Privacy Policy

Thank you for visiting our website. The protection of your personal data is important to us. In this Policy, we would like to inform you about how we handle your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

Here you will find our privacy policy for the social media pages we use: Privacy policy for our social media pages

2. Information about the responsible party (referred to as the "controller" in the GDPR)

​The data processing controller on this website is:​

QR-Marketing GmbH Überseeallee 10 20457 Hamburg (Germany) Telefon: +49 (0)4104 – 693 250 E-Mail: info@qrmarketing.com

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).

2. Designation of a data protection officer as mandated by law

​We have appointed a data protection officer for our company:

datenschutz nord GmbH Sechslingspforte 2 22087 Hamburg (Deutschland) Telefon: +49 (0)40 – 593 616 0400 E-Mail: dataprotection@qrmarketing.com

3. Usage Data

When you visit our website, our web server temporarily evaluates usage data for statistical purposes in order to improve the quality of our website. This data consists of the following data categories:

• the name and address of the requested content,
• the date and time of the query,
• of the transferred data volume,
• the access status (content transferred, content not found),
• the description of the used web browser and operating system,
• the referral link, which indicates from which page you reached ours,
• the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.

The above-mentioned log data will only be evaluated anonymously.

4. Necessary Cookies

On our website, we use cookies which are necessary in order for the site to function.

Cookies are small text files that can be placed on your computer or mobile device by websites that you visit.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We do not use these necessary cookies for analysis, tracking or advertising purposes.

In some cases, these cookies only contain information on certain settings and cannot be linked to a person. They may also be necessary to enable user guidance, security and implementation of the site.

The legal basis for using these cookies is our legitimate interest according to Art. 6 (1) (f) GDPR.

You can set your browser to inform you about the placement of cookies. This is in order to make the use of cookies transparent for you.

You can also delete cookies or prevent the setting of new cookies at any time by using the appropriate browser settings.

Please note that if you delete certain cookies, our web pages may not be displayed correctly and some functions may no longer be available.

5. Contact Form

You may contact us via our contact form. In order to use our contact form, we will require you to provide the data marked as mandatory.

The legal basis for this processing is Art. 6 (1) (f) GDPR, being our legitimate interest to respond to your request.

Your data will only be used to process your request. We delete your data if they are no longer required and there are no legal obligations to retain them.

Where the processing of your data is based on legitimate interest in accordance with Art. 6 (1) (f) GDPR, you have the right to object to that processing at any time. To do so, please use the email address provided in the imprint.

6. Google Tag Manager

We use the service called Google Tag Manager from Google. "Google" is a group of companies and consists of the companies Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. We have concluded an AVV/DPA with Google.

The Google Tag Manager is a solution with which we can assign a tag to each of our pages and manage them. With the help of the tags, the Google Tag Manager can only use analysis and tracking tools for us where they make sense. The Google Tag Manager is an auxiliary service and only processes personal data for technically necessary purposes. The Google Tag Manager ensures that other components are loaded, which in turn may collect data. The Google Tag Manager does not access this data. For more information about Google Tag Manager, see Google's privacy policy.

Please note that American authorities, such as secret services, could possibly gain access to personal data due to American laws such as the Cloud Act, which is inevitably exchanged with Google due to the Internet Protocol (TCP) when this service is integrated.

7. Google Analytics

This website uses the "Google Analytics" service provided by Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Irland, to analyze website usage by users.

The service uses cookies. The information generated by the cookies will be transmitted to and stored by Google on a server in the USA. On this website IP anonymization takes effect. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference to your IP address.

As part of the agreement on the order data agreement, which the website operators have concluded with Google Ireland Ltd., uses the information collected to create an evaluation of website usage and website activity and provides services associated with internet use.

Withdrawal of your consent

You have the option to prevent the cookies from being stored on your device by making appropriate settings in your browser. There is no guarantee that you will be able to access all functions and features of this website without restrictions if your browser does not allow cookies.

You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being transmitted to Google Inc. and used by Google Inc. The following link takes you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=en

By clicking on the link above, you download an "opt-out cookie" with which you prevent Google Analytics from collecting data about you within this website.

Your browser should therefore allow the local storage of cookies. If you remove your cookies regularly, you will need to click the link again each time.

Here you will find further information on the use of data by Google

https://support.google.com/analytics/answer/6004245?hl=en

8. Google Ads

To evaluate and optimize Google Ads marketing measures, we use a mechanism with the help of which our campaign successes can be assigned to the respective Google Ads advertisements after they have been clicked on. This allows us to measure the effectiveness of Google Ads advertisements.

We process your personal data for tracking on our website based on the following legal basis:

Your consent according to Art. 6 Para. 1 Uabs. 1 letter a) GDPR

Withdrawal of your consent

We only use Google Analytics with your consent. You can revoke consent once you have given it

• prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent;

• download and install the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

• Object to the use of Google Analytics

You can find more detailed information on the terms of use and data protection for Google at https://policies.google.com/terms?hl=en or at https://policies.google.com/?hl=en&gl=en.

9. Storage Period

Unless otherwise specified, we will delete your personal data if they are no longer required for the relevant processing purposes and no legal retention obligations oppose deletion.

10. Data Processors

We transfer your data to service providers who support us in the operation of our websites and related processes. These service providers are usually data processors within the meaning of Art. 28 GDPR. Our service providers are strictly bound by contracts and our instructions.

Any processors who may not have been previously disclosed are listed below. If data is transferred outside the EU or the EEA, we will also provide information on the adequate level of data protection.

11. Access Protected Area

If you wish to use our access-protected area, your prior registration is required. We only collect the data required for registration.

