding and recruitment processes. It is very important to us to handle the data of our website visitors with confidence and to protect them in the best possible way.

In this privacy policy, we explain how we process your personal data using the clearest and most transparent language possible so that you really understand what happens with your data. If:

You visit our Career Site (you being a “Visitor”)
You connect with us via our Career Site, to create a profile with us and receive information about current or future vacancies with us (you being a “Connecting Candidate”)
You apply for a position with us, via our Career Site or a third party service (you being an ”Applying Candidate”)
We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a “Sourced Candidate”)
We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate”)
We receive information about you from a Candidate, who lists you as their reference (you being a “Reference”).

When we use the term “Candidate” in this privacy policy, we are referring to each of Connecting Candidates; Applying Candidates; Sourced Candidates; and Referred Candidates, unless it’s stated otherwise.

1. Who is responsible?

The data controller responsible for the processing of personal data on this website and in our recruitment processes is:

QuantPi GmbH

Halbergstr. 4

66121 Saarbrücken

Germany

Email: privacy@quantpi.com

Data Protection Officer (DPO)

We have appointed a data protection officer for our company. You can reach him at:

simply Legal GmbH

Mr. Sebastian Schenk

Burkarderstr. 36

97082 Würzburg

Email: dpo@dieter-datenschutz.de

2. About processing of personal data

Personal data is all information that can be directly or indirectly linked to a living, physical person (e.g., name, email, IP address).

Processing means any use of personal data, such as collecting, analyzing, sharing, and deleting it.

We comply with the General Data Protection Regulation (GDPR) as a European regulation, the Federal Data Protection Act (BDSG), and the Telecommunications-Telemedia Data Protection Act (TDDDG) regarding cookies.

3. What happens on the website

When you visit our career site, we process your personal data. In order to protect this data as best as possible against unauthorized access by third parties, we use SSL or TLS encryption. You can recognize this encrypted connection by the fact that https:// or a lock symbol is displayed in the address bar of your browser.

Below, you will find out what data is collected when you visit our website, for what purpose this is done, and on what legal basis.

4. What personal data do we process?

We process different categories of data depending on how you interact with us:

4.1 All Individuals (Visitors)

Device information: IP address, browser type and version, operating system, host name, and device settings.
Technical and statistical data: Referrer URL, time of server request, and session behavior.

This data is temporarily required in order to display our website to you permanently and without problems. In particular, this data serves the following purposes:

System security of the website
System stability of the website
Troubleshooting on the website
Establishing a connection to the website
Website presentation

Cookies: We use cookies to facilitate navigation. Some are technically necessary (to function without errors), while others (for analysis/marketing) are only set with your explicit consent.
The setting of cookies can be prevented by adjusting the settings of your browser. Here you can find the corresponding links to frequently used browsers:

and https://support.apple.com/de-de/guide/safari/sfri11471/mac

If you're using a different browser, it's recommended to search for your browser's name along with 'delete and manage cookies,' then follow the official link to the browser's support page
Alternatively you can also manage your cookie settings under www.aboutads.info/choices/ or www.youronlinechoices.com

However, we must inform you that a comprehensive blocking/deletion of cookies can lead to impairments in the use of the website.

4.2 Candidates

Contact details: Name, email address, telephone number, and postal address.
Application information: CV, cover letter, work samples, education, and references.
Process data: Notes from interviews, assessments, salary requirements, and communication content.
Public profile info: Data collected from public sources like LinkedIn or your current employer’s website.

4.3 Communication Data

Direct contact: When you email, call us, or use our contact form, we process your first and last name, email address, phone number, address, and the content of your message.
Social Logins: If you register via social media (e.g., LinkedIn), we receive your first and last name, email address, and profile picture.

5. Where do we receive your personal data from?

5.1 All Individuals

From the Career Site. If you visit our Career Site, we collect technical and statistical information about how you use the Career Site, and information from your device.
Directly from you. Most of the information we process about you, we receive directly from you, for example when you apply for a position with us or connect with us. You can always choose not to provide us with certain information. However, some personal data is necessary in order for us to process your application or provide you the information you request to get from us.

5.2 References

From the person for whom you are a reference. If a Candidate lists you as their reference, we will collect your contact details from the candidate to be able to contact you.

5.3 Candidates

From public sources. We may collect personal data about you from public sources, such as LinkedIn or the website of your current employer.
From our references. We may receive information about you from our employees or partners (such as recruitment service providers), when they believe your profile is of interest for our current or future vacancies.
From your references. If you provide us with references, we may collect information about you from them.
Data we create ourselves or in cooperation with you. Information about your application and profile is usually created by us, or by us in cooperation with you, during the recruitment process. This may for example include notes from interviews with you, assessments and tests made.

