Data protection

Status: March 2021

General - Information according to Art. 13 + 14 DSGVO

Qurasoft appreciates your visit to our website and your interest in our company. We take the protection and security of your personal data entrusted to us seriously and want you to feel safe and comfortable when visiting our website and using our offers.

It is important to us that you know what personal data is collected when you use our offers and services and how we use it afterwards.

Purpose of the data processing

Where Qurasoft processes personal data on the Website, it does so for the purposes set out in this Privacy Policy.

Person responsible and data protection officer

Responsible for the processing of your personal data is

Qurasoft GmbH
University Road 3
D-56070 Koblenz on the Rhine

Phone: (+49) 261 - 134 986 0
E-mail: contact [at] qurasoft.de

You can reach our external data protection officer at:

TÜV Technical Monitoring Hesse GmbH

E-mail: data protection [at] qurasoft.de

Rights concerning the processing of personal data

Right to information
You have the right to receive information from us at any time upon request about the personal data we have processed concerning you within the scope of Art. 15 DSGVO. To do this, you can send a request by post or e-mail to the addresses given above.

Right to rectify inaccurate data
You have the right to demand that we correct your personal data without delay if it is incorrect (Art. 16 DSGVO). To do so, please contact us at the addresses given above.

Right to erasure
You have a right to immediate deletion ("Right to be forgotten) of the personal data concerning you if the legal grounds pursuant to Art. 17 of the GDPR exist. These are, for example, if the personal data are no longer necessary for the purposes for which they were originally processed or you have withdrawn your consent and there is no other legal basis for the processing; the data subject objects to the processing (and there are no overriding reasons for processing - this does not apply to objections to direct marketing). To exercise your above right, please contact us at the above contact addresses.

Right to restrict processing
You have the right to restrict processing if the conditions are met and in accordance with Article 18 of the GDPR. Accordingly, the restriction of processing may be required in particular if the processing is unlawful and the data subject refuses the erasure of the personal data and instead requests the restriction of the use of the personal data or the data subject has objected to the processing pursuant to Article 21 (1) of the GDPR, as long as it has not yet been determined whether our legitimate grounds override theirs. To exercise your aforementioned right, please contact us at the above contact addresses.

Right to data portability
You have a right to data portability according to Art. 20 DSGVO. In this context, you have the right to receive the data relating to you that you have provided to us in a common, structured and machine-readable format and to transfer this data to another controller, such as another service provider. The prerequisite for this is that the processing is based on consent or on a contract and is carried out with the help of automated processes. To exercise your above right, please contact us at the above contact addresses.

Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out, inter alia, on the basis of Article 6(1)(e) or (f) DSGVO, in accordance with Article 21 DSGVO. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. To exercise your above right, please contact us at the above contact addresses.

Right to complain to a supervisory authority
If you believe that the processing of personal data relating to you by us is unlawful, you have the right to complain to the supervisory authority responsible for us, which you can contact as follows:

The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
Prof. Dr Dieter Kugelmann
Rear pale 34
55116 Mainz
Phone: +49 (0) 6131 208-2449
E-mail: poststelle@datenschutz.rlp.de

Planned data transfer to third countries

A transfer to third countries is currently not planned, otherwise the corresponding legal requirements will be created. In particular, you will be informed about the respective recipients or categories of recipients in accordance with the legal requirements.

Security

Qurasoft uses technical and organisational security measures to protect the data you have made available from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. This also applies when external services are obtained. The effectiveness of our security measures is reviewed and the measures are continuously improved in line with technological developments.

SaniQ apps

If you use one of our SaniQ apps as self-monitoring, the functions are always executed on your end device. When we call up functions on our servers (e.g. when you activate the telemedicine mode or use the PDF export health diary offer), your personal data is stored in content-encrypted form. If you have activated the telemedicine mode, your data will be forwarded to your respective telemedicine supporter.

You can find more detailed information in the privacy statements of our SaniQ apps (Privacy Policy SaniQ App / Privacy Policy SaniQ Practice).

Standard periods for the deletion of data

The legislator has enacted a variety of retention periods and obligations. After these periods have expired, the corresponding data is routinely deleted. If data is not affected by this, it will be deleted or anonymised if the purposes stated within the scope of this data protection declaration cease to apply. Unless this privacy policy contains other, deviating provisions regarding the storage of data, the data collected by us will be stored by us for as long as it is required for the aforementioned purposes for which it was collected.

