General Information and Mandatory Information

Responsible Party (referred to as the “controller” in the GDPR)

The responsible party for data processing on this website is the m.one GmbH. If you have any questions or comments about this information, or if you wish to contact us regarding the assertion of your rights, please direct your request to

m.one GmbH

An den Röthen 12

61381 Friedrichsdorf

Germany

E-Mail: info@qber.de

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.

Storage Duration

If no specific storage duration is mentioned in this Privacy Policy, your personal data will remain with us until the purpose for data processing is no longer valid. If you make a legitimate deletion request or revoke your consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (such as tax or commercial retention periods); in the latter case, the data will be deleted after the expiration of these reasons.

SSL or TLS encryption

This page uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content such as orders or inquiries that you send to us as the website operator. An encrypted connection can be recognized by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Legal Basis

We process personal data in accordance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us is only carried out based on a legal permission.

If you have consented to data processing, we process your personal data based on Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, if special categories of data are processed according to Art. 9 para. 1 GDPR. In the event of an express consent to the transfer of personal data to third countries, the data processing is carried out based on Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or to access information on your device (e.g., via device fingerprinting), data processing is carried out based on § 25 para. 1 TTDSG. The consent can be revoked at any time. If your data is required for contract fulfillment or for the implementation of pre-contractual measures, we process your data based on Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Art. 6 para. 1 lit. c GDPR. Data processing can also be carried out based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. The relevant legal basis in each individual case is provided in the following paragraphs of this Privacy Policy.

Note on Data Transfer to the US and Other Third Countries

We use providers and tools from companies based in the US or other countries that do not have a data protection level equivalent to that of the EU. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to inform you that a data protection level comparable to that of the EU cannot be guaranteed in these countries. For example, US companies are obligated to disclose personal data to security authorities without giving you as the affected party the opportunity to take legal action. It cannot be excluded that US authorities (e.g., intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

Rights of the data subject

As a data subject, you have the right to assert your rights against us. In particular, you have the following rights, with the respective requirements for exercising them referred to the legal basis cited:

• Right to information according to Art. 15 GDPR;

• Right to rectification according to Art. 16 GDPR;

• Right to erasure according to Art. 17 GDPR;

• Right to restriction of processing according to Art. 18 GDPR;

• Right to notification according to Art. 19 GDPR;

• Right to data portability according to Art. 20 GDPR;

• Right to withdraw consent according to Art. 7 para. 3 GDPR;

• Right to complain according to Art. 77 GDPR.

Responsible supervisory authority

In case of violations of the GDPR, data subjects have the right to file a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of alleged infringement. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

RIGHT TO OBJECT     

IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS THAT ARISE FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS, ON WHICH THE PROCESSING IS BASED, CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU LOG AN OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN PROVE COMPELLING PROTECTIVE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 ABS. 1 DSGVO).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR SUCH MARKETING AT ANY TIME; THIS ALSO APPLIES TO PROFILING, AS FAR AS IT IS CONNECTED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21 ABS. 2 DSGVO).

Data processing on this website

Hosting & Content Delivery

External Hosting – Squarespace

 We use the website building system from Squarespace Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland (hereinafter Squarespace). Squarespace is a tool for creating and hosting websites. When you visit our website, your data will be processed on Squarespace servers. This may also include personal data being transmitted to Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA. Squarespace also stores cookies that are necessary for the display of the page and for ensuring security (necessary cookies). The use of Squarespace is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the most reliable representation of our website. If a corresponding consent has been requested, the processing will only be based on Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, if the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) in accordance with the TTDSG. The consent can be revoked at any time. Data transfer to the USA is based on the standard contract clauses of the EU Commission.

Details can be found here: https://support.squarespace.com/hc/en-us/articles/360000851908-DSGVO-und-Squarespace.

Information on Squarespace's privacy policy can be found here: https://www.squarespace.com/privacy/

We have entered a contract for data processing (AVV) for the use of the service mentioned above. This is a legally required contract that ensures that the service only processes personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Cookies

Our websites use so-called "cookies". Cookies are small data packages that do not damage your device. They are either temporarily stored for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser. Cookies can come from us (first-party cookies) or from third parties (so-called third-party cookies). Third-party cookies allow the integration of certain services from third parties within websites (e.g., cookies for processing payment services). Cookies have various functions. Many cookies are technically necessary as certain website functions would not work without them (e.g., the display of videos). Other cookies can be used for analyzing user behavior or for advertising purposes. Cookies that are necessary for the execution of the electronic communication process, for providing certain, desired functions (e.g., for the shopping cart function) or for optimizing the website (e.g., cookies for measuring web audiences) (necessary cookies) will be stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, the processing will be based solely on this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 German Telemedia Act); consent can be withdrawn at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases or exclude them altogether or activate the automatic deletion of cookies when closing the browser. Additional information is available from the Federal Office for Information Security.

If cookies are disabled, the functionality of this website may be limited.

 On our website, we use the following types of cookies:

• Functional and necessary cookies are always used because they allow Squarespace, our hosting platform, to provide this website safely for you.

• Analytics and performance cookies are only used on this website if you confirm our cookie banner. These cookies provide insight into website traffic, website activity, and other data.

On our website, we use the following types of Cookie Consent Manager - CCM19 cookies:

• Functional and necessary cookies are always are used to store cookie consent- which cookies may be sent.

Server-Log-Files

 We use server log files on our website. The provider of the website automatically collects and stores information in server log files, which your browser automatically transmits to us. This includes:

• Browser type and browser version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Time of server request

• IP address

These data are not combined with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free display and optimization of its website and for this reason, server log files must be collected.