6. For what purposes do we process your personal data?

We process your personal data for the specific purposes listed below. For each purpose, we have identified the categories of individuals affected, the data used, and the specific legal grounds we rely on under the GDPR.

6.1 Technical provision, security, and maintenance To display the website securely, fix errors, ensure stability, and maintain the security of the career site (e.g., backups).
Affected individuals: Visitors.
Categories of personal data: Device information; Technical and statistical data.
Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest in functionality, stability, and security). Note: Audit log files are stored for 14 days unless a security event occurs.

6.2 Recruitment and Application Management To provide our career page, review profiles and applications, communicate with you about your application, and carry out the overall recruitment process.
Affected individuals: Connecting Candidates; Applying Candidates.
Categories of personal data: All categories listed above (Contact details, Application data, Process data, etc.).
Legal Basis: Art. 6(1)(b) GDPR (Pre-contractual measures) and Art. 6(1)(f) GDPR (Legitimate interest in efficient recruitment).

6.3 Sourcing and Talent Acquisition To collect and evaluate professional profiles on our own initiative (e.g., from public sources like LinkedIn) and communicate with you regarding your profile.
Affected individuals: Sourced Candidates; Referred Candidates.
Categories of personal data: All categories listed above.
Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest in finding suitable talent).

6.4 Connecting and Updates To provide you with updates about vacancies with us (e.g., via a talent pool or newsletter) and contact you directly about specific future vacancies.
Affected individuals: Connecting Candidates; Candidates.
Categories of personal data: Contact details; Communications data.
Legal Basis: Art. 6(1)(b) GDPR (Performance of a contract/service) or Art. 6(1)(f) GDPR (Legitimate interest) or Art. 6(1)(a) GDPR (Consent).

6.5 Analysis, Marketing, and Cookies To collect information about your use of the career site using cookies, analyze how the site is performing, and improve our offers.
Affected individuals: Visitors.
Categories of personal data: Device information; Technical and statistical data.
Legal Basis: Art. 6(1)(a) GDPR (Consent).

6.6 Contact Requests To answer your inquiries via email, phone, or contact form.
Affected individuals: All individuals who contact us.
Categories of personal data: Contact details; Communications data.
Legal Basis: Art. 6(1)(b) GDPR (if the request is contract-related) or Art. 6(1)(f) GDPR (Legitimate interest in communication).

6.7 Recording Interviews To record interview(s) with you for review purposes.
Affected individuals: Candidates.
Categories of personal data: Communications data (Audio/Video).
Legal Basis: Art. 6(1)(a) GDPR (Consent).

6.8 Reference Checks To contact references provided by a candidate and evaluate the information provided.
Affected individuals: References.
Categories of personal data: Contact details; Communications data.
Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest in verifying candidate information).

6.9 Surveys To contact you to ask for your participation in recruitment surveys.
Affected individuals: Candidates.
Categories of personal data: All categories listed above.
Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest in improving our processes) or Art. 6(1)(a) GDPR (Consent), depending on the survey type.

6.10 Consent Management To manage and verify consents (via our tool Teamtailor) to fulfill our accountability obligations.
Affected individuals: All users interacting with consent tools.
Categories of personal data: Technical data (Consent status, timestamp).
Legal Basis: Art. 6(1)(c) GDPR (Legal obligation) and Art. 6(1)(f) GDPR.

6.11 Social Media Presence To present our company and analyze reach (e.g., Page Insights) on platforms like LinkedIn.
Affected individuals: Visitors of our social media profiles.
Categories of personal data: Behavioral data, Profile data.
Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest in marketing and reach analysis).

6.12 Legal Defense and Enforcement To protect and enforce our rights, interests, and the interests of others, for example in connection with legal claims.
Affected individuals: The individual(s) affected by the legal issue.
Categories of personal data: All categories listed above.
Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest in legal defense).

6.13 Cloud Backups To protect against data loss and restore systems after incidents.
Affected individuals: All individuals whose data is stored in our systems.
Categories of personal data: All categories listed above.
Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest in business continuity and security).

6.14 Sharing Data To share your personal data with other recipients for the purposes mentioned in Section 7.
Affected individuals: Varies depending on the purpose of the sharing.
Categories of personal data: All categories listed above.
Legal Basis: Varies depending on the primary purpose of the transfer (e.g., Contract, Legal Obligation, or Legitimate Interest).