Other data use and data deletion

Further processing or use of your personal data will generally only take place if permitted by law or if you have consented to the processing or use of the data. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you about these other purposes before further processing and provide you with the other relevant information.

Applications

On our website you have the opportunity to apply online for advertised positions or to send us an unsolicited application by e-mail.

When you apply to us, we process the information we receive from you as part of the application process, e.g. through your letter of application, CV, references, correspondence, telephone or verbal details. In addition to your contact details, information about your education, qualifications, work experience and skills is particularly relevant to us. In addition, we process data that you provide to us voluntarily (e.g. as part of your CV or as attachments).

Within our company, only those people who are involved in the selection process for the advertised position will have access to your data.

Your personal data will not be transferred to any third parties outside the company.

We store your application data for the duration of the review of your application. If your application is unsuccessful or if you withdraw your application, your application data will be deleted after a maximum of 6 months, unless you have expressly agreed to longer storage. If your application is successful, the data you have provided us with will be further processed in relation to your future employment with us. The legal basis is Art. 6 Para. 1 a, b and f DSGVO as well as § 26 BDSG.

You have the right to information according to Article 15 of the GDPR, the right to rectification according to Article 16 of the GDPR, the right to erasure according to Article 17 of the GDPR, the right to restriction of processing according to Article 18 of the GDPR, the right to object according to Article 21 of the GDPR and the right to data portability according to Article 20 of the GDPR. Furthermore, you have the right to complain to the supervisory authority responsible for you.

If you do not provide us with the required personal data, this will not have any negative consequences for you. However, incomplete or inaccurately completed applications will not be considered.

Specific information about the website

Calling up our website

When personal data is entered, it is always transmitted in encrypted form.

We record and store the IP address assigned to your computer, the type of browser used, the date and time of access as well as messages about successful and unsuccessful accesses in order to transmit the contents of our website accessed by you to your computer (e.g. texts, images as well as files made available for download, etc.) (cf. Art. 6 para. 1 lit. b DSGVO). We also process this data for abuse detection and tracking. In this respect, the legal basis is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in processing the data is to ensure the proper functioning of our website and the transactions conducted via it.

Insofar as we process your data for the purposes of providing the functions of our website, as described above, you are contractually obliged to provide us with this data.

External hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO). Our hoster will only process your data insofar as this is necessary for the fulfilment of its service obligations and will follow our instructions with regard to this data.

In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.

Contact form

If you have a question for us, you can submit an enquiry using the contact form on our website. The required data are marked as mandatory fields.
When you contact us, the data you provide (in particular your first and last name, your e-mail address and the text of your enquiry as well as any other voluntary information) will be stored by us. In the case of further information, this is voluntary information. The processing is carried out for the purpose of processing the enquiries on the basis of Art. 6 Para. 1 lit. b, f DSGVO.
The data collected in the course of contacting you will be deleted as soon as it is no longer required for processing your enquiry.

Disclosure to third parties

We sometimes use service providers (based in Germany) who process data on our behalf (e.g. for hosting/email marketing). In the cases described here, the information is passed on to these third parties to enable further processing. The external service providers are carefully selected and regularly reviewed by us to ensure that your privacy is protected.

The service providers are service providers / order processors bound by instructions and are accordingly obligated by us, among other things, to treat your data exclusively in accordance with our instructions and the applicable data protection laws. In particular, they are obliged to treat your data as strictly confidential. They are also prohibited from processing the data for purposes other than those agreed.

The transfer of data to processors takes place on the basis of Art. 28 (1) DSGVO.

We also do not sell your data to third parties, nor do we market it in any other way.

Website tracking with MATOMO (formerly PIWIK):

Our website uses the web analysis service MATOMO (www.matomo.org), a service of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. After you have given your voluntary consent, data is collected and stored for the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 Para. 1 lit. a DSGVO. Data is collected and stored.

Matomo uses so-called cookies. These are text files that are stored on your computer and enable us to analyse the use of our website. For this purpose, the information about the use obtained by the cookie is transmitted to our server and stored so that the usage behaviour can be evaluated. Your IP address is immediately anonymised; this means that you remain anonymous as a user. The information generated by the cookie about your use of our website is not passed on to third parties.

You have the option to withdraw your consent at any time under "Manage consent" at the bottom of the screen.

Cookies:
A cookie is a simple small file that can be sent with the pages of an internet address and stored by the web browser on the PC or other device. The information stored in it may be sent to our or relevant third party servers during subsequent visits.

