I. Name and Address of the Responsible Party
The responsible party in accordance with the General Data Protection Regulation and other data protection laws of the member states, as well as other data protection regulations, is:
QRS International AG
Industriering 3
9491 Rugell
Liechtenstein
Tel.: +423 392 42 01
E-mail: office@qrs-international.com
Websites: qrs-international.com, qrs101.de, pelvicenter.com
The party responsible for data protection in our company is the administrative board. The administrative board can be reached with the general, aforementioned telephone number and e-mail address during our business hours (Mon. to Fri. 8 a.m. to 6 p.m.).
II. General Information on Data Processing
1. Scope of Processing of Personal Information
We only process our users’ personal information if this is required to provide a functional website along with our content and services. We do not operate any online shops to sell our products. Only minimal data are thus retrieved on our website, largely for purposes of technical functionality. This primarily concerns the general, common browser recognition and for analysis functions.
Furthermore, we allow interested parties to directly send enquiries to us through the respective contact form on our website. The enquiry data are sent to us via e-mail through the system. Because it is merely a simple enquiry we limit the retrieval of data to MINIMAL personal data requests.
We always treat all data provided by the user in the contact form with STRICT CONFIDENTIALITY and NEVER disclose them to third parties. We do NOT store pure enquiry data of a user in a third-party software (e.g. CRM) and thus do NOT process them further in any way.
The user always has the right to the deletion of their enquiry data or the deletion of the enquiry e-mail generated by the system. The user need only send an e-mail to office@qrs-international.com with their name and, if applicable, the date of their original enquiry. You do not have to provide any justification. We will generally conduct the deletion in-house within 5 days. You will then be notified of the deletion process via e-mail.
The processing of personal data of our users, e.g. for a written order, is within the normal bounds of our field of business and for the rendering of orders, and occurs with the user’s consent. During this retrieval of data we guarantee strictly confidential treatment thereof as well as no disclosure to third parties, unless this third party is involved in the processing of the order. Other exceptions apply in cases in which it is not possible for us to acquire your consent for objective reasons, and the processing of the data is legally required.
2. Legal Basis for the Processing of Personal Information
If we receive consent from the affected person to process personal information, the legal basis for this is Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR). Art. 6 para. 1 lit. b GDPR serves as the legal basis for the processing of personal information required to fulfil a contract to which the affected person is a party. This also applies to processing required to conduct pre-contract measures.
If the processing of personal information is required to fulfil a legal obligation to which our company is bound, the legal basis for this is Art. 6 para. 1 lit. c GDPR. In the event that vital interests of the affected person or of another natural person necessitate the processing of personal information, the legal basis for this is Art. 6 para. 1 lit. d GDPR. If the processing is required to protect a justified interest of our company or a third party and the interests, basic rights and basic freedoms of the affected party do not outweigh the aforementioned interest, the legal basis for this is Art. 6 para. 1 lit. f GDPR.
3. Deletion of Data and Duration of Storage
The affected person’s personal information will be deleted or blocked once the purpose of storage has lapsed. Storage is also possible if such has been authorised by European or national legislators in Union law declarations, laws or other stipulation to which the responsible party is bound. The information is also blocked or deleted when a storage period stipulated by the specified standards expires, unless there is a necessity to continue storing the data for formation of a contract or contract fulfilment.
III. Provision of the Website an Creation of Log Files
1. Description and Scope of Data Processing
For every visit to our website our system automatically records data and information about the computer system of the visiting computer. The following data are hereby retrieved:
- Information about the browser type and version used
- The operating system of the user
- The internet service provider of the user
- The IP address of the user
- Date and time of the visit
- Websites from which the user system reaches our website
- Websites pulled up by the user system through our website
The data are also stored in our system’s log files. These data are not stored together with other personal information of the user. This does not include the IP addresses of the user or other data that facilitate allocation of the data to the user. These data are not stored together with other personal information of the user.
2. Legal Basis for Data Processing
The legal basis for the temporary storage of the data and log files is Art. 6 para. 1 lit. f GDPR.
3. Purpose of Data Processing
The temporary storage of the IP address by the system is required to facilitate provision of the website to the user’s computer. To this end the IP address of the user must be stored for the duration of the session. Storage in log files ensures functionality of the website. The data also help us optimise the website and ensure the security of our IT systems. There is no evaluation of data for marketing purposes in this regard. Our justified interest in data processing as per Art. 6 para. 1 lit. f GDPR also lies in these purposes.
4. Duration of Storage
The data are deleted once they are no longer required to achieve the purpose of their retrieval. In the event that the data are recorded for provision of the website, this is the case once the respective session has ended. In the event that the data are stored in log files, this is the case after a maximum of seven days. Any further storage is not possible. In this case the IP addresses of the users are deleted or defamiliarised so that they can no longer be allocated to the visiting client.
5. Right to Objection and Removal
The recording of the data for provision of the website and storage of data in log files is mandatory for operation of the website. The user thus has no right to objection.
IV. Usage of Cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are small text files that are stored in the internet browser, or by the internet browser in the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characterised series of characters that allows for clear identification of the browser during a return visit to the website.
