iqs Software GmbH
DE-77815 Bühl (Baden)
Tel: +49 7223 28148-0
Fax: +49 7223 28148-100
Welcome to the iqs Software GmbH website. Data protection and the protection of your personal rights are of great importance to us. On this page we would like to inform you which data iqs processes and for what purposes this happens. If you have any questions or suggestions about the data protection declaration, please feel free to contact us.
On the one hand, this data protection declaration informs visitors and users of our website about the online data processing procedures in which personal data are processed. On the other hand, you will receive information about our processing operations that do not primarily take place online.
Responsible party for data processing
iqs Software GmbH
D-77815 Bühl (Baden)
Phone: +49 7223 281480
Data Protection Officer required by law
DSB External Data Protection Officer Stuttgart
Certified data protection officer
Phone: +49(0)176 32744172
The following contents give you a brief overview of the processing of personal data, more detailed information can be found in the respective passages which are presented in detail.
Security on our website (SSL Secure Socket Layer)
Our website is equipped with an SSL certificate, which is used to encrypt data transmissions. This happens, for example, when you send us a message via a form. However, as a precaution we would like to point out that a hundred percent security in electronic data processing is not possible and that there is always a residual risk.
Data, which you submit to us
On this page we process the data you enter yourself, for example in a form. In this case, the purpose of the processing results from the type of form and from this data protection declaration. Even if you send us a message by e-mail, for example, or contact us in some other way, we process your data in accordance with the purpose of the contact.
Automatic server log files
On the other hand, our server automatically records all access and thus also IP addresses (log files), this serves to defend against attacks, analyse access figures and ensure smooth operation.
In addition to the pure server log files, which also provide us with information on page views, we use analysis tools. These tools provide us with detailed insights into the content of our site visited, the flow of behaviour and, for example, the country from which access took place. In order for such services to work, cookies must be set at the site visitor or scripts must be executed.
Plugins and Content Delivery Networks
We partly use plugins and content delivery networks, well-known examples for such services would be the video service YouTube. If such services are integrated via a website, access data is transmitted to the services. Usually this is your IP address and other metadata, such as time and date of access. As a rule, this is provided by setting cookies.4
Newsletter / Direct Marketing
a) Direct marketing to existing customers in the legitimate interest
We reserve the right to send newsletters to our customers on the basis of §7 para. 3 UWG ui.v.m Art. 6 para. 1 lit. f GDPR. You can of course object to receiving direct marketing information at any time.
b) Direct marketing on the basis of your consent
If you give us your consent, we will send you newsletters until you withdraw your consent. You can revoke your consent to us at any time with effect for the future.
Further data recipients
a) Service Providers within Data Processing Agreements
We have commissioned service providers in accordance with Article 28 GDPR, for example in the field of IT services, web hosting, e-mail hosting or printing services. They process personal data for us in accordance with instructions.
b) Utilisation of services from other fields
If it is necessary (for example, for the execution of a contract), we will pass on your data to, for example, banks, other payment service providers, shipping service providers, our tax consultant or lawyer.
c) Legal obligations
In addition, we are obliged in certain cases to make a report to the responsible authorities on the basis of the Money Laundering Act. We are also subject to other legal obligations, such as commercial or tax laws, in which context we are required to disclose certain information to tax authorities, for example.
d) Clarification of criminal offences
Insofar as it should be necessary for the investigation of a crime, we pass on data to the criminal prosecution authorities.
General information on deletion periods for personal data
We process the data as long as this is necessary for the respective purpose. If necessary, we will process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract; in addition, we are obliged to comply with statutory storage obligations. If the data processing is based on your consent, we will delete your data after your revocation.
Transfer of personal data to a third country
We try to have all service providers and services provided by providers within the European Union. A transfer to a third country may be considered if you have given us your consent and/or we have concluded a contract for data processing in accordance with Art. 28 GDPR, taking into account appropriate guarantees. In individual cases we may use plug-ins or tools hosted in third countries, but we may use them on the basis of our legitimate interests. In these cases we will point out the circumstances if necessary.
Obligation to provide personal data
The provision of personal data is regularly required for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the necessary personal data, we will not be able to conclude and fulfil a contract with you.
The legal bases for the processing of personal data are exceptional circumstances which allow the processing of personal data. The main legal bases are reflected in particular in Art. 6 GDPR. The legal bases according to which we process personal data are described in the individual processing operations in this data protection declaration.
