You have arrived at this page via a link, since you want to learn about how we handle (your) personal data. In keeping with our information obligations pursuant to Article 12 et seq. of the General Data Protection Regulation (GDPR), we are pleased to provide you with the following information about data privacy:

Who is responsible for data processing?
"Controller" within the meaning of the GDPR is
Breitwieserweg 9
64319 Pfungstadt
Phone +49 6157 80710-0

For further information on our company, the persons authorized to represent it and further contact details, please refer to the "Legal notice" section of our website:
https://qd-europe.com/de/en/legal-notice

What data of you do we process? And for what purposes?
If we have received any data of you, we will, as a general rule, process this data only for the purposes for which we have received or collected it.
The processing of your data for other purposes will only be possible if the legal prerequisites for such processing in accordance with Article 6 (4) of the GDPR are met. In such case, we will of course comply with any information requirements in accordance with Article 13 (3) and Article 14 (4) of the GDPR.

What is the legal basis for data processing?
As a general rule, the legal basis for the processing of personal data is Article 6 of the GDPR – unless there are other, specific legal provisions. In particular, data processing may be based on

• Consent (GDPR Art. 6 (1) a))
• Data processing for the performance of a contract (GDPR Art. 6 (1) b))
• Data processing based on legitimate interests (GDPR Art. 6 (1) f))
• Data processing for complying with a legal obligation (GDPR Art. 6 (1) c))

If the processing of your personal data is based on your consent, you shall have the right to withdraw your consent vis-a-vis us at any time with effect for the future.
If we process your data on the basis of legitimate interests, you as the data subject shall have the right to object to the processing, taking account of the corresponding requirements laid down in Article 21 of the GDPR.

For how long will the data be stored?
We process the data for as long as this is necessary for the purpose in each case.
In case statutory retention obligations apply, – e.g. in the context of commercial law or tax law – the corresponding personal data will be stored for the duration of the prescribed retention period. Once this period has elapsed, we will check whether processing is still necessary. If this is not the case, the data will be deleted.
As a general rule, at the end of each calendar year we check whether further processing of the data is necessary. Due to the large amount of data to be checked, this review is made with regard to specific types of data or purposes of processing.
Of course, you can request information at any time (see below) about the personal data concerning you which is stored by us. If the storage is no longer necessary, you can request that the data be deleted or the processing to restricted.

To whom will the data be disclosed?
As a general rule, your personal data will only disclosed to third parties if and to the extent that this is necessary for the purpose of performing the contract with you, if such disclosure is admissible for legitimate interests within the meaning of Article 6 (1) f) of the GDPR, if we are obliged to the disclosure in order to comply with a legal obligation or if and to the extent that you have given consent.

Where is the data processed?
Your personal data is processed exclusively in our data center at the company site in Darmstadt.

Your rights as "data subjects"
You have the right to obtain information from us about the personal data concerning you that is processed by us.
In case of a request to obtain information that is not made in writing, we may ask you to submit proof that you are the person you pretend to be. We hope for your understanding.
Moreover, you have a right to correction or erasure of data, or to restriction of processing, as far as this is provided for by law.
Furthermore, in accordance with the legal requirements, you have the right to object to the processing of your data. The same is true for the right to data portability.
In particular, pursuant to Article 21 (1) and (2) of the GDPR, you have a right to object to the processing of your data for direct marketing purposes, if such processing is based on legitimate interests.

Our data protection officer
We have appointed a data protection officer in our company. These are the contact details of our data protection officer:
Quantum Design GmbH
– Data protection officer –
Breitwieserweg 9
64319 Pfungstadt
E-mail: dsb(at)qd-europe.de

Right to lodge a complaint
You are entitled to lodge a complaint about our processing of your personal data with a data protection supervisory authority.

Last updated: 12th September 2024

Data protection information “Sanctions list comparison”

The protection of personal data and the responsible handling of information that you entrust to us is an important and special concern for us. Quantum Design GmbH processes personal data only in accordance with the statutory regulations. These are in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following data protection declaration is intended to inform you about which personal data we process from you in so-called sanction list comparisons.

Data protection authority contact data

Responsible entity in accordance with the data protection law: Quantum Design GmbH, Breitwieserweg 9, 64319 Pfungstadt, germany@qd-europe.com , +49(0)6157 80710-0

Contact of the data protection officer: dsb@qd-europe.com

Sanctions list comparisons and data processing

Quantum Design GmbH is a member of the Quantum Design International Group, headquartered in San Diego, which maintains international trade relations and offers its products and services worldwide.

