Privacy Policy

Effective Date: November 1, 2025

Last Updated: November 15, 2025

At Quorum Index, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and handle your personal information when you visit our website or use our services. We are committed to transparency and compliance with the General Data Protection Regulation (GDPR) and German data protection laws.

Data Controller

Quorum Index

Königsallee 27

40212 Düsseldorf, Germany

Phone: +49 211 8476 3952

Email: [email protected]

What Personal Data We Collect

Information You Provide Directly

When you contact us through forms or communicate with us, we may collect:

  • Contact Information: Name, email address, phone number
  • Communication Content: Messages, inquiries, and any information you choose to share
  • Service Information: Details about your financial situation if you become a client (handled separately under service agreements)

Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

  • Device Information: Browser type, operating system, device identifiers
  • Usage Data: Pages visited, time spent, links clicked, referring URLs
  • Location Data: General geographic location based on IP address
  • Cookies: Small data files stored on your device (see our Cookie Policy for details)

Legal Basis for Processing

We process your personal data based on:

  • Consent: When you provide explicit consent (e.g., cookie preferences, contact forms)
  • Contract Performance: To provide services you've requested
  • Legitimate Interests: To improve our website, prevent fraud, and communicate about our services
  • Legal Obligations: To comply with applicable laws and regulations

How We Use Your Personal Data

We use the information we collect for the following purposes:

Service Delivery and Communication

  • Respond to your inquiries and provide customer support
  • Schedule consultations and deliver financial analysis services
  • Send service-related communications and updates

Website Improvement and Analytics

  • Analyze website usage patterns to improve user experience
  • Understand which content and services are most valuable to visitors
  • Identify and fix technical issues

Marketing and Communications

  • Send information about our services (only with your consent)
  • Provide educational content related to financial analysis
  • You may opt out of marketing communications at any time

Legal Compliance and Protection

  • Comply with legal obligations and regulatory requirements
  • Protect against fraud, security threats, and legal liability
  • Enforce our terms of service and other agreements

Data Sharing and Third Parties

We do not sell your personal data. We may share your information with third parties only in the following limited circumstances:

Service Providers

We work with trusted service providers who help us operate our website and deliver our services (e.g., hosting providers, analytics services, email platforms). These providers only access data necessary for their specific functions and are contractually required to protect your information.

Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

How We Protect Your Data

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption: Data transmitted over the internet is encrypted using secure SSL/TLS protocols
  • Access Controls: Limited access to personal data, restricted to authorized personnel only
  • Secure Storage: Data stored on secure servers with regular backups and monitoring
  • Regular Security Reviews: Ongoing assessment and updates to security practices
  • Breach Notification: If a data breach occurs, we will notify affected individuals and relevant authorities as required by law

While we take reasonable measures to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but remain committed to protecting your information.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Contact Inquiries: Retained for up to 2 years after last communication
  • Client Records: Retained as required by German financial services regulations (typically 10 years)
  • Website Analytics: Anonymized after 26 months in accordance with data protection guidelines
  • Marketing Data: Until you withdraw consent or request deletion

Your Rights Under GDPR

Under European data protection law, you have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you, including information about how we process it.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances (e.g., when it's no longer needed or if you withdraw consent).

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations.

Right to Data Portability

You can request a copy of your data in a structured, commonly used format to transfer to another service provider.

Right to Object

You can object to processing based on legitimate interests, direct marketing, or processing for research purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to file a complaint with your local data protection authority if you believe we've mishandled your data.

To exercise any of these rights, please contact us using the information provided at the top of this page. We will respond to your request within one month.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

  • Avoid filling out contact forms, account registrations, or any data-submitting features
  • Disable cookies through your browser settings (see our Cookie Policy for more details)
  • Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by the European Commission
  • Transfer to countries with adequacy decisions
  • Other legally recognized transfer mechanisms

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a new "Last Updated" date. For significant changes, we may provide additional notice through email or a prominent website announcement. We encourage you to review this policy periodically.

Questions or Concerns?

If you have questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: [email protected]

Phone: +49 211 8476 3952

Mail: Quorum Index, Königsallee 27, 40212 Düsseldorf, Germany