1. Data protection at a glance
Data collection on this website
Who stores the data collected on this website?
The data processing on this website is carried out by the website operator. You can find his contact details in the imprint (info page) of this website.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This can be, for example, data that you enter in a contact form. Other data are collected automatically when you visit the website through our IT systems. They are mainly technical data (e.g. Internet browser, operating system or time of page view). The collection of such data takes place automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have a right to request the correction or deletion of this data. You can contact us at any time at the address given in the imprint (info page) with regard to this and other questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Third-party analytics and tools
When you visit this website, your surfing behavior can be statistically evaluated. This is done mainly with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. For detailed information about these tools and about your opt-out options, please see the following privacy statement.
2. General notes and mandatory information
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.
Note on the responsible entity
The responsible body for data processing on this website is:
Telefon: +49 (0) 261 92164181
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Data Protection Officer
We have appointed a data protection officer for our company. You can contact him at the following e-mail address:
Sachverständiger für IT/-Security und Datenschutz
ISMS-Lead-Auditor ISO 27001, 27701, KRITIS
Phone +49 (0)2562 / 989 22
DBC Brunsch S.L.
Apartado de Correos 167, E-29700 Velez-Malaga
NIF: ES B93 640 324
dbc Sachverständige ®
Schlehenweg 14, D-48599 Gronau
Ust-ID: DE 158 624 704
Revocation of your consent to data processing
Certain data processing operations are only possible with your express consent. You can, at any time, revoke any consent you have already given. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct advertising (Art. 21 DSGVO)
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. UPON RECEIVING YOUR OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) DSGVO).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21 (2) DSGVO).
Right of appeal to the competent supervisory authority
In the event of breaches of the GDPR, data subjects shall have a right of appeal to a supervisory authority, specially in the Member State of their habitual residence, their place of work or the place of the alleged breach. The right of appeal exists without prejudice to other administrative or judicial remedies.
Right of data portability
You have the right to request that data which we process automatically on the basis of your consent or in performance of a contract be handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Encrypted payment on this website
If, after the signing of a contract involving costs, there is an obligation to provide us with your payment data (e.g. account number in the case of direct debit authorization), this data will be required for the processing of payments.
Payment transactions via the common means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
With encrypted communication, your payment data that you transmit to us cannot be read by third parties.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to release information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correction or deletion of this data. For this purpose, as well as for further questions about your personal data, you can contact us at any time at the address given in the imprint (info page).
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. To do this, you can contact us at any time at the address given in the imprint (info page). The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data occurs/is occurring unlawfully, you may request the restriction of data processing instead of erasure of the data.
If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21 (1) DSGVO, a balancing of your and our interests must be carried out. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, such data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
Objection to advertising through e-mail
The use of contact data published within the framework of the mandatory imprint (info page) for the transmission of advertising and information material not expressly requested is hereby prohibited. The operators of the web pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.
3. Data collection on this website
Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If a corresponding consent was requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO, and the consent can be revoked at any time.
Insofar as other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, they are treated separately in this data protection declaration.
Cookie consent with Usercentrics
This website uses the cookie consent technology of Usercentrics to obtain your consent to store certain cookies on your terminal device or to use certain technologies as well as to document this consent in accordance with data protection laws. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter “Usercentrics”).
When you enter our website, the following personal data are transferred to Usercentrics:
- our consent(s) or revocation of your consent(s)
- Your IP-Address
- Information about your browser
- Information about your terminal device
- Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign to you the consent you have given or its revocation. The data collected in this way are stored until you request us to delete them, you delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain in place.
Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this usage is Art. 6 para. 1 p. 1 lit. c DSGVO.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
A combination of these data with other data sources is not made.
The collection of these data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.
If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on these data without your consent.
The processing of these data is based on Art. 6 para. 1 lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.
The data you enter in the contact form will remain with us until you request us to delete them, revoke your consent to store them, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain in place.
Request by e-mail, phone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, nature of inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on these data without your consent.
The processing of these data is based on Art. 6 para. 1 lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a DSGVO) and/or on our legitimate interests (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective processing of requests made to us.
The data you send us via contact requests will remain with us until you request us to delete them, revoke your consent to store them, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions – in particular statutory retention periods – shall remain in place.
Usage of the QMSpot web application
When you use our web application QMSpot, we do not usually control the data ourselves, but we do process it.
The following data may be part of the processing on the platform:
- Username and password
- Possibly your assigned company location
- Possibly your email address and phone number
- Groups in which you are placed
- Minutes about the completion of tasks and notices written
- Data on training courses you attend, such as location, time, instructor, content and duration
- Log data (user name, action, log in and log out time)
Exactly which data are processed depends on the company that uses them. Information on the concrete design of the data processing as well as further information in accordance with Art. 13 and 14 can be obtained from the respective controller.
Processing of data (customer and contract data)
We collect, process and use personal data only when they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data relating to the use of this website (usage data) only when this is necessary to enable the user to use the service or to bill the user for the service.
The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain in place.
4. Analysis tools and advertising
To provide you with content such as videos on our website, we use the CDN provider Hubspot. In order to deliver the content to you, the provider Hubspot is provided with your IP address, data about your terminal device and data about your browser.
The legal basis for this processing is Art. 6 para. 1 lit. f) DSGVO – it lies in our interest to improve the performance of our website in order to present our content.
It is possible that in the course of using Hubspot, data will be transmitted to Hubspot Inc. in the USA. Hubspot Inc. participates in the Privacy Shield procedure, which ensures an appropriate level of data protection. You can find the current entry here https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG&status=Active.
An order processing agreement has been signed with Hubspot..
This website uses functions made available by web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of user behavior in order to optimize both its web offer and its advertising. If a corresponding consent was requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
Anonymizing the IP address
We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
Browser Plug in
Objection to data collection
You can prevent the collection of your data by Google Analytics by deactivating the functional service “Google Analytics” in the privacy settings. Use this link to open the settings:
Open privacy settings
We have an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics: Demographic characteristics with Google Analytics. This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of the site visitors. These data come from interest-based advertising from Google as well as visitor data from third-party providers. These data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item “Objection to data collection”.
Data that are stored by Google at user and event level and are linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are anonymized or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de
In order to optimize the loading time of our site, we use services of Cloudflare, Inc., 101 Townsend St, San Francisoco, CA 94107 USA. For this purpose, your IP address is transmitted to the provider Cloudflare when you access the website. The processing may take place in the USA. A suitable level of data protection is ensured by the Privacy Shield certification of Cloudflare. You can find the current list entry here: https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active
You can also obtain further information on data protection at Cloudflare directly from the provider
The legal basis is Art. 6 para. 1 lit. f) DSGVO – our interest lies in the user-friendly design of our site.
5. Plug ins and Tools
Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you open a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google’s servers. This enables Google to know that your IP address has been used to access this website. Google Web Fonts are used to ensure a uniform and appealing presentation of our online offers. This represents a legitimate interest within the interpretation of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support given web fonts, a default font is used by your computer.
For more information about Google Web Fonts, see
https://developers.google.com/fonts/faq und in der Datenschutzerklärung von Google: https://policies.google.com/privacy?hl=de.