I.
Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other data protection regulations is
Q-Finity∞, Wallerfanger Strasse 27, 66763 Dillingen, represented by the owner, Mr. Oliver Herrmann
Phone number: +49 (0) 6831 5 16 88 50
Email: [email protected]
Website: www.q-finity.de
II.
Competent supervisory authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Fritz-Dobisch-Straße 12
66111 Saarbrücken
Tel: +49 (0) 681 94781-0
Fax: +49 (0) 681 94781-29
Email: [email protected]
Website: www.datenschutz.saarland.de
III.
General information on data processing
Scope of processing of personal data
We process personal data of our users only to the extent necessary for the provision of a functioning website as well as necessary for the contents of our services.
The processing of personal data of our users regularly takes place only given the consent of the user.
An exception applies in such cases in which the prior obtaining of consent it is not possible for objective reasons and the processing of the data is permitted by law.
Data deletion and storage period
The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage no longer applies. In addition, storage can take place if required by the European or national legislators in Union regulations, laws or other rules to which the controller is subject.
A blocking or deletion of data shall be carried out even if the storage period prescribed by the standards stated expires, unless there is a need for further storage of data for conclusion of the contract or contract performance.
IV.
Provision of the website and creation of log files
Description and scope of data processing
Each time our website is accessed, our system automatically records data and information from computer systems of the accessing computer.
The following data is obtained here:
- Information on the browser type and the version used,
- The operating system of the user,
- The Internet service provider of the user,
- The IP address of the user,
- Date and time of access,
- Sites from which the system of the user reached our website,
- Sites that the system of the user accessed via our website.
The data is also stored in the log files of our system. This data will not be stored together with other personal data of the user.
Legal basis for data processing
The legal basis for temporary storage of data and log files is Article 6, (1) (f) EU GPDR.
Purpose of data processing
The temporary storage of IP addresses via the system is necessary to allow the site to be delivered to the user’s computer. This requires the user’s IP address to be stored for the duration of the session.
The storage in log files is carried out to ensure the functionality of the website. In addition, we use the data to optimize the website and for the safety of our information technology systems. The data is not evaluated for marketing purposes in this context.
Duration of storage
The data will be deleted as soon as it is no longer required for the achievement of the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case once the session is finished.
In the case of storing the data in log files, this is the case no later than 7 days afterwards. Further storage is possible. In this case, the IP addresses of the users will be deleted or altered so that an assignment to the client accessing the site is no longer possible.
Option to object and possibility of removal
The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user.
V.
Use of cookies
Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the computer system of the user. If a user accesses a website, a cookie will be stored on the operating system for use. This cookie contains a characteristic string, which allows the unique identification of the browser when the site is accessed again.
The user data collected in this way will be pseudonymised by technical means. Therefore, the assignment of the data to the user is no longer possible. The data will not be stored together with other personal data of the user.
When accessing our website, the user will be informed about the use of cookies for the purposes of analysis through an info banner and referred to this privacy policy. In this context, there is also a notice about how the storage of cookies can be prevented in the browser settings.
When accessing our website, the user will be informed about the use of cookies for analysis purposes and his consent to the processing of personal data used in this context will be obtained. In this context, there is also a reference to the privacy policy.
Legal basis for data processing
The legal basis for the processing of personal data using cookies is Article 6 (1) (f) EU GDPR.
Purpose of data processing
The purpose of the use of technically necessary cookies is to make it easier for users to use websites. Some of the functions of our websites cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognised again when moving from one page to another.
The use of analysis cookies is carried out for the purpose of improving the quality of our website and its content.
Duration of storage, right of objection and possibility of removal
Cookies are stored on the user’s computer and transmitted to our site by the computer. Therefore, as a user, you have full control over the use of cookies. By modifying the settings in your Internet browser, you can disable or restrict the transfer of cookies. Previously stored cookies can be deleted at any time. This can also be automated. If cookies are disabled for our website, it may no longer be possible to use all of the features of the website to their full extent.
VI.
Contact form and email contact
Description and scope of data processing
On our website there is a contact form, which can be used to contact us by email. If a user takes this opportunity, the data entered in the form will be sent to us and saved.
This data is:
- Name
- Email address
- Subject
- Message
At the time the message is sent, the following data is also stored:
- The IP address of the user,
- Date and time of the registration,
For the processing of the data, your consent is obtained and you are referred to this privacy policy within the course of the dispatch process.
It is also possible to contact us via the email address provided. In this case, the personal data of the user transmitted in the email will be stored.
There is no transfer of data to third parties in this context.
The data is used exclusively for the processing of the conversation.
Legal basis for data processing
The legal basis for data processing is Article 6 (1) (a) GDPR.
The legal basis for processing of data provided in the course of sending an email is Article 6 (1) (f) GDPR.
If the aim of the email contact is the conclusion of the contract, Article 6 (1) (b) GPDR is also the legal basis for the processing.
