Skip to content
evoliq

Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data means all data through which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is evoliq GmbH, Bergeickeler Weg 33, 59227 Ahlen, Germany, email: hello@evoliq.eu. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When you use our website purely for information, without registering or otherwise sending us information, we only collect data that your browser transmits to the website's server (“server log files”). When you access our website, we collect the following data, which is technically necessary to display it:

  • The page visited on our website
  • Date and time of access
  • Amount of data transmitted in bytes
  • Source or referral from which you reached the page
  • Browser used
  • Operating system used
  • IP address used, where applicable in anonymised form

Processing takes place under Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not shared or used for other purposes. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security and to protect the transmission of personal data and other confidential content, such as orders or enquiries sent to the controller. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser's address bar.

3) Hosting

3.1 To host our website and display its content, we use a provider that supplies its services itself or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have entered into a data processing agreement with the provider that protects our website visitors' data and prohibits unauthorised disclosure to third parties.

4) Contacting us

4.1 When you contact us, for example using the contact form or by email, personal data is processed exclusively to handle and answer your enquiry and only to the extent necessary for that purpose.

The legal basis is our legitimate interest in answering your enquiry under Article 6(1)(f) GDPR. If your contact concerns a contract, Article 6(1)(b) GDPR provides an additional legal basis. Your data will be deleted when the circumstances indicate that the matter has been conclusively resolved, provided no statutory retention obligations prevent deletion.

5) Web analytics services

5.1 Matomo

This website uses a web analytics service from InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand (“Matomo”).

To protect website visitors, Matomo uses a “config_id” to enable various analyses of website use within a short time window of up to 24 hours. The website's “config_id” is a randomly generated, time-limited hash of a limited set of visitor settings and attributes. The config_id, or configuration hash, is a string calculated for a visitor based on their operating system, browser, browser plugins, IP address and browser language. Matomo does not use device fingerprinting and uses an anonymised visitor IP address to create the “config_id”.

Where the information processed includes personal user data, processing takes place under Article 6(1)(f) GDPR on the basis of our legitimate interest in statistically analysing user behaviour for optimisation and marketing purposes. We provide a separate opt-out option on our website so you can object to future processing of your visitor data.

Where data collected using Matomo technology, including your pseudonymised IP address, is transferred to Matomo servers in New Zealand and processed for usage analysis, we inform you that the European Commission has issued an adequacy decision for New Zealand confirming compliance with European data protection standards for international transfers.

Where data is also transferred to the provider's servers and the web analytics service is not installed locally on our server, we have entered into a data processing agreement with the provider that protects our website visitors' data and prohibits unauthorised disclosure to third parties.

6) Website functions

6.1 Applications for advertised vacancies by email

We advertise current vacancies in a separate section of our website. Interested applicants can apply by email to the contact address provided.

Applicants must provide all personal data necessary for a sound assessment, including general information such as name, address and contact details, evidence of qualifications and performance, and, where applicable, health-related information. Details of the application are provided in the vacancy advertisement.

After receiving an application by email, we store and evaluate the data exclusively to process the application. For follow-up questions, we use the applicant's email address or telephone number. Processing takes place under Article 6(1)(b) GDPR or Section 26(1) of the German Federal Data Protection Act (BDSG), under which the application process is considered preparation for an employment contract.

Where special categories of personal data within the meaning of Article 9(1) GDPR, such as health data concerning severe disability status, are requested during the application process, processing takes place under Article 9(2)(b) GDPR so that we can exercise rights and fulfil obligations arising from employment law and social security and social protection law.

Additionally or alternatively, processing of special categories of data may also be based on Article 9(1)(h) GDPR where it takes place for preventive or occupational medicine, assessment of the applicant's working capacity, medical diagnosis, provision of health or social care or treatment, or management of health or social care systems and services.

If an applicant is not selected or withdraws their application early, their submitted data and all electronic correspondence, including the application email, will be deleted no later than six months after an appropriate notification. This period reflects our legitimate interest in answering any follow-up questions about the application and, where necessary, fulfilling our obligations to provide evidence under rules on equal treatment of applicants.

If an application is successful, the data provided is processed under Article 6(1)(b) GDPR, in Germany in conjunction with Section 26(1) BDSG, for the purpose of carrying out the employment relationship.

7) Rights of the data subject

7.1 Applicable data protection law grants you the following rights concerning the processing of your personal data by the controller. Please refer to the cited legal basis for the conditions governing each right:

  • Right of access under Article 15 GDPR
  • Right to rectification under Article 16 GDPR
  • Right to erasure under Article 17 GDPR
  • Right to restriction of processing under Article 18 GDPR
  • Right to notification under Article 19 GDPR
  • Right to data portability under Article 20 GDPR
  • Right to withdraw consent under Article 7(3) GDPR
  • Right to lodge a complaint under Article 77 GDPR

7.2 RIGHT TO OBJECT

WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING WHERE WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR WHERE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

WHERE WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

8) Duration of personal data storage

The storage period for personal data depends on the respective legal basis, the purpose of processing and, where applicable, the relevant statutory retention period, such as retention periods under commercial or tax law.

Where personal data is processed on the basis of explicit consent under Article 6(1)(a) GDPR, it is stored until you withdraw your consent.

Where statutory retention periods apply to data processed under Article 6(1)(b) GDPR in connection with contractual or similar obligations, the data is routinely deleted after those periods expire, provided it is no longer required to fulfil or prepare a contract and/or we no longer have a legitimate interest in continued storage.

Where personal data is processed under Article 6(1)(f) GDPR, it is stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing under Article 6(1)(f) GDPR, it is stored until you exercise your right to object under Article 21(2) GDPR.

Unless the other information in this policy concerning specific processing situations states otherwise, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.