Consent granted (Art. 6 para. 1 lit. a GDPR)
Consent is one of these legal bases and presupposes that the person giving consent gives it in an informed manner and on a voluntary basis. Consent on the basis of Art. 6 para. 1 letter a GDPR can be revoked at any time without giving reasons.
Contract-related data processing (Art. 6 para. 1 lit. b GDPR)
The processing of personal data for the purpose of initiating or implementing contracts is also a legal basis and is defined in Art. 6 para. 1 lit. b GDPR.
Legal obligation (Art. 6 para. 1 lit. c GDPR)
The exceptional nature of data processing due to a legal obligation is found in Art. 6 para. 1 lit. c GDPR, for example we are obliged to comply with certain retention periods under commercial and tax law.
Legitimate interests (Art. 6 para. 1 lit. f GDPR)
The processing of personal data on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f GDPR permits processing after careful consideration of financial or legal interests against the interests of the data subject worthy of protection.
Every natural person is entitled to certain rights, which are defined in particular in Articles 15 to 21 and 77 of the GDPR. In principle, you have the following rights, which you can claim against us.
Right to revoke a consent granted under Art. 7 GDPR
You can revoke any consent you have given us at any time without giving reasons with effect for the future.
Right to information according to Art. 15 GDPR (restrictions according to § 34 BDSG possible)
You have the right at any time to request information about the data processed by you and the purposes of the processing.
Right of rectification under Art. 16 GDPR
If you discover that we are processing incorrect or incomplete data about you, you have the right to correction.
Right to deletion according to art. 17 GDPR (restrictions according to § 35 BDSG possible)
You have the right to request the deletion of your personal data that we process about you at any time. Insofar as complete deletion is not possible, for example, because we must comply with statutory storage obligations or we can assert legitimate interests for other reasons, we will limit your data until these reasons are no longer given.
Right to restrict processing under Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:
Right to data transferability according to Art. 20 GDPR
You have the right to have data, which we process automatically on the basis of your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place to the extent that it is technically feasible.
Right to object to certain processing operations and direct advertising in accordance with Art. 21 GDPR
If the data processing is carried out on the basis of Article 6 paragraph 1 letter e or f FADP, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, including profiling based on these provisions. You will find the respective legal basis on which processing is based in this data protection declaration. If you object, we will no longer process your personal data unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves the assertion, exercise or defence of legal claims (objection pursuant to Art. 21 para. 1 GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is connected with such direct marketing. If you object, your personal data will no longer be used for the purpose of direct marketing (objection under Art. 21 para. 2 DPA).
Right of appeal to a supervisory authority pursuant to Art. 77 DGVO in conjunction with § 19 BDSG
In the case of infringements of the DPAs, the persons concerned have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the suspected infringement. This right of appeal is without prejudice to other administrative or judicial remedies.
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated by a website. The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data.
We have commissioned the following hoster:
Conclusion of a data processing agreement
In order to guarantee data protection compliant processing, we have concluded a contract for data processing in accordance to Article 28 GDPR with our host.
Our web server automatically logs all access and thus also IP addresses of visitors. This serves to ward off attacks, analyse access figures and ensure smooth operation. We have a legitimate interest in this (Art. 6 lit. f GDPR).
As a rule, the server log records not only the IP address but also other metadata about the session; these data are listed below.
We process these data only for the above mentioned purposes. We delete server log files after six months at the latest.
In addition, with your consent, we use third-party cookies for analysis, retargeting and remarketing purposes in order to optimize our website and for interest-based marketing purposes. The stored surfing behaviour is analysed using an algorithm so that targeted interest-based product recommendations can then be displayed in the form of banners or advertisements on third-party websites. The pseudonymised user profiles will not be merged with personal data about the bearer of the pseudonym without the express consent of the person concerned.
You can prevent cookies from being saved and delete existing cookies by making the appropriate settings in your browser. The help function of most browsers explains how to make these settings. If you do not accept cookies, however, this may impair the service functions of the Internet offering.
Comprehensive information on how to do this on a variety of browsers is available on the following websites: youronlinechoices, Network Advertising Initiative and/or Digital Advertising Alliance. You will also find information on how to delete cookies from your computer and general information about cookies.
Session cookies: Session cookies are deleted at the latest when you leave our website and close your browser.
