Privacy Statement

The site owner takes the protection of your personal data very seriously. We will treat your data as confidential and in compliance with applicable data protection regulations and this privacy statement.

Controller and Data Protection Officer

The controller pursuant Art. 4 para 7 of the EU General Data Protection Regulation (GDPR) is Quadrat Facility Services GmbH, Clayallee 167, 14195 Berlin, telephone: +49 30 88 72 75 70, e-mail: service@quadrat-facility.com.

The data protection officer can be reached under the above address and under datenschutz@quadrat-facility.com.

Scope and purposes of collection of data

In case you are visiting our website, we will collect the following data:

• IP address of the visitor’s terminal device;
• date and time of access to the website;
• URL of the website accessed by the visitor;
• the website the visitor is referring from (referrer-URL);
• the used browser and operating system as well as the name of the access provider;

We will use the collected data for the following purposes:

• to guarantee a smooth establishing of connection to the website;
• to guarantee a comfortable use of the website by visitors;
• to analyse the security and stability of the system; and
• to administrate the website.

We are processing these data in accordance with Art. 6 para 1 sentence 1 lit. f) GDPR. Our legitimate interest results from the above purposes of processing.

The collected data will be erased after the visit of our website unless we are subject to a legal retention obligation (e.g. for telecommunications data retention) or you have given your explicit consent to retain your data. In case we retain your data because of a legal retention obligation, the data will be erased once the retention period has expired.

Transmission of Data

We will generally not transmit the data collected upon your visit of our website to third parties. We will, in exceptional cases, transmit data to third parties in case one of the following applies:

• you have given your explicit consent for the transmission of data pursuant Art. 6 para 1 sentence 1 lit. a) GDPR;
• the transmission is legally permitted and necessary to perform a contractual relationship you are party to in pursuant Art. 6 para 1 sentence 1 lit. b) GDPR;
• we are legally obligated to transmit your data pursuant Art. 6 para 1 sentence 1 lit. c) GDPR;
• the transmission is necessary to establish, exercise or defense of legal claims except where such interest is overridden by your interest in not having your data transmitted pursuant 6 para 1 sentence 1 lit. f) GDPR.

Use of Cookies

Our website uses cookies. Cookies are small data packets which are exchanged between the visitor’s browser and the server of our website. These packets are stored on the visitor’s terminal device. In these cookies, data is stored which enables our website to recognise your browser on the next visit and automatically use the same settings as of the previous visit. Further, cookies can be used for statistical analysis of our website (see below: use of web-analysis tools, web-tracking).

Cookies will be either erased after the end of the respective session or stored on your terminal device unless you erase them.

You can prevent the use of cookies by changing your browser settings accordingly. However, please be aware that you might only have restricted use of our website in case you prevent the use of cookies.

The data processed by cookies are processed in accordance with Art. 6 para 1 sentence 1 lit. f) GDPR for legitimate interest. Such interest results from the above purposes of use of cookies.

Cookie Consent with Borlabs Cookie

Our website uses the Borlabs cookie consent technology to obtain your consent to the storage of certain cookies in your browser and for their data privacy protection compliant documentation. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs).

Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered. These data are not shared with the provider of the Borlabs technology.

The recorded data shall remain archived until you ask us to eradicate them, delete the Borlabs cookie on your own or the purpose of storing the data no longer exists. This shall be without prejudice to any retention obligations mandated by law. To review the details of Borlabs’ data processing policies, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use the Borlabs cookie consent technology to obtain the declarations of consent mandated by law for the use of cookies. The legal basis for the use of such cookies is Art. 6 Sect. 1 Sentence 1 lit. c GDPR.

Adjust your consent on our site:

Here you can see your consent on our website:

Cookie list:

Contact Form

Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 para 1 sentence 1 lit. a) GDPR. You may revoke your consent at any time. An informal email making this request to datenschutz@quadrat-facility.com is sufficient. Such request does not affect the lawfulness of processing activities before the time of receipt of your revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Handling applicant data

We offer website visitors the opportunity to submit job applications to us (e.g., via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing, and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

Scope and purpose of the collection of data

If you submit a job application to us, we will process any affiliated personal data (e.g., contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 BDSG according to German Law (Negotiation of an Employment Relationship), Art. 6(1)(b) GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.

If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship in our data processing system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agreement (Article 6(1)(a) GDPR) or if statutory data retention requirements preclude the deletion.

Use of Web-Analysis Tools, Web-Tracking

Our website uses the following analysis-tools:

Google Analytics

Our website uses Google Analytics, a web-analysis tool provided by Google Inc., (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) (Google).

