INTRODUCTION

Thank you for visiting our website. We take data protection very seriously and endeavour to protect your personal data as part of our website offering.
By personal data we mean all data relating to the personal and factual circumstances of a natural person. Personal data collected on our website is used exclusively for our own purposes.

LEGAL BASIS FOR DATA PROCESSING
Consent: Insofar as we have obtained your consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) is the legal basis for data processing.
Contract: When processing personal data for the fulfilment of a contract to which you are a party, Article 6(1)(b) GDPR is the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Legal obligation: Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
In the event that vital interests of you or another natural person require the processing of personal data, Article 6(1)(d) GDPR is the legal basis.
Legitimate interest: If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities.

RIGHTS OF DATA SUBJECTS
As part of our data processing, your personal data is processed. You are entitled to the rights from the third chapter of the GDPR vis-à-vis our company.
We observe the rights to information, rectification, restriction of processing, erasure or portability of your personal data. You can assert these rights as follows
Right to information
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have a right of access to this personal data and to the following information
(a) the purposes of the processing;
b) the categories of personal data being processed
c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
f) the existence of a right to lodge a complaint with a supervisory authority
g) where the personal data are not collected from the data subject, any available information as to their source
h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Where personal data are transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
We will provide you with a copy of the personal data that is the subject of the processing. For any further copies you request, we may charge a reasonable fee based on administrative costs. If you make the request for information electronically, we must provide the information in a commonly used electronic format, unless you specify otherwise.
The right to receive a copy must not adversely affect the rights and freedoms of others.
Right to rectification
You also have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure ("right to be forgotten")
You also have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay where one of the following grounds applies:
(a) The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
b) You withdraw your consent on which the processing was based pursuant to Article 6 I lit. a GDPR or Article 9(2)(a) and there is no other legal basis for the processing.
c) You object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2).
d) The personal data have been processed unlawfully.
e) The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
f) The personal data have been collected in relation to the offer of information society services referred to in Article 8(1).
(2)If we have made the personal data public and we are obliged to delete it in accordance with paragraph 1, we shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you have requested the deletion of all links to this personal data or of copies or replications of this personal data. This does not apply if the processing is necessary a) for exercising the right of freedom of expression and information; b) for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; c) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3); d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or e) for the establishment, exercise or defence of legal claims.
Right to restriction of processing
(1)The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
(a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or
d) the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.
(2. Where processing has been restricted pursuant to paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. 4.5.2016 L 119/44 Official Journal of the European Union EN
(3. A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted.
Article 19 Notification obligation in relation to rectification or erasure of personal data or restriction of processing The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject of these recipients if the data subject so requests.
Article 20 Right to data portability
(1. The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
a) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and
(b) the processing is carried out by automated means. (2. In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
(3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
(4)The right referred to in paragraph 2 shall not adversely affect the rights and freedoms of others.
You also have the right to consult our data protection officer with regard to the aforementioned rights and on all questions relating to the processing of your personal data.
In addition, our customers can assert their right to lodge a complaint with the competent supervisory authorities.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
2) If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing
3) if you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes
4) In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
5) You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), unless the processing is necessary for the performance of a task carried out for reasons of public interest
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR

WEBSERVERLOGS
As part of the use of our website, connection information is stored in the server log files. 
This information includes
- IP address of the accessing system
- Browser information such as operating system used and screen resolution
- Website accessed
- originating website
- Time of the call
The web server logs are processed exclusively for security purposes.
We only use the log data for statistical evaluations for the purpose of operation, security and optimisation of the website. However, we reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence

COOKIE CONSENT with COOKIEBOT
Our website uses Cookiebot's cookie consent technology to obtain your consent to the storage of certain cookies on your end device and to document this in a data protection-compliant manner. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter referred to as "Cookiebot"). When you enter our website, a connection is established to Cookiebot's servers in order to obtain your consent and other declarations regarding the use of cookies. Cookiebot then stores a cookie in your browser in order to be able to assign the consents you have given or revoke them. The data collected in this way is stored until you ask us to delete it, delete the Cookiebot cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected. Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a, b GDPR. We have concluded an order processing contract with Cookiebot. This is a contract required by data protection law, which ensures that Cookiebot processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

COOKIES
This website uses cookies. Cookies are text files that are stored on your end device. Cookies can be read, transferred and changed by the website when the website is accessed. We only use cookies with random, pseudonymous identification numbers. These identification numbers are used to evaluate your usage behaviour on our website. At no time is the user profile assigned to the name of a natural person. If you use special functions (such as the shopping basket or "stay logged in") on our website, cookies are also used for these functions. 
It is possible to object to the use of cookies at any time by changing the settings in your internet browser. Laws Cookies can be deleted. Please note that if you deactivate cookies, you may not be able to use all the functions of our website to their full extent.
The exact functions of cookies can be found in the more detailed information in this privacy policy.