Quantum Design GmbH and the Quantum Design International Group are therefore subject to various sanction regimes, in particular international sanction regimes (such as the UN), supranational sanction regimes (such as the EU) or national sanction regimes (such as the USA or individual EU member states). These sanction regimes result in a wide range of obligations, such as not being allowed to sell certain products to certain countries or to maintain business relationships with certain countries or individuals. Violations of these obligations are sometimes subject to drastic sanctions.

In order to comply with the obligations of the sanction regimes, Quantum Design GmbH carries out comparisons with sanctions lists that are maintained and published by the UN, the EU or individual states, such as the USA.

For this purpose, we first check the name and country of residence of persons with whom we have or wish to have business contact against sanctions lists. If we do not find a corresponding entry, the check is completed without any further consequences for you. If we find an entry, we verify it in a second step using information on known business activities, date of birth and nationality.

If we are then unable to assign the entry to you on the sanctions list, the check is completed without any further consequences for you. If we are able to assign the entry to you after the second stage, we will inform you of this result, give you the opportunity to comment on it and will take your comments on the result of the sanctions list comparison into account for our decision on the establishment or continuation of a business relationship. For your rights regarding the processing of your personal data, see 6 below.

Purposes of data processing, legal basis and legitimate interests

The purpose of data processing is to identify persons named on sanctions lists in order to make a decision on the establishment and, if necessary, continuation of business relationships.

In the case of comparison with international sanctions lists, in particular from the UN, supranational sanctions lists from the EU and national sanctions lists from EU and EEA member states, the right to process your personal data arises from legal obligations of Quantum Design GmbH pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR. In all other cases, in particular in the case of comparisons with sanctions lists from non-EU or non-EEA member states, such as the USA, the right arises from our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

Insofar as the processing of your personal data is in our legitimate interest, this interest arises from the obligation of Quantum Design GmbH,

• to identify persons named on sanctions lists,
• to not maintain business relationships with them or to comply with the requirements of the applicable sanction regimes for the business relationship and
• to avoid sanctions against Quantum Design GmbH for violations of sanction regimes.

Information transfer to third parties

We pass your personal data to our suppliers to carry out the sanctions list comparison. The comparison of your personal data against the sanctions list is done with the “ContRaMedida database”.

If we transfer your personal data in this or other cases to suppliers who process your personal data on our behalf, these suppliers will be bound by further contractual data protection requirements in addition to their legal obligation to comply with all data protection regulations. This includes an obligation as a processor in accordance with Art. 28 GDPR. If your personal data is transferred to recipients outside the EU, we ensure that the recipient of the data guarantees an adequate level of data protection within the meaning of Chapter V of the GDPR and that no other interests worthy of protection speak against the transfer of data. In particular, we use the EU Commission's model contracts for the transfer of personal data to third countries (so-called standard contractual clauses) to ensure an adequate level of protection for the recipient data.

If in special cases a transfer of your personal data to public authorities is required, we check the legal requirements for this and only transfer your personal data if these requirements are met. In this case, we will inform you of the intended transfer, unless we are prohibited from doing so by law or by a legally binding order from an authority. In this case, we will inform you as soon as such a prohibition no longer applies.

Deletion

We delete your personal data as soon as it is no longer required for the purposes for which it was processed and if there are no statutory retention obligations to the contrary. We delete the results of sanctions list comparisons 7 years after the sanctions list comparison has been carried out.

Your rights

You can request information about the personal data stored about you at any time and - insofar as the legal requirements are met - request the correction, deletion and restriction of the processing of this data.

If Quantum Design GmbH processes your data to pursue legitimate interests, you can exercise your right to object. Quantum Design GmbH will then only process your personal data if there are compelling legitimate grounds for the processing.

Whether and to what extent these rights exist in individual cases and which conditions apply is determined by law. The GDPR also grants you a right to data portability under certain circumstances. If you have given your consent under data protection law, you can revoke it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

If you have any questions or complaints about data protection at Quantum Design GmbH, we recommend that you first contact our data protection officer.

Obligation to provide personal data

You are not obliged to provide Quantum Design GmbH with personal data. However, if you do not provide your personal data, it is possible that Quantum Design GmbH will not enter into a business relationship with you or will only enter into a limited business relationship with you or will terminate an existing business relationship in whole or in part. If you have a business relationship with Quantum Design GmbH, it is possible that this may result in a contractual obligation to provide personal data. Corresponding information can then be found in the existing contractual agreements between us.

No automated decision in individual cases

We do not use your personal data for automated individual decision-making within the meaning of Art. 22 para. 1 GDPR.

Changes to the privacy policy

New legal requirements, business decisions or technical developments may require changes to our privacy policy. The privacy policy will then be adapted accordingly. We will be happy to send you the latest version on request. Further information on data processing can also be found on our website.