Privacy policy

1. Data protection at a glance

General information

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data is data by which you can be personally identified. This Privacy Policy explains what information we collect and how we use it. It also explains how and for what purpose this is done.

Data collection on this website

Who is responsible for data collection on this website?

The responsible party for data processing on this website is:

Kessler QMP GmbH
Nisterberger Weg 16
57520 Friedewald

Telephone: +49 2743 93358-0
E-mail: info-friedewald@kessler-qmp.de

How can the data protection officer be contacted?

We have appointed an external data protection officer. She can be reached as follows:

MORGENSTERN consecom GmbH
Clemensstr. 26-30
56806 Koblenz

Tel.: +49 (0) 261 - 988 623 644

Possibility to object

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. Please note that in the event of such an objection, the use of the website and the retrieval of the services offered here may only be possible to a limited extent or not at all.

2. Data collection on this website

Accessing and using the website

Each time the website is accessed, usage data is transmitted by the respective internet browser and stored in log files (server log files). The data records stored in this process contain the following data:

  • Date and time of access
  • Name of the sub-page accessed
  • IP address
  • Referrer URL (origin URL from which you came to the website)
  • Amount of data transferred
  • Product and version information of the browser used

We analyse the log files in anonymised form in order to further improve the website and make it more user-friendly, to find and correct errors more quickly and to control server capacities. For example, it is possible to determine at which times the website is particularly popular and we can make the corresponding data volume available.  

The permissibility of this processing is based on Art. 6 (1) f) DS-GVO, according to which the processing is lawful if it is necessary for the protection of the legitimate interests of the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. Our legitimate interest lies in providing a website with information and offering services to our customers as well as optimising the website operation.  

Your IP address will be deleted or anonymised after use. In the case of anonymisation, the IP addresses are changed in such a way that they can no longer be assigned to an identified or identifiable natural person or can only be assigned to an identified or identifiable natural person with a disproportionately large effort in terms of time, costs and labour.

Cookies

Our Internet pages use so-called "cookies". Cookies are small data packets and do not cause any damage to your end device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behaviour or for advertising purposes.

The setting of cookies is permitted by law if the data processing involved serves the transmission of messages or the provision of a telemedium (§ 25 para. 2 no. 2 TTDSG). Your consent is required for the activation of all other cookies (§ 25 para. 1 TTDSG). Data processing either takes place automatically or the provision of your personal data is voluntary.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

You can find out which cookies and services are used on this website in this data protection declaration.

3. Social media

Facebook

Elements of the social network Facebook are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

An overview of the Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE .

When the social media element is active, a direct connection is established between your end device and the Facebook server. Facebook thereby receives the information that you have visited this website with your IP address. If you click the Facebook "Like" button while you are logged into your Facebook account, you can link the content of this website on your Facebook profile. This allows Facebook to associate your visit to this website with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation .

Insofar as consent has been obtained, the above-mentioned service is used on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 TTDSG. The consent can be revoked at any time. Insofar as no consent has been obtained, the use of the service is based on our legitimate interest in achieving the greatest possible visibility in social media.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook that takes place after the forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum . According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the data protection-secure implementation of the tool on our website. Facebook is responsible for the data security of the Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum , https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

Instagram

Functions of the Instagram service are integrated on this website. These functions are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When the social media element is active, a direct connection is established between your end device and the Instagram server. Instagram thereby receives information about your visit to this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

Insofar as consent has been obtained, the above-mentioned service is used on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 TTDSG. The consent can be revoked at any time. Insofar as no consent has been obtained, the use of the service is based on our legitimate interest in achieving the greatest possible visibility in social media.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook or Instagram. The processing by Facebook or Instagram that takes place after the forwarding is not part of the joint responsibility. Our joint obligations have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum . According to this agreement, we are responsible for providing the data protection information when using the Facebook or Instagram tool and for the data protection-secure implementation of the tool on our website. Facebook is responsible for the data security of the Facebook and Instagram products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook or Instagram directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum , https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381 .

4. Audio and video conferencing

Data processing

One of the tools we use to communicate with our clients is online conferencing. The specific tools we use are listed below. If you communicate with us by video or audio conference via the Internet, your personal data will be collected and processed by us and the provider of the respective conference tool.

The conferencing tools collect all data that you provide/enter to use the tools (e-mail address and/or your telephone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other "contextual information" in connection with the communication process (metadata).

Furthermore, the provider of the tool processes all technical data required to handle the online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker as well as the type of connection.

If content is exchanged, uploaded or otherwise made available within the tool, this is also stored on the servers of the tool providers. Such content includes, but is not limited to, cloud recordings, chat/instant messages, voicemails uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the company policy of the respective provider. For further information on data processing by the conference tools, please refer to the data protection statements of the respective tools used, which we have listed below this text.

Purpose and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 b) DS-GVO). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 f) DS-GVO). Insofar as consent has been requested, the tools in question are used on the basis of this consent; consent can be revoked at any time with effect for the future.

