ParityQC Terms and Conditions

Privacy Policy

Parity Quantum Computing GmbH

Thank you for your interest in Parity Quantum Computing GmbH (“ParityQC”, “we” or “us”). We take the protection of your personal data seriously and we want to be clear about what we collect and why.

You can browse most of our website without telling us anything about yourself. A few things (e.g. using our cloud service, getting in touch, or applying for a job) do require us to process personal data, and this policy explains how we handle it. We process personal data in line with the General Data Protection Regulation (GDPR).

We are responsible as the controller for the processing of personal data described in this Privacy Policy.

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure or access. These measures are selected taking into account the nature of the processing and the associated risks. However, no method of transmission or storage can guarantee absolute security.

If you prefer not to send sensitive information through our website or by email, please contact us using the details provided in this Privacy Policy so that we can discuss an appropriate alternative.

1. Who is responsible

The controller for the processing described in this policy is:

Parity Quantum Computing GmbH; Rennweg 1 / Top 314, 6020 Innsbruck, Austria Phone: +43 660 8456474 Email: office@parityqc.com Website: www.parityqc.com

We have appointed an internal Data Protection Officer. You are welcome to reach out directly with any question about your data or your rights, at office@parityqc.com.

2. The terms we use

Where this policy uses terms such as “personal data”, “processing”, “controller”, “processor” or “consent”, we use them with the meanings given in Article 4 GDPR.

3. When you visit our website

Each time you visit, our servers automatically record the standard technical information your browser sends: your IP address, the browser type and version, the operating system, the page you came from, the pages you look at, and the date and time. We use this to deliver the site reliably, keep it secure, and look into technical problems or attacks. We do not use it to identify you personally.

The legal basis is our legitimate interest in a stable, secure website (Art. 6(1)(f) GDPR). Server access logs are generally retained or made available by our hosting provider for up to 30 days.

4. Cookies and your choices

We use cookies and similar technologies (such as local storage). Some are strictly necessary: they keep the site working and secure, for example by managing your session or remembering the cookie choices you have made. Strictly necessary cookies and similar technologies are used in accordance with Section 165(3) of the Austrian Telecommunications Act 2021. To the extent that personal data is processed, the legal basis is our legitimate interest under Art. 6(1)(f) GDPR in providing a secure and functional website.

Everything else only runs if you agree to it. When you first visit, our cookie banner lets you accept or decline these, and you can change your mind at any time through the cookie settings, with effect going forward. Declining will not stop you from using the site, though some features may be more limited. You can also manage cookies in your browser.

5. Website analytics

With your consent, we use the analytics services described below to understand how visitors use our website and to improve its content and functionality. The legal basis for this processing is Article 6(1)(a) GDPR.

The analytics services are activated only after you have provided your consent through our consent banner. You may withdraw your consent at any time with effect for the future by changing your cookie settings.

The use of these services may involve the transfer of personal data to recipients in the United States. Further information about international data transfers and the safeguards applied is provided in Section 11.

Google Analytics (via Google Site Kit)

Provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), together with Google LLC in the United States. Google Analytics helps us to see how visitors find and use our website. We have set the data retention to two months, and Google Analytics does not store your full IP address.

Jetpack Stats

We use Jetpack Stats provided by Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). Jetpack Stats provides us with basic visitor statistics for our WordPress site. Data is retained for 30 days.

6. Getting in touch

You can reach us by email or through the contact form on our website. When you do, we process what you send to us (typically your name, email address, a phone number if you give one, the time of your message, your IP address, and the content itself) for the sole purpose of dealing with your enquiry. We do not pass this on to anyone beyond the providers who run our communication tools for us.

Depending on why you are writing, the legal basis is our legitimate interest in responding (Art. 6(1)(f) GDPR) or, where your message concerns a contract, the steps needed to enter into or perform it (Art. 6(1)(b) GDPR). We keep the correspondence only for as long as we need it to handle your matter, unless we are required to retain it for longer.

7. Your account and our cloud service

Using our cloud service means setting up a user account. To provide it, we process the login and account details you give us (such as your name, business email address, and a hashed password), the organisational details we need to administer the account, the usage, configuration and log data generated while you use the service (including anything you submit through the service or its API) and billing information.

We do this to give you the account and deliver the service you have signed up for, including authentication and support (Art. 6(1)(b) GDPR); to keep the service secure, available and free from misuse (Art. 6(1)(f) GDPR); and to meet our accounting and tax obligations (Art. 6(1)(c) GDPR). We process only what we need to run the service.

You can close your account and delete the associated data at any time by giving written notice in line with the Terms of Use for the service. After that, we delete the data, except where we have to keep certain records for legal reasons or to establish, exercise or defend legal claims. Your authentication, login and account data is hosted with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which acts as our processor under an Art. 28 GDPR data processing agreement.

