Data Protection Information for Visitors to the Website

General Information

The following information provides a simple overview of which personal data (this is all data that identifies you as a natural person (hereinafter referred to as the “data subject”) or makes you identifiable, such as name, address, email address or user behavior) we collect during your visit to our site and how this data is used. Data subjects are the visitors to our website and users of our online services.

Responsible body

The body responsible for data collection and processing is:

Erwin Quarder Systemtechnik GmbH
Fritz-Souchon-Str. 2
32339 Espelkamp
Phone: +49 5772 9114-0
Email: info@quarder.de
www.quarder.de

As the responsible body, we would like to explain below which data of yours is processed and how.

Data Protection Officer
If you have any questions about data protection, please do not hesitate to contact our Data Protection Officer, Mr. Thomas Werning.

He can be reached at:
werning.com GmbH – Dieselstraße 12 – 32791 Lage
teamDatenschutz@werning.com
Phone: +49 5232 980-4700

Data security/encryption
This website uses “Hypertext Transfer Protocol Secure” (https). The connection between your browser and our server is encrypted.

Timeliness and amendment of this information

We reserve the right to amend the content of this privacy policy at any time. This is usually done when the services used are further developed or adapted. Status of this declaration: 04.04.2022

Rights of data subjects

Your Rights as a Person Affected by Data Processing

Right to lodge a complaint

If you are of the opinion that the processing of personal data concerning you violates the General Data Protection Regulation, you have the right to lodge a complaint with the data protection supervisory authority responsible for us, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, https://www.ldi.nrw.de/, as well as with any other data protection supervisory authority.

Right to information, erasure, rectification and data portability

In accordance with Art. 15 GDPR, you have the right to obtain information about the data stored about you, including any recipients and the planned storage period. If incorrect personal data is processed, you have the right to have it corrected in accordance with Art. 16 GDPR. If the legal requirements are met, you can request the erasure or restriction of processing and object to the processing (Art. 17, 18 and 21 GDPR).

If you wish to have data erased, but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You can exercise your right to data portability if the technical options are available at the recipient and at our company.

Mr. Thomas Werning will be happy to assist you as a contact person regarding your rights as a data subject using the contact details provided above.

Legal Basis

The legal bases for our data processing are as follows in accordance with Art. 13 GDPR:

• Art. 6 para. 1 sentence 1 a) GDPR for the processing of personal data with the consent of the data subject.
• Art. 6 para. 1 sentence 1 b) GDPR for the necessary processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.
• Art. 6 para. 1 sentence 1 c) GDPR for the necessary processing of personal data for the fulfillment of a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country in which the GDPR is wholly or partially applicable.
• Art. 6 para. 1 sentence 1 f) GDPR for the necessary processing of personal data in order to protect the legitimate interests of us or third parties, unless the fundamental freedoms and rights and interests of the data subject prevail.

Legitimate interests are, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with other legal provisions.

For this purpose, we use service companies that are separately committed to secrecy and data protection within the scope of the provision of services. Data is only passed on to authorities if there are overriding legal regulations.

Right to withdraw consent

Consent that has been granted can be withdrawn by you with effect for the future in accordance with Art. 7 GDPR.

Website

Information about data processing on our website.

Website General

Purposes of processing

Presentation of the company, provision of services and/or sale of products as well as communication via the Internet. The purpose of data processing on this website is to provide information about the products and services of our company and to process applications with the possibility for users to contact the relevant contact persons in the company in a targeted manner.

General

If you have provided us with personal data, we use it to answer your inquiries, to advise you and process contracts concluded with you and for technical administration. Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing or for billing purposes or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future, see “Right to withdraw consent”.

The legal basis for the collection, processing and transfer of data within the scope of contract processing is Art. 6 para. 1 sentence 1 b) GDPR.

This data is erased after the applicable statutory retention periods have expired. If we are not subject to any statutory retention obligations, the data will be erased when the purpose ceases to apply.

You have a right to information and a right to object to your data stored by us at any time. Further information can be found under “Rights of data subjects” and “Right to withdraw consent”.

Server data collection

Purpose of processing

When you visit our site, various server statistics are automatically stored, which your browser transmits to our provider’s server: Among other things, the IP address of your device, date and time of access, name and URL of retrieved files, website from which access is made or from which you were directed to our site (referrer URL), browser used and, if applicable, the operating system of your device and the name of your provider are logged.

