Privacy policy

The use of the website primelegal.de of QNC GmbH is generally possible without providing personal data.

Below, we would like to inform you about the type, scope, and purpose of the personal data we collect, use, and process. Furthermore, this privacy policy informs data subjects about their rights.

1. Definitions
The terms used in this privacy policy correspond to those employed in the General Data Protection Regulation (Art. 4 GDPR).

2. Name and Address of the Controller
PRIME LEGAL AI c/o QNC GmbH
Schwarzer Bär 4
30449 Hannover
Telephone: +49 511 / 123 567 30
Telefax: +49 511 / 123 567 39
Email: info@primelegal.ai

VAT ID No.: DE221245810

Registered in the Commercial Register:
Register No.: HRB 60046
Court: Local Court of Hannover
Managing Directors: Michael Friedmann, Yoshiya Markus Maki, Ilona Veth, Dr. Stefan Morschheuser

Data Protection Officer:
Notix Datenschutz GmbH
RA Nicolas Reiser
Schwarzer Bär 4
30449 Hannover
Email: datenschutz@qnc.de

3. Cookies
The websites of QNC GmbH use cookies. Cookies are text files that are stored on your device via an internet browser.

Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.

The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR (legitimate interests of the controller).

The use of cookies simplifies the use of websites for the user. Certain pages cannot be accessed or cannot be accessed correctly without their use.

These reasons also constitute the legitimate interest for this data processing pursuant to Art. 6 para. 1 lit. f GDPR (the use of cookies for analytical purposes is addressed elsewhere).

Common browsers offer the option to disallow cookies. You can configure your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies, or activate the automatic deletion of cookies when closing the browser.

Note: It cannot be guaranteed that you will be able to access all functions of this website without restrictions if you make the corresponding settings.

4. Collection of Data and Information upon Accessing this Website (Logfiles)
The website of QNC GmbH collects certain general data and information with each access. This data is stored in the log files of our server. The following may be collected:

  • the browser types and versions used
  • the operating system used by the accessing system
  • the date and time of access
  • the IP address of the requesting computer

When using this general data and information, QNC GmbH does not draw any conclusions about the data subject.

The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR (legitimate interests of the controller).

This information is required to:

  • correctly display the contents of the website
  • optimize the contents of the website as well as advertising for it
  • ensure the long-term functionality of the IT systems and the technology of the website
  • provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack or other criminal offenses

These reasons also constitute the legitimate interest for this data processing pursuant to Art. 6 para. 1 lit. f GDPR. Another legal basis for this data processing is Art. 6 para. 1 lit. e GDPR (public interest).

The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

5. Contact Options via the Website
For easy contact, we provide a contact form and an e-mail address on this site. If a data subject contacts us by e-mail or via the contact form, the following data must be provided in the input form and will be automatically stored after submission:

e-mail address, first and last name, text message of the e-mail.

The legal basis for the processing of the data transmitted in the course of using the contact form or sending an e-mail is Art. 6 para. 1 lit. f GDPR (legitimate interest) and Art. 6 para. 1 lit. a GDPR (consent).

If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The processing of personal data from the input mask serves solely to process the contact request by the data subject.

During the submission process, the following data of the data subject are automatically stored:

  • IP address
  • date and time of registration

This data serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR (legitimate interests of the controller). Another legal basis for this data processing is Art. 6 para. 1 lit. e GDPR (public interest).

For some contact forms on specific topics, we use the service Typeform of Typeform S.L., Carrer Bac de Roda, 163, 08018 Barcelona. The data entered is stored with this service and forwarded to us or made accessible to us. Typeform does not use this data for its own purposes.

The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR (legitimate interests of the controller). We have a legitimate interest in the targeted and individually topic- and question-specific presentation of contact forms and the ability to adapt them quickly and cost-effectively ourselves.

There is no disclosure of this personal data to third parties.

6. Newsletter
QNC GmbH regularly sends out newsletters via anwalt.de services AG as part of its order processing. anwalt.de services AG uses Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin) services for the newsletter distribution as subcontractor. Brevo can be used to organize and analyze the sending of emails. The double opt-in procedure is used to subscribe to the newsletter. This means that after subscribing to the newsletter, you must additionally confirm your subscription. You will receive a confirmation email containing a link. Only then will you receive the newsletter. We process your email address and name for the purpose of sending the newsletter and, in addition, your IP address to verify your consent and to investigate and prevent any possible misuse of your personal data. When you open an email sent via Brevo, a file contained in the email (known as a tracking pixel) connects to Brevo's servers. This allows us to determine whether the email has been opened. The links contained in the email make it possible to track when and how often they were clicked. You can object to this at any time by clicking on the unsubscribe link provided in each email and unsubscribing from the newsletter. Further information on the processing of data by Brevo can be found here: https://www.brevo.com/legal/privacypolicy/

The legal basis for processing is Art. 6 para. 1 lit. a GDPR for processing based on consent, Art. 6 para. 1 lit. c for the fulfillment of associated legal obligations, and Art. 6 para. 1 lit. f GDPR due to legitimate interests in the intended use of the offer for direct marketing and protection against misuse.

If you no longer wish to receive the newsletter, you can unsubscribe at any time by clicking on the unsubscribe link contained therein and thus revoke your consent. You can also revoke your consent at any time via the contact information under https://www.anwalt.de/impressum or https://www.primelegal.ai/en/impressum. To do so, please enable us to identify you as a newsletter subscriber by providing the email address you used when registering for the newsletter.

Your data collected in this context will be stored for up to four years after unsubscribing due to the legitimate interest in asserting, exercising, and defending legal claims in accordance with Art. 6 para. 1 lit. f GDPR and due to a legal obligation in accordance with Art. 6 para. 1 lit. c GDPR in conjunction with Art. 7 para. 1 GDPR.

7. Routine Deletion and Blocking of Personal Data
The personal data of the data subject will only be stored for the period necessary to achieve the storage purpose or as long as storage is required by law.

If the storage purpose ceases to apply or a legally prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

8. Rights of the Data Subject
a) Right to Confirmation
Every data subject has the right to obtain confirmation as to whether personal data concerning them is being processed.

b) Right of Access (Art. 15 GDPR)
Every data subject has the right to obtain free information about the personal data stored about them and a copy of this information.

c) Right to Rectification (Art. 16 GDPR)
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.

d) Right to Erasure (Right to be Forgotten) (Art. 17 GDPR)
Every data subject has the right to request the immediate erasure of personal data concerning them, provided that one of the statutory grounds applies and insofar as the processing is not required.

e) Right to Restriction of Processing (Art. 18 GDPR)
Every data subject has the right to request the restriction of processing, provided that one of the statutory grounds applies.

f) Right to Data Portability (Art. 20 GDPR)
Every data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format and to transmit those data to another controller without hindrance, provided that the processing is based on consent pursuant to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or on a contract pursuant to Art. 6 para. 1 letter b GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, in exercising their right to data portability pursuant to Art. 20 para. 1 GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

g) Right to Withdraw Consent under Data Protection Law (Art. 13 GDPR)
Every data subject has the right to withdraw consent to the processing of personal data at any time if the processing is based on Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a, without affecting the lawfulness of processing based on consent before its withdrawal.

h) Right to Object (Art. 21 GDPR)
Every data subject has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them which is based on Art. 6 para. 1 letters e or f GDPR. This also applies to profiling based on these provisions.Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning them for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

9. Right to Lodge a Complaint with the Competent Supervisory Authority
n the event of data protection violations, the data subject has the right to lodge a complaint with the competent supervisory authority. This is the data protection officer of the federal state in which our company is based. A list of data protection officers can be found here:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.