Legal
Legal notice & Impressum
Disclaimer
According to statutory provisions, Quastify is furthermore responsible for own content provided on this web page. In this context, no obligation exists on the part of Quastify to monitor merely the transmitted or saved information of third parties, or investigate circumstances pointing to illegal activity. The obligations to remove or block the use of information under generally applicable laws remain unaffected by this as per §§ 8 to 10 of the Telemedia Act (TMG).
Copyright
The webpage and contents therein are subject to German copyright law. Unless expressly permitted by law (§ 44a et seq. of the copyright law), every form of utilizing, reproducing, or processing works subject to copyright protection on my web page without expressed consent is punishable by law (§ 106 of the copyright law).
Impressum
Quastify GmbH
c/o BDC Coworking
Carl-Friedrich-Gauss-Ring 5
69124 Heidelberg
Germany
Contact: info@quastify.com
VAT ID: DE353329956 · Commercial register: HRB744186
Managing Director: Dr. Jan Gerit Brandenburg
Privacy policy
The short version: this website sets no cookies, runs no analytics, embeds no third-party content and tracks nobody. Every file the site loads (text, images, fonts, scripts) comes from our own server. The only personal data involved in an ordinary visit is what any web server unavoidably records in its log, described below.
Who is responsible
Quastify GmbH, c/o BDC Coworking, Carl-Friedrich-Gauss-Ring 5, 69124 Heidelberg, Germany, is the controller for the data described here. Our Managing Director is Dr. Jan Gerit Brandenburg. For anything concerning your data, write to info@quastify.com. We have not appointed a data protection officer, as we are not required to.
What happens when you visit
Our web server records each request in a log file: your IP address, the date and time, the page or file requested, the response status and size, and the referring page and browser identification your browser sends. We use this only to deliver the site, to keep it secure and available, and to investigate faults or abuse. The legal basis is our legitimate interest in operating a functioning, secure website, Art. 6(1)(f) GDPR.
These logs are kept only as long as needed for those purposes and are then deleted by our host. We do not use them to build profiles, we do not combine them with any other data, and we make no attempt to identify individual visitors from them.
The site is served over an encrypted HTTPS connection.
No cookies, no tracking
We set no cookies, and we store nothing in your browser’s local storage. There is no analytics software, no tag manager, no advertising pixel, no social media plugin, and no consent banner, because there is nothing to consent to. Fonts and images are hosted by us, not fetched from Google Fonts or a content delivery network, so simply loading a page sends your IP address to nobody but us and our hosting provider.
Who processes data for us
webgo GmbH & Co. KG, Germany, hosts this website and our email on servers in Germany, as our processor under a data processing agreement and only on our instructions. No visitor data is transferred outside the European Union.
If you email us
If you write to us, for example through the address in our Impressum or the contact link on this site, we process your message, your address and any details you include in order to answer you. The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract or a possible one, and otherwise our legitimate interest in responding, Art. 6(1)(f) GDPR. We keep correspondence for as long as the matter is live and afterwards only where commercial or tax law requires it.
If you apply for a job
Applications are covered separately and in more detail by our applicant privacy notice, further down this page. Nothing on the careers pages tracks you either; the application form posts only to our own server.
Links to other websites
We link to profiles and publications elsewhere, such as LinkedIn, X or GitHub. Those are ordinary links: nothing is sent to them while you read our pages, and their own privacy policies apply only once you choose to follow a link.
Automated decision-making
There is none. We do not profile visitors and take no automated decisions about anyone.
Your rights
You have the right to ask us for a copy of the data we hold about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16), to have it deleted (Art. 17), to have our use of it restricted (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on our legitimate interest (Art. 21). Write to info@quastify.com and we will respond within one month.
If you believe we have handled your data unlawfully, you can complain to a supervisory authority. The one responsible for us is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany. You may also complain to the authority where you live or work.
Changes
If we change how this website handles data, we will update this policy. It was last revised in July 2026.
Applicant privacy notice
This notice explains what happens to the personal data you send us when you apply for a role at Quastify, in line with Articles 13 and 14 of the GDPR. It applies to applications made through the form on our careers pages and to applications sent to us by email.
Who is responsible
Quastify GmbH, c/o BDC Coworking, Carl-Friedrich-Gauss-Ring 5, 69124 Heidelberg, Germany, is the controller for your application data. Our Managing Director is Dr. Jan Gerit Brandenburg. For anything concerning your data, including the requests described under Your rights below, write to info@quastify.com. We have not appointed a data protection officer, as we are not required to.
