Data Protection Policy
Last Update: November 2019
This data protection policy gives you an overview of the processing of your data at SoniQ Services. It applies to all websites, apps and other services and benefits offered by SoniQ Services.
SoniQ Services GmbH, at Münzstraße 13, 10178 Berlin Germany (hereinafter referred to as "[SQ] ONE" or "we") operates the website (hereinafter referred to as "[SQ] ONE" or the "Website") available on the Internet at https://soniqservices.de and its respective subsidiaries.
I. The responsible body and the contact details of the data protection officer
The responsible body for data processing on our website is
SoniQ Services GmbH Münzstraße 13 10178 Berlin Germany
E‑Mail: email@example.com Phone: +49 30 88 789 312 You can reach our data protection officer Julian Höppner at:
SoniQ Services GmbH
- Data protection officer - Münzstraße 13 10178 Berlin
II. Purposes and legal basis, and the duration of data processing
Personal data shall mean any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identification, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1. General use of the website
The web server of our host automatically records the access to our website. So, when you visit our site, certain technical data is automatically transmitted to us. This is the following information:
- IP address,
- Contents that were accessed,
- Information about the transmission,
- Date of the access,
- The amount of data transmitted,
- The referrer,
- The web-browser/user agent.
The recording of the IP address when establishing a connection is based on Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in offering you our website for retrieval and enabling you to use the site.
Our hoster also creates log files to maintain the security of the system to ensure the security and integrity of our IT systems. These purposes also represent the legitimate interest for which the processing is carried out (Art. 6 Para. 1 lit. f) DSGVO). We store the log files for a period of 30 days and delete them afterwards.
When you register at our member’s section, we ask you for certain information, including personal data about you.
- Your first and last names,
- Your company,
- your email address, your telephone number, and a password for later access.
We use this data to manage your customer account; the information about your company serves us to ensure that you are a commercial customer. If you register with us, or inquire or order one of our service products, then we will use your contact data, such as telephone number and e-mail address, for possible queries and to answer your inquiries satisfactorily. We process the access data you provide during registration as such exclusively to enable you to access your customer account. The legal basis for the data processing described above is Art. 6 Para. 1 Lit. b) GDPR. We process your registration data as long as you receive a customer account with us. You can delete your customer account at any time by contacting our customer service by e-mail (firstname.lastname@example.org) and requesting deletion of your customer account.
3. Login and providing the functions of our services
If you log on to our website as a user, we process the personal data described above in the context of general use in order to make the functions of our website technically available to you. In addition, we act as a data processor for our customer’s when providing the services.
You can subscribe to our newsletter on our website. In this case we will process your email address for sending until deletion. The legal basis is your consent (Art. 6 Para. 1 lit. a) GDPR). You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can explain the revocation, for example, by clicking on the link provided in each newsletter email.
Furthermore, in the case of the email newsletter, we process the time of registration and your double opt-in confirmation. This is done to protect our legitimate interest in being able to prove your registration. The legal basis for this is Art. 6 Para. 1 lit. f) GDPR as well as Art. 6 Para. 1 lit. c) GDPR in conjunction with Art. 5 Para. 2 GDPR.
In addition to the pure e-mail dispatch, we also analyze your use of our email newsletter, e.g. whether you have opened it or clicked on certain links, and process this data to optimize or improve our newsletter. This purpose also represents a legitimate interest, the protection of which we are pursuing with this processing (Art. 6 Para. 1 lit. f) GDPR). For the sending and analysis of our newsletters we use a service provider that processes personal data in the United States of America. This service provider is certified under the EU-US Privacy Shield, so that an adequate level of protection exists when processing your personal data (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).
In addition to the information typically understood as personal data, we also process certain data that are the result of technical processes in the course of your visit and use of our website.
5.1 Phone, e-mail and contact form
We offer you the possibility to contact us, for example via our e-mail address or by filling out a contact form. In the case of an email, you provide us with at least your email address and, if applicable, your name, a subject and the content of your request. For our contact form we collect your name, company name, postal code, country, telephone and company email address. We process this data to be able to answer your inquiry. For this purpose, we also have a legitimate interest in data processing (Art. 6 Para. 1 lit. f) DSGVO).
