PRIVACY STATEMENT

1. Data protection at a glance

General information
The following information in this clause 1. provides a clear overview of what happens to your personal data when you visit this web site. Personal data are all data using which you can be identified personally. You will find detailed information on the topic of data protection from clause 2. of this privacy statement.

Data collection on this web site

Who is responsible for data collection on this web site?
On this web site, data processing is undertaken by the person responsible. You will find this person's contact data in clause 3 of this privacy statement.

How do we collect your data?
On the one hand, your data are collected because you provide your data to us. These data can relate, e.g., to data you enter on a contact form.

Other data are collected automatically or after your consent during your visit to our web site by our IT systems. These data are above all technical data (e.g. web browser, operating system or time the page was viewed). These data are collected automatically as soon as you visit this web site.

For what do we use your data?
Some of the data are collected to ensure the correct provision of the web site. Other data can be used to analyse your user behaviour.

What rights do you have in relation to your data?
You have the right, at any time, to obtain, free of charge, information about the origin, recipient and purpose of your personal data saved. You also have the right to request the correction or erasure of these data or to object to the processing of your data. If you have granted your consent to the processing of your data, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request from us the restriction of the processing of your personal data. You also have a right to lodge a complaint with the responsible supervisory authority.

On these topics and if you have any other questions about the topic of data protection, you can contact us at any time at the address stated in clause 3.

Analytical tools and tools from third party providers
Your surfing behaviour may be evaluated statistically during your visit to this web site. This evaluation is undertaken using so-called analysis programs; however only if you provide your consent.
You will find detailed information about these analysis programs in clause 5 of this privacy statement.

2. Hosting and Content Delivery Networks (CDN)

External hosting
This web site is hosted by an external service provider (hoster). The personal data that are collected on this web site are saved on the hoster's servers. Primarily, these data are IP addresses, contact requests, metadata and communication data, contract data, contact data, names, web site accesses and other data generated via a web site.

The hoster is used for the purpose of the performance of a contract in relation to our potential and existing customers (art. 6 para. 1 lit. b GDPR) and in the interest of the secure, fast, efficient provision of our online services by a professional provider (art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to meet the hoster's service obligations and will follow our instructions in relation to these data.

Conclusion of a contract via order processing
We have concluded a contract about order processing with our hoster to ensure processing in compliance with data protection.

3. GENERAL INFORMATION AND OBLIGATORY INFORMATION

Data protection
The operators of this site take the protection of your personal data very seriously. We treat your personal data as confidential and as per the statutory data protection regulations as well as this privacy statement.

If you use this web site, various items of personal data are collected. Personal data are data using which you can be identified personally. This privacy statement explains which data we collect and for what we use these data. It also explains how this action occurs and its purpose.

We draw your attention to the fact that there may be gaps in data transmission security in the Internet (e.g. while communicating by e-mail). Complete protection of your data against access by third parties is not possible.

Information about the person responsible
The person responsible for data processing on this web site is:

Quality Analysis GmbH
Großer Forst 1
72622 Nürtingen

Telefon: +49 (0) 7022 2796-500
Fax: +49 (0) 7022 2796-511
E-Mail: info@qa-group.com

The person responsible is the natural or legal person which alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

Legally required data protection officer
We have nominated a data protection officer for our organisation.

Matthias Just
c/o Quality Analysis GmbH
Großer Forst 1
72622 Nürtingen

Telefon: +49 (0) 7022 2796-666
E-Mail: datenschutz@qa-group.com

Information about the forwarding of data to the USA
On our web site, some of the tools are from organisations based in the USA. If these tools are active, your personal data may be forwarded to the US servers of the related organisation. We draw your attention to the fact that the USA is not a secure third country in the context of EU data protection law. US organisations have the obligation to provide personal data to security authorities and the affected party cannot take legal action against this provision of data. It is therefore not possible to exclude that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for the purposes of surveillance. We have no influence over these processing activities. Data transfers to the USA only occur if you provide your consent. The data transfers are permissible as per art. 49 para. 1 lit. a GDPR.

Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw any consent you have granted at any time. The legality of data processing that occurred up until your withdrawal remains unaffected.

Right to object to data collection in specific situations as well as direct advertising (art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA, INCLUDING PROFILING BASED ON THESE PROVISIONS. FOR THE RELATED LEGAL BASIS ON WHICH THIS PROCESSING IS BASED, REFER TO THIS PRIVACY STATEMENT. IF YOU OBJECT, WE NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

WHERE YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA ARE THEN NO LONGER USED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the responsible supervisory authority
If there are infringements of the GDPR, the person affected has a right to lodge a complaint with a supervisory authority, in particular in the Member State where the person normally resides, of the person's workplace or the place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative procedures or judicial remedies.

