The protection of information relating to you, such as your name, your telephone number, your e-mail address or your IP address (so-called “personal data”), is an important concern to us. Therefore, we operate our websites (“website”) and our services in accordance with the applicable data protection laws, in particular the EU General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, “BDSG”).
Table of contents
1. Who is the controller? Who is the data protection officer?
2. What do we do with your personal data?
a. When you use our website or contact us
b. When you register on our platform and use our SDN service
c. When you order our newsletter and/or if you have not objected to the use of your email address for our own advertising purposes
d. When you give us your consent to advertising
e. When you follow us on Facebook and other third-party social media platforms
f. When you participate in a raffle
g. When you apply for a job with us
h. Use of Google reCAPTCHA
i. If we sell or restructure our company and/or a service
j. When we anonymize your personal data
k. When you allow the use of cookies/identifiers and analytics tools in your browser
3. How long do we store your personal data?
4. What are your rights as a data subject?
5. In what context do we create automatic profiles?
6. Data transfer to third countries
7. Data security
_______________________________________________________________
1. Who is the controller? Who is the data protection officer?
The controller of this website and regarding our services is:
3Q GmbH
Belfortstraße 5
81667 München
Email: office@3qsdn.com
You can find more information in our legal notice at https://3q.video/en/help-center/imprint.
You will find the contact details of our data protection officer below:
David Zinzius
Optiqum Unternehmensberatung GmbH
Siegburger Straße 223
50679 Cologne (Köln), Germany
Phone: +49 221 82 95 91 0
Email: datenschutz@optiqum.de
Any data subject may contact our data protection officer directly at any time regarding any and all questions and suggestions regarding data protection.
2. What do we do with your personal data?
a. When you use our website or contact us
The provision of this website requires the processing of personal data, such as your IP address. This processing is necessary for the retrieval of the content displayed on this website (including its functions) and due to IT security measures.
You also have the option of contacting us (e.g. by email, via our contact form, etc.). For this purpose, we process the personal data that you provide to us.
(1) Legal basis
The processing of your personal data for the provision of this website and for our communication with you is based on our overriding legitimate interest. For the provision of this website, it is technically necessary that we process certain personal data (e.g. the IP address). For our communication with you, it is necessary that we process your respective personal data.
(2) Balancing of interests
As part of the required balancing of interests, we have weighed up your interest in confidentiality against our interests in providing this website and answering your contact request. Your interest in confidentiality recedes in each case. Otherwise, we would not be able to provide you with this website or respond to your contact request.
(3) Recipient categories
We use service providers to provide our website. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in processing personal data as we do ourselves. Some service providers that we use also process your personal data outside the EU/EEA (see the section “Data transfer to third countries” below).
(4) Mandatory information
The email address is the only mandatory field that must be completed. We require this information in order to contact you. If you do not provide such data, we cannot contact you.
b. When you register on our platform and use our SDN service
Our customers, or employees or other authorized persons of our customers, have the option to register on our platform and use our SDN service.
For this purpose, we collect the personal data that you provide to us. When registering on our platform, we also process the IP address of the data subject and the timestamp of the registration. For this purpose, it may also be necessary for us to store and/or read data on your end device (e.g. your computer, smartphone or tablet).
This customer area is used to set video settings with regard to our SDN service.
(1) Legal basis
We process the personal data of our customers in order to take steps at the request of the data subject prior to entering into a contract and for the performance of the corresponding contract.
We process the further personal data of employees or other authorized persons of our customers in the context of registration and use of our platform on the basis of our overriding legitimate interest.
(2) Balancing of interests
As part of the required balancing of interests, we have in each case weighed up the confidentiality interests of the respective data subject and our interests in the processing of further personal data within the framework of registration and contract performance.
The interest in confidentiality of the data subject recedes in each case. Otherwise, we would not be able to ensure the execution of the contract with the respective customer and we would not be able to take protective measures to prevent misuse.
(3) Recipient categories
We use service providers to provide our platform. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in processing personal data as we do ourselves. Some service providers we use also process your personal data outside the EU/EEA (see the section “Data transfer to third countries” below).
