Processing of (personal) data by the entity in charge of the online application process
Status: 18 November 2024
The responsible and secure handling of personal data is very important to us. We comply with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable European regulations. Through this Privacy Policy, we would like to provide you with comprehensive and transparent information about the processing of your personal data.
Personal data means any information relating to an identified or identifiable natural person, such as a name, address, email address, or user behavior. For further definitions of terms used in this Privacy Policy, such as “Controller” or “Processor”, please refer to Article 4 GDPR.
Controller
The processing of personal data in connection with the use of the website operated at https://www.qct.io/ is carried out by:
Quanta Cloud Technology Germany GmbH
Rurbenden 48
52353 Düren
Germany
Email: infoqctg@qct.io
Data Protection Officer
You can contact the Data Protection Officer of QCT Germany GmbH at:
Quanta Cloud Technology Germany GmbH
Attn. Data Protection Officer
Rurbenden 48
52353 Düren
Germany
Email: datenschutz.qct@aixprivacy.de
Processing of Personal Data
We only process personal data if you have given your consent or if such processing is permitted by law.
This principle, known in data protection law as the “prohibition with reservation of permission”, means that personal data may only be processed on the basis of consent or a statutory legal basis.
The most relevant legal bases for us are set out in Article 6(1) GDPR, in particular where:
• the data subject has given consent pursuant to Article 6(1)(a) in conjunction with Article 7 GDPR;
• processing is necessary for the performance of a contract or for taking steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR;
• processing is necessary for the purposes of our legitimate interests, such as responding to inquiries, analyzing and improving our products, or increasing economic efficiency, pursuant to Article 6(1)(f) GDPR.
Categories of Data and Purposes of Processing
Informational Use of the Website
When you use our website solely for informational purposes, meaning you do not register or otherwise provide information to us, we only collect the personal data that your browser transmits to our servers.
When you access our website, we collect the following data based on our legitimate interests pursuant to Article 6(1)(f) GDPR. These data are technically necessary in order to display our website to you and to ensure the security, stability, and functionality of our IT systems:
• IP address
• Domain name of the website from which you accessed our website
• Websites visited within our online offering
• Names of retrieved files
• Date and time of access
• Name of your internet service provider
• Operating system and browser version, where applicable
The processing of the IP address serves the purpose of protection against and traceability of hacker and cyberattacks. The processing of the remaining data serves to deliver the content of our website, ensure the functionality of our IT systems, optimize our website, and guarantee the proper operation of the website.
Log file data are always stored separately from other personal data of users.
This processing is necessary to safeguard our legitimate interests and is justified following a balancing of interests in our favor.
We have a legitimate interest in ensuring that our website and the services offered through it function properly from a technical perspective and are protected against attacks. Your interests requiring protection do not outweigh our legitimate interests because we use the data appropriately for the stated purposes and you also benefit from the functionality of the website.
Your personal data will be deleted no later than 14 days after collection unless we are legally obliged or otherwise permitted by law to retain them.Contact by Email
If you provide us with personal data, for example by email, our legitimate interest in processing and responding to your email or inquiry constitutes the legal basis for processing pursuant to Article 6(1)(f) GDPR.
Contact Forms
We provide contact forms on our website through which customers and interested parties can contact us. Mandatory fields are marked with an asterisk (*).
As part of contacting us, the following information is required in order to process and respond to your inquiry:
• Company name
• Contact person
• Industry: Distributor / System Integrator / VAR / Cloud Service Provider / End Customer / Other
• Country
• Telephone number
• Email address
• Inquiry
• Verification code
We use the data submitted through our contact forms exclusively for the performance of a contract pursuant to Article 6(1)(b) GDPR, where applicable, in order to fulfill our obligations arising from the underlying contractual relationship.
If no contractual relationship exists between you and us, our legitimate interest in processing your inquiry constitutes the legal basis for processing pursuant to Article 6(1)(f) GDPR.
In addition, you may voluntarily provide information on how you became aware of QCT and any comments or additional contact details in the optional fields provided. We may process this information based on our legitimate interests pursuant to Article 6(1)(f) GDPR for processing your inquiry and any follow-up questions.
Purpose of Processing Personal Data
Unless otherwise stated, we process the personal data you provide on the basis of our legitimate interest in enabling the use of our website, ensuring IT security, and responding to inquiries and applications pursuant to Article 6(1)(f) GDPR.
Storage Period of Personal Data
Unless otherwise stated, we delete personal data once storage is no longer necessary for the performance or execution of a contract and provided that no legitimate interests on our part or statutory retention obligations (e.g. Section 147 German Fiscal Code (AO), Section 257 German Commercial Code (HGB)) prevent deletion.
No Unauthorized Disclosure to Third Parties
We treat the personal data you provide with the utmost care. We only disclose data to third parties if:
• this is necessary for the performance and execution of contractual relationships,
• you have given your consent,
• or disclosure is otherwise permitted under applicable legal provisions.
We use various service providers as processors within the meaning of Article 28 GDPR. Like us, these processors are subject to the requirements of European data protection law.
