Last updated: 01 March 2026

Quantum Analytics is committed to processing personal data responsibly, lawfully, and transparently in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

Our products and services are designed primarily around aggregated, anonymised, pseudonymised, and institutional-level data. We apply data protection principles across our website, analytics products, dashboards, and advisory services.

1. Our Commitment to GDPR Compliance

Quantum Analytics is committed to ensuring that any personal data we process are handled in a manner that respects the rights and freedoms of individuals.

We implement GDPR principles including:

• lawfulness, fairness, and transparency;
• purpose limitation;
• data minimisation;
• accuracy;
• storage limitation;
• integrity and confidentiality;
• accountability.

2. Data Controller Information

Quantum Analytics
Limited Liability Company (LLC)
Timisoara, T. Ionescu 54 Blvd., postal code 300074
Email: contact@quantum.rgsec.cloud

Quantum Analytics acts as a data controller for personal data collected through its website, business communications, and client relationship management processes.

Where we process personal data strictly on behalf of a client for a defined project, Quantum Analytics may act as a data processor, subject to the relevant contractual terms and, where required, a Data Processing Agreement (DPA).

3. Data Protection by Design and by Default

Quantum Analytics applies privacy by design and by default principles in the development and delivery of its products and services.

This includes, where appropriate:

• use of aggregated and institutional-level data;
• avoidance of direct identifiers wherever possible;
• pseudonymisation or anonymisation of datasets;
• suppression of small cells and sensitive breakdowns in dashboards and reports;
• role-based access controls;
• restricted data access on a need-to-know basis;
• contractual controls for client-provided data.

4. What Personal Data We Typically Process

In the ordinary course of business, Quantum Analytics may process limited categories of personal data such as:

• name, organisation, and job title;
• professional email address and contact details;
• information submitted through contact forms, demo requests, or proposal inquiries;
• basic website and service usage data, such as log information and session activity.

Our services are not designed to routinely process personal data relating to identifiable students, employees, or other individuals at micro level unless this is explicitly agreed in writing and subject to appropriate safeguards.

5. Special Category and Sensitive Data

Quantum Analytics does not knowingly seek to collect or process special category personal data under GDPR, including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, sex life, or sexual orientation, unless this is explicitly required for a lawful and contractually defined purpose.

Where such processing is exceptionally necessary, it will be subject to specific legal safeguards, documented instructions, and appropriate contractual and technical protections.

6. Lawful Bases for Processing

Where Quantum Analytics processes personal data, it does so only where a lawful basis exists under Article 6 GDPR, including:

• legitimate interests — for responding to business inquiries, maintaining client relationships, and improving services;
• contractual necessity — where processing is necessary to prepare, enter into, or perform a contract;
• consent — where consent has been clearly obtained for a specific purpose;
• legal obligation — where processing is required by applicable law.

7. Processor Relationships and Data Processing Agreements

Where Quantum Analytics acts as a processor on behalf of a client, we process personal data only on documented instructions from the client and in accordance with applicable law.

In such cases, we may enter into a Data Processing Agreement (DPA) that defines:

• the subject matter and duration of processing;
• the nature and purpose of processing;
• the categories of personal data involved;
• the obligations and rights of the controller;
• confidentiality, security, and deletion or return requirements.

8. Security Measures

Quantum Analytics implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction.

These measures may include:

• secure cloud-based infrastructure;
• access controls and authentication measures;
• role-based permissions;
• data minimisation practices;
• anonymisation and pseudonymisation techniques where relevant;
• internal confidentiality controls;
• restricted access to project data.

We review our security measures periodically to ensure they remain appropriate to the nature of the data and the risks involved.

9. International Data Transfers

Where personal data are transferred outside the European Union or European Economic Area, Quantum Analytics seeks to ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission;
• transfers to jurisdictions benefiting from an adequacy decision;
• other lawful transfer mechanisms recognised under GDPR.

10. Data Retention

Quantum Analytics retains personal data only for as long as necessary for the purpose for which they were collected, including for the performance of contracts, the management of business relationships, compliance with legal obligations, and the resolution of disputes.

When personal data are no longer required, we take reasonable steps to delete, anonymise, or securely dispose of them.

11. Data Subject Rights

Under GDPR, individuals may have the right to:

• request access to their personal data;
• request rectification of inaccurate or incomplete data;
• request erasure of personal data, where applicable;
• request restriction of processing;
• object to processing based on legitimate interests;
• withdraw consent, where processing is based on consent;
• request data portability, where applicable;
• lodge a complaint with a competent supervisory authority.

Requests relating to personal data may be sent to: contact@quantum.rgsec.cloud

12. Use of Sub-processors and Service Providers

Quantum Analytics may use trusted third-party service providers for hosting, communications, analytics, and technical infrastructure support. Where such providers process personal data on our behalf, we take steps to ensure they are bound by appropriate confidentiality, security, and data protection obligations.

13. Website Compliance

Our website is operated in a manner intended to support GDPR compliance, including through transparent privacy information, limited collection of personal data, and the use of only necessary or basic analytics technologies where applicable.

We do not use personal data collected through the website for behavioural advertising or unlawful profiling.

14. Client Project Compliance

For client-facing products and services, Quantum Analytics aims to minimise the use of personal data and to structure analytical outputs around aggregated indicators and institutional insights wherever possible.

Where a project requires the handling of personal data, data protection requirements are addressed through project documentation, contractual clauses, and, where necessary, specific data processing arrangements.

15. Breach Awareness and Response

Quantum Analytics takes data security seriously and maintains internal procedures to identify, assess, and respond to potential personal data incidents.

Where required by law, relevant clients, authorities, or affected individuals will be notified in accordance with applicable legal obligations.

16. Accountability and Ongoing Review

Quantum Analytics recognises GDPR compliance as an ongoing responsibility. We periodically review our internal practices, data handling procedures, and technical safeguards in order to maintain appropriate standards of data protection.

17. Contact

For questions about GDPR compliance or personal data processing practices, please contact:

Quantum Analytics
Email: contact@quantum.rgsec.cloud