Contact form

We use a contact form on our website, which allows users to send inquiries to us. When a user submits an inquiry via the contact form, their information, including any contact details provided, will be stored in our system for the purpose of processing the inquiry and for any follow-up questions. We also share this information with Squarespace, our website hosting provider for the purpose of providing website services. This processing of data is based on Article 6 (1) (b) GDPR if the inquiry is related to fulfilling a contract or for pre-contractual measures, or on our legitimate interest in effectively handling inquiries Article 6 (1) (f) GDPR if the inquiry is not related to a contract. If consent has been requested, it will be based on Article 6 (1) (a) GDPR. The user's data will be stored until they request deletion, revoke their consent for storage, or the purpose for storage no longer applies (e.g. after processing the inquiry). Any statutory retention periods remain unaffected.

For the processing of emails, we generally use Office365 solutions of Microsoft. You can find more information about Microsoft and the privacy policy here:

https://www.microsoft.com/de-de/microsoft-365/business/data-security-privacy-germany

Request by E-Mail or Telephone

If you contact us by e-mail or phone, your inquiry including any personal data (name, inquiry) will be stored and processed by us for the purpose of handling your matter. We will not share this data without your consent. The processing of this data is based on Article 6 (1) lit. b GDPR if your inquiry is related to fulfilling a contract or for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries directed at us (Article 6 (1) lit. f GDPR) or your consent (Article 6 (1) lit. a GDPR) if it has been requested; consent can be withdrawn at any time. The data you provide to us through contact inquiries will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for storage no longer applies (e.g. after handling your matter). Legal retention periods remain unaffected.

 For the processing of emails, we generally use Office365 solutions of Microsoft. You can find more information about Microsoft and the privacy policy here:

https://www.microsoft.com/de-de/microsoft-365/business/data-security-privacy-germany

Analytics, tools and plug-ins

Squarspace Analytics

 We use Squarespace Analytics on this website. The provider is Squarespace Ireland Ltd., Le Pole House, Shipstreet Great, Dublin 8, Ireland (hereinafter referred to as Squarespace Analytics).

 This website collects personal data that serves as the basis for our website analytics. This includes:

• Information about your browser, network, and device

• Websites that you accessed before visiting this website

• Your IP address

These information may also contain details about your use of this website, including clicks, internal links, visited pages, scrolling, search queries, and timestamps. We share this information with Squarespace, our provider for website analytics, to learn more about traffic and activity on this website. Squarespace Analytics uses technologies that enable cross-page recognition of the user for analyzing user behavior (such as cookies or device fingerprinting) and bases pseudonymized user profiles on this. As part of the analysis, personal data may also be transmitted to Squarespace Analytics' parent company, Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA. If a corresponding consent has been requested, the processing takes place solely on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, if the consent includes the storage of cookies or access to information on the user's device (such as device fingerprinting) in accordance with TTDSG. The consent can be revoked at any time. If no consent has been obtained, the processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the most informative analysis of the user behavior of our website visitors.

 For more information, please visit: https://support.squarespace.com/hc/de/articles/360000851908-DSGVO-und-Squarespace

 Privacy notice from Squarespace can be found here: https://de.squarespace.com/privacy/

 Data transfer to the USA is based on the standard contract clauses of the EU Commission.

 We have entered a contract for order processing (AVV) for the use of the service mentioned above. This is a contract required by data protection law that ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the DSGVO.

Cookie Consent Manager – CCM19

Our website uses the cookie consent technology provided by CCM19 - Cookie Consent Management to obtain your consent for storing certain cookies in your browser and to document this in compliance with data protection regulations. The provider of this technology is CCM19 - Cookie Consent Management, Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter referred to as "CCM19").

 When you enter our website, CCM19 cookies are stored in your browser, in which the consents granted by you or the revocation of these consents are stored. The data collected is stored until you request us to delete it or until the CCM19 cookie itself is deleted, or the purpose for data storage no longer exists. Mandatory legal retention periods remain unaffected. The use of the CCM19 cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

Other Services

Job applicant information

We offer you the opportunity to apply to us (e.g., via email, postal mail or through an online application form). Below, we inform you about the scope, purpose and use of the personal data collected during the application process. We assure you that the collection, processing and use of your data is in accordance with applicable data protection laws and all other legal regulations and that your data will be treated strictly confidential. If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes from job interviews, etc.) as necessary to make a decision about establishing an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and, if you have given your consent, Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time. Your personal data will be passed on within our company only to those persons who are involved in the processing of your application. If the application is successful, we will store the data you submitted on the basis of § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of performing the employment relationship in our data processing systems. If we cannot make you an offer of employment, you reject an offer or withdraw your application, we reserve the right to retain the data you submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months after the end of the application process (rejection or withdrawal of the application). After that, the data will be deleted and the physical application documents will be destroyed. The retention serves in particular the purpose of evidence in case of a legal dispute. If it is apparent that the data will be required after the expiration of the 6-month period (e.g. due to a pending or imminent legal dispute), deletion will only take place if the purpose for the further retention no longer applies.

Applicant pool

 If we cannot make you an offer of employment, you may have the option to be included in our applicant pool. In the case of inclusion, all documents and information from the application will be transferred to the applicant pool so that we can contact you in case of suitable vacancies.

Inclusion in the applicant pool is solely on the basis of your explicit consent (Art. 6 para. 1 lit. a GDPR). The grant of consent is voluntary and has no relation to the ongoing application process. The data subject can revoke his consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, unless there are legal retention reasons.

The data from the applicant pool will be deleted at the latest two years after the consent was given.

 Sources: erecht24.de, squarspace.