We use basic/essential cookies on our website. These cookies are essential for the functioning of our website. This is, for example, the allocation of anonymous session IDs for the bundling of several queries to a web server. The legal basis for processing the data is our legitimate interest (Art. 6 I lit. f DSGVO).

Technically unnecessary cookies are only used if you consent to them (Art. 6 I lit. a DSGVO). You have the right to revoke your consent at any time within the cookie banner.

Functionality Cookies

These cookies help us to remember settings you have chosen or support other functions when you navigate our website. For example, we can remember your preferred settings for your next visit or save your login details for certain areas of our website.

Performance/Statistics Cookies

These cookies collect information about how you use our website (e.g. internet browser used, number of visits, pages viewed or time spent on the website). These cookies do not store any information that allows personal identification of the visitor. The information collected with the help of these cookies is aggregated and thus anonymous.

You can declare your consent or rejection of cookies - also for web tracking - via the settings of your web browser. You can configure your browser in such a way that the acceptance of cookies is refused in principle or you are informed in advance when a cookie is stored. In this case, however, the functionality of the website may be impaired (e.g. when placing orders). Your browser also offers a function to delete cookies (e.g. via Delete browser data). You can find more information on this in the operating instructions or usually under settings of your internet browser.

Integration of social network plug-ins

Our website uses the social network button

• Twitter, Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA
• LinkedIn, LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA

The button is marked with the logo of the respective social network. However, these are not the usual social plugins, but buttons with deposited links. The buttons must be activated (clicked) separately by you. As long as these buttons are not clicked, no data is transmitted to the social networks. Only when you click on the buttons and thereby declare your consent to communication with the servers of the social network, the buttons become active and the connection is established.

After clicking, the button corresponds to a so-called share plugin. Information about the visited page is made available to the social network, which you can share with your contacts in your social network. If you want to "share" the information, you must be logged in. If you are not logged in, you will land on the login page of the social network you clicked on and you will no longer be on Qurasoft's site. If you are logged in, the information is transmitted that you would like to recommend the respective article.

By activating the button, the social networks then also receive, among other things, the information that and when you have accessed the corresponding page of our website, as well as, for example, your IP address, details of the browser used and the language settings. When you click on the button, your click is transmitted to the social network and used according to its data usage guidelines.

When activating the button, we have no influence on the collected data and data processing operations and are not responsible for this data processing and in this respect are not the responsible party in the sense of the GDPR. We are also not aware of the full scope of the data collection, its legal basis, the purposes and the storage periods. Therefore, the information provided here is not necessarily complete.

The transmission of data takes place regardless of whether you actually have an account with the provider or are logged in there. If you are logged in to the provider, your data is directly assigned to your account. If applicable, the providers also use cookies on your computer to track you.

To our knowledge, the provider stores this data in usage profiles, which it uses for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right of objection, please contact the respective provider.

For the purpose and scope of the data collection and the further processing and use of the data by the respective social network, as well as your rights in this respect and setting options for protecting your privacy, please refer to the information

• on Twitter: http://twitter.com/privacy
• on LinkedIN: http://www.linkedin.com/static?key=privacy_policy&trk=hb_ft_priv

If you do not want the social network to receive data about you, you must not click the button.

Abuse detection and tracking

We retain information for abuse detection and tracking, in particular your IP address, for a maximum of 7 days. The legal basis in this respect is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in retaining data for 7 days is to ensure the proper functioning of our website and the transactions conducted via it, as well as to be able to defend against cyber attacks and the like. We may use anonymous usage information to tailor our website to your needs.

Specific information on our online presence in social media

Qurasoft maintains several online presences within social networks and platforms, such as Facebook, Instagram, Twitter and LinkedIn, in order to have the opportunity to communicate with active users there and to inform them about our service portfolio. Qurasoft uses the technical platforms and services offered by the operators for this purpose. In social networks and on other external platforms, the respective operators' own data protection provisions apply, even if we disseminate information and maintain presences there.

We would like to point out that you use the services of the social networks and platforms offered here as well as their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating, etc.). The data collected about you in this context will be processed by the operators of the platforms and may be transferred to countries outside the European Union. What information the operators receive and how it is used is described in general terms in the respective data protection guidelines. On the individual platforms, you will also find information on how to contact the operators and on the setting options for advertisements.

