PRIVACY POLICY

Responsibility for Data Protection The controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is: IQTEMO GmbH Grimmstr. 12 10967 Berlin Germany

Personal Data

We do not collect any personal data through our website (e.g. names, postal addresses, telephone numbers or email addresses) unless you voluntarily provide such data to us (e.g. when contacting us by email) or the applicable data protection legislation permits us to do so. We may also collect information on our website that cannot, on its own, be used to identify you directly. In certain circumstances, particularly when combined with other data, this information may nevertheless constitute “personal data” within the meaning of data protection law. We may also collect information on our website that identifies you neither directly nor indirectly, such as aggregated information about all users of our website.

Creation of Log Files

Whenever you access our website, our web server automatically collects data and information from the device used to access it (e.g. computer, mobile phone or tablet). The following data is collected:

  • Information about your browser type and version;
  • The operating system of the device you use;
  • The hostname of the accessing computer;
  • The IP address of the device you use;
  • The date and time of access;
  • The pages and resources (images, files and other page content) accessed on our website;
  • The websites from which you reached our website (referrer tracking);
  • A notification indicating whether the request was successful;
  • The volume of data transferred.

This data is stored in our web server’s log files. It is not stored together with personal data relating to a specific user, so individual website visitors are not identified. The legal basis for processing personal data is Article 6(1)(f) GDPR (legitimate interests). The temporary, automated storage of this data is necessary to deliver the website during your visit. Personal data is also stored and processed to maintain compatibility of our website for as many visitors as possible, prevent misuse and resolve technical faults. For these purposes, it is necessary to log technical data from the accessing computer so that we can respond as early as possible to display errors, attacks on our IT systems and/or malfunctions of our website. We also use this data to optimise the website and ensure the overall security of our information technology systems. Recipients: Technical service providers involved in operating and maintaining our website may receive this data in their capacity as processors. Retention period: The technical data described above is deleted as soon as it is no longer needed to ensure the website’s compatibility for all visitors, and no later than three months after you access our website. Right to object and request erasure: You may object to the processing at any time under Article 21 GDPR and request the erasure of data under Article 17 GDPR.

Your Right of Access

You have the right to request confirmation as to whether we process personal data concerning you. If we do, you have the right to access the information specified in Article 15(1) GDPR, provided this does not adversely affect the rights and freedoms of others (see Article 15(4) GDPR). We will also be happy to provide you with a copy of the data. Right to Rectification Under Article 16 GDPR, you have the right to have any inaccurate personal data we hold about you (such as your address or name) corrected at any time. You may also request that incomplete data we hold about you be completed. Any necessary corrections or additions will be made without undue delay.

Right to Erasure

Under Article 17(1) GDPR, you have the right to have the personal data we have collected about you erased if:

  • The data is no longer necessary;
  • You withdraw your consent and there is no other legal basis for the processing;
  • You object to the processing and there are no overriding legitimate grounds for the processing;
  • Your data is processed unlawfully;
  • Erasure is required to comply with a legal obligation; or
  • The data was collected pursuant to Article 8(1) GDPR. Under Article 17(3) GDPR, this right does not apply where:
  • Processing is necessary to exercise the right to freedom of expression and information;
  • Your data was collected on the basis of a legal obligation;
  • Processing is necessary for reasons of public interest; or
  • The data is necessary for the establishment, exercise or defence of legal claims. Right to Restriction of Processing Under Article 18(1) GDPR, you have the right, in certain circumstances, to request restriction of the processing of your personal data. This applies where:
  • You contest the accuracy of the personal data;
  • The processing is unlawful and you oppose erasure;
  • The data is no longer needed for the purpose of processing, but is required for the establishment, exercise or defence of legal claims; or
  • You have objected to processing under Article 21(1) GDPR and it has not yet been determined whose interests prevail.

    Right to Withdraw Consent

    If you have given us your explicit consent to process your personal data under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, you may withdraw that consent at any time. Please note that withdrawing consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

    Right to Object

    Under Article 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Article 6(1)(f) GDPR (legitimate interests). This right applies only where there are grounds relating to your particular situation that weigh against the storage and processing.

    Right to Data Portability

    Under Article 20 GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used and machine-readable format. The data may be sent either to you or to a controller designated by you. Where technically feasible, we will transmit the personal data directly to a controller of your choice. Please note that, under Article 20(4) GDPR, we may not transfer data where doing so would adversely affect the rights and freedoms of others. Right to Lodge a Complaint with a Supervisory Authority under Article 77(1) GDPR If you suspect that your data is being processed unlawfully on our website, you may seek a judicial determination of the matter at any time. Any other legal remedies also remain available to you. Independently of these remedies, Article 77(1) GDPR gives you the right to lodge a complaint with a supervisory authority. Under Article 77 GDPR, you may lodge a complaint in the EU Member State of your residence, your place of work and/or the place of the alleged infringement. You may therefore choose a supervisory authority in any of those locations. The supervisory authority with which you lodge your complaint will inform you of its progress and outcome, including the possibility of a judicial remedy under Article 78 GDPR. How Can You Exercise Your Rights? You may exercise your rights at any time by contacting us at the address provided above. Withdrawing your consent or requesting the erasure or blocking of personal data may mean that we can no longer provide certain services and functions. Withdrawing consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal. If you have any questions or complaints, you may also contact the Berlin data protection authority at +49 30 13889-0.