Source: https://www.qsc.de/en/privacy-statement/
Timestamp: 2019-04-21 11:01:55+00:00

Document:
We collect and process our users’ personal data only to the extent necessary for the provision of a functioning website and as required for the supply of our content and services. The collection and processing of users’ personal data is normally exclusively subject to their consent An exception applies in those cases where the applicable circumstances mean that the previous obtaining of such consent would be impossible, although such data are processed as permitted by law.
Whenever we obtain a person's informed consent for the processing of his or her personal data, the provisions of art. 6, sect. 1, subsection “a” of the EU General Data Protection Regulation (GDPR) shall apply as the legal basis.
If personal data are processed in order to fulfil a contractual agreement to which the person concerned is one of the parties, art. 6, sect. 1, subsection “b” GDPR shall apply as the legal basis. This shall also apply to processing operations that are necessary to implement pre-contractual provisions.
If and insofar as the processing of personal data fulfils a legal obligation to which our company is subject, art. 6, sect. 1, subsection “c” GDPR shall apply as the legal basis.
In the event of vital interests of the person concerned or of another individual requiring the processing of personal data, this shall take place on the legal basis of art. 6, sect. 1, subsection “d” GDPR.
If such processing is required to maintain a legitimate interest of our company or a third party, thereby outweighing the interests, fundamental rights and basic freedoms of the above person or persons, art. 6, sect. 1, subsection “f” GDPR shall apply as the legal basis for such processing.
OThe personal data of the party concerned shall be deleted or blocked as soon as the purpose of their storage no longer applies. Personal data may also be stored if such a provision is envisaged or required by European or national legislators in intra-Community regulations, laws or other rules to which the party responsible is subject. The data concerned shall likewise be saved or deleted as applicable whenever a specific storage period defined by the above standards expires, unless further storage is required to enter into or fulfil a contractual agreement.
These data are also stored in log files on our system. These data are not stored alongside users’ other personal information.
Article 6, sect. 1, subsection “f” GDPR provides the legal basis for the temporary storage of data and log files.
Temporary storage of the IP address by the system is required to allow the website data to be delivered to the user’s computer. This requires the user’s IP address to be saved for the duration of the session.
Storage in log files ensures proper functioning of the website. These data also allow us to optimise the website and provide secure protection for our IT systems. Data are not analysed or evaluated for marketing purposes in this context.
These purposes are also defined as our legitimate data-processing interest under the terms of article 6, sect. 1, subsection “f” GDPR.
Data are deleted as soon as they are no longer required to fulfil the purpose for which they were collected. In the case of data collected for the provision of website content, this occurs when the session concerned ends.
Data saved to log files are deleted no later than seven days after their collection. Storage for a longer period may be possible. In this case, users’ IP addresses are deleted or anonymised so that it is no longer possible to assign them to the client computers used to call up the website.
A website operator needs to collect data and store them in log files in order to be able to run the website concerned. There is thus no way for users to object to this.
Article 6, sect. 1, subsection “a” GDPR provides the legal basis for our processing, subject to the user's corresponding consent, of personally identifiable data in conjunction with cookies for analysis purposes.
We use analysis cookies to improve the quality of our website and its content. Analysis cookies let us know how the website is being used and allow us to keep its content optimised and up to date.
These purposes are also defined as our legitimate interest in the processing of personal data under the terms of article 6, sect. 1, subsection “f” GDPR.
Cookies are stored on the user’s computer and transferred to our site. This means that you, as the user, have full control over how cookies are used. Modification of the settings on your Internet browser allows you to disable or restrict the transfer of cookies. Previously saved cookies can be deleted at any time. This can also be carried out automatically. However, if you disable all the cookies on our website, you may not be able to access all the features and functions provided or use them to their full extent.
Visitors to our website can subscribe to our free newsletter. The data that you enter in the online newsletter subscription form are transferred to us. You must at least provide an e-mail address.