• on Facebook: www.facebook.com/about/privacy
• on Instagram: https://help.instagram.com/519522125107875
• on LinkedIn: www.linkedin.com/static
• on Twitter: twitter.com/privacy

In which way the operators of the social networks use the data from the visit of the respective pages for their own purposes, to what extent activities on the pages are assigned to individual users, how long this data is stored and whether data from a visit of the respective page is passed on to third parties, is not conclusively and clearly stated by the operators and is not known to us.

1. facebook

• Facebook Insights
  When you visit our Facebook page, Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. The legal basis for collecting the data is our legitimate interest (Art. 6 para. 1 f DSGVO). Facebook and Qurasoft are jointly responsible for the processing of the Insights data pursuant to Art. 26 DSGVO. However, Facebook assumes primary responsibility and Qurasoft does not make any decisions regarding the processing of this data. As Facebook is constantly developing the availability and processing of the data, Qurasoft refers to Facebook's privacy policy (https://www.facebook.com/about/privacy/)Since only Facebook has full access to the user data, we recommend that users contact Facebook directly regarding requests for information or other questions about data subject rights as a user (e.g. right to deletion). If the user no longer wishes the data processing described here in the future, then the connection of the user profile and our page can be disconnected by using the function "I no longer like this page".

Objection to the processing can be made via the following link https://www.facebook.com/settings?tab=ads be inserted.
Facebook provides more information on this at the following link: http://de-de.facebook.com/help/pages/insights.

• Facebook Pixel
  In addition, Facebook uses the remarketing function "Facebook Pixel", a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. This function is used to present interest-based advertisements ("Facebook Ads") to visitors of the websites when they visit the social network Facebook. For this purpose, the Facebook remarketing tag has been implemented on this website. Via this tag, a direct connection to the Facebook servers is established when visiting the website. This transmits to the Facebook server that you have visited this website and Facebook assigns this information to your personal Facebook user account.
  https://www.facebook.com/business/help/742478679120153?helpref=search&sr=3&query=pixel
• Twitter Analytics
  The service is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA. Twitter Analytics stores and processes information about your user behaviour on our online presences in social media. For this purpose, Twitter Analytics uses, among other things, cookies that are stored locally in the cache of your web browser on your end device and that enable an analysis of your use of the social media platforms.
  https://twitter.com/personalization
• Adobe Marketing Cloud
  The operator of this service is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. The Adobe Marketing Cloud enables analyses of visitor flows on websites. This involves displaying user behaviour in a way that provides an overview of users' online activity on social media place forms. Adobe Marketing Cloud uses cookies that are stored on your computer and thus enable an analysis of your user behaviour on the website. If this collected information is transmitted to an Adobe server, the settings ensure that the IP address is anonymised before geolocation and replaced with a generic IP address before storage.
  http://www.adobe.com/de/privacy/opt-out.html

2. instagram

• Facebook Insights
  About Facebook Insights, a service of a service of Facebook Inc, 1601 S.
  California Ave, Palo Alto, CA 94304, USA , Facebook collects, among other things, your IP address and other information that is
  are present on your PC in the form of cookies. This information is used for statistical purposes.
  to provide information about the use of the respective site. More information
  Facebook provides information on this at the following link: http://de-de.facebook.com/help/pages/insights.
• Goolge Analytics
  Google Analytics, a service of Google Inc, Moutain View, California, USA uses
  Cookies, which are stored on your terminal device and which enable an analysis of your use of our
  enable online presences in social media. The information generated by the cookie about
  Your visit to Instagram will usually be transmitted to a Google server in the USA, where it will be
  stored. If anonymisation of the IP address to be transmitted by the cookie is activated on the website
  ("IP anonymisation"), your IP address will be stored by Google within member states of the European Union.
  European Union or in other contracting states of the Agreement on the European
  economic area is shortened beforehand. Only in exceptional cases will the full IP address be transmitted to a server of
  Google in the USA and shortened there. Google will use this information to evaluate your use of
  Instagram and compile reports on website usage. This can be done from
  pseudonymous usage profiles are created from the processed data. The data collected when using Google Analytics
  transmitted IP address will not be merged with other data from Google. http://www.google.de/privacy.html.
• Facebook Pixel
  Instagram uses the remarketing function "Facebook Pixel", a service of
  Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. This function is used to provide visitors to the website
  present interest-based advertisements ("Facebook Ads"). For this purpose, this
  website has implemented the Facebook remarketing tag. Via this tag, when you visit the website, a
  direct connection to the Facebook servers is established. In the process, it is transmitted to the Facebook server that
  you have visited this website and Facebook associates this information with your personal
  Facebook user account. https://www.facebook.com/business/help/742478679120153?helpref=search&sr=3&query=pixel

