Privacy policy
This English version is provided for convenience. The German version is legally binding.
Last updated: October 2026. Here you can find out which personal data we process when you visit qabl.de and when you send us a request, for what purpose and on what legal basis.
1. Controller
Qabl GmbH, Hohenkreuzstr. 6, 78655 Dunningen-Seedorf, Germany
Represented by the managing directors Steffen Engeser and Fabian Detemple
Phone: +49 7402 9201 222 · Email: mail@qabl.de
2. Hosting and server logs
The website is operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When a page is accessed, Cloudflare processes technically necessary data: IP address, date and time, requested address, referring page, browser and operating system. This serves to deliver the page, ensure stability and fend off attacks. Logs are stored only briefly and then deleted.
The legal basis is our legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
Protection against misuse (Cloudflare Turnstile): When you submit a form, chat with Qai or upload a photo in the Connector Finder, Cloudflare Turnstile checks whether the request comes from a human. For this, the page loads a script from Cloudflare at that moment, which evaluates technical characteristics of your browser and your IP address; usually this happens invisibly, only rarely does a short check appear. Turnstile does not set advertising cookies and does not create profiles. The legal basis is our legitimate interest in protecting forms and services against automated misuse (Art. 6(1)(f) GDPR); access to your browser is strictly necessary for this (Section 25(2) No. 2 TDDDG).
3. Request form, email and phone
When you contact us via the form, by email or by phone, we process the information you provide: name, company, email address, phone number, the selected type of request, project details such as system type, output, quantities and date, as well as your message. Mandatory fields are marked as such.
We use the data to answer your request, prepare a quote and initiate or perform a contract (Art. 6(1)(b) GDPR). For general enquiries, the legal basis is our legitimate interest in answering them (Art. 6(1)(f) GDPR). You can withdraw the consent given in the form at any time with effect for the future; a message to mail@qabl.de is sufficient.
CRM: Requests from the form are automatically transferred to our customer relationship management system Pipedrive. The provider is Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia. A data processing agreement is in place with Pipedrive.
Email: Our mailboxes run on Google Workspace provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A data processing agreement is in place with Google. A transfer to Google LLC in the USA is possible; Google is certified under the EU-US Data Privacy Framework.
Accounting: If a contract is concluded, we prepare quotes, invoices and receipts with sevdesk, provided by sevdesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany, as processor.
Technical drawing from the configurator: If you request the approval drawing in the configurator, we store your name, email address, company (if provided) and your configuration as an enquiry in Pipedrive and send you a personal link to the drawing by email. If you open the link, we note this in your enquiry. Our team will then contact you about your configuration; you can object to this at any time without giving reasons. We send the email via our Google Workspace mailbox (see Email above). The legal basis is the initiation of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in following up on configuration enquiries (Art. 6(1)(f) GDPR).
Storage period: We delete requests that do not lead to a contract no later than two years after the last contact. We retain contract and invoice documents for as long as required by commercial and tax law (up to ten years, Section 147 AO, Section 257 HGB).
4. AI support in processing
The AI assistant Claude by Anthropic helps us process requests. Claude reads requests in our CRM, suggests a classification and prepares replies and quotes as drafts. Every reply and every quote is reviewed and sent by a member of staff. There is no automated decision-making within the meaning of Art. 22 GDPR. Anthropic does not use the data from our business account to train its models.
The legal basis is the initiation of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in fast processing (Art. 6(1)(f) GDPR). Confirm contracting party at Anthropic, data processing agreement and third-country transfer
5. Chat with Qai, the AI assistant
On qabl.de you can ask questions to Qai, our AI assistant. Qai is an AI, not a person; we point this out in the chat. Your messages and the conversation history so far are transmitted via our server at Cloudflare to Anthropic PBC, 548 Market Street, San Francisco, CA 94104, USA, and processed there by the AI model Claude to generate a reply. Please do not enter any sensitive data in the chat.
Your browser stores the conversation history only for the current session (session storage); it is deleted when you close the window. We do not store chat histories permanently. Anthropic does not use data from use via the API to train its models and stores it only for a limited time to detect misuse.
If you would like a quote, Qai asks for your consent and only then passes your name, email, company and phone if applicable, and your request on to our CRM Pipedrive (see section 3). Replies from Qai are non-binding; binding quotes are prepared by our team.
Connector Finder: If you upload a photo in the Connector Finder, it is scaled down in your browser and also transmitted to Anthropic to identify the connector type. We do not store the photo. Please only upload photos of the connector, without people.
The legal basis is the initiation of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering questions quickly (Art. 6(1)(f) GDPR). For the transfer to the USA, we rely on the EU Standard Contractual Clauses (Art. 46 GDPR) Conclude a data processing agreement with Anthropic and confirm the transfer basis
6. Cookie-free audience measurement
We want to know which content on qabl.de is used, and for this we use two services from our host Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Neither sets cookies, stores anything on your device or creates user profiles.
Cloudflare Web Analytics counts page views, referring pages, device type, browser and country. For this, the page loads a small script from static.cloudflareinsights.com. Your IP address is processed only for transmission and is not stored.
Event counting: When you click “Request a quote” or “Enquire”, download a datasheet, or fill in or submit the request form, we count this. Only the type of event, the page, the target (for example an article number or a file name) and the country are stored. Neither your IP address nor any identifier that could be used to recognize you is stored. The data is deleted after 90 days at the latest.
The legal basis is our legitimate interest in designing our offering to meet demand (Art. 6(1)(f) GDPR). As nothing is stored on or read from your device, no consent under Section 25 TDDDG is required. Cloudflare is certified under the EU-US Data Privacy Framework.
7. Identification of company visits (SalesViewer)
We use SalesViewer from SalesViewer GmbH, Huestraße 30, 44787 Bochum, Germany. Based on the IP address, SalesViewer identifies which company a visit comes from and transfers only company data to our CRM. IP addresses are encrypted before storage; visits by individual persons are not analyzed. The legal basis is our legitimate interest in approaching business customers (Art. 6(1)(f) GDPR). You can object at any time; a message to mail@qabl.de is sufficient.
8. Fonts, images and links
We deliver fonts and graphics from our own server; no third-party fonts are loaded. During the set-up phase, some sample images are loaded from Pexels (Pexels GmbH, Berlin); in the process, your IP address is transmitted to Pexels. Delete this section once the sample images have been replaced with our own photos
The link to LinkedIn is a simple link. Data is only transmitted to LinkedIn once you click it.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent (Art. 7(3)). A message to mail@qabl.de is sufficient.
Right to object: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object to this at any time on grounds relating to your particular situation (Art. 21 GDPR).
Complaints: You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart.