GDPR – Privacy Policy

QE3-up GmbH

Last updated: December 28, 2023

On this page, we inform you about the processing of your personal data on our website.
How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use, or share your personal data when we have a legitimate purpose and a legal basis for doing so.
What do we mean by legal basis?
Consent (Art. 6 Para. 1 S. 1 lit. a GDPR) - You have given us your consent to process your personal data for the specific purpose that we have explained to you. You have the right to withdraw your consent at any time. Further information on how to withdraw your consent can be found in the "Exercising Your Rights" subsections in the following sections of this privacy policy.
Contract (Art. 6 Para. 1 S. 1 lit. b GDPR) - We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have asked you or you have taken certain steps yourself before entering into this contract.
Legal Obligation (Art. 6 Para. 1 S. 1 lit. c GDPR) - We need to use your data to comply with the law.
Vital Interests (Art. 6 Para. 1 S. 1 lit. d GDPR) - The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.
Public Task (Art. 6 Para. 1 S. 1 lit. e GDPR) - Processing your data is necessary for the performance of a task carried out in the public interest or because it is covered by a statutory task, e.g., for a statutory function.
Legitimate Interests (Art. 6 Para. 1 S. 1 lit. f GDPR) - The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not override these.
Please note that we may not be able to provide you with our website services if your data is processed to fulfill a contract or legal obligation and you do not provide the requested data.
Sharing of Data and International Transfer
As explained in this privacy policy, we use various service providers who help us provide our services and secure your data. When we use these service providers, it is necessary for us to share your personal data with them.
We have agreements with all service providers to whom we transfer your data that obligate them to protect your data.
If your personal data is shared outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an "adequate" data protection standard according to the European Commission, or by applying another safeguard, such as an enhanced contractual agreement, i.e., the Standard Contractual Clauses (SCCs) adopted by the European Commission.
For example, when we use US service providers, we rely on either SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs that we have concluded with our service providers by sending an email to the email address provided in this privacy policy.
Your Rights
If personal data about you is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. The Right to Information (Art. 15 GDPR)
You have the right to request from us confirmation as to whether your personal data is being processed. If this is the case, you have a right to information about this data and to the following information:

• Processing purposes

• Categories of personal data

• Recipients or categories of recipients

• Planned storage period or the criteria for determining this period

• The existence of the rights to:

  • Rectification, erasure, or restriction or objection

  • Lodge a complaint with the competent supervisory authority

• Where applicable, the origin of the data (if collected from a third party)

• Where applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope, and the expected impact

• Where applicable, transfer of personal data to a third country or international organization
   

2. Right to Rectification (Art. 16 GDPR)
If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

3. Right to Restriction of Processing (Art. 18 GDPR)
If one of the following conditions is met, you have the right to request restriction of the processing of your personal data:

• You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.

• In the context of unlawful processing, you refuse the erasure of the personal data and instead request the restriction of the use of the personal data.

• We no longer need your personal data for the purposes of processing, but you need your personal data to establish, exercise, or defend legal claims, or

• after you have objected to the processing, for the duration of the review of whether our legitimate grounds override your grounds.
   

4. Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR)
If one of the following reasons exists, you have the right to request immediate erasure of your personal data:

• Your data is no longer necessary for the processing purposes for which it was originally collected.

• You withdraw your consent and there is no other legal basis for the processing.

• You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21 Para. 2 GDPR.

• Your personal data is processed unlawfully.

• The erasure is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.

• The personal data has been collected in relation to offered services of the information society pursuant to Article 8 Para. 1 GDPR.

Please note that the above reasons do not apply insofar as the processing is necessary:

• For exercising the right of freedom of expression and information;

• For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.

• For reasons of public interest in the area of public health.

• For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.

• For the establishment, exercise, or defense of legal claims.
   

5. Right to Data Portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transfer to another controller.

6. Right to Object to Certain Data Processing (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you that is based on Art. 6 Para. 1 S. 1 lit. e or f GDPR. This also applies to profiling based on these provisions.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
7. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:

• Information about the browser type and version used

• The user's operating system

• The user's Internet service provider

• Date and time of access

• Websites from which the user's system accesses our website

• Websites accessed by the user's system through our website

This data is stored in the log files of our system.
This data is not stored together with other personal data of the user.

2. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Storage in log files is to ensure the functionality of the website. In addition, the data helps us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
3. Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Art. 6 Para. 1 S. 1 lit. f GDPR.
4. Duration of Storage
The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of users are deleted or alienated, so that an assignment of the calling client is no longer possible.
5. Exercising Your Rights
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user may object to this. Whether the objection is successful is to be determined within the framework of a balancing of interests.
Use of Cookies:
1. Description and Scope of Data Processing
When you visit our website, we use technical tools for various functions, especially cookies, which can be stored on your device. You have the choice when accessing our website and at any later time whether to allow the setting of cookies in general or which individual additional functions you want to select. You can make changes in your browser settings or via our consent manager.
Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, allowing certain information to flow to the entity that sets the cookie. Below we describe what types of cookies we use:
We use cookies on our website that are not technically necessary. Cookies that are not considered technically necessary are text files that do not only serve the functionality of the website but also collect other data.
By setting technically unnecessary cookies, the following data is processed:

• IP address

• Location of Internet users

• Date and time of the visit to the website

• Adaptation of advertisements to the user

• Tracking of browsing behavior

• Linking the website visit with other social media platforms

2. Purpose of Data Processing
The use of technically unnecessary cookies is for the purpose of improving the quality of our website, its content, and thus our reach and economic efficiency. By setting these cookies, we learn how the website is used and can continuously optimize our offering. In particular, these cookies serve the following purposes: Google Analytics and Pardot, for statistical purposes
3. Legal Basis for Data Processing
For the storage of information in the end user's terminal equipment and/or for access to information already stored in the end user's terminal equipment, the provisions of the Telecommunications Telemedia Data Protection Act (TTDSG) are applicable. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your terminal equipment is based on § 25 Para. 2 No. 2 TTDSG. This storage and access to information in your terminal equipment serves to facilitate your use of our website and to offer you our services as desired. Some functions of our website do not work without the use of these cookies and therefore could not be offered. The cookies are generally deleted after the end of the session (e.g., logging out or closing the browser) or after a predetermined period. Information about deviating storage periods for cookies can be found in the following sections of this privacy policy.
Insofar as cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. The basis for the storage and access to information in this case is § 25 Para. 1 TTDSG in conjunction with Art. 6 Para. 1 lit. a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future or subsequently grant it again by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate setting in your browser software. Please note that the browser settings made always only apply to the browser used. If personal data is processed following the storage of and access to information on your terminal equipment, the provisions of the GDPR are applicable. You can find information about this in the following sections of this privacy policy.
4. Exercising Your Rights
You can revoke your consent to the use of cookies at any time and manage your consent preferences at the following link: https://www.qe3-up.com
Newsletter
1. Description and Scope of Data Processing
On our website, there is the option to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us.
To provide this service, we collect the following data from you:

• Email address

• Last name

• First name

• Phone/mobile number

• Address

• IP address of the calling computer

• Date and time of registration

• Job title, company, name, country

During the registration process, your consent is obtained for the processing of the data and reference is made to this privacy policy.
In connection with the data processing for sending newsletters, there is no disclosure of the data to third parties. The data is used exclusively for sending the newsletter.
2. Purpose of Data Processing
The collection of the user's email address serves to deliver the newsletter.
The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.
3. Legal Basis for Data Processing
The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 Para. 1 S. 1 lit. a GDPR if the user has given consent.
4. Duration of Storage
The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. The user's email address is therefore stored for as long as the subscription to the newsletter is active.
The other personal data collected during the registration process is usually deleted after a period of seven days.
5. Exercising Your Rights
The subscription to the newsletter can be terminated by the affected user at any time. For this purpose, there is a corresponding link in every newsletter.
This also enables the revocation of consent to the storage of personal data collected during the registration process.
Email Contact
1. Description and Scope of Data Processing
On our website, it is possible to make contact via the provided email address. In this case, the personal data of the user transmitted with the email is stored.
The data is used exclusively for processing the conversation.