In this context, pseudonymised user profiles will be created and cookies will be used (see above: Use of Cookies). Information produced by the cookie regarding your use of our website, in particular

• the respective type and version of your browser;
• the respective operating system;
• the referrer-URL;
• the name of the host of the respective terminal device;
• date and time of the retrieval of the website

will be transmitted to a server of Google located in the United States and stored there. The data will be used to analyse the use of our website, to compile reports regarding the activities on the website and to rend further services related to the use of the website and the internet, for the purposes of market research and personalising of websites. Data is transmitted to third parties to the extent that these third parties are processing the data. IP-addresses will be anonymised, which prevents allocation to a person.

Apart from the possibility to prevent the use cookies in general, (see above: Use of Cookies), you can install a browser add-on to prevent that information created by the cookie as well as data related to your use of our website (e.g.: IP-address) will be collected and processed by Google. You can download such add-on under https://tools.google.com/dlpage/gaoptout?hl=de.

In case you are using a mobile device, clicking the above link will set a so called opt-out cookie on your device which will prevent the collection of your data when visiting our website, but only for the respective type of browser.

Google and its services are certified under the EU-US Privacy Shield (Privacy Shield). The Privacy Shield is an agreement between the European Union and the United States of America to ensure compliance with European privacy standards in the United States. By resolution 2016/1250 dated 12 July 2016, the commission of the EU resolved that the Privacy Shield complies with the EU data protection standard.

The legal basis of use of the Google Analytics tool is Art. 6 para 1 sentence 1 lit. f) GDPR. The use of Google Analytics is our legitimate interest as it serves for statistical registration of the use of our website and therefore the continuous improvement of our website.

Facebook Pixel

Our website measures conversions using visitor action pixels from Facebook, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook).

These allow the behaviour of site visitors to be tracked after they click on a Facebook ad to reach the provider’s website. This allows an analysis of the effectiveness of Facebook advertisements for statistical and market research purposes and their future optimization.

The data collected is anonymous to us as operators of this website and we cannot use it to draw any conclusions about our users’ identities. However, the data are stored and processed by Facebook, which may make a connection to your Facebook profile and which may use the data for its own advertising purposes, as stipulated in the Facebook privacy policy. This will allow Facebook to display ads both on Facebook and on third-party sites. We have no control over how this data is used.

Check out Facebook’s privacy policy to learn more about protecting your privacy: https://www.facebook.com/about/privacy/.

You can also deactivate the custom audiences remarketing feature in the Ads Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You will first need to log into Facebook.

If you do not have a Facebook account, you can opt out of usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Facebook and its services are certified under the EU-US Privacy Shield (Privacy Shield). The Privacy Shield is an agreement between the European Union and the United States of America to ensure compliance with European privacy standards in the United States. By resolution 2016/1250 dated 12 July 2016, the commission of the EU resolved that the Privacy Shield complies with the EU data protection standard.

The legal basis for the use of Facebook is Art. 6 para 1 sentence 1 lit. f). Our legitimate interest is direct marketing on Facebook.

Use of other services

This website further uses the following services:

Google Recaptcha

We use Google reCAPTCHA (reCAPTCHA) on our websites. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (Google).

reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.

The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place.

Google and its services are certified under the EU-US Privacy Shield (Privacy Shield). The Privacy Shield is an agreement between the European Union and the United States of America to ensure compliance with European privacy standards in the United States. By resolution 2016/1250 dated 12 July 2016, the commission of the EU resolved that the Privacy Shield complies with the EU data protection standard.

The legal basis of the use of reCAPTCHA is Art. 6 para 1 sentence 1 lit. f) GDPR. Our legitimate interest is to protect our website from abusive automated crawling and spam.

For more information about Google reCAPTCHA and Google’s privacy policy, please visit the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Google Web Fonts

For uniform representation of fonts, this page uses Google Web Fonts (Web Fonts), a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (Google).

When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address.

If your browser does not support web fonts, a standard font is used by your computer.

Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/.

Google and its services are certified under the EU-US Privacy Shield (Privacy Shield). The Privacy Shield is an agreement between the European Union and the United States of America to ensure compliance with European privacy standards in the United States. By resolution 2016/1250 dated 12 July 2016, the commission of the EU resolved that the Privacy Shield complies with the EU data protection standard.

The legal basis for the use of Web fonts is Art. 6 para 1 sentence 1 lit. f) GDPR. Our legitimate interest is to have a uniform and attractive presentation of our website.