Protection of Personal Data
Through a combination of technical and organizational measures in line with the current state of the art, we protect both our website and the data stored within our area of responsibility against loss, destruction, unauthorized access, alteration, or disclosure by unauthorized persons.
The entry and transmission of personal data are encrypted using SSL (Secure Socket Layer) technology.
What is SSL?
A website encrypted with SSL transmits personal data in encrypted form to the server, making it impossible for third parties to intercept or read the data. An SSL certificate verifies our identity.
Depending on your browser, you can recognize a secure connection through the lock icon and/or the secure address indicator in the address bar. By clicking the lock icon, you can view our digital identity certificate.
What Does SSL Do?
Because data transmission is encrypted, you can assume that the information you enter can only be read by us. The secure connection indicator also confirms that you are connected to our server and not to a third-party website.Use of Cookies
To make our website attractive and enable the use of certain functions, we use cookies on various pages. Cookies are small text files that are stored on your device.
Some of the cookies we use are deleted automatically at the end of your browser session, i.e. when you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser during your next visit (persistent cookies).
When cookies are set, they collect and process certain user information to an individual extent, such as browser data, location data, and IP addresses.
Where we use cookies from third parties or for analytical purposes, we inform you separately within this Privacy Policy. We also request your consent via our cookie banner when you access our website.
We have a legitimate interest in ensuring that our online services can be used without technical issues and that all desired functions are available to visitors. The storage of necessary and functional cookies on your device is therefore based on Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Article 6(1)(f) GDPR.
All other cookies are used on the basis of Section 25(1) TDDDG and Article 6(1)(a) GDPR, provided that you give us the corresponding consent.
You may change your cookie preferences at any time and subsequently grant or withdraw consent. The cookie consent banner can be accessed at any time via the footer of our website.
The use of the cookie consent banner is justified pursuant to Article 6(1)(c) GDPR because we are subject to the legal obligations arising from Section 25 TDDDG. The tool helps us comply with our legal obligations under the TDDDG, the GDPR, and the relevant case law of the Court of Justice of the European Union regarding cookies.
Use of Third-Party Services
We use the following third-party services to analyze visitor behavior on our website, display advertising, or provide additional website functionality.
The use of these services requires your prior consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. We obtain this consent through our cookie banner.
If you consent to the use of one or more of the following services, various cookies may be placed by the respective providers.
By clicking "Accept All" in our cookie banner, you also consent pursuant to Article 49(1)(a) GDPR to the transfer of your data to the United States. The European Court of Justice considers the United States a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes without effective legal remedies.
Google Tag Manager
We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to manage website tags through a single interface. The Tag Manager itself does not create user profiles or store cookies. It merely transmits your IP address to Google, which is necessary for the operation of the service.
However, tags implemented through Google Tag Manager, such as Facebook Pixels or Google Ads tags, may transmit personal data to third parties if you have consented to the use of the respective services.
Google Analytics
Subject to your consent pursuant to Article 6(1)(a) GDPR, we use Google Analytics, a web analytics service provided by Google.
Your consent is obtained through our cookie banner and can be withdrawn there at any time with future effect.
We use Google Analytics to analyze and regularly improve the use of our website. The resulting statistics help us improve our services and make them more attractive to users.
Google Analytics uses cookies that are stored on your computer and enable an analysis of your use of the website. The information generated by these cookies about your use of the website is generally transmitted to and stored on Google servers in the United States.
This website uses IP anonymization. As a result, your IP address is shortened by Google within member states of the European Union or other states party to the Agreement on the European Economic Area before being transmitted to the United States.
Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there.
On behalf of the website operator, Google uses this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website and internet usage.
The IP address transmitted by your browser within the framework of Google Analytics is not combined with other Google data.
You may prevent the storage of cookies by adjusting your browser settings accordingly. However, please note that doing so may prevent you from using all functions of this website to their full extent.
YouTube
We use YouTube to display various videos on our website. YouTube is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
When you play an embedded video on our website, a connection is established to Google, through which your IP address and other technical information may be transmitted.
Privacy Policy:
https://www.google.com/policies/privacy/
Opt-Out:
https://www.google.com/settings/ads/
Facebook Plugins
Subject to your consent, we use various Facebook services on our website. Facebook is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These services primarily include social media plugins that allow content such as images, videos, texts, and buttons to be shared.
The processing of your IP address is required for the provision of these services.
For data protection purposes, we and Facebook Ireland Limited act as joint controllers with regard to the processing or receipt of data processed through Facebook social plugins embedded on our website.
The purpose of this joint processing is:
• Displaying content and advertising information
• Contacting users via Facebook Messenger
• Optimizing and improving ad delivery
• Personalizing functions and content
We have concluded Facebook’s Controller Addendum, which governs the allocation of responsibilities and the security measures implemented by Facebook.
In addition, Facebook may use so-called pixel tags for statistical or marketing purposes. These pixel tags allow Facebook to analyze visitor traffic and user behavior in order to display personalized advertising.
The data available to us as website operators are anonymous. However, if a user is logged into Facebook, Facebook may associate the visit to our website with the user's Facebook account.Our website uses plugins provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
These may include content such as images, videos, text, and buttons that allow users to express their appreciation of content, follow content creators, or subscribe to our posts.