Purpose of data processing
The processing of the personal data from the input mask is used solely for the processing of the communication.
In the event of a contact via email, there is also the required legitimate interest in the processing of the data. The other personal data processed during the dispatch process is intended to prevent an abuse of the contact forms and ensure the safety of our information technology systems.
Duration of storage
The data will be deleted as soon as it is no longer required for the achievement of the purpose for which it was collected.
For the personal data from the input mask for the contact form and the data sent by email, this is the case once the conversation with the user is finished.
The conversation is finished once it is clear from the circumstances that the matter at hand has been conclusively clarified.
Personal data additionally collected during the dispatch process will be deleted at the latest after a period of 7 days.
Option to object and possibility of removal
The user has the option of revoking his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
The revocation of the consent or the objection to the storage can take place in text form or electronically via email.
In this case, all personal data stored in the course of the communication will be deleted.
VII.
Social Media und Web-Analytics
Application and use of Facebook
The controller has integrated Facebook plug-ins on this website. Facebook is a social network.
Each time one of the individual pages of this website is accessed by the data processing controller and on which a Facebook plug-in has been integrated, the Internet browser on the IT system of the data subject automatically triggers a download of a representation of the corresponding Facebook plug-in from Facebook. A general overview of all Facebook plug-ins can be accessed under https://developers.facebook.com/docs/plugins/?locale=en_EN. In the context of this technical process, Facebook receives knowledge about what concrete subpage of our website is visited by the data subject.
Google-Analytics
Our website uses functionalities of the website analysis service Google Analytics. This is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is generally sent to a Google server in the USA and stored there.
Legal basis for the processing of personal data
The storage of Google Analytics cookies is carried out on the basis of Article 6 (1) (f) GDPR.
The operator of this website has a legitimate interest in the analysis of user behaviour in order to optimize its website offerings and as for advertising purposes.
IP anonymisation
We have the function activated of IP anonymisation on this website. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about website activities and to provide other services related to the use of the website to the website operator. The IP address provided by your browser in the context of Google Analytics will not be merged with other Google data.
Browser-Plug-In
You can prevent the storage of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be used in full. In addition, you may prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link:
Objection to data processing
You can prevent the collection of data through Google Analytics by clicking on the following link. An opt-out cookie will be created that will prevent the future collection of your data when you visit this website:
Disable Google Analytics.
For more information on how user data is handled, please refer to the Google privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en
Google AdWords
This website uses Google AdWords. AdWords is an online advertising program from Google Inc.,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In the context of Google AdWords, we use conversion tracking. If you click on an advertisement placed by Google, a cookie will be set for the conversion tracking. A cookie is a small text file which the Internet browser stores on the user’s computer. These cookies lose their validity after 30 days and are not used for the identification of the user. If the user visits certain pages of our website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.
In the context of Google AdWords, we use conversion tracking. If you click on an advertisement placed by Google, a cookie will be set for the conversion tracking. A cookie is a small text file which the Internet browser stores on the user’s computer. These cookies lose their validity after 30 days and are not used for the identification of the user. If the user visits certain pages of our website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.
Every Adwords customer receives a different cookie. Cookies cannot be tracked via the websites of Adwords customers. The information gathered using the conversion cookie is used to generate conversion statistics for Adwords customers who have chosen to use conversion tracking. Adwords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in tracking, you can object to this use by disabling the Google Conversion Tracking cookie on your Internet browser under user preferences. You will then not be included in the conversion tracking statistics.
Legal basis for the processing of personal data
The storage of conversion cookies is carried out on the basis of Article 6 (1) (f) GDPR. The operator of this website has a legitimate interest in the analysis of user behaviour in order to optimize both its website offerings and for advertising purposes.
VIII.
Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the data controller:
Right of information
You can request a confirmation by the data controller as to whether personal data relating to you is processed by us.
If such processing takes place, you can request the following information from the data controller:
- The purposes for which the personal data is processed,
- The categories of personal data processed,
- The recipients or categories of recipients to whom your personal data has been disclosed or is to be disclosed,
- The planned duration of the storage of personal data relating to specific details or, if not possible, criteria for determining the duration of storage,
- The existence of a right to correction or deletion of personal data concerning you, the right to limitation of processing by the controller or a right to object to the processing,
- The existence of a right to complain to a supervisory authority,
- All available information about the origin of the data if the personal data is not collected from the data subject,
- The existence of an automated decision-making process including profiling in accordance with Article 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, as well as the scope and desired impact of such processing for the data subject.
You have the right to demand information as to whether your personal data will be transmitted to a third country or an international organisation. In this context, you may request to be informed about the appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission.
Right to correction
You have a right vis-à-vis the data controller to correct and/or complete the data if the processed personal data relating to you is inaccurate or incomplete. The data controller is to make the correction immediately.