What we collect
Through the application form: your first and last name, your pronouns, your email address, the university where you did or are doing your PhD, the date you received or expect to receive it, your availability or notice period, your answer about relocation, and your application documents as a single PDF. Optionally, links to your LinkedIn, GitHub or Google Scholar profiles, and how you heard about us. We also record the date and time of your submission.
Your application PDF is free-form, so it may contain more than the fields above: a photograph, your date of birth, your address, your employment history. Please send only what you consider relevant to your application. We do not ask for, and would prefer you not to volunteer, information about your health, religion, ethnicity, political views, trade union membership or sexual orientation. If you do include such information, we process it on the basis of Art. 9(2)(b) GDPR together with § 26(3) BDSG, or on the basis of your consent, and it plays no part in our assessment except where the law requires us to consider it, for example an accommodation you need during the process.
Separately, our web server records your IP address in its access logs, and the form counts submissions per IP address for a short period in order to block spam and automated abuse. Those counters store the address only as a hash, are not linked to your application, and expire within 48 hours.
Why we use it, and on what legal basis
We use your data solely to assess your application and to communicate with you about it, including sending you a confirmation that it arrived and telling you the outcome. The legal basis is Art. 6(1)(b) GDPR together with § 26(1) BDSG: processing necessary for a decision about entering into an employment relationship.
The spam protection described above rests on our legitimate interest in keeping the application form usable, Art. 6(1)(f) GDPR.
We do not keep a talent pool. Your application is considered for the role you applied for and is then deleted on the schedule below. We will not hold your CV for future openings, and we will not add you to a mailing list. If a different role interests you later, you are welcome to apply again.
Who else sees it
Inside Quastify, only the people involved in filling the role.
We use two service providers, each acting as a processor under a data processing agreement and only on our instructions:
- Google Ireland Limited (Google Workspace). Your application is recorded in Google Sheets, your PDF is stored in Google Drive, and the confirmation email is sent through Google’s mail service. Google may process data outside the European Economic Area, including in the United States, on the basis of the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
- webgo GmbH & Co. KG, Germany, which hosts this website on servers in Germany.
We do not sell your data, we do not share it with recruiters or advertisers, and there are no third-party trackers on our careers pages.
How long we keep it
If we do not offer you the role, we delete your application, both the record and your PDF, six months after we tell you our decision. That period lets us answer any questions about the process, including a claim under the Allgemeines Gleichbehandlungsgesetz (AGG), which must be raised within two months.
If we do offer you the role and you accept, your data moves into your personnel file and is kept under the rules that apply to employee records.
You can ask us to delete your application sooner at any time; see below.
Automated decision-making
There is none. Every application is read and assessed by a person. We do not score, rank or filter applications automatically, and we do not profile you.
Is providing this data mandatory?
No, but the fields marked as required are the ones we need in order to consider your application, so we cannot process an application without them. There is no statutory or contractual obligation on you to apply or to give us anything.
Your rights
You have the right to ask us for a copy of the data we hold about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16), to have your data deleted (Art. 17), to have our use of it restricted (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on our legitimate interest (Art. 21). Where we rely on your consent, you can withdraw it at any time, without affecting anything done before you withdrew it.
Write to info@quastify.com and we will respond within one month.
If you believe we have handled your data unlawfully, you can complain to a supervisory authority. The one responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
You may also complain to the authority where you live or work.
Changes
If we change how we handle application data, we will update this notice. It was last revised in July 2026.
Accessibility
We want this site to be usable by everyone, including visitors who browse with a keyboard, a screen reader, magnification or a high-contrast display. We use WCAG 2.1 level AA, the standard referenced by EN 301 549, as our benchmark, and we test against it as part of every change.
What that means in practice. The site can be operated entirely from the keyboard, and a skip link takes you past the navigation to the main content. All content and all functions, including the job application form, work with JavaScript disabled and without WebGL. If your system asks for reduced motion, the animated molecule is replaced by static images and the scroll-driven effects do not run. If it asks for increased contrast, or you use Windows High Contrast mode, the page adapts. Text is styled so that it stays legible when the page is zoomed to 200% or viewed on a narrow screen. All fonts and images are served from our own servers, so nothing is loaded from third parties.
Known limitations. The animated molecule and the background figures are decorative: they are hidden from screen readers rather than described, because they carry no information the surrounding text does not. Charts are summarised in a text alternative but are not offered as a data table. The site is available in English only.
Tell us about a barrier. If something here is not usable for you, please write to info@quastify.com and describe the page and what went wrong. We treat accessibility problems as bugs and will tell you what we can do and by when.
This statement is based on our own assessment, not on an external audit. It was last reviewed in July 2026.