Google Maps

This site uses the Google Maps (Maps) map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google).

To use Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.de/intl/de/policies/privacy/.

Google and its services are certified under the EU-US Privacy Shield (Privacy Shield). The Privacy Shield is an agreement between the European Union and the United States of America to ensure compliance with European privacy standards in the United States. By resolution 2016/1250 dated 12 July 2016, the commission of the EU resolved that the Privacy Shield complies with the EU data protection standard.

The legal basis of the use of Maps is Art. 6 para 1 sentence 1 lit. f) GDPR. Our legitimate interest is to make our website appealing and to facilitate the location of places specified by us on the website.

Typeform

We have integrated Typeform on this website. The provider is TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain (hereinafter “Typeform”).

Typeform enables us to create online forms and integrate them into our website. The data you enter in our Typeform forms is stored on Typeform’s servers until you ask us to delete it, revoke any consent you have given to store it, or the purpose for storing the data no longer applies (e.g., after we have finished processing your request). Mandatory legal provisions – in particular, retention periods – remain unaffected by this.

The use of Typeform is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in functioning online forms. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

Newsletter

Newsletter Data

If you would like to receive our newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 para 1 sentence 1 lit. f) GDPR. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the “unsubscribe” link in the newsletter. The data processed before we receive your request may still be legally processed.

The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. email addresses for the members area) remain unaffected.

MailChimp

This website uses the services of Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (Rocket) doing business under MailChimp (MailChimp) to send newsletters.

MailChimp is a service which organizes and analyses the distribution of newsletters. If you provide data (e.g. your email address) to subscribe to our newsletter, it will be stored on MailChimp servers in the USA.

MailChimp is certified under the EU-US Privacy Shield (Privacy Shield). The Privacy Shield is an agreement between the European Union and the United States of America to ensure compliance with European privacy standards in the United States. By resolution 2016/1250 dated 12 July 2016, the commission of the EU resolved that the Privacy Shield complies with the EU data protection standard.

We use MailChimp to analyse our newsletter campaigns. When you open an email sent by MailChimp, a file included in the email (called a web beacon) connects to MailChimp’s servers in the United States. This allows us to determine if a newsletter message has been opened and which links you click on. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type, and operating system). This information cannot be assigned to a specific recipient. It is used exclusively for the statistical analysis of our newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to your interests.

If you do not want your usage of the newsletter to be analysed by MailChimp, you will have to unsubscribe from the newsletter. For this purpose, we provide a link in every newsletter we send. You can also unsubscribe from the newsletter directly on the website.

The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted from our servers and those of MailChimp. Data we have stored for other purposes (e.g. email addresses for the members area) remains unaffected.

For details, see the MailChimp privacy policy at https://mailchimp.com/legal/terms/.

The legal basis of the use of MailChimp is your consent, Art. 6 para 1 sentence 1 lit. f) GDPR. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the “unsubscribe” link in the newsletter. Such revocation does not affect the lawfulness of processing activities before the time of receipt of your revocation.

Your Rights as Data Subject

With regard to your personal data collected by us, you have the following rights against us:

• the right to claim access to the processed data pursuant Art. 15 GDPR. In particular, to claim access to: the purposes of processing, the categories of personal data, the categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request from us rectification or erasure of personal data, to object to such processing, where the personal data are not collected from the data subject, any available information as to their source, the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved;
• the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you pursuant Art. 16 GDPR;
• the right to withdraw your given consent at any time pursuant Art. 7 para 3 GDPR. As a consequence, further processing of the personal data will not be permitted. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal;
• the right to claim the erasure of personal data concerning you pursuant Art. 17 GDPR, unless the processing of the data is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
• the right to obtain from us restriction of processing pursuant Art. 18 GDPR in case you contest the accuracy of the personal data, the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
• the right to receive the personal data which you have provided to us, in a structured, commonly used and machine-readable format and the right to claim transmission of those data to another controller pursuant Art. 20 GDPR;
• in case data is processed due to legitimate interests pursuant Art. 6 para 1 lit. f) GDPR, the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you pursuant Art. 21 GDPR. Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, we will immediately stop the processing activity. In order to exercise this objection right, an e-mail to datenschutz@quadrat-facility.com is sufficient; and
• the right to lodge a complaint with a supervisory authority of your habitual residence or of our business seat pursuant Art. 77 GDPR.

Version

This policy statement dates from May 2018. The current version of the privacy statement is visible on www.quadrat-facility.com at any time.