Privacy Policy


  1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

qurebit GmbH
Katernbergerstraße 107
45327 Essen
Germany
Email: contact@bahar.business

⸻

  1. General Information on Data Processing

We process personal data only insofar as this is necessary to provide a functional website and our content and services. Processing of personal data is carried out regularly only with the consent of the data subject or where permitted by statutory regulations.

⸻

  1. Legal Bases for Processing

Personal data is processed on the following legal bases:
• Art. 6(1)(a) GDPR – Consent of the data subject
• Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
• Art. 6(1)(f) GDPR – Legitimate interests (e.g. secure and efficient website operation)

⸻

  1. Website Access and Log Data

When you visit our website, our hosting provider may automatically collect information transmitted by your browser. This may include:
• Browser type and version
• Operating system
• Referrer URL
• Date and time of access

This data is technically necessary to ensure website stability and security.
Legal basis: Art. 6(1)(f) GDPR.

⸻

  1. Web Analytics (Umami)

We use Umami Analytics, a privacy-friendly web analytics service.

Umami:
• Does not use cookies
• Does not collect personally identifiable information
• Uses anonymized data only

Processed information may include:
• Visited pages
• Referrer URL
• Browser and device type
• Approximate location (country/region level)

The data is used exclusively to analyze website usage and improve our website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website optimization).

⸻

  1. Contact via Email

If you contact us by email, the personal data transmitted (e.g. name, email address, message content) will be processed exclusively for the purpose of handling your request.

Your data will be:
• Stored for a maximum of 365 days, or
• Deleted earlier upon written request, unless statutory retention obligations apply.

Legal basis:
• Art. 6(1)(b) GDPR (pre-contractual communication), or
• Art. 6(1)(f) GDPR (legitimate interest in communication).

⸻

  1. Data Recipients

Personal data will not be disclosed to third parties unless:
• Required by law, or
• Necessary to fulfill legal obligations.

⸻

  1. Data Retention

Personal data is deleted as soon as the purpose of processing no longer applies or statutory retention periods expire.

⸻

  1. Rights of the Data Subject

You have the right to:
• Access your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (“right to be forgotten”) (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact:
contact@bahar.business

⸻

  1. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

⸻

  1. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to comply with legal requirements or changes to our services. The current version is always available on our website.