Persistent cookies: These cookies remain stored even after you leave our website and close your browser. Persistent cookies can have different durations, from one day to several years. These cookies can perform various functions, for example, they can store your login information so that you are automatically logged in when you return to our website. Other persistent cookies are used for analysis, tracking and marketing purposes.
We use both first-party cookies and third-party cookies. First-party cookies, are cookies that originate directly from us. Third party cookies are cookies that are placed via a third party provider. We use various third-party cookies for analysis, tracking and marketing purposes.
Technically required or necessary cookies
These cookies enable the operation of our website. Without technically necessary cookies, our website would not be usable or only to a very limited extent. For example, such cookies are used when you log on to our site or add a product to your shopping cart. Sometimes necessary cookies also serve security purposes.
Analysis and statistics cookies
Analysis Cookies collect information about the behaviour of the site visitors, provide information about the length of stay and which information has been called up. Information is also collected about which website visitors come from, how many visitors the websites have and how long the user stays on the websites. The aim of these cookies is to use the information collected to optimise our website.
Tracking and marketing cookies
Tracking or marketing cookies (also known as remarketing and retargeting cookies) enable an analysis of browser behaviour, they store which contents were visited or which products the user was looking for (tracking in this sense means tracing). On the basis of these cookies, a user can also be identified across pages with the aim of displaying advertisements tailored to his or her interests.
We use technically required cookies in the interest of a functional and stable website (Art. 6 para. 1 lit. f GDPR), other cookies may only be used with your consent (Art. 6 para. 1 lit. a GDPR). You can set your preferences with regard to the selection of non-essential cookies at the beginning of your visit; in addition, you can adjust your preferences at any time.
We offer you the option of choosing whether and which cookies and services you want to allow. To this end, we have implemented what is known as consent management, which is automatically displayed when you visit our website for the first time or after the preference cookie has expired. When you have confirmed your selection with regard to cookies and services, a cookie will be stored in your browser to save your preferences. You can find more information about this cookie in our cookie list.
Communication by e-mail
If you send us an e-mail, we process your data according to the content and purpose of the message. As a rule, the processing is carried out on the basis of pre-contractual measures or in the course of the implementation of a contractual relationship on the basis of Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f. GDPR. It is a legitimate interest to process your request quickly and efficiently.
Insofar as it concerns a product- or service-related message, we generally process your data on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. b GDPR.
Please note that we store all incoming e-mails in accordance with the principles of proper accounting for a period of ten years, starting on the first day of the following year in which the message is received. In so far as you request us to delete the data, we will henceforth restrict your data for processing and only store it for the purpose of complying with retention periods in our legitimate interest.
Communication by telephone or fax
Even if you contact us by phone or fax, we will process your data either to initiate and implement contractual relationships (if the content is product- or service-related) and/or in our legitimate interest, analogous to contacting you by e-mail.
We do not record the contents of conversations, but we may make notes for the processing of your inquiry. This will be stored until the purpose of data processing has been achieved and we no longer have any legitimate interest in processing. If necessary, contents of the conversation will be stored anonymously for statistical purposes. Of course you can request deletion at any time.
If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.
The processing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your agreement (Art. 6 Para. 1 lit. a GDPR) if this has been requested.
The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.
If you submit a service request via the form, your details will be stored in the inquiry form, including the contact details you provided there, in order to process the request and in case of follow-up questions. We will not share this information without your consent.
Please note that we can not process your request without the requested information.
Mandatory information is:
First name, Surname
Module in question
Further information can be provided on a voluntary basis, in particular the upload of supplementary documents is voluntary.
The processing of the data entered into the service request form is therefore exclusively based on your consent (Article 6 (1) (a) GDPR). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The information you enter in the Service Request Form will remain with us until you ask us to delete it, revoke your consent to storage, or delete the purpose for data storage (for example, after your request has been processed). Mandatory statutory provisions - especially retention periods - remain unaffected.
Registration on this website
You can register on our website to create a customer account. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be given in full. Otherwise, we will reject the registration.
For important changes, such as the scope of the offer or for technical changes, we use the e-mail address specified during registration to inform you in this way.
The processing of the data entered during registration takes place on the basis of your consent (Art. 6 (1) lit. GDPR). You can revoke your consent at any time. An informal message by e-mail to us is sufficient. The legality of the already completed data processing remains unaffected by the revocation.
The data collected during registration will be stored by us as long as you are registered on our website and will subsequently be deleted. Legal retention periods remain unaffected.
