Qlar

Data protection declaration

1. Controller and Data Protection Officer

(1) Name and address of the Controller

The Controller, within the meaning of the General Data Protection Regulation (GDPR), as well as other data privacy provisions, is:

Qlar Europe GmbH
Pallaswiesenstraße 100
64293 Darmstadt
Germany
T +49 61 51-15 31 0
info@qlar.com

Management Board:
Dr. Jörg Ulrich, Manfred Bruckner

(2) Name and address of the Data Protection Officer

The Controller’s Data Protection Officer is:

Graf von Westphalen Verwaltungs GmbH
Poststr. 9 – Old Post Office
20354 Hamburg
datenschutz@qlar.com

2. General remarks on data processing

(1) Scope of the processing of personal data
We essentially only gather and use personal data of yours in so far as it is necessary to provide the website, as well as provide our services.

(2) Legal basis for the processing of personal data
You will find out under the specific data processing procedures on what legal basis the processing is being undertaken.

(3) Data erasure and storage duration
Your personal data is deleted or blocked by us once the purpose of the storage lapses. It may, however, be stored beyond the time limit for the purpose at hand if this has been stipulated by national or international legislation, to which we are subject. The data is, in such a case, blocked or deleted if a storage period prescribed by the said regulations expires, unless there is any necessity to store the data further in order to conclude or fulfill a contract.

3. Collection of data when visiting our website

(1) When using the website merely to obtain information, i.e. if you do not register or transmit information to us in any other way, we shall only gather the data that your browser transmits to our server. If you look at the website, we thereafter gather the following data, which are technically necessary in order to display our website to you and ensure its stability and security:

  • IP address
  • Date and time of the enquiry
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

(2) The legal basis is Section 25 para. 2 no. 2 of the Telecommunications Telemedia Data Protection Act (TTDSG) and Art. 6 para. 1 sentence 1 lit. f GDPR.

(3) In order to operate the website, it is absolutely necessary to gather the data to provide the website and store the data in log files. Consequently, you do not have the opportunity to object.

4. Cookies

(1) In addition to the data mentioned above, when you use our website cookies are stored on your computer. Cookies are small text files that are stored on your hard drive, assigned to the browser used by you, and by means of which the organization that places the cookie (in this case, us) receives certain information. Cookies are not able to execute any programs or transmit viruses to your computer. They serve the purpose of making our website more user-friendly and effective.

(2) This website uses session cookies: Session cookies are automatically deleted when you close your browser. They store a so-called session ID, with which various requests from your browser can be allocated to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

(3) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.

(4) The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.

5. The use of Google Analytics

(1) This web site uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies" (text files stored on your computer), allowing for an analysis of the way you use the site. The information generated by the cookie on your use of this website is usually transferred to a server of Google in the USA and saved there. If you activate IP anonymization on this website, your IP address is however first truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server of Google in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, in order to compile reports on the website activities, and in order to provide the website operator with further services associated with the use of the website and Internet.

(2) The IP address transmitted by your browser within the context of Google Analytics is not merged with other data of Google.

(3) You may prevent cookies being stored by setting your browser software accordingly; however, we would like to point out to you that, in this case, you may not necessarily be able to use all functions of this website in their entirety. You can, moreover, prevent the data generated by the cookie which relates to your use of the website (incl. your IP address) from being recorded by Google, as well as the processing of such data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?h|=de.

(4) This website uses Google Analytics, with the “_anonymizeIp()” extension. As a result, IP addresses are processed further in truncated form, so that a reference to any person can be excluded. Should the data gathered about you be attributed a personal reference, this will thus be excluded immediately, and the personal data immediately deleted in this way.

(5) We use Google Analytics to be able to analyze the use of our website and regularly improve it. For those exceptional cases, where personal data is transmitted to the USA, Google has submitted to the EU/US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(1)(f) GDPR.

(6) Information of the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms and conditions of use: https://www.google.com/analytics/terms/de.html,
overview on data privacy: https://www.google.com/intl/de/analytics/learn/privacy.html, as well as the
data privacy statement: https://www.google.de/intl/de/policies/privacy.

6. Use of plugins

Our website does not use any plugins from social networks. We only link to our profiles on the networks: LinkedIn, Xing, Facebook, Kununu. To the extent, we do not collect any personal data. If you want to be sure that no data is stored by these providers in regard to the visit to our website, we recommend logging out of them.

7. Use of YouTube

This website embeds videos from YouTube. The operator of YouTube is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to Google, this mode means that YouTube does not store any information about visitors before they watch a video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video. 

To counter this risk, we use the so-called "two-click solution". This means that you can only watch a YouTube video when you click on it and thus actively consent to the data transfer described above.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent attempts at fraud.

After the start of a YouTube video, further data processing operations may be triggered over which we have no influence.

The use of YouTube is in the interest of an appealing internet presence. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy.

Data transfer to the USA

YouTube is a service provided by a company based in the USA. If YouTube is active, your personal data may be transferred there and processed there. Google relies on the EU standard contractual clauses for the transfer of personal data. However, we would like to point out that the supervisory authorities and the EU Commission currently classify the USA as a country in which no level of data protection comparable to that in the EU can be guaranteed. For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) may process, analyse and permanently store your data on US servers for surveillance purposes and that you have no legal protection against this. We have no influence on these processing activities.  

8. Email contact

(1) If you contact us by e-mail, the data you provide (your e-mail address, possibly your name and telephone number as well as other information provided by you) will be stored by us in order to answer your enquiry. We delete this data as soon as the purpose for which it was stored no longer applies.

It may, moreover, be stored beyond that time if this has been stipulated by the European or national legislative authority in EU ordinances, laws or other regulations to which the Controller is subject. The data is also blocked or deleted if a storage period prescribed by the regulations mentioned expires.

(2) The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. Otherwise, the legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the aim of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

9. Your rights

You have the following rights vis-à-vis us with regard to your personal data:

(1) Right of access
You have the right to request information on the categories of data processed, processing purposes, any recipients of the data, the planned storage period (Art. 15 GDPR);

(2) Right to rectification
You have the right to request the rectification or completion of incorrect or incomplete data (Art. 16 GDPR);

(3) Right to erasure
You have the right to request the erasure of data in certain cases within the scope of Art. 17 GDPR - in particular if the data is no longer required for the intended purpose or is being processed unlawfully, or if you have withdrawn your consent or declared an objection;

(4) Right to restrict processing
Under certain conditions, you have the right to demand the restriction of data if deletion is not possible or the deletion obligation is disputed (Art. 18 GDPR);

(5) Right to withdraw consent
You have the right to withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR);

(6) Right to object to processing
You have the right to object, on grounds relating to your particular situation, to data processing which is based on a legitimate interest. In addition, you can object to the processing of your personal data for advertising and data analysis purposes at any time without giving reasons (Art. 21 para. 1 GDPR).

(7) Right to data portability
You have the right to data portability, i.e. you can receive the data you have provided to us in a commonly used, machine-readable format, such as CSV, and transmit it to others if necessary (Art. 20 GDPR).

(8) Right to lodge a complaint
If you are of the opinion that the processing of your data does not comply with data protection law or your rights have otherwise been violated in any way, you can also contact a supervisory authority, such as the 

Hessische Beauftragte für Datenschutz und Informationsfreiheit 

Gustav-Stresemann-Ring 1
65189 Wiesbaden 

Phone: 0611-1408 0
e-mail: poststelle@datenschutz.hessen.de