Right to data portability
You have the right to the provision, to you or a third party, in a machine-readable format, of the data that we process based on your consent or while fulfilling a contract. If you request the transfer of the data to another controller, this action is only undertaken if technically feasible.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transfer of confidential content, for example orders or requests, that you send to the site operator. You can identify an encrypted connection by the change in the address bar of your browser from "http://" to "https://" and the padlock symbol in the bar in your browser.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Access, erasure and correction
In the context of the applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your personal data, their origin and recipients and the purpose of the data processing and, if necessary, a right to the correction or erasure of these data. On these topics and if you have any other questions about the topic of your personal data, you can contact us at any time at the address stated in the imprint.

Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. On this topic, you can contact us at any time at the address stated in the imprint. The right to the restriction of processing exists in the following situations:

If you contest the correctness of your personal data stored in our systems, as a rule we need time to check this issue. You have the right to request the restriction of the processing of your personal data for the duration of the check.
If your data were/are processed unlawfully, you can request the restriction of processing instead of erasure.
If we no longer need your personal data, however you need the data to exercise, defend or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
If you have objected according to art. 21 para. 1 GDPR, your interests and our interests must be weighed. If it has not yet been identified which interests predominate, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data are only allowed – with the exception of storage – to be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

Objection to advertising e-mails
The usage of the contact data published in the context of our obligations in the imprint or in this privacy statement for the purpose of sending unsolicited advertising and information materials is hereby rejected. The operators of the site expressly reserve the right to take legal action if advertising information, e.g. spam e-mails, is sent unsolicited.

4. DATA COLLECTION ON THIS WEB SITE

Cookies
Our web pages use so-called "Cookies". Cookies are small text files and do not cause any damage to your terminal equipment. They are saved on your terminal equipment either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after the end of your visit. Permanent cookies remain saved on your terminal equipment until you delete them or they are deleted automatically by your browser.

Cookies have various functions. Numerous cookies are necessary technically because certain web site functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising.

Cookies necessary to undertake electronic communication processes (necessary cookies) or to provide specific functions you require (functional cookies, e.g. for the shopping basket function) or to optimise the web site (e.g. cookies to measure the web audience) are saved based on art. 6 para. 1 lit. f GDPR, provided no other legal basis is stated. The web site operator has a legitimate interest in the storage of cookies for the technically correct and optimised provision of the web site operator's services. If consent to the storage of cookies was requested, the related cookies are saved exclusively based on this consent (art. 6 para. 1 lit. a GDPR); the consent can be withdrawn at any time.

If you visit our web site, necessary and functional cookies are saved on your terminal equipment for 12 months.

You can configure your browser such that you are informed if cookies are saved and only allow cookies in specific cases, exclude the acceptance of cookies in certain situations or generally exclude them, as well as activate the automatic deletion of cookies when you close your browser. The functionality of this web site may be restricted by the deactivation of cookies.

If cookies from third party organisations or for the purposes of analysis are used, we inform you separately under clause 5. of this privacy statement and only use them if you consent.

Server log files
We collect and automatically save information your browser sends to us in so-called server log files. This information is:

Browser type and version
Operating system you use
Referrer URL
Host name of the accessing computer
Time of server request
IP adress

These data are not combined with other data sources.

These data are collected based on art. 6 para. 1 lit. f GDPR. The web site operator has a legitimate interest in the technically correct depiction and the optimisation of the operator's web site – the server log files must be collected for this purpose.

Contact form
If you send us requests using a contact form, your information from the request form including the contact data stated there are saved by us for the purpose of processing the request and for any further related requests. We do not pass on these data without your consent.

These data are processed based on art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other situations, the processing is based on our legitimate interest in the effective processing of requests sent to us (art. 6 para. 1 lit. f GDPR) or your consent (art. 6 para. 1 lit. a GDPR) if this was requested.

The data you enter on the contact form remain with us until you request erasure, withdraw your consent to storage or the storage of the data is no longer necessary (e.g. after completion of the processing of your request). Mandatory statutory provisions – in particular retention periods – remain unaffected and can prevent erasure.

Request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your request including all personal data stemming from your request (name, request) are saved and processed in our systems for the purpose of processing your request. We do not pass on these data without your consent.

The data you provide to us in a contact request remain with us until you request erasure, withdraw your consent to storage or the storage of the data is no longer necessary (e.g. after completion of the processing of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected and can prevent erasure.

