Data protection declaration
1. Data Protection – General Information
We are very pleased about your interest in our company. Data protection is of particularly high importance to us. In principle, it is possible to use the websites of HQ GmbH without providing any personal data. However, if you wish to use services of our company via our website, the processing of personal data may become necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the data subject.
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection declaration listed below this text.
2. Data Collection on Our Website
Who is responsible for data collection on this website?
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other provisions of a data protection nature is:
HQ GmbH
Triptiser Str. 20
07955 Auma-Weidatal
Germany
Tel.: +493662631760
E-Mail: info@hqgmbh.de
Website: hqgmbh.de
3. How do we collect your data?
Your data is collected, on the one hand, by you providing it to us. This may include, for example, data that you enter in a contact form or during an order.
Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data. This data is collected automatically as soon as you access our website. When using this general data and information, HQ GmbH does not draw any conclusions about the data subject.
4. What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior. Data transmitted, for example, via the contact form is used to process your request.
5. What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction, restriction, or deletion of this data. For this purpose, as well as for further questions about data protection, you can contact us at any time using the address provided in the imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
In addition, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. Details on this can be found in the data protection declaration under “Right to Restriction of Processing”.
6. Analysis Tools and Third-Party Tools
When visiting our website, your surfing behavior may be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your options to object can be found in the following data protection declaration.
7. General Information and Mandatory Information
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We point out that data transmission over the Internet (e.g., during communication via email) may have security vulnerabilities. A complete protection of data from access by third parties is not possible.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent already given at any time. A simple informal notification by email to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Object to Data Collection in Special Cases and Against Direct Marketing (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, Restriction, Deletion, and Correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of the data processing, and, if applicable, a right to correction, restriction, or deletion of this data. For this purpose, as well as for further questions about personal data, you can contact us at any time using the address provided in the imprint.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time using the address provided in the imprint. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
- If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
8. Data Collection on Our Website
Cookies
The websites use cookies in some cases. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies that are necessary to carry out the electronic communication process or to provide certain functions desired by you (e.g., shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If other cookies (e.g., cookies for analyzing your surfing behavior) are stored, these are treated separately in this data protection declaration.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
These data are not merged with other data sources.
The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.
Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. A simple informal notification by email to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
Inquiry by Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective processing of inquiries addressed to us.
The data sent to us via contact inquiries will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.
9. Newsletter
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. Further data is not collected or is only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6(1)(a) GDPR). You can revoke your consent to the storage of the data, the email address, and their use for sending the newsletter at any time, for example, via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected.
10. Data Protection Provisions on the Use of Adcell
The controller has integrated components of Adcell on this website. Adcell is a German affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based sales model that allows commercial website operators, so-called merchants or advertisers, to display advertising, usually remunerated via click or sale commissions, on third-party websites, i.e., with sales partners, also called affiliates or publishers. The merchant provides an advertising medium, such as an advertising banner or other suitable means of internet advertising, through the affiliate network, which is subsequently integrated by an affiliate on their own websites or promoted via other channels, such as keyword advertising or email marketing.
The operating company of Adcell is Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany.
Adcell sets a cookie on the data subject’s information technology system. Cookies have already been explained above. The tracking cookie from Adcell does not store any personal data. It only stores the identification number of the affiliate, i.e., the partner referring the potential customer, as well as the sequence number of the visitor to a website and the clicked advertising medium. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are handled via the affiliate network, i.e., Adcell.
The data subject can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting in the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Adcell from setting a cookie on the data subject’s information technology system. In addition, cookies already set by Adcell can be deleted at any time via an internet browser or other software programs.
The applicable data protection provisions of Adcell can be accessed at https://www.adcell.de/agb.
11. Payment Method: Data Protection Provisions on the Use of PayPal as a Payment Method
The controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal also offers the possibility to process virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal enables online payments to third parties or the receipt of payments. PayPal also performs trustee functions and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If the data subject selects “PayPal” as a payment option during the ordering process in our online shop, data of the data subject is automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.
The personal data transmitted to PayPal usually includes first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary for processing the purchase contract.
The transmission of the data is aimed at payment processing and fraud prevention. The controller will transmit personal data to PayPal, in particular, if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and the controller may be transmitted by PayPal to credit agencies. This transmission aims at identity and credit checks.
PayPal may pass on personal data to affiliated companies and service providers or subcontractors to the extent necessary to fulfill contractual obligations or if the data is to be processed on behalf of PayPal.
The data subject has the possibility to revoke consent to the handling of personal data at any time vis-à-vis PayPal. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.
The applicable data protection provisions of PayPal can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
12. Removed (Previously: Use of Google Analytics)
13. Data Protection Provisions on the Use of Google AdWords
The controller has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads in Google’s search engine results and in the Google advertising network. Google AdWords enables an advertiser to predefine certain keywords, by means of which an ad is displayed in Google’s search engine results only when the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed on topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.
The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to promote our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.
If a data subject reaches our website via a Google ad, a so-called conversion cookie is placed on the data subject’s information technology system by Google. Cookies have already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping cart of an online shop system, were accessed on our website. Through the conversion cookie, both we and Google can track whether a data subject who reached our website via an AdWords ad generated a sale, i.e., completed or canceled a purchase.
The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are used by us to determine the total number of users who were referred to us via AdWords ads, i.e., to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the data subject.
By means of the conversion cookie, personal information, such as the websites visited by the data subject, is stored. Each time our websites are visited, personal data, including the IP address of the internet connection used by the data subject, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.
The data subject can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting in the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the data subject’s information technology system. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.
Furthermore, the data subject has the possibility to object to interest-based advertising by Google. To do this, the data subject must access the link www.google.de/settings/ads from each of the internet browsers used and make the desired settings there.
Further information and the applicable data protection provisions of Google can be accessed at https://www.google.de/intl/de/policies/privacy/.
14. Data Protection for Applications and the Application Process
The controller collects and processes the personal data of applicants for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case if an applicant submits relevant application documents electronically, for example, by email or via a web form on the website, to the controller. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of managing the employment relationship in compliance with legal regulations. If no employment contract is concluded with the applicant by the controller, the application documents will be automatically deleted two months after notification of the rejection decision, provided no other legitimate interests of the controller oppose such deletion. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).