(4) Mandatory information
All fields of our corresponding online form are mandatory. This personal data is required for the conclusion of a contract. If you do not provide this personal data, we cannot conclude the respective contract.
c. When you order our newsletter and/or if you have not objected to the use of your email address for our own advertising purposes
You can register for our newsletter(s) by giving the corresponding consent. For this purpose, we collect the personal data that you enter in the registration form. Registration for our newsletter takes place via the so-called double opt-in process, i.e. after registration you will receive an email in which you are asked
to confirm your registration. This confirmation is necessary so that no one can register with another person’s email address. The registration process for the newsletter is recorded in order to be able to prove that it was carried out in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address.
When we receive your email address as part of the registration for our services, we will process it in order to send you advertising for our own similar goods or services, unless you have objected to this use. You can object to this use at any time, without costs arising by virtue thereof, other than transmission costs in accordance with the basic rates. Please send your objection to our contact details above. You can also use the opt-out link in one of our advertising emails.
(1) Use of tracking pixel
Our mailings contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows us to perform a statistical evaluation of the success or failure of online marketing campaigns. We can use the embedded tracking pixel to see whether and when an email was opened by a data subject and which links in the email were called up by the data subject.
We collect such personal data via the tracking pixels contained in the mailings in order to optimize the sending of mailings and to better adapt the content of future mailings to the interests of the data subject. This personal data is not passed on to third parties. Data subjects are entitled at any time to withdraw the separate declaration of consent given in this regard via the double opt-in procedure. After a withdrawal, this personal data will be deleted by the controller. We automatically interpret a cancellation from the receipt of mailings as a withdrawal.
(2) Legal basis
Your consent is the legal basis for our respective data processing. You can withdraw your consent at any time with effect for the future.
If you have not objected to the use of your email address for our own advertising purposes, the legal basis is our legitimate interest in conjunction with a statutory provision (Section 7 (3) German Federal Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb – “UWG”)).
(3) Recipient categories
We use a service provider to send our newsletter. We transmit personal data to this service provider for this purpose. These service providers are contractually obligated by us to exercise the same care in processing personal data as we do ourselves. Some service providers that we use also process your personal data outside the EU/EEA (see the section “Data transfer to third countries” below).
d. When you give us your consent to advertising
When you give us your consent to advertising, we will process your corresponding personal data for our own advertising purposes.
Your consent is the legal basis for our data processing. You can withdraw your consent at any time with effect for the future.
e. When you follow us on Facebook and other third-party social media platforms
You have the option to follow us on Facebook and on other social media platforms of third-party service providers (e.g. Twitter, LinkedIn and Instagram). For this purpose, we process the personal data that you provide to us in each case or which is provided to us by the respective platform operator about you, insofar as it is provided to us. You can control the privacy settings yourself within the framework of the respective social media platform.
(1) Legal basis
We process your personal data within the scope of our social media offerings on the basis of our overriding legitimate interest. For the provision of our social media offers, it is technically necessary that we process certain personal data (e.g., the IP address; personal data you have provided to the respective platform operator or to us).
(2) Balancing of interests
As part of the required balancing of interests, we have weighed up your interest in confidentiality against our interests in providing our social media offerings. Your interest in confidentiality recedes in that case. Otherwise, we would not be able to offer you our social media services.
(3) Recipient categories
We use service providers to provide our social media offerings (e.g. Facebook, Twitter, LinkedIn and Instagram). The data you transmit to us as part of our social media offerings is also automatically transmitted to the respective social media platform operators.
f. When you participate in a raffle
You can participate in raffles via our website or via our social media offers. For this purpose, we collect the personal data you provide to us in the context of a raffle.
(1) Legal basis
We process your personal data in order to take steps at the request of the data subject prior to entering into a contract and for the performance of the corresponding contract for participation in the raffle. This also includes the necessary contact in the event of notification of a win.
In other cases, your consent may be the legal basis for our corresponding data agreement. You can withdraw your consent at any time with effect for the future.
(2) Recipient categories
We use service providers in the context of raffles. We transmit personal data to these third parties for this purpose. These service providers are contractually obligated by us to exercise the same care in processing personal data as we do ourselves. Some service providers that we use also process your personal data outside the EU/EEA (see the section “Data transfer to third countries” below).
g. When you apply for a job with us
You can apply for a job with us via our website. For this purpose, we process the personal data that you provide to us as part of your application.
We process your personal data in order to take steps at the request of the data subject prior to entering into a contract and for the performance of the corresponding contract.
h. Use of Google reCAPTCHA
We use Google reCAPTCHA on our websites, a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to prevent unauthorized automated logins.