Processing of data (customer and contract data)
We collect, process, and use personal data only insofar as it is necessary to establish, or modify legal relationships with us (master data). This is done based on Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. We collect, process and use your personal data when accessing our website (usage data) only to the extent required to enable you to access our service or to bill you for the same.
Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.
Data protection provisions application procedure
If you apply to us, whether for an advertised position or on your own initiative, we process your data to carry out the selection process. It is irrelevant to us whether you apply by post, by e-mail or, if available for the respective position, by online form.
As a matter of principle, we only process the data that you yourself have provided us with in the context of an application process. Other sources may be consulted after information and consultation with you. For example, whether we may contact a former employer.
The legal basis for the implementation of an application procedure is §26 BDSG in conjunction with Art. 6 para. 1 lit. b GDPR (initiation of employment contract). If you give us your consent to store your data for a longer period of time, this will be done on the legal basis of Art. 6 para. 1 lit. a GDPR.
Deletion periods Applicant data
We delete applicant data for a maximum of 4 months after the application process has been completed (when a candidate has been selected and all applicants have been informed of the outcome). The purpose of the data processing is generally no longer given with the end of the selection procedure, but we have a legitimate interest (Art. 6 para. 1 letter f GDPR) in being able to defend ourselves against any claims of rejected applicants. If you have the impression that your interests in immediate deletion outweigh any claims, you have the opportunity to ask us to do so. We will then examine your request and give you feedback.
After the expiry of the above-mentioned period, your data will be deleted, unless we have to defend ourselves, for example in ongoing proceedings, for example due to a complaint under the General Equal Treatment Act. In this case, we will delete your data after the end of the proceedings, subject to any statutory retention periods.
If we may store your data for a longer period of time on the basis of your consent, we will delete your data if you request us to do so and revoke your consent. If necessary, we will also delete your data before revoking your consent if it is foreseeable that no job will be available.
Inclusion in our pool of applicants
If we cannot offer you a job at the moment, we may ask you for your consent to further storage of your data. This serves the purpose of offering you a suitable position at a later date. The legal basis for processing your data in our applicant pool is your consent (Art. 6 Aba. 1 lit. a GDPR). Of course you can revoke your consent at any time with effect for the future. If you do not revoke your consent yourself within a period of two years, we will delete your data from our applicant pool at the latest by then.
Direct marketing to existing customers in the legitimate interest
We reserve the right to use the data collected on the occasion of a sales or service contract for direct advertising by e-mail or by post in accordance with § 7 para. 3 UWG, if the customer does not object or has not objected to this use. The direct advertising exclusively comprises offers of similar products or services as the products or services already purchased by the user from us. We have a justified economic interest (Art. 6 para. 1 lit. f GDPR) in informing our customers about new products and improving our services. Of course you can object to receiving direct advertising at any time. Please address your objection to the responsible office mentioned above.
Direct marketing based on your consent (newsletter)
You have the opportunity to give us your consent to receive direct marketing content. If you give your consent (Art. 6 para. 1 lit. a GDPR), for example to receive our e-mail newsletter, we will process your data for the purpose of direct marketing measures by e-mail.
Since we are obliged to check the accuracy of the e-mail address you provide when registering for the newsletter and want to ensure that it is correct, we use procedures that enable us to verify the ownership of the e-mail address. As a rule, this verification is carried out by the double opt-in procedure. After registration you will receive an e-mail with a link that you must click to confirm. If the Double-Opt-In procedure is not available due to temporary technical reasons, we will send you an e-mail to which you can reply without text to confirm your identity.
You can revoke your consent at any time with effect for the future, for this purpose you will find a "unsubscribe" link in every newsletter. Alternatively, you can send us an e-mail with the subject "Unsubscribe from newsletter". We process your data until you revoke your consent. Legal retention periods remain unaffected.
After you have been removed from the newsletter distribution list, your e-mail address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest in the sense of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
Use of CleverReach
This website uses CleverReach for the sending of newsletters. The provider is the CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach is a service that can be used to organize and analyze the sending of newsletters. The data you have entered for the purpose of subscribing to our newsletter (e.g. e-mail address) are stored on servers of CleverReach in Germany or in Ireland.
