App Privacy Policy

Status: October 2021

1 General information

1.1 Preliminary remark

Protecting your privacy when processing personal data is a matter of course for us. We would therefore like to inform you below about how your personal data is processed by us.

exoIQ uses security measures in order to protect the data we have under our control against manipulation, loss, destruction or against access by unauthorised persons or against unauthorised disclosure. Our security measures are constantly being improved in line with technological developments.

1.2 This Privacy Policy applies to information we collect about you from:

Accessing or visiting the website

Entering into, processing and handling contractual relationships

Within the framework of an application procedure

Within the framework of joint project work

Within the framework of the initiation and implementation of cooperations

1.3 Data controller:

Name and address of the person responsible

The website (www.exoiq.com) is an offer of exoIQ GmbH in Hamburg (hereinafter referred to as exoIQ). For questions, requests for information, applications, complaints or criticism regarding our data protection, you can contact the following office:

exoIQ GmbH 

Jaffa Street 12 

21109 Hamburg 

Germany.

‍

Data Protection Officer

A data protection officer is responsible for the correct implementation of data protection. If you have a concern regarding the processing of your data, it is also possible to contact this person directly. 

You can reach our data protection officer at datenschutz@tts-company.com or at our postal address with the addition "Datenschutzbeauftragte/r".

2) How is your personal data processed?

2.1 General information on the purposes of processing

Essentially, we collect, store and process your personal data only to fulfil a contractual obligation to you, to carry out an application procedure or if you have given us your consent. However, we also use your data to comply with procedures or legal requirements relating to us to the extent necessary to protect our own or others' legitimate interests or to enforce, protect or exercise our rights or defend ourselves against claims.

2.2 Data that you provide to us

As a rule, you can use our website without providing us with any personal information directly.

For some services, such as entering into, processing and handling contractual relationships, the processing of personal data is necessary. This includes, among other things, your name or e-mail address in order to be able to process the respective service quickly and in a user-friendly manner or to be able to offer it at all. Detailed information on all services can be found below under point 4 in this data protection declaration.

2.3 Data we receive automatically through your use of our online services

Some data is already collected automatically and for technical reasons when you visit our website.

The following information is collected without your intervention and stored until automated deletion:

• Date and time of the request
• Client and server IP address, port and protocol status
• the name of the file or page accessed and the length of the request
• Browser type and referrer (last accessed page of the client)
• This data is evaluated anonymously for technical purposes only. Statistical evaluations do not take place.
  

The above data will be processed by us for the following purposes:

• Ensuring a smooth connection of the website,
• Ensuring a comfortable use of our website,
• Evaluation of system security and stability.
  

The above data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. 

The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies when you visit our website. You can find more detailed explanations about this under the point Cookies (link: https://www.exoiq.com/cookies) on the website.

2.4 Who gets your data?

Within our company, only persons and departments involved in the process (e.g. specialist departments, group companies) have access to your personal data.

External recipients: We only pass on your personal data to external recipients outside exoIQ if this is necessary to process the transaction, if there is another legal permission or if we have your consent for this.

External recipients can be:

a) Public bodies:

Insofar as we have to transfer personal data to authorities and state institutions (e.g. courts, tax authorities) for compelling legal reasons, this transfer is made on the basis of Art. 6 (1) c) DSGVO.

b) Other external recipients:

In addition, we may transfer your personal data to other recipients outside the company / group of companies if this is necessary to fulfil a contractual or other legal obligation (e.g. bank).

What data protection rights can you assert as a data subject?

Of course, you retain control over all personal data that you provide to us when visiting the website and using our services. You have the following rights, which you can exercise free of charge.

3.1 Right to information

You have the right to obtain information about your personal data stored by us at any time.

3.2 Right to revoke consent given

You have the right to revoke your consent to the processing of personal data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

3.3 Right of objection

If we process your personal data within the framework of a balancing of interests on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future on grounds arising from your particular situation.

If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.

3.4 Right to data portability

You have the right to request a transfer of your personal data from us to another entity. 

3.5 Right to rectification, erasure or restriction of processing

You have the right to have your personal data corrected, deleted or the processing restricted. 

3.6 Right to complain

You have the right to complain to a supervisory authority or to our company if you have a reason to complain. To exercise your rights against our company, please contact the persons listed at the beginning of this privacy policy.

4 Information requirements

4.1 Data categories

Depending on the relationship you have with us (website visitor, applicant, business partner, etc.), we use the following data from you.

For the initiation, implementation and termination of joint projects or contractual relationships, the following categories belong in particular:

Personal master data (e.g. first and last name, address, gender, position in the company, affiliation to company, photo)

Communication data (e.g. e-mail, (mobile) phone)

In the application process:

The categories of personal data processed include, in particular, your personal master data (e.g. first and last name, address, gender, date of birth, profile photo), documents (e.g. certificates, attestations, curriculum vitae), communication data (e.g. e-mail, (mobile) phone), travel expense report (e.g. bank details)

This may also include special categories of personal data such as health data. These are processed in accordance with Art. 9 II b) and possibly h) of the GDPR.

On the categories of personal data processed in joint project work

include yours in particular:

Personal master data (e.g. first and last name, gender, body measurements)

Video and image material for carrying out movement analyses

4.2 Purposes and legal basis of the processing operations

We process your data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the applicable local data protection laws and all other relevant laws.

We would like to draw your attention to the fact that as part of the respective application process, you must provide those personal data that are necessary for the application process to be carried out. If you exercise your right to object in this regard or do not provide us with this data, we will not be able to process your application. The primary legal basis for this is Section 26 (1) BDSG.

It may be necessary to collect and process personal data in order to process contractual relationships. The data collection and processing serve to establish, implement and terminate the contractual relationship. The primary legal basis for this is Art. 6 para. 1 lit. b) DSGVO. Where necessary, we also process your data on the basis of Art. 6 (1) (f) DSGVO in order to protect the legitimate interests of us or of third parties (e.g. public authorities). In addition, the processing of personal data may be based on your consent pursuant to Art. 6 (1) a) DSGVO.

5. duration of the storage

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted if it is no longer required to achieve the necessary purposes.

6. changes to this privacy policy

We reserve the right to change this privacy statement from time to time. The revised statement will be effective immediately upon posting on our website. Please check the effective date of this privacy statement to see if any changes have been made since your last visit to this website.

‍

‍