GOOGLE ANALYTICS
This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link https://tools.google.com/dlpage/gaoptout?hl=de."
We have concluded an order contract with Google Germany GmbH - GOOGLE ANALYTICS DEUTSCHLAND, which ensures that the personal data is processed exclusively in accordance with our instructions, usually within Europe. IP anonymisation (IP mask method) is activated on our website, which automatically anonymises the IP address. 
Further information on Google Analytics and data protection can be found at https://www.google.com/intl/de/analytics/privacyoverview.html.

GOOGLE ADWORDS
Our website uses Google AdWords Conversion Tracking. This is an analysis service of Google Inc, Amphitheater Parkway, Mountainview; California 94043, USA. The service places a cookie on your computer if you have come to our site via a Google advert. We do not use the cookie to identify you personally. It is only used to recognise whether a user has reached our website via an advertisement purchased from us. It is therefore possible to trace which adverts you used to visit our website and whether you then visited our website again. We use the findings from this analysis to customise our advertising in a more targeted manner.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

GOOGLE TAG MANAGER
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

YOUTUBE VIDEOS
Videos and plugins from the service provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA are used on the website. YouTube is legally represented by Google Inc. with its registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
As soon as a video is displayed on our website, even in a still image, a communication connection to the YouTube server is established via which the service receives various data. This data includes the IP address of your computer, any cookies already stored on your computer and information that has been stored as part of previous contacts with YouTube. If no data has been stored yet, the service stores cookies on your computer for the first time. When you contact YouTube, the service also receives information about any user account you may have with YouTube. Further information when interacting with the video, such as clicking the start, pause or end button, is also transmitted to the provider. You can stop the data processing if you visit a page without a video and delete all cookies from your computer.
Further information on data processing and notes on data protection by YouTube can be found at https://policies.google.com/privacy

CONTACT FORM
You can use the contact form to send us any data you wish. The data will be forwarded from our web server by e-mail to our company's e-mail inbox. Please note that communication via the contact form is not encrypted. Please use a secure communication channel for confidential communication in your own interest.

APPLICATIONS
Information on data protection as part of the application process
We collect and process personal data as part of the application process. We will ensure the highest possible protection of application data. The data that we collect and process as part of your application is protected against unauthorised access and manipulation by both technical and organisational measures.

Cross-job use of the application documents
We use the personal application data both for the respective advertised position selected by the applicant and for other positions that we manage and that are suitable for the respective applicant based on his/her personal data. These positions can be offered both at Q-railing Europe GmbH & Co. KG as well as within the group of companies (Q-railing Central Europe GmbH, Q-railing Business GmbH, G-Fittings GmbH, antiqua Guliker GmbH).
By entering or submitting the personal data and giving consent to the use of this personal data for the data processing described here, the applicant agrees that we may store the personal data in order to consider the applicant for future vacancies.

Cancellation
The applicant has the right to revoke his/her consent to Q-railing Europe GmbH & Co. KG, Q-railing Business GmbH and Q-railing Central Europe GmbH (depending on the position advertised) to revoke his/her consent to the collection and processing of his/her personal data at any time with effect for the future and without giving reasons. The applicant can send his/her revocation by simple declaration and without giving reasons to jobs@q-railing.com. In the event of cancellation, we will delete the applicant's personal data.

LOGIN AREA
You can register on this website in order to use additional functions on the site. We will only use the data you enter for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will reject the registration.
In the event of important changes, for example to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.
The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for the initiation of further contracts (Art. 6 para. 1 lit. b GDPR).
The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.

SHOP
On our website, you have the option of temporarily saving purchases in a shopping basket. Your product selection is stored in a session cookie for the duration of the user session. After closing the website in your browser, this cookie is automatically deleted.

DATA PROCESSING FOR ORDER PROCESSING
PSP Adyen 
We use the payment service provider PSP Adyen of Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, The Netherlands. The payments Sofort, Visa, Mastercard and Ratepay are completely taken over by our service provider. We do not receive the payout directly from these payment service providers, but from PSP Adyen. There are also no other acquirers involved. Your data is only passed on for the purpose of payment processing and only to the extent that it is necessary for this purpose. We use this service on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR.    

PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing. 
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full .
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorised to process your personal data if this is necessary for contractual payment processing.