Newsletters we send out via CleverReach allow us to analyze the user patterns of our newsletter recipients. Among other things, in conjunction with this, it is possible how many recipients actually opened the newsletter e-mail and how often which link inside the newsletter has been clicked. With the assistance of a tool called Conversion Tracking, we can also determine whether an action that has been predefined in the newsletter actually occurred after the link was clicked (e.g. purchase of a product on this website). For more information on the data analysis services by CleverReach newsletters, please go to: https://www.cleverreach.com/en/features/reporting-tracking/.
The data is processed based on your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.
If you do not want to permit an analysis by CleverReach, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.
The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.
For more details, please consult the Data Protection Provisions of CleverReach at: https://www.cleverreach.com/en/privacy-policy/.
Execution of a contract data processing agreement
We have entered into a contract data processing agreement with the provider of CleverReach and implement the strict provisions of the German data protection agencies to the fullest when using CleverReach.
On our website you have the possibility to make an appointment with us. For this purpose we use "Calendly". Calendly is a service of Calendly, LLC, 1315 Peachtree St NE, Atlanta, GA 30309, https://calendly.com.
If you want to make an appointment with us, you can use the form provided. The information you provide will be sent via Calendly to the appropriate contact person and the data will be entered into our calendar (Outlook). In addition, the data can be viewed and stored in the Calendly login area.
You will receive a confirmation of the appointment by e-mail, where you have the option to enter the data into your calendar.
The purpose of processing the provided data is to be able to arrange an appointment, process the contact request and get in touch with you.
The legal basis for the use of Calendly is art. 6 para. 1 lit. f GDPR. It is our legitimate interest to offer you the possibility to arrange appointments with us independently. This simplifies the coordination regarding appointments and allows for an efficient scheduling.
As a rule, we process your data for the purpose of arranging appointments on the basis of Art. 6 para. 1 lit. b GDPR in the context of the initiation or implementation of contractual relationships.
The personal data will be deleted as soon as they are no longer required for the purpose of their collection.
We have concluded a contract agreement with Calendly, so that the data provided by you will be processed for us according to your instructions and order. Furthermore, since it cannot be ruled out that the data may also be processed in a third country (USA), we have concluded an agreement with Calendly in accordance with the EU standard contract clauses, so that secure data processing is also guaranteed here. You can also find further information at https://calendly.com/pages/dpa.
We use online conference tools, among other things, for communication with our customers. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conference tool and by us. The conferencing tools collect all information that you provide/access to use the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata).
Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.
Should content be exchanged, uploaded or otherwise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant messages, voicemail uploaded photos and videos, files, whiteboards and other information shared while using the service.
Please note that we do not have complete influence on the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, and which we have listed below this text.
Purpose and legal bases
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 sentence 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art. 6 para. 1 lit. f GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.
Duration of storage
Data collected directly by us via the video and conference tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please contact directly the operators of the conference tools.
We use the following conference tools:
Execution of a contract data processing agreement
We have entered into a contract data processing agreement with the provider of ClickMeeting and implement the strict provisions of the German data protection agencies to the fullest when using ClickMeeting.
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g. cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.
This analysis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.
Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: https://support.google.com/analytics/answer/7667196?hl=en
The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display ads in the Google search engine or on third party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g. location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.
The use of Google Ads is based on Art. 6 Sect. 1 lit. et seq. GDPR. The website operator has a legitimate interest in marketing the operator’s services and products as effectively as possible.
This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use Google Conversion Tracking on the basis of Art. 6 Sect. 1 lit. et seq. GDPR. The operator of the website has a legitimate interest in the analysis of the user patterns with the aim of optimizing both, the operator’s web presentation and advertising. If a respective declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time.
For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en
LinkedIn Insight Tag
We use the analysis and conversion tracking technology of the platform LinkedIn Inc. (2029 Stierlin Ct, Mountain View, CA 94043, USA, hereinafter “LinkedIn”) on our website.
The LinkedIn Insight Tag collects data on the use of our website, including URL, referrer URL, IP address, device and browser properties, time stamp and page views. The data collected via the LinkedIn Insight Tag is encrypted and anonymized within 7 days. The anonymized data will be deleted within 90 days. LinkedIn does not share any personal data with the owner of the website, it only offers summarized reports on the website target group and the display performance.
In connection with the use of LinkedIn conversion tracking, the information collected is also processed on servers of LinkedIn Inc. in the USA. LinkedIn is certified under the US-EU data protection agreement “Privacy Shield” and thus undertakes to comply with European data protection regulations.