3. LinkedIn

• Facebook Pixel
  LinkedIn uses the remarketing function "Facebook Pixel", a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. This function is used to present interest-based advertisements ("Facebook Ads") to visitors of the website. For this purpose, the Facebook remarketing tag has been implemented on this website. Via this tag, a direct connection to the Facebook servers is established when visiting the website. This transmits to the Facebook server that you have visited this website and Facebook assigns this information to your personal Facebook user account. https://www.facebook.com/business/help/742478679120153?helpref=search&sr=3&query=pixel
• Nielsen NetRatings
  Nielsen NetRatings is provided by Nielsen GmbH, Lindwurmstraße 10, 80634 Munich, Germany and is an internet tracking service for measuring and analysing consumer behaviour. You can object to the collection or analysis of your data by this tool by downloading or setting and saving the opt-out cookie available under the following link:
  http://www.nielsen.com/us/en/privacy-statement/digital-measurement.htm
• AppNexus
  AppNexus is provided by AppNexus Inc, 28 W 23rd Street, 4th floor, New York, NY - 10010, USA and is a tool for web analysis and interest-based advertising. You can object to the collection or analysis of your data by this tool here.
  https://www.appnexus.com/en/company/platform-privacy-policy-de.
• Eloqua Tracking
  Eloqua, a service of Oracle Cor, 500 Oracle Parkway, M/S 5op7, Redwood Shores, CA 94065, places a persistent cookie on the relevant login page, unless you already have an Eloqua cookie on your device. If you have already used a website that uses Eloqua, you may already have an Eloqua cookie. The Eloqua cookie may be used to analyse your use of sites in order to improve them. Emails sent using Eloqua use tracking technologies of the type described above. If you wish to completely prevent the use of Eloqua tracking technologies for your device, you can do so on the Eloqua opt-out page.
  For more information, please see the Eloqua privacy policy. (https://www.oracle.com/marketingcloud/products/marketing-automation/index.html)

4. twitter

• Twitter Analytics & Twitter Ads
  The service is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA. Twitter Analytics stores and processes information about your user behaviour on our online presences in social media. For this purpose, Twitter Analytics uses, among other things, cookies that are stored locally in the cache of your web browser on your end device and that enable an analysis of your use of the social media platforms. Twitter Ads can be used to create targeted marketing campaigns.https://twitter.com/personalization
• Facebook Insights
  Via Facebook Insights, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA , Facebook collects, among other things, your IP address as well as other information that is available in the form of cookies on your PC. This information is used to provide statistical information about the use of the respective page. Facebook provides more detailed information on this under the following link:
  http://de-de.facebook.com/help/pages/insights.
• Google Analytics
  Google Analytics, a service of Google Inc., Moutain View, California, USA uses cookies that are stored on your terminal device and enable an analysis of your use of our online presences in social media. The information generated by the cookie about your visit to Twitter is usually transmitted to a Google server in the USA and stored there. If anonymisation of the IP address to be transmitted by the cookie is activated on the website ("IP anonymisation"), your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of Twitter and compiling reports on website activity. Pseudonymous usage profiles can be created from the processed data. The IP address transmitted when using Google Analytics will not be merged with other Google data.
  http://www.google.de/privacy.html.
• Dynatrace
  Dynatrace, a service provided by Dynatrace LLC, headquartered in Waltham, Massachusetts, USA, provides insights into the performance of the respective web application and how users navigate the website. Dynatrace collects data such as W3C timings, button clicks, link clicks, JavaScript errors, browser types and geographical regions. This can be used to improve the performance of the respective offer and to fix functional problems. This data helps to continuously improve the service and to identify functional problems. Dynatrace uses various cookies for this purpose.
  https://www.dynatrace.com/company/trust-center/
• Infusionsoft
  Infusionsoft is a programme for the preparation, creation and implementation of targeted marketing campaigns. Infusionsoft is operated by: Infusionsoft Inc, 1260 S. Spetrum Blvd, Chandler, AZ 85286. The software makes it possible to link statistical data and network behaviour of individual users with the contact data of specific persons for marketing purposes. If you install a deactivation add-on for your web browser, you can object to the collection of your data.
  https://www.infusionsoft.com/legal/privacy-policy