Privacy policy

Quaestus Capital and Risk GmbH, Einsteinstraße 174, 81677 München, Deutschland, is the controller under the GDPR. For anything about your data, write to info@quentinn.io. Full company details are in the imprint.

You can compare offers without giving us your name or email. We use no analytics, no advertising and no third-party scripts, and our fonts are served from our own servers.

Your browser sends your IP address with every request, and we need it to deliver the page. To stop abuse, we hold it in memory for up to one day to limit how often one address can use sign-in, forms and the AI assistant. We also use it to count a click on an unnamed offer only once per day. We don't save the address with those counts, and the database only holds the totals per offer. The proxy that protects the site can keep short-lived technical logs that include IP addresses, which we delete once they are no longer needed to detect and fix attacks and errors.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is running the site securely and knowing which offers people look for.

We only set cookies the site needs to do what you ask. They don't track you, and no consent is required under § 25(2) TDDDG.

gb_session

Keeps you signed in. Lasts 14 days or until you sign out.

gb_eu

Remembers that you chose to see EU offers only. Lasts one year or until you turn it off.

gb_view

Lets admins preview the site as a visitor. Ends when the browser closes.

If you use the assistant, your messages go to Anthropic, which generates the answers. We send the conversation only, not your IP address or account. We don't save conversations. Please don't enter personal data in the chat.

Anthropic is based in the USA, so your messages are transferred there. The transfer is covered by the EU standard contractual clauses in Anthropic's data processing terms. Anthropic keeps data under those terms. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in offering this help on request.

If you register, we store your email address and a scrypt hash of your password, never the password itself. We also store your sign-in sessions, your company memberships, and a record of what you changed in your company's profile, offers and API keys. We use your email for sign-in and password reset messages. Access is limited to approved email addresses, so we keep a list of those, and an address is removed from it when its account is deleted.

Legal basis: Art. 6(1)(b) GDPR for the account, and Art. 6(1)(f) GDPR for the change record, so that we can trace and correct what is published.

To list a company, we ask for its legal and register details, address, website and description, the name and role of its representative, and its beneficial owners. We also ask for documents: a register extract, proof of authority and an ID of the representative. If you enter details about other people, please let them know.

Documents are stored encrypted, and only our admins can open them. An admin reviews every application, and no decision is automated. Without this information we can't list the company. Legal basis: Art. 6(1)(b) and (f) GDPR. Our legitimate interest is making sure that only genuine, authorised companies are listed.

If you contact us through a form, we store your company, name, email address and message to answer you. Legal basis: Art. 6(1)(b) GDPR for enquiries about working with us, otherwise Art. 6(1)(f) GDPR.

Provider pages can name managers and owners of GPU providers, taken from public sources such as company websites and registers, or supplied by the company. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest and that of buyers in knowing who is behind a provider. You can object at any time using the address above.

We use a hosting provider and an email service provider, both bound by data processing agreements, and Anthropic for the assistant as described above. Authorities receive data only where the law requires it. We don't sell personal data.

Links to providers take you to their own websites, where their privacy policies apply. They can see that you came from our domain.

We keep account and verification data while the account exists. When an account is deleted, we remove the login, verification application and documents, and contact requests from that email address straight away. Records of changes to a company stay, but no longer lead to the person. Company details stay on the listing because they belong to the company. Documents from rejected applications are deleted 90 days after the decision. Contact requests are deleted 12 months after they are dealt with. Expired sessions are removed, and sign-in and reset links stop working when they expire. We keep something longer only where statutory retention duties or the defence of legal claims require it.

You have the right to access, rectification, erasure, restriction and data portability under Art. 15 to 20 GDPR. Where we rely on Art. 6(1)(f) GDPR, you can object at any time under Art. 21 GDPR. You can delete your account yourself under My account. To use any other right, or if you can't sign in, write to info@quentinn.io.

You can also complain to a data protection authority. Ours is the Bayerisches Landesamt für Datenschutzaufsicht in Ansbach, www.lda.bayern.de.