We also use cookies on our website to allow for analysis of the users’ browsing behaviour. The following data can be disclosed in this manner:
- Entered search terms
- Frequency of site visits
- Usage of website functions
The user data retrieved in this manner are pseudonymised with technical precautions. This makes allocation of the data to the visiting user impossible. The data are not stored together with other personal data of the users.
b) Google Analytics
This website uses the service “Google Analytics”, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), due to our justified interest in the optimisation and analysis of our online service. The service (Google Analytics) uses “cookies” – text files stored on your end device. The information compiled by the cookies is generally sent to a Google server in the USA and stored there. Google LLC adheres to European data protection law and is certified under the Privacy Shield agreement: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
This website uses IP anonymisation. The users’ IP address is truncated within member states of the EU and the European Economic Area, as well as in other signatory states of the agreement. Only in specific instances is the IP address first transferred to a Google server in the USA and truncated there. This truncation prevents personal allocation of your IP address. The user IP address transmitted by the browser is not combined with other data stored by Google. For purposes of the order data agreement that we as the website administrator have formed with Google Inc., Google uses the compiled information to create an evaluation of website usage and website activity, and renders services associated with internet usage.
The data retrieved by Google at our behest are used to be able to evaluate usage of our online service by individual users, e.g. to create reports about activities on the website to improve our online service. You are able to prevent the storage of cookies on your device by making the respective settings in your browser. If your browser does not accept cookies there is no guarantee that you will be able to access all functions of this website without limitations. You can also use a browser plug-in to prevent the information collected by the cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link will direct you to the corresponding plug-in: https://tools.google.com/dlpage/gaoptout?hl=de
c) Legal basis for data processing
The legal basis for the processing of personal information through the usage of cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal information through the usage of technically required cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal information through the usage of cookies for analysis purposes, with respective consent from the user, is Art. 6 para. 1 lit. a GDPR.
d) Purpose of data processing
The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus constantly optimise our service. Our justified interest in data processing as per Art. 6 para. 1 lit. f GDPR also lies in these purposes.
e) Duration of storage, right to objection and removal
Cookies are stored on the user’s computer and transferred from the computer to our page. You as the user thus have complete control over the usage of cookies. By changing the settings in your internet browser you can deactivate or limit the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also occur automatically. If cookies are deactivated for our website, you may not be able to completely use all functions of the website.
V. Contact Form and E-mail Contact
1. Description and Scope of Data Processing
Our webpage contains a contact form that can be used to get in touch electronically. If a user utilises this service, the data entered into the input fields are sent to us and stored. These data are:
- Name of the user (required)
- E-mail address of the user (required)
- Telephone number of the user (optional)
- Text from the user (unlimited text input in the subject line and message body)
At the time at which the message is sent, the following data are also stored:
- IP address of the user
- Date and time of sending
If your personal data are processed, you are the affected person as per GDPR and you have the following rights opposite the responsible party:
2. Right to Disclosure
You may request confirmation from the responsible party whether we are processing personal information concerning you. If such processing is occurring, you may request disclosure of the following information from the responsible party:
(1) the purposes for which the personal information is processed;
(2) the categories of personal information that are processed;
(3) the recipients or categories of recipients to whom your personal information was or is still being disclosed;
(4) the planned duration of storage of your personal information or, if specific information to this end is not available, criteria for the determination of the duration of storage;
(5) the existence of a right to correction or deletion of your personal information, a right to limitation of the processing by the responsible party, or a right to objection against this processing;
(6) the existence of a right to complaint with a supervisory authority;
(7) all available information concerning the origin of the data if the personal data cannot be retrieved from the affected person;
(8) the existence of automated decision-making, including profiling, as per Art. 22 para. 1 and 4 GDPR and, at least in these cases, meaningful information concerning the logic involved as well as the consequences and desired effects of such processing for the affected person.
You have the right to request information as to whether your personal information is transferred to a third country or to an international organisation. In this regard you may request to be notified of the reasonable guarantees as per Art. 46 GDPR concerning this transfer.
3. Right to Correction
You have a right to correction and/or completion by the responsible party, provided the processed personal information concerning you is incorrect or incomplete. The responsible party must immediately render this correction.
4. Right to Limitation of Processing
Pending the following requirements you can request the limitation of the processing of your personal information:
(1) if you dispute the accuracy of your personal information for a duration that allows the responsible party to assess the accuracy of the personal information;
(2) the processing is illegal and you decline the deletion of the personal information and instead request the limitation of the usage of the personal information;
(3) the responsible party no longer requires the personal information for processing purposes, but does still require it for the assertion, exercising or defence of legal claims, or
(4) if you have filed an objection to the processing as per Art. 21 para. 1 GDPR and it is not yet certain whether the justified reasons of the responsible party outweigh your reasons.
If the processing of your personal information was limited, this information, regardless of its storage, may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a member state thereof. If the processing was limited as per the aforementioned requirements, you will be notified by the responsible party before the limitation is lifted.