2. Purpose of Data Processing
In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.

3. Legal Basis for Data Processing
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest is to optimally answer your inquiry that you send by email.
If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.

4. Duration of Storage
The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. For personal data sent by email, this is the case when the respective conversation with the user is ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process is deleted after a period of seven days at the latest.

5. Exercising Your Rights
If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
Contact Form

1. Description and Scope of Data Processing
There is a contact form on our website that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.
At the time the message is sent, the following data is stored:

• Email address

• Last name

• First name

• Phone/mobile number

• Country

• IP address of the calling computer

• Date and time

• Single opt-in (check box) – privacy policy consent
   

2. Purpose of Data Processing
The processing of personal data from the input mask of the contact form or via the provided email address serves solely to process the contact.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal Basis for Data Processing
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest is to optimally answer your inquiry that you direct to us via the contact form. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b GDPR.

4. Duration of Storage
The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user is ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process is deleted after a period of seven days at the latest.

5. Exercising Your Rights
If the user contacts us via the input mask in the contact form, they can object to the storage of their personal data at any time, in the following way: opt-out
All personal data stored in the course of contacting us will be deleted in this case.
Email-Contact

1. Description and Scope of Data Processing
On our website, it is possible to contact via the email address provided. In this case, the personal data of the user transmitted with the email will be stored.
The data is used exclusively for processing the conversation.
2. Purpose of Data Processing
In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.
3. Legal Basis for Data Processing
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest is to optimally answer your inquiry that you send by email.
If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.
4. Duration of Storage
The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. For personal data sent by email, this is the case when the respective conversation with the user is ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process is deleted after a period of seven days at the latest.

5. Exercising Your Rights
If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
Use of Corporate Profiles in Career-Oriented Networks
1. Scope of Data Processing
The corporate profile is used for applications, information/PR, and active sourcing. We have no information about the processing of your personal data by the companies jointly responsible for the corporate profile. Further information can be found in the privacy policy of:

• LinkedIn

• XING

On our page, we provide information and offer users the option to communicate.
The corporate profile is used for applications, information/PR, and active sourcing.
We have no information about the processing of your personal data by the companies jointly responsible for the corporate profile. Further information can be found in the privacy policy of:
LinkedIn: https://www.linkedin.com/legal/privacy-policy XING: https://privacy.xing.com/en
If you perform an action on our corporate profile (e.g., comments, posts, likes, etc.), you may be making personal data (e.g., clear name or photo of your user profile) publicly available.
2. Legal Basis for Data Processing
The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest here is to optimally answer your inquiry or to provide the requested information.
If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.
3. Purpose of Data Processing
Our corporate profile serves to inform users about our services. Every user is free to publish personal data through activities.
4. Duration of Storage
The data generated by the corporate profile is not stored in our own systems.
5. Exercising Your Rights
You can object to the processing of your personal data that we collect as part of your use of our corporate presence at any time and assert your rights as a data subject as set out in the "Your Rights" section of this privacy policy. Please send us an informal email to the email address mentioned in this privacy policy.
Further information on exercising your rights can be found here: LinkedIn: https://www.linkedin.com/legal/privacy-policy XING: https://privacy.xing.com/en

Hosting
The website is hosted on servers of a service provider commissioned by us.
Our service provider is: T-Online / WIX
The servers collect and store information automatically in so-called server log files, which your browser automatically transmits when you visit the website. The stored information is:

• Information about the browser type and version used

• The user's operating system

• The user's Internet service provider

• Date and time of access

• Websites from which the user's system accesses our website

• Websites accessed by the user's system through our website

This data is not merged with other data sources. The collection of this data is based on Art. 6 Para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimize its functions.
The location of the website's server is geographically in the European Union (EU) or the European Economic Area (EEA).

