Privacy

Privacy Policy

Last updated: August 2026

QualityAds – a service operated by Tecsteps GmbH

Last updated: August 2026

This Privacy Policy explains which personal data is processed when using QualityAds, for which purposes such processing takes place, the legal bases on which processing is based, and the rights available to data subjects.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is Tecsteps GmbH, represented by its Managing Director Fabian Wesner.

QualityAds is a service operated by Tecsteps GmbH and is not a separate legal entity.

The complete company and contact details of Tecsteps GmbH are provided in the QualityAds Legal Notice.

For matters relating to QualityAds, including campaigns, creator applications and support requests, the designated QualityAds contact channels will generally be used.

2. General Principles of Data Processing

We process personal data only where necessary to operate QualityAds, handle requests and applications, prepare or perform contracts, execute campaigns, comply with legal obligations, pursue legitimate interests, or where another lawful basis applies.

Depending on the relevant processing activity, the legal bases may include in particular:

  • **Article 6(1)(b) GDPR** for pre-contractual measures and performance of contracts,
  • **Article 6(1)(c) GDPR** for compliance with legal obligations,
  • **Article 6(1)(f) GDPR** for legitimate interests, and
  • **Article 6(1)(a) GDPR** where processing is based on consent.
  • 3. Website Access and Technical Data

    When QualityAds is accessed, technically necessary information may be processed automatically.

    This may include in particular:

  • IP address,
  • date and time of access,
  • requested page or resource,
  • browser type and version,
  • operating system,
  • device information,
  • referrer information,
  • technical request and response information, and
  • error and security information.
  • These data are processed in particular to provide the website technically, maintain security, identify errors, prevent attacks and misuse, and ensure the technical operation of QualityAds.

    Where applicable, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in particular in the secure and reliable operation of QualityAds.

    4. Campaign Orders and Customer Requests

    When a customer orders, requests or edits a campaign, we process the information submitted in connection with that process.

    This may include in particular:

  • name or contact person,
  • company,
  • email address and other contact details,
  • information about the advertised product or service,
  • selected social media platforms,
  • selected reach package,
  • number of requested posts,
  • campaign duration,
  • target audience,
  • content requirements,
  • additional campaign specifications,
  • order and transaction information,
  • order number,
  • uploaded files and materials,
  • communication content, and
  • information concerning amendments, objections and campaign execution.
  • We process these data in particular to review the request, prepare and execute the campaign, select an appropriate creator, communicate with the parties involved, perform quality control, handle billing and document the campaign.

    Processing is based in particular on Article 6(1)(b) GDPR and, where necessary, Article 6(1)(f) GDPR.

    5. 48-Hour Editing Period

    Customers may edit their campaign information within the designated 48-hour period.

    During this process, the original information, subsequent amendments, the time of amendments and the campaign requirements that become binding afterwards may be processed and documented.

    This processing serves in particular to properly execute and document the contractual relationship and to determine which requirements apply to a campaign.

    6. Creator Applications

    When a person applies to join QualityAds as a creator, we process the data provided during the application process.

    This may include in particular:

  • name,
  • contact information,
  • date of birth or age information where required,
  • social media platforms,
  • usernames or profile information,
  • content category or niche,
  • follower numbers,
  • reach and performance information,
  • other information concerning social media activity, and
  • communications with QualityAds.
  • These data are used to review the application, assess suitability for the Creator Network, identify suitable campaigns, and prepare and perform a potential collaboration.

    Submitting an application does not create an entitlement to admission to the Creator Network.

    7. Reach Analysis and Creator Evaluation

    QualityAds may process social media and performance data to assess the expected reach and suitability of a creator.

    Such data may include in particular:

  • number of followers,
  • views of the highest-performing and lowest-performing relevant posts,
  • number of posts published within the previous 30 days,
  • average views of the previous five relevant videos or posts,
  • average likes of the previous ten posts,
  • average comments on the previous ten posts,
  • total number of published posts, and
  • the date or duration of registration or participation with QualityAds.
  • Internal metrics, forecasts and assessments may be derived from this information.

    These data are used in particular to estimate expected campaign reach, select suitable creators, assign creators to reach categories and maintain quality standards.

    Where personal data is processed for these purposes, processing is carried out in particular for the preparation and performance of the collaboration and on the basis of our legitimate interest in appropriate, consistent and high-quality creator selection.

    The specific calculation formula and internal weighting do not need to form part of this Privacy Policy.

    8. Content Review and Internal Quality System

    Creators submit content created for a campaign to QualityAds before publication.

    QualityAds processes this content and the associated campaign information for quality review purposes.

    The review may cover in particular:

  • general quality requirements,
  • content- or category-specific requirements, and
  • requirements made binding by the customer.
  • Internal checklists, assessments, review results, revision requests and information concerning the course of a campaign may be stored in connection with this process.

    Such information may also be taken into account in future creator selection and evaluation.

    Processing serves the performance of the respective campaign, quality assurance and QualityAds' legitimate interest in maintaining a reliable Creator Network.

    9. Customer Preview and Objections

    Before publication, reviewed content may be provided to the respective customer for preview.

    Customer objections and any subsequent review by QualityAds may be documented and processed.

    Only information required to review, revise and execute the respective campaign will generally be exchanged between the customer, QualityAds and the creator.

    10. Data Transfers Between Customers and Creators

    Execution of a campaign may require certain customer information to be provided to the selected creator or certain creator information to be provided to the customer.

    This may include campaign requirements, supplied materials, content drafts, necessary product information and other information required for campaign execution.

    QualityAds generally limits such disclosure to information necessary for the respective purpose.

    Full contact details are not exchanged between a customer and creator solely because both are involved in the same campaign.

