Data Protection Information

Thank you for your interest in our website

The protection of your personal data is important to us. Below you will find information on the handling of your data that is collected through use of our website. Your data will be processed in accordance with the legal data protection regulations. Insofar as links are provided to other websites, we have neither influence nor control over the linked contents and the data protection regulations there. We recommend checking the privacy policies on the linked websites to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

Definitions of terms

Definitions
In principle, our privacy policy should be simple and understandable for everyone. For this reason, our privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

Data processing by visiting our website
When you visit our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during a running connection for communication between your internet browser and our web server:

  • Visited domain
  • The date and time of the request
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • The web browser, system language, operating system and device type used
  • IP address of the requesting computer
  • The amount of data transferred

We collect the listed data to ensure a smooth connection to the website and to enable a comfortable use of our website by the users. In addition, the log file serves the purpose of evaluating system security and stability, as well as providing administrative functions. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR.

General data processing on the website

Contact via application form or via e-mail
If you send us enquiries via application form or e-mail, your details from the enquiry form or e-mail, including the contact data you have provided there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. You are required to provide your name and an e-mail address to contact us. Your company is optional. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 letter f GDPR. Your data will be deleted after final processing of your inquiry, provided that there are no legal storage obligations to the contrary. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f GDPR.

E-Mail newsletter service
If you register for our e-mail newsletter, we will regularly send you information about offers or general news around QOA. Mandatory information for sending the newsletter is only your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you an e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on a link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Article 6 (1) lit. a GDPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending us a message to hello@qoacompany.com. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this as permitted or required by law.

If you have provided us with your e-mail address when ordering goods or services, we reserve the right to regularly send you offers on similar goods or services, such as those already ordered, from our product range by e-mail. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Article 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying us under hello@qoacompany.com. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

Our e-mail newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we pass on the data you provide during your newsletter registration. This forwarding takes place in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in the use of an effective, secure and user-friendly newsletter system. Please note that your data is usually transferred to a server of MailChimp in the USA and stored there. MailChimp uses this information to send the newsletter on our order. MailChimp does not use the data of our newsletter recipients in order to write to them itself or to pass them on to third parties. For the protection of your data in the USA and in order to be eligible to transfer your personal data to MailChimp, we have concluded a data processing agreement with MailChimp („Data Processing Agreement“) on the basis of the standard contractual clauses of the European Commission. This data processing agreement can be viewed at the following internet address: https://mailchimp.com/legal/data-processing-addendum/. You can view MailChimp’s privacy policy here: https://mailchimp.com/legal/privacy/.

Social Media Links

Social networks (e.g. Facebook, Twitter and Linkedin) are only integrated on our website as links to the corresponding services. After clicking on the integrated text/image link you will be redirected to the page of the respective provider. Only after forwarding is user information transmitted to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective data protection regulations of the providers you use.

Cookies

Our website uses cookies, which are stored by the browser on your device and which contain certain settings for the use of the website (e.g. for the current session). Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after closing the browser. Other cookies remain stored on your end device until you delete them, or the storage period expires. These cookies enable us to recognize your browser the next time you visit our website.

In some cases, cookies are used to simplify website processes by saving settings (e.g. the provision of already selected options). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can configure your browser in such a way that you are informed about the settings of cookies and only allow cookies in individual cases, excluding the acceptance of cookies for certain cases or in general deactivating cookies and activating the automatic deletion of cookies when closing the browser. The cookie settings can be managed using the following links for the respective browser.

You can also individually manage the cookies of many companies and features used for advertising. Use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices

Most browsers also offer a so-called “Do-Not-Track function” with which you can specify that you do not want to be “tracked” by websites. When this feature is enabled, your browser tells advertising networks, websites and applications that you do not want to be tracked for behavior-based advertising. Information and instructions on how to edit this function are available from the links below, depending on the provider of your browser:

You can also prevent scripts from being loaded by default. NoScript allows you to run JavaScripts, Java and other plug-ins only on trusted domains of your choice. For information and instructions on how to edit this feature, contact your browser vendor (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that when cookies are deactivated, the functionality of this website may be limited.

Data transfer and recipient

We do not sell your personal data to third parties. Your personal data will not be passed on to third parties unless

  • we have explicitly indicated this in the description of the respective data processing,
  • you have given your explicit consent in accordance to Art. 6 para. 1 sentence 1 lit. a GDPR,
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an outright interest worthy of protection in not disclosing your data,
  • that a legal obligation exists for the transfer pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and
  • this is required under Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you.

We also use external service providers, which we have carefully selected and commissioned in writing, to carry out our services. They are bound by our instructions and are regularly checked by us.  With which we have concluded order processing contracts in accordance with Art. 28 GDPR, if necessary. These are service providers for web hosting, sending e-mails and maintaining our IT systems, etc. The service providers will not pass this data on to third parties.

Duration of data storage

The duration of the storage of personal data is determined by the relevant legal retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is necessary for contract fulfilment or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if it is no longer necessary for these purposes or if you make use of your right of revocation or objection.

Rights of the persons concerned

In the following section you will find information on the rights of data subjects which are granted to you by the current data protection laws with regard to the entity responsible of the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information regarding their details.

The right to obtain without undue delay the rectification of inaccurate personal data from him or her in accordance with Art. 16 GDPR.

The right to obtain the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

The right, pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against the processing pursuant to Art. 21 GDPR.

The right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible.

The right to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state in which we have our registered office or, if applicable, that of your usual place of residence or work.

The right to revoke consent granted pursuant to Art. 7 para. 3 GDPR: You have the right to revoke consent to the processing of data once granted at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation;

Right of objection:

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is for reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to indicate a special situation.

If you would like to make use of your right of withdrawal or objection, simply contact us via the contact form.

Adjustments and status of the data protection declaration

Subject to alterations

We reserve the right to change this Privacy Policy at any time in accordance with the law. In this way, we can adapt them to current legal requirements and take account of changes in our services, e.g. when introducing new services. The most current version applies to your visit.

Status of this data protection regulation 28.04.2021.