5. Analyse Tools AND ADVERTISING

Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Google Analytics
If you consent, this web site uses Google Analytics, a web analysis service operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies", i.e. text blocks that are saved on your computer and that make it possible to analyse your usage of our web site. The cookies are saved on your computer by Google for up to two years. The information about your usage of this web site produced by a cookie is generally transferred to a Google server in the USA and saved there. On this web site, we have expanded Google Analytics with the code "gat._anonymizeIp();" to ensure your IP address is not collected in its full length, only in a truncated form (so-called IP masking). Although your identification is made more difficult in this manner, it cannot be excluded that Google may combine your IP address with other identification measures and be able to assign the IP address to you.

The legal basis for the data processing is art. 6 para. 1 lit. a GDPR.

You can find information about how Google processes your data in the privacy statement issued by Google: https://policies.google.com/technologies/partner-sites?hl=en

You can also prevent the storage of cookies by means of the corresponding configuration of your browser software; however we draw your attention to the fact that you may not be able to use the full functionality of this web site in this situation. Finally, by downloading and installing the browser plugin available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en, you can also prevent the collection of the cookie-generated data related to your utilisation of the web site (incl. your IP address) by Google as well as the processing of these data by Google.

MOUSEFLOW (MOUSEFLOW APS)

This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (only with a pseudonymised IP address). This creates a log of mouse movements and clicks with the intention of randomly playing back individual website visits and deriving potential improvements for the website from them. The processed information will not be passed on to third parties.
All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. Without this consent, Mouseflow will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
In order to permanently object to the data collection and creation of pseudonymised user profiles and the setting of cookies for the future, you can alternatively download and install an opt-out cookie from the website listed below: www.mouseflow.de/opt-out/
You can see more information and Mouseflow's privacy policy here: https://mouseflow.com/privacy/

LEADREBEL

We analyze our visitor data with the help of an external service provider. For this purpose, we pass on the data obtained from the use of IP research to Pulserio AG, Wassergrabe 3 6210 Sursee, Switzerland, https://leadrebel.io/. Categories of data subjects are website visitors and users of our web services. The purpose of the processing is the evaluation of the data obtained from IP research for lead generation. If the visitors to our site are asked for their consent, the legal basis for the processing of the data is consent within the meaning of art. 6 paragraph 1 lit. a GDPR. Otherwise, the data will be processed on the basis of our legitimate interest within the meaning of art. 6 Paragraph 1 lit. f GDPR processed. Our legitimate interest lies in lead generation by analyzing the data obtained with the help of IP research. On this page: https://leadrebel.io/optout you have an opt-out option. In the event of an opt-out, your data will no longer be recorded by LeadRebel.

6. Newsletter

Newsletter data
If you want to receive the newsletter offered on the web site, we need from you an e-mail address as well as information that allows us to check that you are the owner of the e-mail address given and consent to receive the newsletter. Other data are not collected or are only collected on a voluntary basis. We use these data to send the information requested and do not pass the data onto third parties.

At any time you can withdraw your consent to the storage of the data, the e-mail address as well as its usage for sending the newsletter, for instance using the "Unsubscribe" link in the newsletter. The legality of data processing that has already occurred remains unaffected.

Your data saved in our systems for the purpose of receiving the newsletter are saved by us to send the newsletter until you unsubscribe from the newsletter. For the purpose of the verification of consent, we save the data stored until 31 March of the fourth calendar year after sending the last newsletter. Data saved in our systems for other purposes remain unaffected.

The legal basis for the processing for the purpose of sending the newsletter is art. 6 para. 1 lit. a GDPR. The legal basis for the processing for the purpose of the verification of consent is art. 6 para. 1 lit. c combined with art. 5 para. 2 GDPR, art. 7 para. 1 GDPR and art. 24 para. 1 GDPR as well as art. 6 para. 1 lit. f GDPR. The legitimate interest in processing based on art. 6 para. 1 lit. f GDPR is defence against legal claims.

7. APPLICANT DATA

On our web site we provide information about vacancies in our team. You can send us your application using our application form. We process your data to handle your application procedure, which means that your application will be viewed by our employees who are responsible for a pre-selection. Your data will not be passed on to third parties and we will not use your data for other purposes.

Your applicant data will only be stored by us as long as the position is vacant. If we want to include you in our pool of applicants, we will contact you accordingly and ask for your consent.

The legal basis for processing your personal data is clause 26 BDSG (German Federal Data Protection Act) as well as art. 88 GDPR.

9. Timeliness and amendment of this privacy policy
Date: 17. January 2021.