7. Whom do we share your personal data with?

7.1 Our service providers

We share data with service providers ("Data Processors") who act on our instructions. We have concluded Data Processing Agreements (DPA), where applicable.

Specific Sub-processor and Tools:

Recruitment Platform

Teamtailor: We use Teamtailor AB (Östgötagatan 16, 116 25 Stockholm, Sweden) for our career site, applicant tracking, newsletter and consent management. They process applicant data and may use cookies for authentication. Teamtailor engages sub-processors to process personal data on behalf of its customers in the EU region. Here you can find the list of these sub-processors.

Hosting and Backups

External Hosting: Our website www.quantpi.com is hosted externally to ensure security and fast performance. Please refer to the privacy policy for more details.
Teamtailor: Please refer to the link

Social Media Integrations

Facebook: Integrated via Meta Platforms Ireland Limited (Dublin, Ireland). Joint responsibility applies for Page Insights.
Twitter: Integrated via Twitter International Company (Dublin, Ireland).
LinkedIn: Integrated via LinkedIn Ireland Unlimited Company (Dublin, Ireland) for profile interaction, Page Insights, LinkedIn Ads, and Social Login.

Fonts

Google Fonts & Adobe Fonts (Font Awesome): These are integrated locally on Teamtailor AB server. Despite the use, no data is transmitted to Google or Adobe for this purpose.

7.2 Cookies

Companies providing cookies on the Career Site. If you consent to it, cookies are set by other companies than us, who will use the data collected by these cookies in accordance with their own privacy policy. You can find information about which cookies this applies to in our Cookie Policy.

7.3 To authorities and other public actors

If we are ordered to do so, we will share your personal data with authorities and other public actors when we have a legal obligation to do so.

7.4 To parties involved in legal proceedings

If needed to protect or defend our rights, we share your personal data with public authorities or with other parties involved in a potential or existing legal proceeding. This can for example be in case of discrimination claims.

7.5 Mergers and acquisitions etc.

In connection with a potential merger, sale of company assets, financing, or acquisition of all or part of our business to another company, we may share your personal data to other parties involved in the process.

8. International Transfers

We strive to process your data within the EU/EEA. However, some service providers (e.g., Teamtailor subcontractors, Google/YouTube, LinkedIn, Meta) may transfer data to third countries like the USA.

We ensure protection through:

Adequacy Decisions: We rely on frameworks like the EU-US Data Privacy Framework (e.g. Google LLC is certified)
Data Processing Agreements (DPA) / Standard Contractual Clauses (SCCs): We use DPAs or SCCs to guarantee GDPR-level protection

9. For how long do we keep your personal data?

All individuals

If we process your personal data for the purpose of being able to protect and enforce our rights, we will keep your personal data until the relevant legal issue has been fully and finally resolved.

Visitors

We keep your personal data for one (1) year for security purposes. The retention periods for cookies are set out in the Cookie Policy. We keep your personal data to analyse the performance of the Career Site for as long as we keep personal data about you for other purposes.

Candidates

If you are a Connecting Candidate (only), we keep your personal data for as long as you remain connected with us.

For other types of Candidates, we keep your personal data to decide if you are a suitable candidate for the relevant vacancy(ies) with us.

If you don’t succeed in the initial recruitment process, we keep your personal data for as long as needed to consider, and potentially contact you, for relevant future job openings.

If you are hired, we will keep your personal data during your employment, for other purposes than those stated above, which you will be informed of.

References

We keep your personal data for as long as we keep the personal data of the Candidate for whom you acted as a reference.

10. What rights do you have?

Under the GDPR, you have the following rights regarding your data:

Right to Information (Art. 15): Request confirmation and details about your processed data.
Right to Rectification (Art. 16): Correct inaccurate or incomplete data.
Right to Erasure / “Right to be Forgotten” (Art. 17): Request removal of data if purposes cease or consent is revoked.
Right to Restriction (Art. 18): Limit processing under certain conditions.
Right to Data Portability (Art. 20): Receive your data in a machine-readable format.
Right to Object (Art. 21): Object to processing based on legitimate interest or for direct marketing.
Right to Withdraw Consent (Art. 7(3)): Revoke any given consent at any time (e.g., for cookies or tracking) with effect for the future.
Automated Decision Making (Art. 22): Right not to be subject to decisions based solely on automated processing.

How to exercise your rights

You can manage consents via our Cookie Consent Tool or contact us directly at:

Email: konrad.cmok@quantpi.com
Complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) if you believe processing infringes the regulation

11. Updates to this Privacy Policy

We reserve the right to amend this policy to reflect legal or actual changes. The current status is 11.12.2025. We recommend reading this policy regularly.