Privacy Policy

We are pleased about your visit to our website xqi-interim.com and your interest in our company.

The protection of your personal data (e.g., date of birth, name, telephone number, address, etc.) is a priority for us.

The purpose of this privacy policy is to inform you about the processing of your personal data when you visit our website. Our data protection practices comply with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This privacy policy fulfills the information obligations under the GDPR, as outlined in Articles 13 and 14.

Controller

The controller (as defined in Article 4(7) GDPR) is the entity that, alone or jointly with others, determines the purposes and means of processing personal data.

For our website, the controller is:

XQI Interim Partner GmbH
Prinzregentenstraße 20
80538 Munich
Germany
Email: info@xqi-interim.com
Tel.: +49 89 890 67 880

Provision of the Website and Creation of Log Files

Each time our website is accessed, our system automatically collects data and information from the accessing device (e.g., computer, mobile phone, tablet, etc.).

What Personal Data Is Collected and to What Extent Is It Processed?

(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) The hostname of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user’s system reached our website (referrer tracking);
(8) Notification of whether the access was successful;
(9) Amount of data transferred.

This data is stored in our system’s log files. This data is not stored together with other personal data of a specific user, so individual visitors cannot be identified.

Legal Basis for Processing Personal Data

Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.

Purpose of Data Processing

The temporary (automated) storage of data is necessary for the course of a website visit to enable the delivery of the website. The storage and processing of personal data also serve to maintain the compatibility of our website for as many visitors as possible, to combat misuse, and to resolve disruptions. For this purpose, it is necessary to log the technical data of the accessing device to respond as early as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. Additionally, the data helps us optimize the website and ensure the security of our information technology systems.

Duration of Storage

The aforementioned technical data is deleted as soon as it is no longer needed to ensure the compatibility of the website for all visitors, but no later than three months after accessing our website.

Right to Object and Erasure

You can object to the processing at any time under Article 21 GDPR and request the erasure of data under Article 17 GDPR. For details on your rights, please refer to the end of this privacy policy.

Special Functions of the Website

Our website offers various functions that may involve the collection, processing, and storage of your personal data. Below, we explain how these functions handle your data:

Application Form

• What Personal Data Is Collected and to What Extent Is It Processed?

  The data you enter into the form fields of the application form and any uploaded files are processed in full to fulfill the purpose described below.

• Legal Basis for Processing Personal Data

  The legal basis for collecting and processing applicant data is Article 6(1)(b) GDPR (contract initiation), Article 88(1) GDPR in conjunction with § 26 BDSG. If special categories of personal data are collected that are necessary to fulfill legal obligations under labor law, social security law, or social protection law, processing is based on Article 9(2)(b) GDPR in conjunction with § 26(3) BDSG. If additional special categories of personal data are to be processed, we will obtain your consent under Article 9(2)(a) GDPR.

• Purpose of Data Processing

  The purpose of data processing is to review and process the application documents you submit via the form.

• Duration of Storage

  The data is deleted once the application has been processed and there is no longer a legitimate interest in storing the application data. If no employment relationship is established, your application documents will be deleted after a maximum of six months.

• Right to Object and Erasure

  For details on your rights, please refer to the end of this privacy policy.

• Necessity of Providing Personal Data

  The information in the application form is neither contractually nor legally required but is necessary to submit and process your application. If you do not fill in the mandatory fields completely, your desired application cannot be submitted or processed.

Integration of External Web Services and Processing of Data Outside the EU

We use active content from external providers (web services) on our website. When you access our website, these external providers may receive personal information about your visit. This may involve processing data outside the EU. You can prevent this by installing a corresponding browser plugin or disabling the execution of scripts in your browser, which may result in limited functionality on websites you visit.

We use the following external web services:

• Gravatar

  We use the Gravatar service of Aut O’Mattic A8C Ireland Ltd. (Grand Canal Dock, 25 Herbert Pl, D02 AY86 Dublin, Ireland, Email: privacypolicyupdates@automattic.com, Website: https://de.gravatar.com/. Personal data is also transmitted to the USA. Regarding data transfers to the USA, there is an adequacy decision under the EU-US Data Privacy Framework (DPF) by the European Commission (Article 45 GDPR, https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service provider is certified under the DPF, ensuring the standard data protection level of the GDPR applies to the transfer.

  Legal Basis for Processing Personal Data Your consent under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, which you have given on our website.

  Purpose of Data Processing Gravatar is a service for providing avatars across websites.

  Certification under the EU-US Data Privacy Framework The parent company Automattic Inc.’s certification under the EU-US Data Privacy Framework can be found at: https://www.dataprivacyframework.gov/list.

  Withdrawal of Consent You can withdraw your consent at any time. For details on withdrawing your consent, please refer to the consent itself or the end of this privacy policy.

  Further Information For details on how transferred data is handled, please refer to the provider’s privacy policy: https://automattic.com/privacy/.

  The provider also offers an opt-out option: https://automattic.com/privacy/.

• Legal Text Snippets and Modules

  We use the Legal Text Snippets and Modules service of Website-Check GmbH (Beethovenstraße 24, 66111 Saarbrücken, Germany, Email: support@website-check.de, Website: https://www.website-check.de/. Personal data is only transmitted to servers within the European Union.