Storage duration

The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your end device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Conference tools used

We use the following conference tools:

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in the Microsoft Teams data protection declaration: https://privacy.microsoft.com/de-de/privacystatement.

Google Meet

We use Google Meet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on data processing can be found in Google's data protection declaration: https://policies.google.com/privacy?hl=de.

Third country transfer

Some of your personal data collected while using the conference tools will be transmitted to the Microsoft or Google servers in the USA and stored there. Data transfer to a third country, such as the USA, is permitted under the conditions of Art. 46 GDPR and on the basis of the standard data protection clauses effectively included in the contractual relationship with Microsoft and Google. These have been approved by the European Commission and guarantee you an adequate protection of your personal data. Furthermore, both Microsoft and Google are subject to the EU-U.S. Joined Data Privacy Framework and certified accordingly.

5. Own Services

Handling applicant data

We offer you the opportunity to apply to us (e.g. by e-mail, by post or via the online application form). In the following we will inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data takes place in accordance with the applicable data protection law and all other statutory provisions and that your data will be treated as strictly confidential.

Scope and Purpose of Data Collection

If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes from job interviews, etc.) insofar as this is necessary to make a decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 Para. 1 b) DS-GVO (general contract initiation) and - if you have given your consent - Art. 6 Para. 1 a) DS-GVO . The consent can be revoked at any time. Within our company, your personal data will only be passed on to people who are involved in processing your application. If you do not provide us with the information and documents, we cannot consider them in the application process.

If the application is successful, the data you submit will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 Para. 1 b) DS-GVO for the purpose of carrying out the employment relationship.

Retention period of the data

If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to process the data you have transmitted on the basis of our legitimate interests (Art. 6 Para. 1 f) DS-GVO) up to 6 Keep it with us for months after the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), it will only be deleted if the purpose for further storage no longer applies.

A longer storage can also take place if you have given your consent (Art. 6 Para. 1 a) DS-GVO) or if statutory storage obligations prevent the deletion.

Inquiry form; email on click

If you would like to get in touch with us, a form is available for you. As part of this form, you must provide the following information:

  • Surname
  • phone
  • Pursue
  • Street and house number
  • Postal code and city


In addition, you can voluntarily provide the following information:

  • customer number
  • Message (further optional information)


On the website you have the option of opening an email sent to us with just one click. The e-mail address that is linked to your e-mail program is automatically used as the sender. If you do not want your e-mail address to be retrieved in this way, you can change this in the settings of your respective e-mail program.

Legal basis

The admissibility of this processing is based on Art. 6 Para. 1 b) DS-GVO, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures which are based on request of the data subject. It is necessary to provide the data, otherwise you will not be able to send us a message.

Retention period of the data

The personal data processed as part of the communication will be deleted after the statutory storage obligations have expired, unless the person responsible has a legitimate interest in further storage. In any case, only those data will continue to be stored that are really absolutely necessary to achieve the corresponding purpose. As far as possible, the personal data will be anonymized.

6. Your Rights

Right to information (Article 15 GDPR)

Upon request, we will provide you with information as to whether we are processing data relating to you. We strive to process requests for information quickly.

Right to rectification (Article 16 GDPR)

You have the right to demand that we correct any incorrect personal data concerning you without undue delay.

Right to erasure (Art. 17 GDPR)

You have the right to demand that personal data concerning you be deleted immediately, and we are obliged to delete personal data immediately if one of the reasons stated in Art. 17 Para. 1 a)-f) DS-GVO applies.

Right to restriction (Article 18 GDPR)

You have the right to demand that we restrict processing if one of the requirements of Art. 18 Para. 1 a)-d) GDPR is met.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another responsible person without hindrance from us, to whom the personal data was provided , provided that the processing is based on consent pursuant to Art. 6 Para. 1 a) GDPR, Art. 9 Para. 2 a) GDPR or on a contract pursuant to Art. 6 Para. 1 b) GDPR is based and the processing is carried out using automated procedures.

Right to object (Art. 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Para. 1 e) or f) GDPR; this also applies to profiling based on these provisions. We no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

You have the right, for reasons arising from your particular situation, to object to the processing of your personal data for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 DS-GVO , unless the processing is necessary to fulfill a task in the public interest.

For your message, please use the contact address given in the imprint.

Withdrawal of your consent

If you have given your consent to the processing of your personal data and revoke this, the processing that took place up to the time of this revocation remains unaffected.

Right of appeal

You have the right to complain to a supervisory authority at any time (Art. 77 GDPR).

7. Recipient

The data collected when you access and use the website and the information you provide when contacting us are transmitted to our server and stored there. In addition, your data can be passed on to the following categories of recipients:

  • Persons at the controller who are involved in processing (e.g. marketing department, human resources, customer service)
  • Processor (e.g. data center, IT service provider, web host)
  • Our contractual partners (e.g. banks)

8. Links to Third Party Sites

When visiting the website, content may be displayed that is linked to third-party websites. We do not have access to, nor can we control, the cookies or other features used by third party sites. Such third party sites are not subject to our privacy policy.


9. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.