Privacy Policy

1. Controller

The controller responsible for the processing of personal data in connection with this website is:

Phone: +49 175 7800733
Email: info@qiaolaseroptics.com

2. General Principles of Data Processing

We process personal data only to the extent necessary to operate this website, communicate with prospective customers and business partners, handle technical and commercial inquiries, and establish or perform business relationships.

Where processing is necessary to take steps at the request of the data subject before entering into a contract or to perform a contract with the data subject, the legal basis is Article 6(1)(b) GDPR.

Where a business contact acts on behalf of a company or another organization, processing is generally based on Article 6(1)(f) GDPR. Our legitimate interests include responding to B2B inquiries, communicating with customers, prospective customers and business partners, and conducting our business activities efficiently and reliably.

3. Website Hosting

This website is hosted using Netlify, provided by Netlify, Inc., San Francisco, USA.

When a website is accessed, technical connection information must be processed. This may include the IP address, date and time of access, requested URL, referrer, browser and device information and user-agent information.

This processing is necessary to deliver the website and to maintain its stability, security and protection against misuse. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in operating a secure and reliable website.

We do not maintain a separate personal web-server logging system ourselves. To the extent that Netlify processes technical information in providing the service, such information is retained for the technically and contractually required period.

Netlify may process data in the United States. According to Netlify, it participates in the EU-U.S. Data Privacy Framework and uses the European Commission’s Standard Contractual Clauses where required for other international transfers.

4. Contact and Quotation Inquiries

You may contact us directly by email or through the RFQ/contact form provided on this website.

When you submit an inquiry, we process the information you provide. This may include your name, company, business contact details, the nature and content of your inquiry, technical requirements, quantities or project information, as well as drawings, specifications, images or other technical documents supplied by you.

We use this information to respond to your inquiry, assess technical and commercial requirements, answer follow-up questions, prepare a quotation and, where applicable, establish or perform a business relationship.

Where an inquiry directly concerns steps prior to entering into a contract with you or the performance of a contract, processing is based on Article 6(1)(b) GDPR. Where you act as a contact person on behalf of a company or organization, processing is based on Article 6(1)(f) GDPR and our legitimate interest in handling legitimate business inquiries efficiently and maintaining appropriate business communication.

Providing information is not generally required by law. However, without the information necessary to assess a particular technical or commercial inquiry, we may be unable to process that inquiry fully.

5. RFQ Form and Netlify Forms

If you use the RFQ form on this website, your submission is technically transmitted and processed using Netlify Forms.

The information entered in the form and any files you choose to upload are processed and stored by Netlify. The submission is then made available to us through Netlify and may additionally trigger a notification to our business email system.

Use of the form is voluntary. You may contact us directly by email instead.

The legal bases are the same as those described under “Contact and Quotation Inquiries”.

6. Email Communication

We use Microsoft 365 / Exchange Online for our business email communication. For customers in the European Economic Area, the relevant Microsoft entity is in particular Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

This includes both emails sent directly to us and subsequent communication relating to inquiries, quotations and ongoing business relationships.

Microsoft processes the information required to provide the service under its applicable contractual data-protection terms. Microsoft provides a current Data Protection Addendum, and Exchange Online is included among the Microsoft 365 services covered by the EU Data Boundary.

Processing is based on the legal grounds described under “Contact and Quotation Inquiries”.

7. Technical Assessment and Cooperation with Specialist and Manufacturing Partners

For certain inquiries, it may be necessary to share selected technical information with specialist or manufacturing partners in order to assess technical feasibility, evaluate manufacturability, determine an appropriate manufacturing route or prepare a quotation.

We apply a technical need-to-know principle. Only the information and documents required for the relevant technical purpose are disclosed.

Where practicable, direct identifiers and personal information that are not required for the technical assessment are removed before information is disclosed externally. Customer contact details are not provided to such partners as a customer contact channel as part of the ordinary RFQ and quotation process.

Commercial and technical communication with the customer generally remains with Qiao Laser Optics.

Where the processing of personal data by an external partner is exceptionally required for a particular project, such processing takes place only where an appropriate legal basis applies. Any required transfer of personal data outside the European Economic Area is assessed separately in advance and carried out only in accordance with Articles 44 et seq. GDPR.

Project-specific confidentiality, non-disclosure or technical-document handling requirements may be agreed separately before external disclosure where required.

8. Plausible Analytics

We use Plausible Analytics, a privacy-focused web analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia.

We use Plausible to understand the use and effectiveness of our website on an aggregate basis. Information analyzed may include pages viewed, referral sources, campaign information, approximate geographic region, browser, operating system, device type and selected interactions with the website.

According to Plausible, it does not use cookies, browser cache or local storage to identify visitors and does not create persistent visitor identifiers. IP address and user-agent information are technically processed to generate a daily changing identifier but are not stored. The salt used for this process is changed and deleted every 24 hours, preventing persistent tracking across days or websites.

In particular, we do not transmit RFQ form contents, names, email addresses, telephone numbers, free-text messages or uploaded files to Plausible.

According to Plausible, visitor analytics data are processed and stored exclusively within the European Union using European infrastructure.

To the extent that personal data are technically processed in connection with transmission to the analytics service, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to understand and improve the reach, use and technical effectiveness of our website in a data-minimizing manner.

9. Cookies and Similar Technologies

We do not use advertising or marketing cookies or technologies intended to track individual visitors across websites.

Our use of Plausible Analytics does not involve cookies, local storage or persistent visitor identifiers.

If we introduce services in the future that require the storage of information on a user’s device or require consent, we will update this Privacy Policy and the technical implementation accordingly.

10. Recipients of Personal Data

Within Qiao Laser Optics, business inquiries are currently handled by the owner.

We use Netlify for website hosting and RFQ form processing and Microsoft for Microsoft 365 / Exchange Online.

Personal data are otherwise disclosed only where necessary for a specific business transaction, where required by law or where another applicable legal basis exists.

Technical project information is additionally handled in accordance with the principles described under “Technical Assessment and Cooperation with Specialist and Manufacturing Partners”.

11. Retention

We retain personal data only for as long as necessary for the relevant purpose or where statutory retention and documentation obligations apply.

Inquiries that do not result in a business relationship are generally deleted no later than 24 months after the last substantive business contact, unless there is a specific reason requiring longer retention in an individual case.

Where an inquiry results in a quotation, order, contract, invoice or another transaction relevant under commercial or tax law, longer statutory retention periods may apply.

Data may also be retained for longer where necessary to establish, exercise or defend legal claims.

12. Your Rights

Subject to the applicable legal requirements, you have in particular the right of access under Article 15 GDPR, rectification under Article 16 GDPR, erasure under Article 17 GDPR and restriction of processing under Article 18 GDPR, as well as the right to data portability under Article 20 GDPR where applicable.

Where processing is based on Article 6(1)(f) GDPR, you may object to the processing under the conditions of Article 21 GDPR.

Where processing is exceptionally based on consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, please contact info@qiaolaseroptics.com.

13. Right to Lodge a Complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a competent data-protection supervisory authority.

The supervisory authority responsible for our establishment is:

You may also contact another competent data-protection supervisory authority.

14. Automated Decision-Making

We do not use solely automated decision-making, including profiling within the meaning of Article 22 GDPR, to make decisions concerning inquiries, quotations or business relationships.

15. Changes to this Privacy Policy

We may update this Privacy Policy if our data-processing activities, service providers or applicable legal requirements change.

Last updated: August 2026