The data mentioned is processed by us for the purposes of establishing a smooth connection and system security. This data is not merged with other data sources. The IP address is anonymized. The connection data generated is automatically deleted; usually after a maximum of seven days. If the website is used improperly, log data, the further storage of which is necessary for evidentiary purposes, will be retained until the incident has been clarified.

The legal basis is Art. 6 para. 1 sentence 1 f) GDPR. Our legitimate interest arises from the fact that we want to ensure the secure operation of the website and want to detect any attacks.

Cookies

Our websites use so-called “cookies”. Cookies are small text files and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.

Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within the scope of this privacy policy and, if necessary, obtain your consent.

Hosting and Content Delivery Networks

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of providing our online services in a secure, fast and efficient manner by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions with regard to this data.

We use the following host:

RegioHelden GmbH
Rotebühlstraße 50
70178 Stuttgart

Conclusion of a contract for order processing

We have concluded a contract for order processing (AVV) with the above-mentioned provider. This is a contract required under data protection law that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

Storage Duration

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

Data transfer to third countries:

Our website includes tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

Contact form and request by email

Purpose of processing

When you use our contact form, we collect and store your name and email address for the purpose of responding to your inquiry. Providing a telephone number for a callback is optional. If you send us a contact request by email, we collect and store the email address and the data contained in the email.

The legal basis is Art. 6 para. 1 sentence 1 a) GDPR, as you consent to the above-mentioned processing of your data when using the form as well as sending an email. In addition, the legal basis also arises from Art. 6 para. 1 sentence 1 b), as the storage of the data is necessary for the fulfillment of a pre-contractual or possibly later contractual relationship.

The data will be erased when the purpose of storage no longer applies, i.e. after your email/contact form request has been answered or when the matter associated with the request has been finally clarified.

You have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent.

Information on the right to erasure and information can be found under “Rights of data subjects”.

Map display using Google Maps

Purpose of processing

After giving your consent to data transfer, you can display a map. If you would like to see the Google Map map, personal data will be sent to the operator of the map, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; and cookies will be set by the operator. It is therefore possible that the provider stores your access and can analyze your behavior. The privacy policy of Google Maps can be found at: https://policies.google.com/privacy

Note on the processing of your data collected on this website in the USA by Google: By clicking on “Yes, share data and load map on this page.”, you also consent in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR that your data will be processed in the USA. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly even without legal remedies.

The legal basis is Art. 6 para. 1 (a) GDPR, your consent.

Objection:

The consent is only valid once and is discarded directly on further page visits.

Company

Information about the data processing of our applicants, customers and business partners

Compliance with data protection regulations is of great importance to our company. We would like to inform you below about the collection of your personal data by us:

Applicant data

Purpose of processing

When you apply, we process data from you that we need as part of the application. This may include contact details (such as first name, last name, address, telephone number, email address), all data related to the application (resume, certificates, photo, qualifications, answers to questions, etc.) and, if applicable, bank details (to reimburse travel expenses).

The legal basis arises from Art. 88 GDPR in conjunction with § 26 para. 1 sentence 1 Federal Data Protection Act (BDSG neu).

Categories of recipients:

We treat your data confidentially and do not transmit it to third parties. If necessary, we use strictly bound service providers who support us, for example, in the areas of IT or the archiving and destruction of documents and with whom separate contracts for order processing have been concluded.

Duration of storage:

If you are not hired, we will regularly delete your data no later than 3 months after completion of the application process. In individual cases, individual data may be stored for a longer period (e.g. travel expense reports). The duration of storage then depends on the statutory retention obligations, e.g. from the German Tax Code (6 years) or the German Commercial Code (10 years).

Unless a hiring decision has been made, but your application is still of interest to us and you have checked the box in the field “I agree to be included in the applicant pool” in the data protection section, your application documents will be stored beyond the aforementioned periods. They will be automatically deleted after 10 years. If you wish to have your documents deleted at any time before the end of the 10 years, you must notify us of this in writing.

Your data protection rights:

As a data subject, you have the right to information about your personal data (Art. 15 GDPR) as well as to the correction of incorrect data (Art. 16 GDPR) or to deletion, provided that one of the reasons stated in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued. You also have the right to restriction of processing if one of the conditions set out in Art. 18 GDPR is met and, in the cases of Art. 20 GDPR, the right to data portability. In addition, as a data subject, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. The right to lodge a complaint may be exercised in particular with a supervisory authority in the Member State of your place of residence or workplace or the place of the alleged infringement.