Geotargeting
We use the IP address and other information provided by the user (especially postal code in the context of registration or ordering) for regional target group addressing (so-called "geotargeting").
Regional target group addressing serves, for example, to automatically display regional offers or advertisements to you, which often have a higher relevance for users. The legal basis for the use of the IP address and possibly other information provided by the user (especially postal code) is Art. 6 Para. 1 lit. f GDPR, based on our interest in ensuring a more precise target group addressing and thus providing offers and advertising with higher relevance for the users.
Part of the IP address and the additional information provided by the user (especially postal code) are merely read and not stored separately.
You can prevent geotargeting by using, for example, a VPN or proxy server that prevents exact localization. Additionally, depending on the browser used, you can also deactivate location localization in the corresponding browser settings (as far as the respective browser supports this).
We use geotargeting on our website for the following purposes:

• Customer approach

• Advertising purposes

Registration
1. Description and Scope of Data Processing
On our website, we offer users the option to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:

• Email address

• Last name

• First name

• Address

• Phone/mobile number

• IP address of the calling computer

• Date and time of registration

• Job title, company, country

• In the course of the registration process, the user's consent to the processing of this data is obtained.

2. Purpose of Data Processing
A registration of the user is necessary for providing certain content and services on our website. The registration of the user is necessary in particular for the following purpose: Access to protected content (information)
3. Legal Basis for Data Processing
The legal basis for the processing of data is Art. 6 Para. 1 S. 1 lit. a GDPR if the user has given consent.
4. Duration of Storage
The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection.
Regarding the registration data, your data will therefore be stored as long as your account is active.
5. Exercising Your Rights
As a user, you always have the option to cancel the registration. You can have the data stored about you changed at any time.
In detail, you can request deletion in the following way: Deletion request
If the data is necessary for the fulfillment of a contract or for carrying out pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.
Hosting Provider
1. Description and Scope of Data Processing
The website is hosted on servers provided by WIX. The servers automatically collect and store information in server log files, which your browser transmits when you visit the website.
2. Purpose of Data Processing
The use of WIX functions serves the delivery and acceleration of online applications and content.
3. Legal Basis for Data Processing
The collection of this data is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.
4. Duration of Storage
Your personal information is stored for as long as necessary to fulfill the purposes described in this privacy policy or as legally required.
5. Exercising Your Rights
Information on exercising your rights vis-à-vis WIX can be found at: https://www.wix.com/privacypolicy/
Integrated Third-Party Services
We do not use any service providers to provide the services offered on the website.
2. Purpose of Data Processing
The contact form serves to acquire potential new customers and their contact details.
3. Legal Basis for Processing Personal Data
The legal basis for the processing of users' personal data is generally the user's consent according to Art. 6 Para. 1 S.1 lit. a GDPR.
4. Duration of Storage
Your personal information is stored for as long as necessary to fulfill the purposes described in this privacy policy or as legally required, e.g., for tax and accounting purposes.
5. Exercising Your Rights
You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by preventing the storage of cookies from third-party providers on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Use of Google Tag Manager
1. Scope of Processing Personal Data
We use Google Tag Manager (https://www.google.com/intl/en/tagmanager/) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and its representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google).
With Google Tag Manager, tags from Google's services and third-party providers can be managed and bundled and embedded on an online presence. Tags are small code elements on an online presence that serve, among other things, to measure visitor numbers and behavior, to record the impact of online advertising and social channels, to use remarketing and targeting for audiences, and to test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager ensures the triggering of other tags, which may in turn collect data. Information on this can be found in the passages on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data. Further information about Google Tag Manager can be found at https://www.google.com/intl/en/tagmanager/faq.html and in Google's privacy policy: https://policies.google.com/privacy?hl=en
2. Purpose of Data Processing
The purpose of processing personal data is the collective and clear management as well as an efficient integration of third-party services.
3. Legal Basis for Processing Personal Data
The legal basis for the processing of users' personal data is generally the user's consent according to Art. 6 Para. 1 S.1 lit. a GDPR.
4. Duration of Storage
Your personal information is stored for as long as necessary to fulfill the purposes described in this privacy policy or as legally required.
Advertising data in server logs is anonymized by Google, according to their own information, by deleting parts of the IP address and cookie information after 9 or 18 months.
5. Exercising Your Rights
You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by Google by preventing the storage of cookies from third-party providers on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and related to your use of the online presence (incl. your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.com
For more information on objection and removal options regarding Google, please visit: https://policies.google.com/privacy?gl=EN&hl=en