Privacy Policy

1. Privacy Policy – General Information

We are very pleased about your interest in our company. Data protection is of particularly high importance to us. Use of the HQ GmbH websites is generally possible without providing any personal data. However, if you wish to make use of services offered by our company through our website, processing of personal data may become necessary. If processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in the privacy policy set out below this text.

2. Data Collection on Our Website

Who is responsible for data collection on this website?

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of a data-protection nature is:

HQ GmbH
Triptiser Str. 20
07955 Auma-Weidatal
Germany
Tel.: +493662631760
Email: info@hqgmbh.de
Website: hqgmbh.de

3. How Do We Collect Your Data?

Some data is collected when you provide it to us. This may, for example, be data that you enter in a contact form or during an order.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data. This data is collected automatically as soon as you enter our website. HQ GmbH does not draw any conclusions about the data subject from the use of this general data and information.

4. What Do We Use Your Data For?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior. Data transmitted, for example, via the contact form is used to process your inquiry.

5. What Rights Do You Have Regarding Your Data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request correction, blocking or deletion of this data. For this purpose and for further questions concerning data protection, you may contact us at any time at the address stated in the legal notice. You also have the right to lodge a complaint with the competent supervisory authority.

You also have the right, under certain circumstances, to request restriction of the processing of your personal data. Details can be found in the privacy policy under “Right to Restriction of Processing”.

6. Analytics Tools and Third-Party Tools

When you visit our website, your browsing behavior may be statistically evaluated. This is done primarily using cookies and so-called analytics programs. Analysis of your browsing behavior is generally anonymous; the browsing behavior cannot be traced back to you.

You can object to this analysis or prevent it by not using certain tools. Detailed information on these tools and your options for objection can be found in the following privacy policy.

7. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Revocation of Your Consent to Data Processing

Many data-processing operations are possible only with your express consent. You can revoke consent you have already given at any time. An informal notification by email to us is sufficient. The lawfulness of data processing carried out prior to revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims (objection pursuant to Art. 21 para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right at any time to object to processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21 para. 2 GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. This right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request direct transfer of the data to another controller, this will be done only insofar as technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Blocking, Deletion and Correction

Within the framework of applicable statutory provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of data processing and, where applicable, a right to correction, blocking or deletion of this data. For this purpose and for further questions concerning personal data, you may contact us at any time at the address stated in the legal notice.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data. You may contact us at any time at the address stated in the legal notice. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data. If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of deletion.

If we no longer need your personal data but you need it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of deletion. If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may – apart from its storage – be processed only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

8. Data Collection on Our Website

Cookies

The websites use so-called cookies in some cases. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our offering more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can configure your browser so that you are informed when cookies are set and allow cookies only in individual cases, exclude acceptance of cookies for certain cases or generally, and activate automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.

Cookies that are necessary to carry out the electronic communication process or provide certain functions requested by you (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your browsing behavior) are stored, these are treated separately in this privacy policy.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version operating system used referrer URL hostname of the accessing computer time of the server request IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, server log files must be collected.

Contact Form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass this data on without your consent.

The processing of data entered into the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may revoke this consent at any time. An informal notification by email to us is sufficient. The lawfulness of the data-processing operations carried out prior to revocation remains unaffected by the revocation.

The data you enter in the contact form remains with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Inquiry by Email, Telephone or Fax

If you contact us by email, telephone or fax, your inquiry, including all personal data resulting from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your inquiry is related to performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and/or our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in effectively processing inquiries addressed to us.

The data sent to us through contact inquiries remains with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

9. Newsletter

If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively to send the requested information and do not pass it on to third parties.

The processing of data entered in the newsletter registration form is carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may revoke the consent given to store the data, the email address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The lawfulness of data-processing operations already carried out remains unaffected by the revocation.

The data you provide to us for the purpose of receiving the newsletter is stored by us until you unsubscribe from the newsletter and is deleted after unsubscribing. Data stored by us for other purposes remains unaffected.

10. Data Protection Provisions on the Use and Application of Adcell

The controller has integrated components of Adcell on this website. Adcell is a German affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based form of distribution that enables commercial website operators, known as merchants or advertisers, to display advertising, usually remunerated through click or sale commissions, on third-party websites, i.e. with distribution partners also known as affiliates or publishers. Through the affiliate network, the merchant provides an advertising medium, i.e. an advertising banner or other suitable means of internet advertising, which is subsequently integrated by an affiliate on its own websites or promoted via other channels such as keyword advertising or email marketing.

The operating company of Adcell is Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany.

Adcell places a cookie on the information technology system of the data subject. What cookies are has already been explained above. Adcell's tracking cookie does not store any personal data. Only the identification number of the affiliate, i.e. the partner referring the potential customer, as well as the sequence number of a website visitor and the advertising medium clicked are stored. The purpose of storing this data is to process commission payments between a merchant and the affiliate via the affiliate network, i.e. Adcell.

As described above, the data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting in the internet browser used and thereby permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Adcell from placing a cookie on the information technology system of the data subject. In addition, cookies already set by Adcell can be deleted at any time via an internet browser or other software programs.

The applicable data protection provisions of Adcell can be accessed at https://www.adcell.de/agb.