(1) Legal basis
We process your personal data to check whether there is an unauthorized registration based on our overriding legitimate interest. To perform this check, it is technically necessary for us to process certain personal data (e.g., the IP address).
(2) Balancing of interests
As part of the required balancing of interests, we have weighed up your interest in confidentiality against our interest in conducting this audit. Your interest in confidentiality recedes in that case. Otherwise, we would not be able to provide you with this website.
(3) Recipient categories
By submitting the reCAPTCHA entry, data is transmitted to Google in order to perform the necessary matching (see the section “Data transfer to third countries” below).
You can find more information about Google services in the following privacy policy:
https://policies.google.com/privacy
i. If we sell or restructure our company and/or a service
We reserve the right to sell or restructure our company and/or services in whole or in part. In doing so, we may transfer your personal data to a third party in the future, in compliance with the respective data protection requirements. We will inform you about this with a notice period of at least 30 days, making reference to the consequences for further use of our services.
(1) Legal basis
The processing of your personal data in the context of such a sale or restructuring is based on our overriding legitimate interest. For the processing of a corporate transaction or a corporate restructuring, it may be necessary for us to transfer your respective personal data to a third party.
(2) Balancing of interests
As part of the required balancing of interests, we have weighed up your confidentiality interests against our interests in a corresponding sale. Your interest in confidentiality recedes in each case. Otherwise, we would not be able to carry out such a sale or restructuring.
(3) Recipient categories
We may also transfer your personal data to third parties in countries outside the EU/EEA as part of such a sale or restructuring (see the section “Data transfer to third countries” below).
j. When we anonymize your personal data
We anonymize your personal data in order to evaluate it for statistical purposes.
(1) Legal basis
The processing of your personal data in the context of such anonymization is based on our overriding legitimate interest.
(2) Balancing of interests
As part of the required balancing of interests, we have weighed up your interest in confidentiality against our interest in anonymization. Your interest in confidentiality recedes in that case. Otherwise, we would not be able to achieve such anonymization. Neither the GDPR nor the BDSG are applicable to anonymous data.
(3) Recipient categories
We use service providers for the anonymization process. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in handling personal data as we do ourselves.
k. When you allow the use of cookies/identifiers and analytics tools in your browser
We use cookies/identifiers and analytics tools to provide our website. Some providers we use also process your personal data outside the EU/EEA (see the section “Data transfer to third countries” below).
So-called “cookies” are used on our websites. Cookies are data records that are stored by a web server on the end device (e.g. computer, smartphone, and tablet) of the user. When our website is called up again with the same end device, these are sent back either to our website (“first party cookie”) or to another website to which the cookie belongs (“third party cookie”).
Switching off the cookie function in your browser does not restrict the use of our websites and the offered services.
Legal basis
The legal basis for the use of technically necessary cookies/identifiers is our legitimate interest in conjunction with a statutory provision (Section 25 (2) No. 2 of the German Federal Telecommunications-Telemedia Data Protection Act (Gesetz über den Datenschutz und den Schutz der Privatsphäre in der Telekommunikation und bei Telemedien – TTDSG), Article 6 (1) (f) GDPR). The storage of information in your user device or the access to information already stored in your terminal device is absolutely necessary so that we can provide the tele media service expressly requested by you as a user.
Otherwise, the legal basis in each case is generally your consent, if no specific legal basis is mentioned below (Section 25 (1) TTDSG, Article 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future, e.g. by deleting cookies stored in your user device via the browser settings of your respective end device. Please note that for technical reasons, this procedure only applies to the specific end device used.
You can also withdraw the corresponding consent at any time with effect for the future via the following website: https://3q.video > „Privacy settings“ (Footer)
You can also prevent the collection as well as the processing of your personal data by preventing third-party cookies from being stored on your user device, by using the "Do Not Track" function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
(1) Use of the Usercentrics Consent Management System
We use Usercentrics Consent Management System, a service provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany („Usercentrics“), to enable consent management on our websites and as part of our online services.
a) Legal basis
The processing of your personal data in the context of our use of the Usercentrics Consent Management System is based on our overriding legitimate interest.
b) Balancing of interests
As part of the required balancing of interests, we have weighed your confidentiality interests against our interests in using the Usercentrics Consent Management System. Your interest in confidentiality recedes in each case. Otherwise, we would not be able to use a consent management system to meet our accountability requirements
c) Recipient categories
We use Usercentrics as a processor. For this purpose, we transmit personal data to Usercentrics. Usercentrics is contractually obligated by us to exercise the same care in handling personal data as we do ourselves.