5. Right to Deletion
a) Deletion obligation
You can request that the responsible party immediately delete your personal information, and the responsible party is obligated to immediately delete this information pending one of the following reasons:
(1) Your personal information is no longer required for the purposes for which it was retrieved or otherwise processed.
(2) You revoke your consent for processing as per Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
(3) You object to the processing as per Art. 21 para. 1 GDPR and there are no more important, justified reasons for the processing, or you object to the processing as per Art. 21 para. 2 GDPR.
(4) Your personal information was illegally processed.
(5) The deletion of your personal information is required to fulfil a legal obligation as per Union law or the laws of the member states to which the responsible party is bound.
(6) Your personal information was retrieved with regard to the services offered by the information society as per Art. 8 para. 1 GDPR.
b) Disclosure to third parties
If the responsible party has published your personal information and is obligated to delete it as per Art. 17 para. 1 GDPR, they shall take reasonable measures, including technical measures, in accordance with the available technology and implementation expenses, to inform the responsible party processing the information that you, as the affected person, have requested the deletion of all links to this personal information or copies or replicas of this personal information.
c) Exceptions
There is no right to deletion if the processing is required:
(1) to exercise the right to free expression of opinion and information;
(2) to fulfil a legal obligation that requires processing as per the laws of the Union or the member states to which the responsible party is bound, or to fulfil a task that lies within the public interest or in the exertion of public authority that was transferred to the responsible party;
(3) for reasons of public interest in the area of public health as per Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historic research purposes or for statistical purposes as per Art. 89 para. 1 GDPR, provided the right specified under item a) foreseeably makes the realisation of this processing impossible or severely hinders it, or
(5) to assert, exercise or defend legal claims.
6. Right to Notification
If you have asserted the right to correction, deletion or limitation of the processing to the responsible party, they are obligated to inform all recipients to whom your personal information was disclosed of this correction or deletion of the data or limitation of the processing, unless this proves to be impossible or entails unreasonable expense. You have the right to be informed of these recipients by the responsible party.
7. Right to Transferability of Data
You have the right to receive your personal information that you have provided to the responsible party in a structured, common and machine-readable way. You also have the right to transfer this information to another responsible party without being impeded by the responsible party to whom the personal information was provided, if:
(1) the processing stems from consent as per Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or a contract as per Art. 6 para. 1 lit. a GDPR, and
(2) the processing occurs through automated procedures.
In exercising this right you also have the right to request that your personal information is directly transferred from one responsible party to another responsible party, provided this is technically feasible. Freedoms and rights of other persons may not hereby be impaired. The right to transferability of data does not apply to the processing of personal information required to fulfil a task that lies within the public interest or in the exertion of public authority that was transferred to the responsible party.
8. Right to Objection
You have the right to object at any time to the processing of your personal information, which is based on Art. 6 para. 1 lit. e or f GDPR, for reasons pertaining to your particular situation; this also applies to profiling based on these terms. The responsible party shall no longer process your personal information, unless they are able to verify compulsory, defensible reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercising or defence of legal claims.
If your personal information is processed to operate direct marketing, you have the right to object at any time to the processing of your personal information for purposes of such marketing; this also applies to profiling if it is in conjunction with such direct marketing. Should you object to processing for purposes of direct marketing, your personal information will no longer be processed for these purposes. You have the possibility to exercise your right to objection through automated processes, for which technical specifications are applied, in relation to the usage of services of the information society, regardless of Directive 2002/58/EC.
9. Right to Revocation of Declaration of Consent for Data Protection
You have the right to revoke your declaration of consent for data protection at any time. By revoking your consent, the legality of the processing performed due to your consent until revocation thereof is not affected.
10. Automated Decision in Individual Case including Profiling
You have the right to not be subjected to a decision based solely on automated processing, including profiling, that results in legal ramifications for you or otherwise significantly impairs you in a similar manner. This does not apply if the decision:
(1) is required to fulfil a contract between you and the responsible party,
(2) is reliable due to legal regulations of the Union or the member states to which the responsible party is bound, and these legal regulations include reasonable measures to ensure your rights and freedoms as well as your justified interests
(3) occurs with your explicit consent.
However, these decisions cannot pertain to special categories of personal information as per Art. 9 para. 1 GDPR, provided Art. 9 para. 2 lit. a or g GDPR do not apply and reasonable measures have been taken to protect the rights and freedoms as well as your justified interests. With regard to the cases specified in (1) and (3), the responsible party shall take reasonable measures to ensure the rights and freedoms as well as your justified interests, which include at least the right to induce intervention by a person by the responsible party, to present their own perspective, and to dispute the decision.
11. Right to Complain to a Supervisory Authority
Regardless of any other administrative or judicial legal redress, you have the right to complain to a supervisory authority, in particular in the member state in which you reside, where you are employed, or the location of the alleged violation, if you believe that the processing of your personal information is in violation of GDPR. The supervisory authority to whom the complaint was submitted shall notify the complainant of the status and results of the complaint, including the possibility of judicial legal redress as per Art. 78 GDPR.
Version 05.18
QRS International AG