  Legal Basis for Processing Article 6(1)(c) GDPR (legal obligation). The use of the service helps us comply with our legal obligations.

  Purpose of Data Processing: The service loads current legal texts onto our website. This integration may also load additional technical modules related to legal texts or legally required elements.

  Your Rights: For details on your rights regarding processing, please refer to the end of this privacy policy.

  Further Information: For details on how transferred data is handled, please refer to the provider’s privacy policy: https://www.website-check.de/datenschutzerklaerung/.

• Website-Check Seal

  We use the Website-Check Seal service of Website-Check GmbH (Beethovenstraße 24, 66111 Saarbrücken, Germany, Email: support@website-check.de, Website: https://www.website-check.de/. Personal data is only transmitted to servers within the European Union.

  Legal Basis for Processing Personal Data Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest is to achieve the purpose described below.

  Purpose of Data Processing The Website-Check Seal script is a technical integration that displays the seal on our website. We use this seal to demonstrate our commitment to data protection. Data is transmitted to Website-Check GmbH to deliver and display the seal on our site.

  Right to Object You have the right to object under Article 21 GDPR. For details, please refer to the end of this privacy policy.

  Further Information For details on how transferred data is handled, please refer to the provider’s privacy policy: https://www.website-check.de/datenschutzerklaerung/.

Data Security and Data Protection, Communication via Email

Your personal data is protected by technical and organizational measures during collection, storage, and processing to prevent unauthorized third-party access. For unencrypted email communication, we cannot guarantee complete data security during transmission to our IT systems. For information requiring a high level of confidentiality, we recommend encrypted communication or postal delivery.

Right to Access, Rectification, Erasure, Restriction of Processing, Withdrawal of Consent, and Right to Object

Right to Access

You have the right to request confirmation of whether we process your personal data. If this is the case, you have the right to access the information specified in Article 15(1) GDPR, unless the rights and freedoms of others are affected (Article 15(4) GDPR). We will also provide you with a copy of the data.

Right to Rectification

Under Article 16 GDPR, you have the right to request the correction of any incorrect personal data stored by us (e.g., address, name, etc.). You can also request the completion of data stored by us at any time. Corrections will be made without undue delay.

Right to Erasure

Under Article 17(1) GDPR, you have the right to request the erasure of your collected personal data if:

• The data is no longer needed;
• The legal basis for processing has ceased to exist due to the withdrawal of your consent;
• You have objected to the processing, and there are no overriding legitimate grounds for processing;
• Your data has been processed unlawfully;
• A legal obligation requires erasure, or the data was collected under Article 8(1) GDPR.

Under Article 17(3) GDPR, this right does not apply if:

• Processing is necessary for the exercise of the right to freedom of expression and information;
• Your data was collected based on a legal obligation;
• Processing is necessary for reasons of public interest;
• The data is required for the establishment, exercise, or defense of legal claims.

Right to Restriction of Processing

Under Article 18(1) GDPR, you can request the restriction of processing your personal data in certain cases, such as:

• You contest the accuracy of the personal data;
• Processing is unlawful, and you oppose erasure;
• The data is no longer needed for the purpose of processing but is required for the establishment, exercise, or defense of legal claims;
• You have objected to processing under Article 21(1) GDPR, and it is still unclear which interests prevail.

Right to Withdraw Consent

If you have given us explicit consent to process your personal data (Article 6(1)(a) GDPR or Article 9(2)(a) GDPR), you can withdraw this consent at any time. Please note that the lawfulness of processing based on consent before its withdrawal remains unaffected.

Right to Object

Under Article 21 GDPR, you have the right to object at any time to the processing of your personal data based on Article 6(1)(f) GDPR (processing in the legitimate interest). This right applies if there are special circumstances against storage and processing.

How to Exercise Your Rights

You can exercise your rights at any time by contacting us using the details below:

XQI Interim Partner GmbH
Prinzregentenstraße 20
80538 Munich
Germany
Email: info@xqi-interim.com
Tel.: +49 89 890 67 880

Right to Data Portability

Under Article 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format. This data can be transmitted either to you or to a controller designated by you.

Upon request, we will provide you with the following data under Article 20(1) GDPR:

• Data collected based on explicit consent (Article 6(1)(a) GDPR or Article 9(2)(a) GDPR);
• Data we have received from you under Article 6(1)(b) GDPR in the context of existing contracts;
• Data processed through automated procedures.

We will transfer the personal data directly to a controller of your choice, provided this is technically feasible. Please note that we cannot transfer data that interferes with the rights and freedoms of others (Article 20(4) GDPR).

Right to Lodge a Complaint with a Supervisory Authority (Article 77(1) GDPR)

If you suspect that your data is being processed unlawfully on our website, you can, of course, seek judicial clarification of the issue at any time. Additionally, you have the right under Article 77(1) GDPR to lodge a complaint with a supervisory authority. The right to lodge a complaint under Article 77 GDPR is available to you in the EU Member State of your residence, workplace, and/or the place of the alleged infringement, meaning you can choose the supervisory authority to which you submit your complaint from the above-mentioned locations. The supervisory authority to which the complaint has been lodged will then inform you of the status and outcome of your complaint, including the possibility of a judicial remedy under Article 78 GDPR.