We will ask you to provide your consent to data processing during the registration procedure.
Article 6, sect. 1, subsection “a” GDPR provides the legal basis for our processing, subject to the user's consent, of data supplied when subscribing to the newsletter.
The user’s e-mail address is collected in order to deliver the newsletter.
Other personally identifiable data collected during the registration process are used to stop services being abused and to prevent any misuse of the e-mail address concerned. QSC must likewise be able at all times to verify that users have consented, in accordance with article 7, sect. 1 GDPR, to their personal data being used in order to send them the newsletter.
Data are deleted as soon as they are no longer required to fulfil the purpose for which they were collected. Users’ e-mail addresses (along with optional name, position and title) are then saved for as long as the newsletter subscription remains active.
All other personally identifiable data obtained during the registration process are normally deleted after a waiting period of seven days.
Users can cancel their newsletter subscriptions at any time. Each edition of the newsletter contains a link for this purpose.
We will ask you to provide your consent to data processing during the despatch procedure and refer you to our data-privacy statement.
It is also possible to contact us via the e-mail address posted on our website. In this case, the personally identifiable user details sent along with the message will be saved.
Article 6, sect. 1, subsection “a” GDPR provides the legal basis for our processing of data subject to the user’s consent.
Article 6, section 1, subsection “f” of DSGVO/GDPR shall provide the legal basis of the processing of data transmitted in the course of e-mail correspondence. If the purpose of this e-mail correspondence is the conclusion of a contractual agreement, processing shall also be subject to article 6, section 1, subsection “b” of the same.
We process the personally identifiable data obtained from the online form for the sole purpose of managing the new contact details. Our necessary legitimate interest likewise lies, in the event of contact being made by email, in being able to process the data concerned.
Other personally identifiable data processed during despatch of the message are used solely to prevent misuse of the contact form and safeguard the security of our IT systems.
Data are deleted as soon as they are no longer required to fulfil the purpose for which they were collected. In the case of personally identifiable data entered via the online form or sent by e-mail, this applies once the correspondence with the user concerned has ended. Correspondence is considered to be terminated once circumstances make it clear that the matter concerned has been dealt with conclusively.
All other personally identifiable data obtained during the despatch process are deleted after a maximum waiting period of seven days.
Users shall at all times be entitled to withdraw their consent to the processing of personal identifiable data. Users who enter into contact with us by e-mail shall at all times be entitled to oppose the storage of their personal identifiable data. If this occurs, the correspondence concerned cannot continue.
Users may revoke their consent at any time and oppose the processing of their data. This can be done, for example, by e-mailing widerruf@qsc.de.
All personal identifiable data obtained and stored when establishing contact will be deleted in such cases.
QSC collects and stores the user's full name, company name, telephone number and e-mail address, along with details of the requested service, whenever a user wishes to obtain specific quote from QSC relating to the user's specific data-centre service requirements. The user may also opt to send QSC a message, the contents of which will be saved by QSC.
Article 6, sect. 1, subsection “b” GDPR provides the legal basis for the collection and storage of user data.
QSC employs these details to draw up a quotation for data-centre services based on the user’s requirements.
The user’s data are stored for the duration of the quotation-issuing process.
QSC does not currently use analysis services like Matomo, Google Analytics, Google AdWords or Tag Manager.
You can ask the party responsible to confirm whether your personal data are being processed by us.
(8) The existence of automated individual decision-making, including profiling, in accordance with art. 22, sections 1 and 4 GDPR and – at least in these cases – full information on the logic involved and the scope and envisaged consequences of such processing for the person concerned.
You are entitled to demand information on whether your personal data are being transferred to a third-party country or an international organisation. You can in this context demand information on such transfers by application of the corresponding safeguards described in art. 46 GDPR.
You have the right, vis-à-vis the party responsible, to demand the correction and/or completion of your personal data that are found to be inaccurate or incomplete. The party responsible undertakes to apply such corrections with immediate effect.