    11. Email Communication

    Communication relating to QualityAds generally takes place using the designated QualityAds email addresses.

    If you contact us by email or exchange emails in connection with a campaign or creator collaboration, the following data may be processed in particular:

  • email address,
  • name,
  • date and time,
  • subject,
  • message content,
  • attachments, and
  • technical delivery information.
  • These data are processed to handle the relevant request or to prepare and perform the corresponding contractual or collaborative relationship.

    For matters outside QualityAds, the Tecsteps GmbH contact details provided in the Legal Notice may be used.

    12. WhatsApp

    Where QualityAds provides a WhatsApp contact option and a data subject voluntarily chooses to use that communication channel, the data required for communication will be processed.

    When WhatsApp is used, the relevant service provider also processes data in accordance with its own privacy rules. This may include communication data and metadata.

    Where communication through WhatsApp is not desired, the designated QualityAds email contact options may be used instead.

    13. Hosting and Technical Service Providers

    QualityAds is provided using technical service providers.

    Where the website is hosted or delivered through Vercel, technical access data required to provide, secure and operate the website may be processed by that provider.

    Additional providers may be used for hosting, email, databases, storage, security functions or other technical services.

    Where service providers process personal data on our behalf, this takes place on the basis of the agreements required under applicable data protection law.

    Personal data is transferred to countries outside the European Union or European Economic Area only where the applicable data protection requirements for such transfers are met.

    14. Uploaded Files and Campaign Materials

    Customers may provide files and materials in connection with a campaign.

    Depending on the contents of the relevant file, personal data may be processed.

    Uploaded materials are generally processed only to review, prepare, execute and document the respective campaign and to comply with legal obligations.

    Customers are responsible for not uploading personal data relating to third parties where processing of such data is unnecessary or unlawful for the relevant campaign.

    15. Cookies and Local Storage

    QualityAds may use technically necessary cookies or comparable local storage technologies where required for basic website functions.

    These may include, for example, language settings, technical security information or other necessary website preferences.

    Technically necessary technologies are used where required to provide digital functions expressly requested by the user.

    If analytics, marketing or other non-essential technologies are introduced in the future, the necessary information and, where required, consent options will be added accordingly.

    16. No Advertising Tracking Cookies

    QualityAds currently does not use its own advertising tracking cookies through the website unless expressly stated otherwise.

    If analytics, marketing, remarketing or comparable tracking technologies are introduced in the future, this Privacy Policy will be updated accordingly and consent will be obtained before their use where legally required.

    17. Retention

    Personal data is retained only for as long as necessary for the respective processing purpose or where statutory retention and documentation obligations apply.

    When determining retention periods, we take into account in particular:

  • the duration of an ongoing request or application,
  • the duration of Creator Network participation or collaboration,
  • the duration and processing of a campaign,
  • potential subsequent communications,
  • statutory retention obligations,
  • limitation periods, and
  • the need to retain documentation for the establishment, exercise or defence of legal claims.
  • Once the purpose of processing no longer applies, data will be deleted or anonymised unless another legal basis permits or requires continued retention.

    18. Recipients of Personal Data

    Where required for the respective purpose, personal data may be disclosed in particular to the following recipients or categories of recipients:

  • technical hosting and IT providers,
  • email and communication providers,
  • creators selected for a campaign,
  • the respective campaign customer where necessary,
  • payment and billing providers where used,
  • public authorities or other bodies where disclosure is legally required, and
  • other service providers where their involvement is required for the operation of QualityAds.
  • Personal data is disclosed only where an appropriate legal basis exists.

    19. No Solely Automated Decision-Making With Significant Effects

    QualityAds may use automated calculations, reach forecasts, metrics and internal evaluation systems.

    These systems may support internal review and selection processes.

    However, QualityAds does not make decisions based solely on automated processing within the meaning of Article 22 GDPR that produce legal effects concerning a data subject or similarly significantly affect them, unless expressly stated otherwise and an appropriate legal basis exists.

    In particular, creator applications, material quality decisions and campaign processes are subject to internal review.

    20. Rights of Data Subjects

    Subject to the applicable statutory requirements, data subjects have in particular the right to:

  • **access** under Article 15 GDPR,
  • **rectification** under Article 16 GDPR,
  • **erasure** under Article 17 GDPR,
  • **restriction of processing** under Article 18 GDPR,
  • **data portability** under Article 20 GDPR, and
  • **object** under Article 21 GDPR.
  • Where processing is based on consent, consent may generally be withdrawn at any time with effect for the future.

    The designated QualityAds contact channels or the controller's contact details provided in the Legal Notice may be used to exercise these rights.

    21. Objection to Processing Based on Legitimate Interests

    Where personal data is processed on the basis of Article 6(1)(f) GDPR, data subjects have the right, subject to the statutory requirements, to object to processing on grounds relating to their particular situation.

    We will then cease processing the relevant data unless compelling legitimate grounds for the processing exist which override the interests, rights and freedoms of the data subject, or the processing is required for the establishment, exercise or defence of legal claims.

    22. Right to Lodge a Complaint

    Data subjects have the right to lodge a complaint with a competent data protection supervisory authority concerning the processing of their personal data.

    The right to contact Tecsteps GmbH directly or to use the designated QualityAds contact channels remains unaffected.

    23. Data Security

    QualityAds and Tecsteps GmbH implement appropriate technical and organisational measures designed to protect personal data against loss, unauthorised access, alteration, disclosure or other misuse.

    However, no internet-based system can guarantee absolute security.

    24. Amendments to this Privacy Policy

    This Privacy Policy may be amended where QualityAds, the technologies used, service providers, processing activities or legal requirements change.

    The current version published on QualityAds applies.

    Last updated: August 2026