11. Payment Method: Data Protection Provisions for PayPal as a Payment Method

The controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. PayPal also offers the possibility of processing virtual payments by credit card if a user does not maintain a PayPal account. A PayPal account is managed via an email address, which is why there is no traditional account number. PayPal enables online payments to third parties to be initiated and payments to be received. PayPal also performs trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject selects “PayPal” as the payment option during the ordering process in our online shop, data concerning the data subject is automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.

The personal data transmitted to PayPal generally includes first name, surname, address, email address, IP address, telephone number, mobile telephone number or other data necessary for payment processing. Personal data relating to the respective order is also necessary for processing the purchase contract.

The purpose of transmitting the data is payment processing and fraud prevention. The controller will transmit personal data to PayPal in particular if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and the controller may under certain circumstances be transmitted by PayPal to credit agencies. The purpose of this transmission is identity and creditworthiness verification.

PayPal may pass personal data to affiliated companies and service providers or subcontractors insofar as this is necessary to fulfill contractual obligations or the data is to be processed on behalf of PayPal.

The data subject has the option of revoking consent to the handling of personal data by PayPal at any time. Revocation does not affect personal data that must necessarily be processed, used or transmitted for contractual payment processing.

The applicable data protection provisions of PayPal can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

12. – Google Analytics and Google Tag Manager
Google Tag Manager
Type and Scope of Processing
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website. This service enables us to manage website tags through an interface. The Tag Manager itself (which implements the tags) is a cookie-free domain and, according to Google, does not collect personal data. However, it triggers other tags (e.g. Google Analytics, Google Ads), which may themselves collect data. Due to the technical integration of Google Tag Manager, your IP address is transmitted to Google.
Purpose and Legal Basis
Google Tag Manager is used to efficiently manage marketing and analytics tools on our website. The legal basis for use is your express consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG.
Storage Period and Third-Country Transfer
Data transmission to the USA cannot be ruled out. Google uses standard contractual clauses for this purpose as a guarantee of an adequate level of data protection. Further information can be found in Google's privacy policy.
Revocation
You may revoke your consent at any time with effect for the future via our cookie settings.

Google Analytics 4
Type and Scope of Processing
We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), on this website. Google Analytics uses technologies such as cookies or device IDs that enable analysis of your use of the website. The information collected about your use (e.g. IP address, location, click paths) is generally transferred to a Google server in the USA and stored there. However, because GA4 has IP anonymization enabled by default, your IP address is shortened by Google beforehand within member states of the EU or in other states party to the Agreement on the European Economic Area.
Purpose and Legal Basis
The processing serves the statistical analysis of visitor behavior in order to optimize our website and marketing measures. The legal basis for this data processing is your express consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. No tracking takes place without your consent.
Storage Period
The data sent by us and linked to cookies is automatically deleted after the selected retention period has expired (14 months by default).
Revocation of Consent
You may revoke your consent at any time with effect for the future by adjusting the cookie settings on our website or installing the browser add-on to disable Google Analytics.

13. Data Protection Provisions on the Use and Application of Google Ads

Type and Scope of Processing
We use the “Google Ads” online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on this website. We use Google Conversion Tracking. If you reach our website via a Google advertisement, a conversion-tracking cookie is stored on your device. These cookies expire after 90 days at the latest and are not used for personal identification.
We also use the remarketing function. This enables us to present visitors to our website with personalized, interest-based advertisements on other websites within the Google advertising network.
Purpose and Legal Basis
Google Ads is used to measure the effectiveness of our advertisements and to display relevant offers to you. The legal basis for storing cookies and the subsequent data evaluation is your express consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG.
Third-Country Transfer
The data collected may be transferred to Google servers in the USA. Google uses standard contractual clauses to guarantee an adequate level of data protection. Details can be found in Google's privacy policy.
Revocation
You can deactivate participation in tracking at any time via Google Ads settings or revoke your consent in our cookie consent tool.

14. Consent to the Use of Cookies.

To ensure that our website functions properly, we use cookies. To obtain your valid consent to the use and storage of cookies in the browser you use to access our website and to properly document this, we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, Netherlands. Website: https://cookiefirst.com, referred to as CookieFirst.
When you access our website, a connection is established with the CookieFirst server so that we can obtain valid consent from you for the use of certain cookies. CookieFirst then stores a cookie in your browser so that only the cookies to which you have consented can be activated and so that this can be properly documented. The processed data is stored until the specified retention period expires or you request deletion of the data. Certain statutory retention periods may apply notwithstanding this.
CookieFirst is used to obtain the legally required consent to the use of cookies. The legal basis for this is Article 6 paragraph 1 letter c of the General Data Protection Regulation (GDPR).

Data Processing Agreement
We have concluded a data processing agreement with CookieFirst. This is a contract required under data protection law that ensures that the data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.

Server Log Files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:
– Your consent status or revocation of your consent
– Your anonymized IP address
– Information about your browser
– Information about your device
– The date and time of your visit to our website
– The URL of the website on which you saved or updated your consent settings
– The approximate location of the user who saved their consent preferences
– A universally unique identifier (UUID) of the website visitor who clicked the banner cookie

15. Data Protection for Applications and in the Application Process

The controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case when an applicant submits corresponding application documents electronically, for example by email or via a web form on the website, to the controller. If the controller enters into an employment contract with an applicant, the submitted data will be stored for the purpose of handling the employment relationship in compliance with statutory provisions. If the controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with deletion. Another legitimate interest in this sense is, for example, an obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).