(4) If you have expressed your opposition to processing under the terms of art. 21, sect. 1 GDPR and it has not yet been established whether the legitimate interests of the party responsible outweigh your grounds for making the request.
If the processing of personal data concerning you has been restricted, these data can then only be processed (other than for your storage purposes) with your consent, and in the following circumstances: to establish, exercise or defend legal claims; to protect the rights of other individuals or legal entities or for reasons of substantial public interest affecting the European Union or one of its member states.
If the restriction on processing is subject to one of the above-mentioned limitations, the party responsible will notify you accordingly before the restriction is lifted.
(1) The personal data concerning you are no longer required for the purposes for which they were obtained or otherwise processed.
(2) You revoke your consent under the terms of art. 6, sect. 1, subsection “a” or art. 9, sect. 2, subsection “a” GDPR, and there is no other legal basis for such processing.
(3) You express your opposition to processing under the terms of art. 21, sect. 1 GDPR and there are no legitimate overriding reasons for such processing, or you express your opposition under the terms of art. 21, sect. 2 GDPR.
(4) The personal data affecting you have been processed unlawfully.
(5) The deletion of personal data concerning you is required to fulfil a legal obligation, under the law of the European Union or that of its member states, to which the party responsible is subject.
(6) The personal data concerning you were obtained in relation to the offer of information society services within the meaning of art. 8, sect. 1 GDPR.
If the party responsible has disclosed personal data concerning you and is then obliged to delete such data under the terms of art. 17, sect. 1 GDPR, the party responsible shall, after taking into account the available technology and the cost of implementing appropriate measures (including those of a technical nature), inform the parties engaged to process your personal data that you have demanded, as the person concerned, that they delete all links to such personal data or copies or replications of the same.
(5) In order to establish, exercise or defend legal claims.
If you have exercised, vis-à-vis the party responsible, your right to correct, delete or restrict processing, that party shall be obliged to notify all parties to whom your personal data have been disclosed regarding this right to correct or delete data or restrict its processing, unless it can be demonstrated that such a step is impossible or that it entails unreasonable expense.
You then have the right to demand that the party responsible notify you regarding these recipients.
(2) Processing is based on automated procedures.
You are furthermore entitled, when exercising this right, to demand that personal data concerning you be supplied to you directly by a party acting on behalf of another responsible party, insofar as this is technically feasible. This must not affect the liberties or rights of other persons.
The right to data portability does not apply to the processing of personal data required for the performance of a task carried out in the public interest or in the exercise of a public function that has been transferred to the party responsible.
You have the right at any time, for reasons relating to your specific situation, to oppose the processing of personal data concerning you within the meaning of art. 6, sect. 1, subsections “e” or “f” GDPR. This also applies to provisions based on profiling.
The party responsible will then cease to process your personal data, unless it can be demonstrated that there are valid and legitimate grounds for processing which outweigh your interests, rights or freedoms; or if such processing is required for the establishment, exercise or defence of legal claims.
If personal data concerning you are processed for the purposes of direct advertising, you have the right at any time to oppose the processing of your personal data for advertising of this type. This also applies to profiling, insofar as it was carried out for the purposes such direct advertising.
If you oppose the processing of your data for the purposes of direct advertising, the personal data concerned will no longer be used for this purpose.
You have the option, in connection with the use of information society services (notwithstanding Directive 2002/58/EC), to exercise your right of objection by automatic means based on the technical specifications used.
You are entitled, without prejudice to any other administrative or judicial remedies available, to appeal to a supervisory authority, with particular reference to one based in your member state of residence, your place of work or the place where the alleged infringement took place, if you are of the opinion that the processing of personal data concerning you violates the terms of GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant regarding the status and outcome of the complaint, including the possibility of a legal remedy within the meaning of art. 78 GDPR.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 22
 art. 46
 art. 21
 art. 6
 art. 9
 art. 21
 art. 21
 art. 8
 art. 17
 art. 6
 art. 78