If users are members of LinkedIn, LinkedIn may associate the use of these functions with the users’ LinkedIn profiles.
The mere integration of LinkedIn social plugins does not result in LinkedIn storing personal data. LinkedIn refers to data generated through plugins as "passive impressions."
If users actively interact with a plugin, for example by sharing content, LinkedIn may store personal data as "active impressions," regardless of whether the user has a LinkedIn account.
If users are logged in, the collected data may be associated with their LinkedIn accounts.
The user's browser establishes a direct connection with LinkedIn's servers whenever a plugin is used. LinkedIn may therefore process usage data such as:
• IP address
• Login information
• Device information
• Information about the internet or mobile service provider
If users access LinkedIn services via a mobile device and have granted the necessary permissions, LinkedIn may also determine their location.
Further information about LinkedIn:
Privacy Policy:
https://de.linkedin.com/legal/privacy-policy
SiteSearch360
Subject to your consent, we use the SiteSearch360 content search solution provided by SEMKNOX GmbH, Webergasse 1, Building B/1, 01067 Dresden, Germany.
We have concluded a data processing agreement pursuant to Article 28 GDPR with SEMKNOX.
When you use the search function on our website, the following information is transmitted to SiteSearch360 servers and processed for the following purposes:
User Search Queries
Search queries form the basis of search analytics. Understanding what users are searching for allows us to optimize search settings and website content to ensure users find the information they need.
These data are aggregated and are not personally identifiable.
They are stored until the SiteSearch360 account is deleted.
IP Address
The user's IP address is used to exclude certain users (e.g. internal users) from analytics and to prevent spam and misuse.
ss360LastQuery Cookie
This cookie stores the user's most recent search query so that the correct results can be displayed if the user returns to the search results page.
The cookie remains stored for 24 hours.
All communication between the website user and SiteSearch360 servers is encrypted using SSL (Secure Socket Layer).
Rights of Data Subjects
You have the following rights regarding the personal data concerning you:
• Right of access pursuant to Article 15 GDPR
• Right to rectification or erasure pursuant to Articles 16 and 17 GDPR
• Right to restriction of processing pursuant to Article 18 GDPR
• Right to data portability pursuant to Article 20 GDPR
• Right to object pursuant to Article 21 GDPR
You also have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data.
The competent supervisory authority is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Germany
Email: poststelle@ldi.nrw.de
Objection or Withdrawal of Consent
If you have granted consent to the processing of your personal data, you may withdraw this consent at any time.
Such withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Where we process your personal data on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing.
When exercising this right, we ask that you explain the reasons why we should no longer process your personal data as described.
In the event of a justified objection, we will review the matter and either cease or adapt the processing activities or explain the compelling legitimate grounds on which we continue processing.
You may object at any time to the processing of your personal data for direct marketing and data analysis purposes.
You can inform us of your objection using the contact details provided above.
Questions and Changes to this Privacy Policy
If you have any questions or comments regarding data protection, please contact our Data Protection Officer using the subject line "Data Protection."
As internet technologies and our business processes continue to evolve, we reserve the right to amend this Privacy Policy accordingly.
Any changes will be published on our website.
Privacy Notice for Applicants at QCG Computer GmbH
We offer applicants the opportunity to apply for positions with us (Controller: QCG Computer GmbH, Indeland Str. 2+4, 52249 Eschweiler, Germany).
Applications may be submitted by email, post, or through our online application portal operated by our service provider Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany.
We have concluded a data processing agreement pursuant to Article 28 GDPR with Personio.
Further information regarding data protection when using Personio is available at:
https://qcg.jobs.personio.de/privacy-policy?language=en
Below we provide information about the scope, purpose, and use of your personal data collected during the application process.
We assure you that your data will be processed in compliance with applicable data protection laws and all other legal requirements and that your information will be treated confidentially.
Nature, Scope, and Purpose of Data Processing in the Application Process
When you submit an application to us, we process the personal data associated with your application, such as:
• Contact details
• Communication data
• Application documents
• Notes from interviews and recruitment discussions
to the extent necessary to decide whether to establish an employment relationship.
The legal basis for this processing is Article 6(1)(b) GDPR in conjunction with Section 26(1) sentence 1 BDSG.
Your personal data will only be shared internally with individuals involved in processing your application.
If your application is successful, the data you have submitted will be stored in our systems for the purpose of carrying out the employment relationship pursuant to Article 6(1)(b) GDPR in conjunction with Section 26(1) sentence 1 BDSG.Retention Period for Applicant Data
If we are unable to offer you a position, if you decline an offer, or if you withdraw your application, we reserve the right to retain the data you submitted for up to six (6) months following the conclusion of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.
After this period, the data will be deleted and any physical application documents will be destroyed.
This retention period serves in particular as evidence in the event of legal disputes.
If it is apparent that the data will still be required after the expiration of the six-month retention period, for example due to a pending or anticipated legal dispute, deletion will only take place once the purpose for the extended retention no longer applies.
A longer retention period may also apply if:
• you have given your consent pursuant to Article 6(1)(a) GDPR, or
• statutory retention obligations prevent deletion.