We process your request as long as it is necessary for our purposes and delete it upon your request. If the request is made within the framework of an existing or forthcoming contractual relationship with us, the storage period is determined by the underlying contractual relationship.
Within the framework of our website we offer you the opportunity to contact one of our experts. For this purpose we use the technology LiveAgent of the company Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 ("Salesforce"). Depending on the situation, we may also request personal data from you during the conversation, which will be processed by Salesforce on our behalf. With Salesforce there is an order processing according to the legal requirements. We use this data to offer you the best possible customer and prospect service. For this purpose we have a legitimate interest in data processing (Art. 6 Para. 1 lit. f) GDPR). You can find more details about the data processing by and through Salesforce in the Salesforce data protection policy at: https://www.salesforce.com/de/company/privacy/.
We store your chat history for a period of 24 months and delete it afterwards, unless legal provisions prevent deletion, in particular if further storage in accordance with Art. 6 Par. 1 lit. f) GDPR is necessary for the purpose of providing evidence or to comply with legal retention periods in accordance with Art. 6 Para. 1 lit. c) GDPR.
6. Application Portal SoniQ Services
If you apply for a job with us, we process the application data provided by you (first name, surname, e-mail address, telephone number, as well as any attachments such as curriculum vitae, cover letter etc.) exclusively for purposes related to your interest in a current or future employment with us. The legal basis for the processing is § 26 Para. 1 S. 1 German Federal Data Protection Act (BDSG).
If we are unable to offer you employment, we will delete or hand over to you the data transmitted by you six months after the final status of your application has been reached, unless legal provisions prevent deletion, in particular if further storage in accordance with Art. 6 Para. 1 lit. f) GDPR is necessary for the purpose of providing evidence or answering questions in connection with the rejection of your application.
For the operation of our application portal SQ ONE, we use the HR platform Personio provided by Personio GmbH, Buttermelcherstr. 16, 80469 Munich ("Personio"). The data provided by you will be stored and processed by Personio on our behalf for the purpose of personnel administration and applicant management. With Personio GmbH there is an order processing according to the legal requirements. In addition, Personio processes certain personal data as its own responsibility in the course of technical provision. You will find more detailed information on this subject at: https://www.personio.com/privacy-policy/
III. Other recipients of the data
We use external service providers if we are unable to provide services ourselves or if it is not reasonable to do so. These external service providers are primarily providers of IT services, such as our hoster, email providers or telecommunications providers.
IV. General rights of the persons affected
The General Data Protection Regulation guarantees you certain rights, which you can assert against us - as far as the legal requirements are met.
- Art. 15 GDPR - Right of access by the data subject: You have the right to obtain confirmation from us as to whether personal data concerning you are being processed and, if so, what they are and the circumstances in which they are being processed.
- Art. 16 DSGVO - Right of rectification: You have the right to ask us to rectify incorrect personal data concerning you without delay. You also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.
- Art. 17 GDPR - Right to erasure: You have the right to demand from us that personal data concerning you be erased immediately.
- Art. 18 GDPR - Right to restriction of processing: You have the right to demand that we limit the processing of your data.
- Art. 20 DSGVO - Right to data transfer: You have the right, in the event of processing on the basis of consent or for the performance of a contract, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another responsible party without hindrance by us or to have the data transferred directly to the other responsible party, as far as this is technically feasible.
- Art. 77 GDPR in conjunction with Art. 19 FDPA - Right to appeal to a competent supervisory authority: You have the right to lodge a complaint with a supervisory authority at any time, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of the law.
V. In particular right of objection and right to revoke consent
- Art. 21 DSGVO - Right of objection: You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is necessary for a legitimate interest on our part or for the performance of a task carried out in the public interest or which is carried out in the exercise of official authority.
If you object, we will no longer process your personal data, unless we can prove compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to the processing at any time. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
To exercise your right of objection, you can, for example, send us an email to one of the above-mentioned email addresses.
- Revocation of consent: If you have given us consent, you have the right to revoke your consent at any time. All data processing that we have carried out up to your revocation remains lawful in this case.
For this purpose, you can simply click on the link contained in each email to cancel your subscription to the newsletter, or send a message to one of our e-mail addresses. If you inform us in this message that you do not wish to receive any future emails, we will not send any more messages to the e-mail address you have provided. If you have given us your consent to be included in the applicant pool, you can also revoke this consent at any time by sending a message to one of our e-mail addresses.
