Q
QualiStocks

Privacy Policy

Last updated: September 26, 2026

1. Data Controller

The party responsible for data processing on this website is:

Lukas Abel
Wendenschloßstr. 207c
12557 Berlin
Germany
Email: [email protected]

2. General Information on Data Processing

We only process our users' personal data to the extent necessary to provide a functioning website along with our content and services. Processing generally takes place only with the consent of the user or on the basis of a legitimate interest (Art. 6(1)(a) or (f) GDPR). Where consent is obtained for a given processing operation, Art. 6(1)(a) GDPR is the legal basis. Personal data is deleted as soon as its purpose no longer applies and no statutory retention obligations prevent deletion.

3. Hosting (Cloudflare)

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA; within the EU, via European data centers on the Cloudflare network). When you access the website, Cloudflare automatically collects technical access data (including IP address, date and time of access, page requested, and browser used) in so-called server log files. This processing serves to ensure secure and stable operation of the website (Art. 6(1)(f) GDPR, legitimate interest). Cloudflare may in some cases also process this data outside the EU/EEA; the EU Standard Contractual Clauses are used as a safeguard. Details: cloudflare.com/trust-hub/gdpr.

4. Waitlist & Newsletter (beehiiv)

If you sign up for the waitlist using the form on this page, we process the email address you provide in order to inform you about the launch of QualiStocks, an early-registrant offer, and the free "QualiStocks Radar" newsletter. The legal basis is your consent, given by actively checking the checkbox and submitting the form (Art. 6(1)(a) GDPR). Sign-up uses a double opt-in process: after submitting the form you receive a confirmation email and are only actually added to the list once you click the link it contains; we additionally store the time of sign-up and confirmation, as well as the IP address used at sign-up, as evidence of consent. You may withdraw your consent at any time with future effect, for example via the unsubscribe link in any email or by writing to the address given above.

For technical processing and delivery we use the service beehiiv (operated by beehiiv Inc., 228 Park Ave S, PMB 57944, New York, NY 10003, USA), which acts as a processor on our behalf. We have a data processing agreement with beehiiv based on the EU Standard Contractual Clauses (Module 2) covering the related transfer of data to the USA. beehiiv evaluates, among other things, open and click rates in order to improve delivery, and may rely on further sub-processors in doing so; beehiiv publishes a current list of these sub-processors at subprocessors.beehiiv.com/sub-processor-list. Your data is stored at beehiiv for as long as you remain subscribed to the waitlist or newsletter, and is removed after unsubscribing in line with beehiiv's applicable deletion periods. Further information: beehiiv.com/privacy.

5. Embedded Resources

Fonts ("JetBrains Mono", "Plus Jakarta Sans"), layout (CSS) and icons are served entirely from our own server. No data is transmitted to third parties (e.g. Google, Tailwind or unpkg) for this on a plain page visit.

The homepage embeds the beehiiv sign-up form (subscribe-forms.beehiiv.com). For technical reasons, loading the homepage transmits your IP address to beehiiv, even if you do not fill in the form. The legal basis is our legitimate interest in a working newsletter sign-up (Art. 6(1)(f) GDPR). For beehiiv, see section 4.

6. Audience Measurement and Protection Against Automated Access (Cloudflare)

We use Cloudflare Web Analytics to measure the number of page views, the pages visited and the referring website. For this, the page loads a script from Cloudflare (static.cloudflareinsights.com). It sets no cookies, stores nothing on your device and does not build user profiles; evaluation is aggregated only. In addition, Cloudflare uses a bot-detection script to protect the website against bots and attacks. Both processing activities are based on our legitimate interest in secure operation and in measuring reach (Art. 6(1)(f) GDPR). For Cloudflare, see section 3.

7. Cookies

This website itself does not set any cookies of its own. To protect against automated access, Cloudflare may set a technically necessary cookie ("__cf_bm", lifetime 30 minutes). When you submit the beehiiv form, the information in section 4 applies.

8. Your Rights

You have the right at any time to request information about the personal data we hold about you, its origin and recipients, and the purpose of processing (Art. 15 GDPR). You also have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to object to processing (Art. 21 GDPR). You may withdraw any consent you have given at any time with future effect (Art. 7(3) GDPR). Please contact the address given above for any of these requests.

9. Right to Lodge a Complaint with a Supervisory Authority

You also have the right to lodge a complaint with the competent data protection supervisory authority:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61, 10555 Berlin, Germany
datenschutz-berlin.de

10. Changes to this Privacy Policy

We will update this privacy policy whenever data processing on this website changes, for example when new features are introduced or the services we use change. The version published on this page at any given time applies.