You can find Usercentrics' privacy policy here:
https://usercentrics.com/privacy-policy/#toggle-id-2
(2) Use of Google Analytics
We use Google Analytics on our websites, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google Analytics uses “cookies”, which helps the website to analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymization, your IP address will be truncated beforehand by Google within member states of the EU/EEA.
Only in exceptional cases, the full IP address will be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the websites, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
You may prevent the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to this website: Disable Google Analytics
We continue to use Google Analytics to analyze data from Double-Click-Cookies and AdWords for statistical purposes. If you do not wish to do this, you can disable this via the Ads Preferences Manager
https://adssettings.google.com/anonymous?hl=en
You can find an overview of what data Google collects here:
https://business.safety.google/intl/en/adsservices/
(3) Use of Google Tag Manager
We use the Google Tag Manager (https://marketingplatform.google.com/intl/en_uk/about/tag-manager/) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google Tag Manager allows tags from Google and third-party services to be managed and embedded in a bundle on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behavior, to track the impact of online advertising and social channels, to use remarketing and targeting, and to test and optimize online presences. If a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags to trigger. Google Tag Manager takes care of triggering other tags, which in turn may collect data. Information on this can be found in the passages on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.
For more information on Google Tag Manager, visit https://support.google.com/tagmanager/?hl=en-GB#topic=3441530 and Google's privacy policy at https://policies.google.com/privacy?hl=en.
You can prevent the collection of the data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
You can disable the use of your personal data by Google using the following link:
https://adssettings.google.de/anonymous?hl=en
For more information on objection and removal options vis-à-vis Google, please visit: https://policies.google.com/privacy?gl=DE&hl=en
(4) Use of Google Ads
We use Google Conversion Tracking, an feature of Google Ads, provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”) on our website to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. In this process, Google Ads sets a cookie on your computer if you have accessed our website via a Google ad.
These cookies lose their validity after 30 days. If the user visits certain pages of the Google Ads customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.
The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the USA. In addition, we have concluded a contract on processing with Google for the use of Google Ads. Through this contract, Google ensures that Google processes the data in accordance with the General Data Protection Regulation and guarantees the protection of the rights of the data subject.
Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Google Ads customers' websites. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. We learn the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that personally identifies users.
If you do not wish to participate in the tracking process, you can also prevent the setting of a cookie required for this – for example, via a browser setting that generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the "www.googleadservices.com" domain.
Google's privacy policy on conversion tracking can be found here:
https://services.google.com/sitestats/en.html
You can find an overview of what data Google collects here:
https://business.safety.google/intl/en/adsservices/
(5) Use of Google Fonts
We use Google Fonts to display our respective website. Google Fonts is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). We have stored these fonts on our servers in Europe. Therefore, your IP address is not transmitted to Google in the USA in order to reload fonts.
a) Legal basis
The processing of your personal data in the context of our use of Google Fonts is based on our overriding legitimate interest.
b) Balancing of interests
As part of the required balancing of interests, we have weighed up your confidentiality interests and our interests in the use of Google Fonts, without third country transfer. Your interest in confidentiality recedes in each case. Otherwise, we would not be able to use Google Fonts.
For more information on the processing of data in the context of the use of Google Fonts, click here:
https://fonts.google.com/knowledge
https://policies.google.com/privacy?hl=en
(6) Use of Stripe
We use functionalities of the online payment service Stripe provided by Stripe Inc, 510 Townsend Street, San Francisco, CA 94103, USA ("Stripe").
Stripe enables companies to accept payments and send payouts, and helps companies to proceed against fraud. Cookies from Stripe are stored on your terminal device. In the process, data is transmitted to Stripe servers in the USA.
For more information on how Stripe processes your data, click here:
https://stripe.com/de-us/privacy#personal-data-definition
https://stripe.com/cookies-policy/legal
For more information about your rights against Stripe, please visit:
https://stripe.com/de-us/privacy#personal-data-definition
(7) Use of LinkedIn Insight Tag
We have integrated LinkedIn Insight Tags, a service by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”), on our websites. These enable us to evaluate and optimize LinkedIn campaigns.