NEWSLETTER
If you have entered your email address to receive a newsletter, we will only use the data to send you information in accordance with your newsletter registration.
When you register for the newsletter, we store your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorised person.
You can unsubscribe from the newsletter at any time here.

ONLINEMEETINGS
Microsoft Teams
We use external communication providers (third-party providers or platforms for our video conferences, audio conferences, webinars or other online meetings and online communications), in this case Microsoft Teams, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA. This takes place either
- in the context of our contractual or pre-contractual legal relationships pursuant to Art. 6 para. 1 lit. b GDPR,
- within the scope of your consent, if we have obtained this in advance (e.g. for a recording) in accordance with Art. 6 para. 1 lit. a GDPR or otherwise
- within the scope of our legitimate interest in a technically flawless online offering and its economically efficient design and optimisation in accordance with Art. 6 para. 1 lit. f GDPR.

Each time you use our external communication provider, all data that you provide, enter or display during communication (in particular inventory data such as name and email, usage data such as browser used, websites visited, length of stay, referrer URL and your IP address, content data such as audio and video communication and/or recording, chat history, shared screen content) is transferred to the external communication provider and stored by it. We ourselves use the most data protection-friendly settings possible, and you can also take such precautions. For example, you can log in with alias names or unique email addresses or (partially) deactivate your audio and video transmission.

As a result, your data will be transferred to the USA. We have concluded an order processing agreement with the external communications provider, according to which they will only process your data in accordance with our instructions. This DPA also stipulates that the transfer of data to the USA by Microsoft will only take place within the framework of the standard contractual clauses recognised by the ECJ as a possible basis for data export outside the EU.

Your data will remain stored as long as it is still required for the purposes of your consent, for contract fulfilment/processing, for legal prosecution by us or for our other legitimate interests or if we are required by law to retain your data.
Your data will not be passed on to third parties by us or the external communication provider. An exception may be an evaluation of the usage data for service and security purposes as well as for marketing purposes by the external communication provider. For further use of your data by the external communications provider, please refer to their privacy policy
https://privacy.microsoft.com/de-de/privacystatement
and the associated supplementary security information
https://www.microsoft.com/de-de/trust-center.
Insofar as the external communications provider stores cookies or other trackers on your computer, we also refer you to our general description in this privacy policy for the general handling and deactivation of cookies.

CUSTOMER SERVICE
Tawk.to
For the live chat on our website, we use the live chat Tawk.to of Tawk.to Inc, 187 East Warm Springs Road, SB119, Las Vegas, NV, 89119, USA, as part of our legitimate interest in a technically flawless online offering and its economically efficient design and optimisation in accordance with Art. 6 para. 1 lit. f GDPR.

When Tawk.to is called up, Tawk.to temporarily collects the IP address at the beginning in order to determine the country from which the live chat was started. This makes it possible to offer visitors customer service tailored to their needs. The collection of the IP address is solely for this purpose and is not permanently stored by Tawk.to.

In addition, Tawk.to stores the communication in the live chats. This can save you extensive explanations about your enquiry. If you do not wish this to happen, you are welcome to let us know using the contact details listed in the legal notice. Saved chats will then be deleted by us immediately. They will also be deleted by us after your enquiry has been dealt with, unless they are required for legal defence and no contract has been initiated or concluded as part of the chat and we (must) retain this data as contract data.

As a result, your data will be transferred to the USA.

You can find more information about Tawk.to's privacy policy at https://www.tawk.to/privacy-policy/. We have also concluded an order processing contract with Tawk.to, according to which Tawk.to has undertaken to process data only in accordance with our instructions. You can view this contract here: https://www.tawk.to/data-protection/dpa-data-processing-addendum/.

If you do not wish data to be transmitted to Tawk.to, you can prevent Tawk.to from setting cookies by selecting the appropriate settings in your browser. However, blocking cookies may restrict the function of our website and other websites you visit. You can find more information on the handling of cookies in the Cookies section of this privacy policy.

DATA PROTECTION CONTACT

Responsible for data processing within the meaning of Art. 4 No. 7 GDPR is
Q-railing Europe GmbH & Co. KG
Marie-Curie-Str. 8-14
46446 Emmerich on the Rhine

Tel: +49 2822/91569-0 
Fax: +49 2822/91569-70
Mail: privacypolicy@q-railing.com
Legal representative: Ronald Guliker 
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Data protection officer required by law
‍We have appointed an external data protection officer for our company.
SICODA GmbH
Rochusstraße 198 
53123 Bonn
Phone: 0228 286 140 - 60
Mail: info@sicoda.de