You will find the name and contact details of the person responsible in the legal information.

You can contact our data protection officer by post with the note "data protection officer" or by e-mail at datenschutz(at)quantum.ag.

2.1 Operation of the website
a. Personal data

Our website is hosted by Host Europe GmbH, Hansestrasse 111, 51149 Cologne, Germany. The following information, which your browser automatically transmits to the server, is processed there:

• browser type/version
• operating system used
• referrer URL (the previously visited page)
• host name of the accessing rec
• time of the server request
  

b. Purpose and legal basis of processing

The processing of your personal data is carried out by the controller for the following purposes in accordance with the following legal bases:

• Enabling the use of the website (legitimate interest)
• Management of your consent to view services (legitimate interest)
• Ensuring proper operation of a data processing system (compliance with legal obligations, i.e. security of processing, e.g. to defend against and investigate cyber attacks)

c. Recipients or categories of recipients

Personal data will be disclosed if this is necessary for the prevention of criminal offences and/or if we are otherwise legally obliged to do so.

d. Storage duration and if applicable criteria for determining storage duration

The personal data are automatically deleted 4 weeks after the end of the connection.

2.2 Map representations

Our website uses interactive maps in various places to display our objects on a street map. For this purpose, the product Mapbox, a map service by Mapbox, Inc. is used in conjunction with OpenStreepMap. By using Mapbox, information about your use of this website, including your IP address, is transmitted to Mapbox and the OpenStreetMap Foundation.

a. Personal data

When you access this website, personal data are automatically transmitted to the service provider in accordance with point 2.1.a.

b. Purpose and legal basis of processing

The processing of your personal data is carried out by the controller on the basis of your consent pursuant to Art. 6 (1) a) in conjunction with Art. 7 GDPR. Failure to give consent will only result in the Mapbox / OpenStreetMap service not being made available to you.

c. Recipients or categories of recipients

When you access the map, your data are transferred to MapBox Inc. (740 15th St Nw Suite 500 Washington, DC 20005 United States) and the OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom. Mapbox and OSMF may transfer your data to third parties where required to do so by law or where such third parties process the data on our behalf. It cannot be ruled out that the recipients may associate your IP address with other data.

It is technically possible that the recipients could identify at least individual users on the basis of the data received. We have no influence on the fact that personal data and personality profiles of users of the website are processed for other purposes.

d. Storage duration and, if applicable, criteria for determining storage duration

We do not know how long the recipient stores the above data.

e. Transmissions to a third country and existence of the adequacy decision

The personal data are transferred to Mapbox Inc. and OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road

Cambridge, CB4 0WS, United Kingdom, to a third country (USA/UK as of 01 January 2021) in accordance with your consent pursuant to Art. 49 (1) a) GDPR. Access by state authorities cannot be ruled out.

f. Revocation of your consent

You can revoke your consent at any time by changing your settings in point 2.5.

For more information, please see the Privacy Policy at OSMF (Privacy Policy / Services and tile users privacy FAQ and the privacy policy of Mapbox.

2.3 Display of videos

a. Personal data

Our website uses services of the video platform "Vimeo". We have embedded individual videos from the platform on our website so that they can be played directly on our website. When you view a video, a connection is established to the Vimeo servers and the video is displayed within our website.

This transmits to Vimeo which website you have visited. In the process, the data mentioned in point 2.1. are transferred to Vimeo. If you are logged in as a Vimeo user, Vimeo assigns this data to your user account.

b. Purpose and legal basis of processing

The processing of your personal data is carried out by the controller on the basis of your consent pursuant to Art. 6 (1) a) in conjunction with Art. 7 GDPR. Failure to give consent will only result in the service not being made available to you. You can revoke an already granted consent at any time.

It is technically possible that Vimeo could identify at least individual users on the basis of the data received. We have no influence on the fact that personal data and personality profiles of users of the Vimeo website are processed for other purposes.

c. Recipients or categories of recipients

The video platform is operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. Vimeo may transfer the information obtained to third parties where required to do so by law or where such third parties process the data on Vimeo's behalf.

d. Storage duration and, if applicable, criteria for determining storage duration

We do not know how long Vimeo stores the above data.

e. Transmissions to a third country and existence of the adequacy decision

The personal data are transferred to a third country (USA) based on your consent in accordance with Art. 49 (1) a) GDPR. Access by state authorities cannot be ruled out.

f. Miscellaneous

If you do not want Vimeo to assign the viewing of the video to your user account, we recommend that you log out of Vimeo with your account in advance. You can revoke your consent at any time by changing your settings in point 2.4.