If you do not want us to evaluate your user behavior in connection with LinkedIn ads, you can deactivate it by opting out at the following link https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Alternatively, you can prevent the analysis of your user behavior in connection with LinkedIn by making the appropriate cookie setting in your browser.
The use of LinkedIn Insight Tag is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time.
Further information on data protection at LinkedIn can be found here https://www.linkedin.com/legal/privacy-policy#choices.
YouTube with expanded data protection integration
Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.
As soon as you start to play a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.
Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest. If a corresponding agreement has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.
Google Web Fonts
To ensure that fonts used on this website are uniform, this website uses so-called Web Fonts provided by Google. When you access a page on our website, your browser will load the required web fonts into your browser cache to correctly display text and fonts.
To do this, the browser you use will have to establish a connection with Google’s servers. As a result, Google will learn that your IP address was used to access this website. The use of Google Web Fonts is based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in a uniform presentation of the font on the operator’s website. If a respective declaration of consent has been obtained (e.g. consent to the archiving of cookies), the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. Any such consent may be revoked at any time.
If your browser should not support Web Fonts, a standard font installed on your computer will be used.
For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.
Via an API, this website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer.
We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR. If a respective declaration of consent has been obtained, the data shall be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be revoked at any time.
For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.
This website uses the Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it remains disabled for all tracking tags implemented with Google Tag Manager.
Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Google+ etc. can generally analyse your user behaviour comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.
Individual social networks
We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
Categories of data and purposes of processing
We process personal data of our service providers and partners, which we receive directly within the scope of our business relationship. If we have received data from you, we process it only for the purposes for which we have received or collected it.
As a rule, we process the following categories of data from you:
In the course of the business initiation phase and during the business relationship, in particular through personal, telephone or written contacts, initiated by you or by one of our employees, further personal data is generated, e.g. information on the contact channel, date, occasion and result; (electronic) copies of correspondence and information on participation in direct marketing measures.
On the other hand, we process personal data that we have obtained and are permitted to process from publicly accessible sources (e.g. commercial and association registers, press, media, Internet).
Data processing for other purposes can only be considered if the necessary legal requirements according to Art. 6 para. 4 GDPR are met. In this case we will of course comply with any information duties according to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR.
Legal bases according to which we process your data
Based on your consent (Art. 6 para. 1 lit. a) GDPR)
We process personal data for one or more specific purposes if you have given us permission to do so. If personal data are processed on the basis of your consent, you have the right to revoke this consent at any time with effect for the future.
Data processing for the fulfilment of contracts (Art. 6 para. 1 lit. b) GDPR)
We process personal data for the fulfilment of contracts. The fulfillment of contracts includes, for example, the conclusion, processing and reversal of a contract. In addition, we process personal data which are necessary for the implementation of pre-contractual measures, such as the initiation of a contract, and which are provided upon your request.
Data processing based on a legal obligation (Art. 6 para. 1 lit. c) GDPR)
Like any company, we have to comply with retention and other documentation requirements, and this may include documents containing personal information. Insofar as we process data for these purposes, the processing is based on a legal obligation.
Data processing based on a weighing of interests (Art. 6 para. 1 lit. f) GDPR)
If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR. Insofar as the specific purpose permits, we process your data pseudonymised or anonymised.
Other recipients of your data
Passing on to data processors in accordance to Art. 28 GDPR
Data processors commissioned by us (Art. 28 GDPR), especially in the field of IT services and, for example, printing services, who process your data for us in accordance with our instructions. If we commission service providers to perform our tasks, we always observe the provisions of data protection law; in particular, data will only be passed on after the conclusion of data processing agreements. We will be pleased to inform you which contract processors we use.
For the execution of a contractual relationship
If it is necessary for the execution of the contract with you, we will pass on your data, for example, to our bank for the processing of payments or shipping service providers, such as the German Post, DHL, UPS, GSL, DPD or other occasion-related providers.
Transfer due to a legal obligation
In the event of a legal or official obligation, we will pass on your data to public bodies or institutions (authorities, for example in the context of criminal prosecution).
Other authorities, insofar as you have given us your consent
If you have given your explicit consent, we will also pass on your data to other parties. However, this will be done within the limits of your verifiable consent.
General information on deletion periods for personal data
Principle of earmarking and compliance with statutory retention periods
We process the data as long as this is necessary for the respective purpose. If necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract.