Our data protection officer:

We are supported by our data protection officer in fulfilling our data protection obligations. In the event of a request, please state the company concerned in your request.

The contact details of our data protection officer are:

Mr. Thomas Werning | werning.com GmbH
Dieselstraße 12
32791 Lage
Tel.: 05232 980-4700
teamdatenschutz@werning.com

Other:

In addition to this information according to GDPR for online applications, the general data protection guidelines of the website of Erwin Quarder Systemtechnik GmbH (www.quarder.de) apply.

Customer data

Purpose of processing

We process data that we receive in the context of processing our business relationship with you. We receive this data directly from you. Either when you contact us, place an order or process an order (see point “Information on data collection and processing”).

Legal basis: The data collection and data processing is necessary for the execution of the contract and is based on Art. 6 para. 1 (b) GDPR. The use for direct advertising is based on Art. 6 para. 1 (f) GDPR. It is our legitimate interest to draw your attention to special offers by means of direct advertising. The data will not be passed on to third parties unless required by law, e.g. to the tax office within the framework of tax laws. The data will be deleted as soon as they are no longer required for the purpose of their processing or after expiry of the statutory retention periods (such as tax and commercial law relevant accounting documents: 10 years; commercial and business letters: 6 years; records on suppliers, type, quantity, acquisition, delivery: 3 years).

You are entitled to request information about the data stored about you, as well as to demand the correction of the data in the event of incorrect data or the deletion of the data in the event of inadmissible data storage. You also have the right to lodge a complaint with a supervisory authority (see point “Right to complain”).

Duration of data storage

After the contractually owed service has been provided, your personal data will be stored for the purpose of the statutory warranty for 2 years, for the fulfillment of the guarantee conditions for 5 years, for the purpose of the execution of follow-up orders (desired at the time of conclusion of the contract or at a later date) for 5 years and for tax purposes for 10 years.

Deletion of data

Your personal data will be deleted at the latest after expiry of the aforementioned periods.

Suppliers

Purpose of processing

We process data that we receive in the context of processing our business relationship with you. We receive the data directly from you when you place an order or process an order (see point “Information on data collection and processing”).

Legal basis: The data collection and data processing is necessary for the execution of the contract and is based on Art. 6 para. 1 (b) GDPR. The data will not be passed on to third parties unless required by law, e.g. to the tax office within the framework of tax laws. The data will be deleted as soon as they are no longer required for the purpose of their processing or after expiry of the statutory retention periods (such as tax and commercial law relevant accounting documents: 10 years; commercial and business letters: 6 years; records on suppliers, type, quantity, acquisition, delivery: 3 years).

You are entitled to request information about the data stored about you, as well as to demand the correction of the data in the event of incorrect data or the deletion of the data in the event of inadmissible data storage. You also have the right to lodge a complaint with a supervisory authority (see point “Right to complain”).

Video surveillance

Purpose of processing

The property of Erwin Quarder Systemtechnik GmbH is under video surveillance. The purpose of the video surveillance is to protect against theft and burglary as well as vandalism. We, as the responsible body, process personal image files that we collect as part of video surveillance on the company premises. The data recording system grants a 7-day recording. After that, the data will be irrevocably deleted.

Legal basis is Art. 6 para. 1 (f) GDPR. Our legitimate interest lies in burglary protection and the protection of our property and access control.

This data will only be passed on to investigating authorities in the event of criminal offences.

Platforms / Networks

Information about our presences on platforms and in social networks

Erwin Quarder Systemtechnik GmbH operates company profiles on Xing and LinkedIn.

The purpose of the presences is our legitimate interest to communicate with the users active there and to disseminate information about our company in the networks/platforms.

Legitimate interests (Art. 6 para. 1 (f) GDPR) – The processing is necessary to protect the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail.

Data processing is always carried out by the providers of the networks (usually for market research and advertising purposes). This takes place partly outside the area of the European Union, which is why our communication and information is only directed at active users who have consciously agreed to the terms of use of the respective providers.

The corresponding information on data protection and the data protection declarations can be found below:

Xing:
XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany
Data protection declaration: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Data protection declaration: https://www.linkedin.com/legal/privacy-policy

Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out