8. LinkedIn and YouTube

We are active on LinkedIn and YouTube, and we link to both from our website. These are ordinary links: clicking one takes you to that platform, where the provider’s own privacy policy applies. Simply visiting our site sends no data to LinkedIn or YouTube. We also let you play YouTube videos directly on our website. At that point you click play, and only then, you agree (Art. 6(1)(a) GDPR) to the video loading, and your IP address and details about the page are sent to Google, which may set cookies. This involves a transfer to the United States (see section 11). You can read how Google handles this at policies.google.com/privacy.

9. Job applications

If you apply for a position with us, we will process the personal data contained in your application and any information collected during the recruitment process to assess your suitability for the position and decide whether we enter into an employment relationship with you. The legal basis for this processing is Article 6(1)(b) GDPR. The categories of personal data processed may vary depending on the position and its specific requirements.

The personal data we process may include:

identification and contact details, such as your name, address, email address and telephone number;
information contained in your application documents, such as your CV, cover letter, education, qualifications, professional experience, skills, certificates, references and work samples;
information generated during the recruitment process, such as correspondence, interview notes, assessments, test results, availability, salary expectations and the status of your application;
information concerning your right to work, where this is relevant to the position; and
technical data generated when you use our application platform, such as IP addresses, timestamps and log data.

If your application is successful, the relevant application data will be transferred to your personnel file and processed for the purposes of establishing and managing the employment relationship and complying with applicable legal obligations.

If your application is unsuccessful, we generally delete your application data no later than six months after informing you of our decision. Where necessary, we may retain the data for a longer period to establish, exercise or defend legal claims. The legal basis for such continued storage is Article 6(1)(f) GDPR.

We will retain your application for consideration for future positions only if you have separately consented to this. You may withdraw your consent at any time with effect for the future.

10. Who we share your data with

We share personal data only where there is a reason to. Depending on the situation, recipients may include our IT and hosting providers, the providers of the communication and support tools we use, professional advisers such as tax advisers, auditors and lawyers, and public authorities where the law requires it. Whenever a provider handles data on our behalf, we put a data processing agreement in place under Art. 28 GDPR that binds them to protect your data and to act only on our instructions.

11. International data transfers

Some of the services above send personal data to the United States; specifically, Google (for Google Analytics and for embedded YouTube videos) and Automattic (for Jetpack Stats).

Google LLC is certified under the EU–U.S. Data Privacy Framework. For Jetpack Stats, we rely on the EU Standard Contractual Clauses together with supplementary safeguards (Art. 46 GDPR) and on your consent to the transfer (Art. 49(1)(a) GDPR). Please be aware that data sent to the United States may in principle be accessible to US authorities, and the level of protection may not fully match that within the EU. Apart from these services, we do not transfer personal data outside the EU/EEA.

12. How long we keep data, and when you must provide it

We keep personal data only for as long as we need it for the purpose we collected it, or for as long as the law requires us to. Once neither applies, we delete it or restrict its processing. Where a section above states a specific period, that period applies.

Sometimes providing data is a legal or contractual requirement (for example, the information we need to enter into a contract with you, or data we must retain for tax purposes). If you do not provide it, we may not be able to conclude the contract. If you are ever unsure whether something is required, just ask us or our Data Protection Officer.

13. Automated decision-making

We do not use automated decision-making or profiling.

14. Data security

We protect your data with appropriate technical and organisational measures, and we review them as technology develops. Traffic to and from our website is encrypted in transit (TLS).

15. Your rights

You have a range of rights over your personal data, and we are glad to help you exercise them — just contact us or our Data Protection Officer.

You can ask whether we process data about you and, if so, receive a copy of it along with the information set out in Art. 15 GDPR.

You can ask whether we process data about you and, if so, receive a copy of it along with the information set out in Art. 15 GDPR.
You can ask us to correct inaccurate data or complete data that is incomplete (Art. 16 GDPR).
You can ask us to delete your data where one of the grounds in Art. 17 GDPR applies and we do not need to keep it.
You can ask us to restrict processing where one of the conditions in Art. 18 GDPR applies.
Where processing is based on consent or a contract and is automated, you can receive the data you gave us in a structured, common, machine-readable format, or have us send it to another controller (Art. 20 GDPR).
You can object at any time, on grounds relating to your situation, to processing based on our legitimate interests (Art. 21 GDPR). If we ever process your data for direct marketing, you can object to that at any time.
Withdrawing consent. Where processing is based on your consent, you can withdraw it at any time, with effect going forward (Art. 7(3) GDPR).
You can lodge a complaint with a supervisory authority, in particular where you live or work or where you think something went wrong. Our lead authority is the Austrian Data Protection Authority.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements or other relevant circumstances. If an update needs your involvement — your consent, for example — we will let you know. The current version will always be on our website. Last updated: 29.07.2026