In addition, like any company, we are obliged to comply with the statutory retention periods, for example the periods under commercial and tax law. Insofar as legal storage obligations exist, the relevant personal data is stored for the duration of the storage obligation. The duration of storage also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases may be up to thirty years. After expiry of the obligation to retain data, it is checked whether there is any further necessity for the processing. If there is no longer a need, the data is deleted.
As a rule, such retention periods within the framework of legal transactions (according to §147 AO / §257 HGB / §14b UstG) are 10 years, beginning with the year following the legal transaction.
Insofar as you provide us with your contact details, for example by e-mail, telephone, or by handing over your business card, we store this data in accordance with Art. 6 Para. 1 lit. b GDPR on the basis of pre-contractual measures and in the legitimate interest (Art. 6 Para. 1 lit. f GDPR) of smooth and targeted communication. Insofar as no legal transaction is concluded, we will delete your data if you request us to do so or if no further contact takes place within a period of three years. If you enter into a legal transaction with us (Art. 6 para. 1 lit. b GDPR), we will store your data for ten years until the expiry of the commercial and tax law requirements. After this period, we will check whether we can delete the data and, if necessary, we will delete it.
E-mails and business letters
We archive all our e-mail traffic for ten years. If you send us an e-mail, your data and the entire e-mail content will be stored for 10 years. Most e-mails count as business letters; in addition, e-mails may contain information relevant to tax law. In our opinion, the effort required to check each individual e-mail is not in proportion to the benefit and the interests of the sender worthy of protection. However, you can of course request us to delete the e-mail at any time and we will check each individual case and inform you of the result. This may lead to deletion or restriction of processing, depending on the content of the correspondence.
Revocation of your consent
Insofar as we process your data on the basis of your consent (Art. 6 para. 1 lit. a GDPR), we will delete them after your revocation. Unless there is a justified interest against a complete deletion. For example, we retain declarations of consent in principle for up to three years after receipt of your revocation in the legitimate interest (Art. 6 para. 1 lit. f GDPR). We keep the consent exclusively under restriction of the processing in order to be able to defend ourselves in case of dispute.
Legal or contractual obligation to provide personal data
The provision of personal data is regularly required for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the necessary personal data, we will not be able to conclude and fulfil a contract with you.
Transfer to a third country
Your personal data is generally processed by us in computer centres in the Federal Republic of Germany or the European Union. A transfer to a third country is only possible if you have given us your consent or if we have concluded a contract for data processing in accordance with Art. 28 GDPR, taking into account suitable guarantees or other appropriate safeguards.
|PHPSESSID / www.iqs.de||Retains the state of the user for all page requests.||Session|
|IDE / .doubleclick.net||Contains a randomly generated User-ID. Google can use this ID to recognize the user across different websites and display personalized advertising.||1 year|
|lang / .linkedin.com
lang / .ads.linkedin.com
|This cookie remembers the language setting of a user.||Session|
|lidc / .linkedin.com||This cookie ensures that all cookies in this browser use the same SameSite attribute.||365 days|
|UserMatchHistory / .linkedin.com||This cookie is used to synchronize the IDs of LinkedIn Ads.||30 days|
|bcookie / .linkedin.com||This cookie is used to store the two-factor authentication status of a logged-in user.||2 years|
|_ga / .linkedin.com||This is a cookie for Google Analytics.||2 years|
|_gat_UA-1038175-1 / .iqs.de||Certain data is sent to Google Analytics only once per minute at most. The cookie has a lifetime of one minute. As long as it is set, certain data transfers are blocked.||1 minute|
|_gid / .iqs.de||Contains a randomly generated User-ID. This ID enables Google Analytics to recognize returning users on this website and to merge data from previous visits.||24 hours|
|_ga / .iqs.de||Contains a randomly generated User-ID. This ID enables Google Analytics to recognize returning users on this website and to merge data from previous visits.||2 years|
|NID / .google.de
NID / .google.com
|These Google cookies store information about user settings and information for Google Maps.||1 year (derived from browser: 2021-12-20T13:38:55.819Z)|
|ANID / .google.com||Advertising||1 Jahr (aus Browser abgleitet: 2021-12-20T13:38:55.819Z)|
CONSENT / .google.com
|Targeting/Advertising||18 years (derived from browser: 2038-01-10T07:59:59.921Z)|
|1P_JAR / .google.com||This Google cookie is used to optimize advertising to deliver ads relevant to users, improve campaign performance reports, or to prevent a user from seeing the same ads multiple times.||1 month|