Further information on data protection is available here.

2.4 Web analysis with Google Analytics

a. Personal data

We use the web analysis service Google Analytics to collect, collate and analyse data about the behaviour of visitors to our website. A web analysis service collects a variety of data, including from which website you accessed our website, which sub-pages you accessed or how often and for how long you viewed a sub-page. The IP address of your device is truncated and anonymised by Google if you access our website from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

b. Purpose and legal basis of processing

The processing of your personal data is carried out on the basis of your consent pursuant to Art. 6 (1) a) in conjunction with Art. 7 GDPR. Failure to provide consent results in this service not being activated and we will not be able to use your data for web analysis.

Google acts on our behalf as part of a commissioned processing pursuant to Article 28 GDPR. We have concluded a data protection agreement with Google, which contains the EU standard data protection clauses.

We did not select Google's default settings during installation, did not deactivate any data sharing and did not conclude a shared responsibility agreement according to Art. 26 GDPR.

c. Recipients or categories of recipients

The European representative of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

d. Storage duration and, if applicable, criteria for determining storage duration

In order to track improvements to our website, the data are stored for 26 months and then automatically deleted.

e. Transmissions to a third country and existence of the adequacy decision

Your personal data may be transferred to a third country within Google to the parent organisation Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA on the basis of your consent pursuant to Art. 49 (1) a) GDPR. Due to legal requirements to which Google LLC is subject, it cannot be ruled out that government authorities may access your personal data.

f. Miscellaneous

If you do not want Google to assign the viewing of the of the website to your user account, we recommend that you log out of Google with your account in advance.

You can revoke your consent at any time by changing your settings in point 2.5. Further information on data use, revocation and setting options at Google is available at:

• Google Privacy Policy and Terms of Use
• Terms of use for Google Analytics
• How Google Analytics works
• Settings options for your Google account

2.5 Social Media Links

Links from social networks (e.g. Xing or LinkedIn) are integrated on our website. The links are identified on our website by logos or other notices. By clicking on the logos, you leave our website. The providers receive the information that you have previously visited our site. In addition, further information listed under point 2 is transmitted. The data protection information of the respective company applies:

• Data protection information at Xing
• Privacy information at LinkedIn
  

2.6 Cookies

Cookies are text files that are stored on your computer and read by our servers when you visit our website again. You will then not have to adjust your settings again during the stated period. We store the following information:

Where your personal data are processed when you visit our website and use our services, you have the following rights as a data subject within the meaning of the GDPR:

- Art. 15 GDPR: Right to information of the data subject.

You have the right to obtain information from us about what personal data we process about you.

- Art. 16 GDPR: Right to rectification.

If the data concerning you are incorrect or incomplete, you may request that incorrect information be corrected or that incomplete information be completed.

- Art. 17 GDPR: Right to erasure.

Under the conditions of Art. 17 GDPR, you can request the erasure of your personal data. Your right to erasure depends, among other things, on whether the data relating to you are still required by us to fulfil our legal duties.

- Art. 18 GDPR: Right to restriction of processing

You may request the restriction of the processing of personal data relating to you under the requirements of Art.18 GDPR.

- Art. 21 GDPR: Right to objection

You may object to the processing of data relating to you at any time on grounds relating to your particular situation.

Art. 7 (3) GDPR: Right to revoke consent

You have the right to revoke the issued consent to the processing of your personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to the revocation.

- Art. 77 GDPR: Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data relating to you is unlawful, you may lodge a complaint with a data protection supervisory authority competent for the place where you reside or work or for the place of the alleged infringement. The supervisory authority responsible for us is: The Hamburg Commissioner for Data Protection and Freedom of Information (www.datenschutz-hamburg.de).

Our website contains links to other websites. We have no influence on whether their operators comply with data protection regulations. Despite prior careful control of the content, we cannot assume any liability for external links to third-party content.