For more information on the use of LinkedIn Insight Tags, click here:
https://business.linkedin.com/de-de/marketing-solutions/insight-tag
https://de.linkedin.com/legal/privacy-policy
(8) Use of Microsoft Clarity
This website uses the "Microsoft Clarity" service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA (hereinafter "Microsoft") for the purpose of statistical analysis of user behavior and for optimization and marketing purposes various user information is collected and stored. This information includes which always excludes any personal reference, includes, among other things time zone setting, operating system and platform type, the geographical origin of the of the page view, the redirect origin if the user is redirected to our site, the duration of visits to certain pages and information about website interaction (e.g. scrolling, clicks and mouse-overs). This data can be used for the same purpose to create and evaluate pseudonymized user profiles can be created and analyzed for the same purpose. For collection and evaluation cookies are used. The data collected using Microsoft technologies will not be used to personally identify the visitor to this website without the separate consent of the person concerned and they are not combined with personal data merged with personal data about the bearer of the pseudonym.
Information collected may be transferred to Microsoft servers in the USA and stored there. We have concluded a contract with Microsoft, in which we oblige Microsoft to protect the data of our customers' data and not to pass it on to third parties.
All of the processing described above, in particular the setting of cookies for the information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Microsoft Clarity will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
Further information on the data protection provisions of Microsoft Clarity can be found at: https://clarity.microsoft.com/terms
(9) Use of HubSpot
We use the HubSpot service for various purposes on this website. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
Hubspot is an integrated software solution that we use to cover various aspects of our online marketing. These include, among others:
Email marketing, social media publishing & reporting, reporting, contact management
(e.g. user segmentation & CRM), landing pages and account forms.
This information and the content of our website are stored on the servers of our software partner HubSpot. They can be used by us to visitors to our website and to determine which of our company's services are of interest to them. All information collected by us is subject to this privacy policy. We use all information collected exclusively to optimize our marketing measures.
More information about HubSpot's privacy policy.
More information from HubSpot regarding EU data protection regulations.
You can find more information about the cookies used by HubSpot here & here.
As part of the optimization of our marketing measures, the following data may be collected via Hubspot the following data may be collected and processed:
- Geographical position
- Browser type
- Navigation information
- Referral URL
- Performance data
- Information about how often the application is used
- Mobile app data
- Login information for the HubSpot subscription service
- Files that are displayed on site
- Domain names
- Pages viewed
- Aggregated usage
- Operating system version
- Internet service provider
- IP address
- Device identifier
- Duration of the visit
- Where the application was downloaded from
- Operating system
- Events that occur within the application
- Access times
- Clickstream data
- Device model and version
In addition, we also use Hubspot to provide contact forms.
The legal basis for processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
If you do not want Hubspot to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future. The personal data will be stored for as long as it is necessary to fulfill the processing purpose. The data will be deleted as soon as it is no required to achieve the purpose.
As part of processing via HubSpot, data may be transferred to the USA. The security of the transfer is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. level of security that corresponds to that of the GDPR. Insofar as the standard contractual clauses are not sufficient to establish an adequate level of security, your consent may serve as the legal basis for the transfer to third countries in accordance with Art. 49 para. 1 lit. a GDPR.
(10) Use of Microsoft Ads
We use the Microsoft Advertising service of the provider Microsoft Ireland Operations Limited (Ireland/EU) (formerly Bing Ads) on our website. Microsoft Advertising is an online marketing service that uses the Universal Event Tracking (UET) tool to help us display targeted advertisements via the Microsoft Bing search engine. Microsoft Advertising uses cookies for this purpose. This involves processing personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about device and browser settings.
Microsoft Advertising is used for the purpose of optimizing the display of advertisements. Further information on these processing activities, the technologies used, stored data and the storage period can be found in the settings of our Consent Management Tool. Processing only takes place with your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent via our Consent Management Tool.
For Microsoft services, the transfer of data to Microsoft Corp. in the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Microsoft can be found in Microsoft's privacy policy at https://privacy.microsoft.com/en-us/privacystatement.
(11) Calendly
To arrange appointments with our employees, we use the services of Calendly, 271 17th St NW, Ste 1000, Atlanta, GA 30363, USA.