VI. Obligation to provide data
You have no contractual or legal obligation to provide us with personal data. However, we are not able to offer you our services without the data.
VII. existence of automated decision-making (including profiling)
We will not subject you to any automated decision-making, including profiling in accordance with Article 22 Para. 1 and 4 GDPR, which has legal effects on you or affects you.
VIII. Internet-specific data processing
3. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
You can also prevent Google Analytics from recording the data by clicking on the following link. An opt-out cookie is set to prevent future collection of your data when you visit this website:
Disabling Google Analytics
The legal basis for the use of Google Analytics is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the evaluation of the use of our website. The data is stored for 26 months.
4. Google Marketing Platform (formerly DoubleClick)
This website uses DoubleClick of the Google Marketing Platform, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google").
Due to the technology used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will learn your IP address and save it.
Further information on data protection and cookies at Google can be found in the Google data protection policy: https://policies.google.com/privacy?hl=de.
You can prevent Google from collecting the data generated by the cookies and relating to your use of the website and from processing this data by Google by clicking on the following link and making the appropriate settings: https://www.google.de/settings/ads
Alternatively, you can disable the DoubleClick cookies on the following page: http://www.youronlinechoices.com/de/praferenzmanagement/.
5. Google Ads (formerly Google AdWords)
We use the online advertising program "Google AdWords" on our website and in this context conversion tracking (analysis of visits) and Google Dynamic Remarketing (target group-specific advertising). The Google Ads is a service provided by Google (Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google")).
We use Google Ads Conversion to draw attention to our attractive offers with the help of advertising material (so-called Google Ads) on external websites. This is also where our legitimate interest lies. The necessary processing is carried out on the basis of Art. 6 Para. 1 lit. f) GDPR. In the context of Google Ads we use the so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. These cookies lose their validity after 30 days and do not serve to personally identify users. If the user visits certain pages on this site and the cookie has not expired, Google and SoniQ will be able to tell that the user clicked on the ad and was redirected to that page.
Every Google AdWords customer receives a different cookie. The cookies cannot be tracked on the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in tracking, you can opt out of this use by simply disabling the Google Conversion Tracking cookie on your web browser under User Preferences. You will then not be included in the conversion tracking statistics.
Google Ads Remarketing enables us to display target group-specific advertising via the Google advertising network. For this purpose, we may transmit data to Google about the offers you have viewed or certain related characteristics (e.g. interests in certain topics or products, which are determined on the basis of the websites visited). Google uses this information to serve you targeted advertising when you visit our site or to display our advertising on other pages of the Google Network. We also use remarketing audiences to ensure that our ads match the potential interest of users.
We use Google Dynamic Remarketing for marketing and optimization purposes, in particular to deliver ads that are relevant and interesting to you, to improve campaign performance reports and to achieve fair calculation of advertising costs. This is also our legitimate interest in the processing of the above data by the third party provider. The necessary processing is carried out on the basis of Art. 6 Para. 1 lit. f) GDPR.
You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. Please note that in this case you may not be able to use all functions of our website to their full extent. It is also possible to prevent the storage of cookies by setting your web browser to block cookies from the domain “www.googleadservices.com".
You can also edit this by setting the corresponding settings on the following page:
Please note that this setting is deleted when you delete your cookies.
You can also disable interest-based ads by clicking on the link http://www.aboutads.info/choices. Please note that this setting will also be deleted if you delete your cookies.
We use Inspectlet, of Inspectlet Inc, based in California, USA, to better understand the needs of our users and to optimise the offer on this website.
Inspectlet's technology gives us a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on, what they like and what they don't like, etc.) and this helps us to align our offering with our users' feedback.
By using Inspectlet, we are pursuing a legitimate interest in improving our service for you. The necessary processing is carried out on the basis of Art. 6 Para. 1 lit. f) GDPR.
You can opt out of Inspectlet's storage of a user profile and information about your visit to our website and the use of Inspectlet tracking cookies on other websites by confirming your opt out on this page. https://www.inspectlet.com/optout
The data is stored for one month and then deleted.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
Berlin, November 2019