Right to restriction of processing
Under the following conditions, you may demand the restriction of the processing of your personal data:
- If you contest the accuracy of your personal data for a period that allows the data controller to check the correctness of personal data,
- The processing is unlawful, and you refuse the deletion of the personal data and instead require the restriction of the use of personal data,
- The data controller no longer needs your personal information for processing purposes, but you need it to assert, exercise or defend your rights, or
- You have objected to the processing in accordance with Article 21 (1) GDPR and it is not yet clear whether the legitimate interests of the controller prevail over yours.
If the processing of your personal data would be restricted, this data – aside from its storage – may only be processed with your consent or to assert, exercise or defend legal claims, or for the protection of the rights of another natural person or legal entity, or for reasons of substantial public interest.
If the restriction of the processing in accordance with the above conditions is limited, you will be informed by the data controller before the restriction is lifted.
Right to deletion
Deletion right
You can demand from the data controller that your personal data is deleted immediately and the data controller is obliged to delete this data immediately if one of the following reasons applies:
- Your personal data is no longer necessary for the purposes for which it was collected or processed in any other way,
- You revoke your consent, on which the processing was based, and any other legal basis for processing is lacking,
- You object, in accordance with Article 21 (1) GDPR to the processing and there are no overriding legitimate reasons for the processing, or
- You object to the processing in accordance with Article 21 (2) GDPR,
- Your personal data has been processed unlawfully,
- The deletion of personal data is required to fulfil a legal obligation under European Union law or a national law to which the data controller is subject,
- Your personal data was collected in relation to information society services offered pursuant to Article 8 (1) GDPR.
Providing information to third parties
If the data controller has made your personal data public and it is obliged to delete it under Article 17 (1) GDPR, it shall, taking into account the available technologies and the implementation costs, take appropriate measures, including those of a technical nature, to provide information that you, as the data subject, have demanded that they delete all links to this personal data or copies
or queries of this personal data.
Exception
A right to deletion does not apply if the processing is necessary
- to ensure the exercising of the right to freedom of expression and information,
- to fulfil a legal obligation which requires the processing in accordance with the law of the European Union and the Member States to which the controller is subject, or to perform a task carried out in the public interest or transferred to the data controller in the exercise of public authority,
- for reasons of public interest in the field of public health,
- for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes,
- to assert, exercise or defend legal claims.
Right to information
If you have asserted the right to the correction, deletion or restriction of the processing vis-à-vis the data controller, the controller is obligated to inform all recipients to whom the personal data has been disclosed, of this correction or deletion of data or restrictions to the processing, unless this proves impossible or would involve disproportionate effort.
You have the right with respect to the data controller, to be informed about these recipients.
Right to data portability
You have the right to receive personal data relating to you that has been provided to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without interference by the data controller, to whom the personal data has been provided if
- the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and
- the processing is carried out with the help of automated procedures.
In exercising this right, you also have the right to ensure that your personal data is transferred directly from one controller to another controller, as far as this is technically feasible.
Civil liberties and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data, which is required for the performance of a task in the public interest or in the exercise of public authority transferred to the data controller.
Right of objection
You have the right to object at any time to the processing of your personal data on the basis of Article 6 (1) (e) or (f) GDPR for reasons related to your personal situation; this also applies to profiling based on this provision.
In the event of an objection, the data controller will no longer process personal data unless it can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If the relevant personal data is processed in order to advertise directly, you have the right to object to the processing of your personal data for the purposes of such advertising at any time. This also applies to profiling insofar as it is in connection with such direct advertising.
If you object to the processing for the purposes of direct marketing, your personal data will no longer be processed for these purposes.
You have the option in connection with the use of information society services to exercise your right of objection using automated procedures, in which technical specifications are used.
Right to revoke consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time.
The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent carried until the revocation.
Automated decision-making on a case-by-case basis including profiling
You have the right not to be subjected to exclusive or automated processing, including profiling, based on the decision to be subjected, which has a legal effect on you or significantly impacts you in a similar way.
This does not apply if the decision
- is required for the conclusion or performance of a contract between you and the data controller,
- is admissible based on the laws of the European Union or the Member States to which the controller is subject, and this legislation contains appropriate measures in order to safeguard your rights and freedoms as well as your legitimate interests or
- is made with your express consent.
However, these decisions must not be based on special categories of personal data under Article 9 (1) GDPR, unless Article 9 (2) (a) or (g) GDPR applies and adequate measures have been taken to protect rights and freedoms, as well as your legitimate interests.
With regard to the cases referred to in numbers 1 and 3, the data controller shall take the appropriate measures to protect the rights and freedoms, as well as your legitimate interests, including the right to the intervention of at least one person on the part of the controller, the right to present your own position and to contest of the decision.
Right of appeal to a supervisory authority
Without prejudice to any other administrative remedies or remedies in court, the right to file a complaint to a supervisory authority, in particular in the Member State in which you reside, your place of work or the location of the alleged infringement if you believe that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint was lodged shall inform the appellant of the status and the results of the appeal, including the possibility of a legal remedy pursuant to Article 78 GDPR.