If a user makes use of this option, the user's e-mail address, name, telephone number and customer number are collected and stored.
The legal basis for the processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If the appointment is aimed at the conclusion of a contract, the additional legal basis for the processing is Art.6 para. 1 lit. b GDPR.
The data is processed solely for the uncomplicated arrangement of appointments between 3Q GmbH and the user.
The data will be deleted if it is no longer required and we are not obliged to store it due to legal obligations.
If the user does not agree to the use of the Calendly service, he/she has the option of arranging the desired appointment by other means (e.g. e-mail or telephone) at any time.
(12) CHEQ
To protect against invalid traffic on online marketing ads, we use the services of CHEQ Al Technologies Ltd, 22 W 19th Street, New York, NY 10011, USA.
If a user clicks on an online ad and forwarded to our website, the IP address is collected and stored. The IP address is processed on the servers of a European tenant.
a) Legal basis
The processing of your personal data in the context of traffic analysis is based on our overriding legitimate interest (GDPR Art. 6 para. 1 lit. f).
b) Balancing of interests
As part of the necessary balancing of interests, we have weighed up your interest in confidentiality and our interest in protection against online marketing fraud. Your interest in confidentiality takes second place in each case. Otherwise, we would not be able to offer you a successful online presence for our company and our product.
3. How long do we store your personal data?
We erase your personal data if the respective purpose of storage no longer necessary and no statutory provision for retention exists (e.g. a retention obligation under the German Federal Fiscal Code (Abgabenordnung - AO) and/or the German Federal Commercial Code (Handelsgesetzbuch – HGB)). If deletion is not possible in an individual case, processing will be restricted.
Finally, the storage period also depends on the statutory limitation periods.
4. What are your rights as a data subject?
Please contact us at the above contact details to exercise your rights and to withdraw your consent.
a) You have the right to request information regarding all personal data we process about you at any time (Article 15 GDPR).
b) If your personal data is incorrect or incomplete, you have the right to rectification and completion without undue delay (Article 16 GDPR).
c) You have the right to erasure of your personal data without undue delay at any time, unless we are legally obliged or entitled to continue processing your data (Article 17 GDPR).
d) If the legal requirements are met, you have the right to restriction of processing your personal data (Article 18 GDPR).
e) You have the right to object to processing insofar as the data processing is carried out for the purpose of direct marketing or profiling. If the processing is carried out on the basis of a balancing of interests, you may object to the processing unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Article 21 GDPR).
f) If the data processing is based on your consent or within the framework of a contract, you have the right to receive the personal data you have provided, if this does not affect the rights and freedoms of other persons.
g) If we process your data on the basis of a declaration of consent, you have the right to withdraw this consent at any time with effect for the future. The processing carried out before the withdrawal remains unaffected by the withdrawal (Article 7 (2) GDPR).
h) You also have the right to lodge a complaint with a data protection supervisory authority at any time if you consider that the processing of personal data relating to you infringes applicable law, in particular the GDPR and BDSG (Article 77 GDPR).
We will notify all recipients to whom we have disclosed personal data of any rectification or erasure of your personal data or restriction of the relevant processing, unless this proves impossible or involves a disproportionate effort. We will inform you of the recipients applicable to you if you request this.
5. In what context do we create automatic profiles?
We do not create automatic profiles.
6. Data transfer to third countries
In some cases, personal data is transferred to recipients in third countries (see in each case the corresponding statement within our privacy policy). Third countries are countries outside the EU and outside the EEA. These third countries also include the USA.
In the USA, there is no comparable level of data protection as in the EU or the EEA. In particular, it is possible that government agencies may access personal data without us or you becoming aware of this. Legal prosecution may not be promising.
The legal basis for such data transfer is generally your consent (Article 49 (1) sentence 1 (a)) GDPR) or a respective contract performance (Article 49 (1) sentence 1 (b)) GDPR) or the use of EU standard data protection clauses (Article 46 (2) (c)) GDPR). You can access these here:
7. Data security
We take appropriate technical and organizational security measures to protect the personal data we process against accidental or intentional manipulation, loss, destruction or against unauthorized access.
We use technical and organizational measures to ensure the confidentiality of your personal data and to protect it against manipulation, loss and destruction. The storage and disclosure of personal data are subject to strict security procedures. Our corresponding employees are trained in data protection law. They only access personal data to the extent necessary.