Source: https://weq.com/privacy/
Timestamp: 2019-04-20 08:37:18+00:00

Document:
Data protection is of paramount importance to WeQ Global Tech GmbH.
As a company in the field of online and mobile marketing, it is essential for us and our customers that the provisions of the General Data Protection Regulation (GDPR) and the respective national data protection laws are complied within our work.
With this privacy statement, we want to inform You, our customers, and the public as to the legal basis upon which and in what way, to what extent and for what purpose we as the Controller process personal data and what rights You have as the data subject when You visit and use our website and services.
The processing of personal data takes place exclusively on a statutory basis and, insofar as no such laws exist for the specific processing, with your consent as the data subject concerned.
In some cases we use external service providers to process your data (“processors”). These have been carefully selected and commissioned by us, are contractually bound by data processing agreements, are subject to our directives and are regularly checked.
The aforementioned data will not be stored together with other personal data of yours.
The legal basis for the above processing is: Article 6 (1) sentence 1 lit. f GDPR. Our legitimate interest is based on the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
We also forward the above data in the context of contract data processing. Your personal data are used exclusively for internal purposes by our contract data processor (Art. 4 (8) GDPR). Any processing in the context of contract data processing is attributable to us as the Controller.
In the context of the send procedure, your consent is obtained and You are referred to this privacy statement in order for the data to be processed.
In the case of contact via the e-mail address specified on our website, your e-mail address and any further personal data submitted by You are stored and processed to answer your inquiry.
The legal basis for the above processing is: Art 6 (1) sentence 1 lit. a GDPR (contact form) and Art. 6 (1) lit. f GDPR (e-mail contact). Our legitimate interest results from the processing of the message you sent to us.
In the context of the subscription, your consent is obtained (Art 6 (1) sentence 1 lit. a GDPR) and You are referred to this privacy statement in order for the above data to be processed.
Subscription to our newsletter follows a so-called double opt-in procedure. This means, that after registration You will receive an e-mail asking You to confirm your registration. This confirmation is necessary so that no one can log-in with other e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP-address.
The registration procedure is recorded on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f GDPR. We want to provide a user-friendly and secure newsletter system that serves both – our business interests and the expectations of users and also allows us to provide proof of consent.
Sending of our newsletter and the performance measurement associated with it is based on the Your consent pursuant to Art. 6 (1) lit. a, Art. 7 GDPR in conjunction with § 7 (2) No. 3 German Fair Trade Practices Act (UWG) or on the basis of the legal permission pursuant to § 7 (3) UWG.
You may cancel the receipt of our newsletter at any time, i.e. by revoking your consent. You will find a link to unsubscribe from our newsletter at the end of each newsletter. We may store unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete, in order to be able to prove a previously given consent. The processing of these data is limited to the purpose of a possible defence against claims.
Our newsletter is sent out with the e-mail service provider “MailChimp”, a newsletter delivery platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data protection regulations of MailChimp can be viewed at https://mailchimp.com/legal/privacy/.
The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to currently comply with the European data protection level. Membership can be looked up here: https://www.privacyshield.gov/list.
MailChimp is used on the basis of our legitimate interests according to Art. 6 (1) lit. f GDPR and within the scope of Art. 28 (3) GDPR (Order Processing).
MailChimp may use recipient’s data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, MailChimp does not use the data of our newsletter recipients for contacting them or to pass the data on to third parties.
Our newsletters contain a so-called “Web-Beacon”, i.e. a pixel-sized file which is downloaded from our server when the newsletter is opened or, as we use MailChimp, from its server. When the Web-Beacon is being retrieved, certain technical information, such as Your browser type and Your operating system, as well as Your IP address and time of retrieval are initially collected.
This information is used to technically improve the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked upon. For technical reasons, this information can be assigned to the recipient. However, it is neither our endeavour, nor MailChimp´s endeavour to observe individual recipients. The evaluations help us to recognize the reading habits of our newsletter recipients, to adapt our contents accordingly or to send different contents according to the interests evaluated.
For the purpose of needs-oriented design and ongoing optimisation of our website, we use Google Analytics, a web analytics service provided by Google, Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).
On behalf of us as the operator of the website, Google shall use this information to evaluate your use of the website, compile reports on website activities and provide further services relating to website activity and Internet usage for the website operator. The IP address transmitted from your browser within the context of Google shall not be combined with other data by Google. The information may be forwarded to third parties, provided that this is required by law or insofar as such third parties process the information on a contract basis.
Google Analytics cookies are stored on the basis of Art. 6 Par. 1 lit. f DSGVO. Our legitimate interest is based on an analysis of Your user behaviour in order to optimise both our website and its advertising.
Further information is available in the Google privacy statement: https://www.google.com/intl/en/policies/privacy/.
In the area of recruiting, we use the recruiting system from Greenhouse Software Inc. (http://www.greenhouse.io), 110 5th Avenue, 3rd Floor, New York, NY 10011, United States (hereinafter “Greenhouse”).
We are the Controller under data protection according to Art. 28 GDPR and Section 62 BDSG (new) [German Federal Data Protection Act].
These submitted data are transmitted to Greenhouse in encrypted form and stored and processed there in a database to which we, as the Controller, have access.
We reserve the right to store your data in our applicant pool for a period of 6 months after completion of the application procedure, in order to identify any further interesting positions for You. By submitting your application, You agree to storage beyond the statutory requirements. You can revoke this consent at any time and object to the storage of your data.
The legal basis for the above processing is: Art. 88 GDPR, Section 26 BDSG (new) [German Federal Data Protection Act].
Blocking or deletion of data is carried out even if a storage period specified by the standards referred to expires, unless there is a need for further storage of the data in order to conclude or execute a contract.
You can assert all of these rights by contacting our Data Protection Officer at privacy@weq.com.
You also have the right to complain to a data protection supervisory authority in regard to the processing of your personal data by us.
The data protection authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.

References: Art 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 § 7
 § 7
 Art. 6
 Art. 28
 Art. 6
 Art. 28
 Art. 88