The legal basis for the data processing is our legitimate interest to be able to provide you with the services and information available in the access-protected area according to Art. 6 (1) (f) GDPR.

If we collect additional data during this process, these will be marked as voluntary and the processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

If you would like to permanently log out of our access-protected area, please write an E-Mail to dev-qrm@qrmarketing.com

12. Your rights as a data subject

When processing your personal data, the GDPR grants you certain rights as a data subject:

Right of access by the data subject (Art. 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you are being processed; if this is the case, you have the right to be informed of this personal data and to receive the information specified in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, the right to have incomplete personal data completed, including by means of providing a supplementary statement without delay.

Right to erasure (Art. 17 GDPR)

You have the right to obtain the erasure of personal data concerning you without undue delay if one of the reasons listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to the processing, for the duration of our examination.

Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, or to request that this data be transferred to a third party.

Right to withdraw consent (Art. 7 GDPR)

If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected.

Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 (1) 1 f GDPR (data processing for the purpose of our legitimate interests) or on the basis of Art. 6 (1) 1 e GDPR (data processing for the purpose of protecting public interests or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or if data is still needed for the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. This right may be asserted in particular with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the suspected infringement.

Asserting your rights

Unless otherwise described above, please contact us to assert your rights. You will find our contact details in our imprint.

Privacy policy for our social media pages

When you visit our social media pages, it may be necessary to process data relating to you. We would therefore like to inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about the handling of your data and your rights resulting from this.

S1. Data Controller

We, QR-Marketing GmbH, currently administer the following social media pages:

• LinkedIn: https://www.linkedin.com/company/qr-marketing/

Our contact details can be found in our legal notice: https://qrmarketing.com/imprint.

Besides us, the respective provider of the social media platform is also responsible for processing your personal data. As far as we can influence this and parameterise the data processing, we will work within the scope of the possibilities available to us, in order to ensure that the provider of the social media platform handles your data in a manner that complies with data protection regulations. In this context, please also read the data protection policy of the respective social media platform.

S2. Data processing by us

The data you enter on our social media pages, such as usernames, comments, videos, pictures, likes, public messages, etc., are published by the social media platform and are no time processed by us for other purposes. We only reserve the right to delete content if necessary. We may share your content on our website if this is a feature of the social media platform and communicate with you through the social media platform if necessary.

If you send us a request on the social media platform, depending on the content, we may also refer you to other, secure communication channels that guarantee confidentiality. For example, you have the possibility to send us your inquiries at any time to the address https://qrmarketing.com/about or https://qrmarketing.com/de/getstarted given in the legal notice. The choice of the appropriate communication channel is your own responsibility.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR. The data processing is based on the legitimate interest of carrying out public relations and communication.

Some social media platforms generate statistics based on usage data, which contain information about your interaction with our social media site. We cannot influence or prevent the execution and provision of these statistics. However, we do not make use of optional statistics from the social media platform.

If you wish to object to a certain data processing on which we have an influence, please use the contact data given in the legal notice.

S3. Storage Duration

We delete your personal data if they are no longer required for the aforementioned processing purposes and no legal storage obligations prevent deletion.

S4. Data processing by the operator of the social media platform

The provider of the social media platform uses web tracking methods. Web tracking can also be performed regardless of whether you are logged in or registered with the social media platform.

We would therefore like to inform you that it cannot be excluded that the provider of the social media platform may use your profile and behavioural data to evaluate your habits, personal relationships, preferences, etc. In this respect, we have no influence on the processing of your data by the provider of the social media platform, so that the use of the social media platform is at your own responsibility.

Further information on data processing by the provider of the social media platform, configuration options for the protection of your privacy as well as further objection options and, if available and concluded, the agreement pursuant to Art. 26 GDPR, can be found in the provider's privacy policy:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy and https://legal.linkedin.com/pages-joint-controller-addendum

S5. Your rights as users

As a website user, you have the opportunity to assert the following rights against us as well as against the provider of the social media platform:

Right of access (Article 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you is being processed; if this is the case you have the right to be informed about this personal data and to the information specified in Article 15 GDPR.

Right to rectification and erasure (Articles 16 and 17 GDPR):

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.

You also have the right to request that personal data relating to you shall be deleted without undue delay if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer needed for the purposes for which it was collected.

Right to restriction of processing (Article 18 GDPR):

If one of the conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.

Right to data portability (Article 20 GDPR):

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, well-established and machine-readable format, respectively to request the transfer of this data to a third party.

Right to object (Article 21 GDPR):

If the data is collected on the basis of Art. 6 para. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling reasons for processing, that are worthy of protection and override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the data are processed on the basis of the legitimate interest for the purpose of direct marketing, you have your own right of objection, which you may exercise at any time without giving reasons and the exercise of which will lead to the termination of the processing for the purpose of direct marketing.

Right to lodge a complaint with a supervisory authority

According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of the data concerning you infringes data protection regulations. In particular, the right to lodge a complaint may be invoked before a supervisory authority in the member state where you are resident, your place of work or the place of the suspected infringement.

S6. Contact details for the data protection representative

Our external data protection officer is available to provide you with information on data protection.

Please contact:

datenschutz nord GmbH

Sechslingspforte 2, 22087 Hamburg (Deutschland)

Phone: +49 (0)40 – 593 616 0400

Web: www.dsn-group.de

E-Mail: office@datenschutz-nord.de

Please contact first:

E-Mail: dataprotection@qrmarketing.com

If you contact our data protection officer, please also indicate the responsible office mentioned in the legal notice.