Privacy notice

In connection with the processing of your personal data, q.beyond (hereinafter referred to as q.beyond, also "we", "us") is subject to information obligations under the European General Data Protection Regulation (GDPR). The following information is intended to give you an overview of what data is involved, to whom it may be transmitted and for what purposes the processing is necessary. You will also receive information about the rights to which you are entitled during the processing of your personal data. Note the privacy notices of q.beyond AG and its affiliated entities.

1. Who is responsible for the processing of your personal data within the meaning of the GDPR?

Responsible within the meaning of the GDPR is

Q.BEYOND ROMANIA SRL
Strada Ploiești 9, Level 4
400157 Cluj-Napoca
Romania

2. For what purposes and on what legal basis is your personal data processed?

We process your personal data for several purposes. As part of making contact, your personal data will be collected. The processing of this data is carried out in accordance with Art. 6(1)(b) GDPR in the context of (pre-)contractual measures that are necessary for providing the offered services and handling your request. If the contact does not relate to your own (pre-)contractual measures or a contract, we process your personal data on the basis of Art. 6(1)(f) GDPR in pursuit of our legitimate interest in handling your request.

The purposes also include protecting our legitimate interests or those of third parties, such as ensuring IT security, documenting facts in legal disputes, advertising our products or those of our partners regarding Article 6(1)(f) GDPR. Additionally, we collect usage data in server log files whenever you access our website; this includes information like browser type, operating system, referrer URL, time of the server request, and a shortened IP address. These log data are not assigned to individuals and are not merged with other data sources. The legitimate interest is to secure the system and provide you with optimized website experience. The collection of data for the purpose of providing the website and the storage of this data in log files is essential for the operation of the website.

Furthermore, we process your data to fulfil legal obligations, such as regulatory requirements and commercial or tax retention duties. The legal bases for these processes are Article 6(1)(f) and Article 6(1)(c) of the GDPR.

3. Which recipients receive your personal data?

Processors support us in the processing of personal data. We have concluded an agreement with them to process in accordance with Art. 28 GDPR. Insofar as the transfer to third countries or other international organizations cannot be ruled out, we have taken appropriate guarantees and measures in accordance with Chapter 5 of the GDPR to protect your personal data. Processors are security and communication service providers.

4. How long will your personal data be stored?

Your personal data will be deleted as soon as the purpose for storing it no longer applies. In addition, data may be stored if such a provision is envisaged or required by European or national legislators in intra-Community regulations, laws or other rules to which q.beyond is subject. The data will also be deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

5. Is the provision of your personal data necessary or mandatory?

Unless expressly stated otherwise, providing personal data to us is neither necessary nor mandatory. However, for some of the services we offer, it is necessary for personal data to be provided in order for us to be able to deliver those services.

6. What are your rights in relation to your personal data (data subject rights)?

Under the respective legal requirements, you have the right to request confirmation at any time as to whether we process personal data and the right to access (Art. 15 GDPR). In your request for access, you should specify your request to make it easier for us to compile the necessary data. You also have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR), as well as the right to object to the processing (Art. 21 GDPR) of personal data at any time, or to withdraw your consent to data processing at any time or to request data portability (Art. 20 GDPR). Automated decision-making in accordance with Art. 22 GDPR does not take place while processing your personal data. In addition, you have the right to lodge a complaint with a supervisory authority in the event of data protection violations (Art. 77 GDPR).