1. Name and contact data of the party responsible for processing as well as the company data protection officer
This data privacy information applies to data processing by:
Responsible party: Hanwha Q CELLS GmbH
Sonnenallee 17-21, 06766 Bitterfeld-Wolfen OT Thalheim, Germany
Phone: +49 (0)3494 6699-0
Fax: +49 (0)3494 6699-199
The company data protection officer of Hanwha Q CELLS GmbH can be contacted via the above address, for the attention of Data Protection Department at firstname.lastname@example.org.
2. Collection and storage of personal data as well as type and purpose of its use
a) When visiting the website
When calling up our website www.q-cells.eu, information is automatically sent to the server of our website by the browser used on your end device. This information is saved temporarily in a so-called log file. The following information will be logged without your doing anything and saved until automatic deletion:
- IP address of the querying computer,
- Date and time of access,
- Name and URL of the file called,
- Website from which access occurs (referrer URL),
- Browser used and possibly the operating system of your computer as well as the name of your access provider.
The above data is processed by us for the following purposes:
- Ensuring that the connection to the website is established without problem,
- Ensuring user-friendly use of our website,
- Evaluating system certainty and stability as well as
- For further administrative purposes.
The legal basis for data processing is Art. 6 paragraph 1 sentence 1 lit. f GDPR (General Data Protection Regulation). Our justified interest ensues from the above listed purposes for data collection. On no account shall we use the data collected for the purpose of drawing conclusions about your person.
We also utilise cookies and analysis services when you visit our website. You can find more detailed explanations on this in paragraphs 4 and 5 of this Data Privacy Statement.
b) When ordering from the online shop as a guest
If you wish to order products via our website as a guest, we shall collect the following information:
- Title, first name, surname,
- A valid email address,
- Postal address,
- Payment data, depending on the payment type you have selected (for instance bank account or PayPal account data).
This data is collected
- To be able to identify you as our contractual partner;
- For checking the data entered in respect to plausibility;
- For processing the payment of your order;
- For processing possible warranty claims as well as enforcing potential claims against you;
The data processing is performed on your request and is necessary according to Art. 6 paragraph 1 sentence 1 lit. b GDPR for the above purposes in order to fulfil the contact and precontractual measures.
In order to ensure smooth and easy processing of your order and clarify any queries promptly, you can also indicate additional data:
- Your phone number and
- an alternative delivery address.
The indication of this data is voluntary.
The personal data collected by us for the order will be saved until expiry of the statutory warranty obligation and then automatically deleted, unless we are committed to a longer storage pursuant to Article 6 paragraph 1 sentence 1 lit. c GDPR on account of retention and documentation duties under tax and commercial law (from HGB (German Commercial Code), StGB (German Criminal Code) or AO (German Fiscal Code)) or you have consented to a longer storage pursuant to Art. 6 paragraph 1 sentence 1 lit. a GDPR.
c) When setting up a user account
You have the option of setting up a password-protected user account in which we save your personal data. This serves the purpose of enabling the greatest possible convenience through a more user-friendly, faster and more personalised purchase transaction.
If you wish to set up a password-protected account with us, we shall require the following information from you:
- Title, first name, surname,
- Postal address as well as
- a valid email address.
You must also indicate a password of your own choice for setting up a user account. Together with your email address, this enables access to your user account. You can view and change the data you have saved at any time in your user account. Alternatively, a login via your Google account is possible at any time. You can find more information about in this Section 8 “Social Logins”.
We shall then only save your personal data in a user account if you have voluntarily given your consent pursuant to Art. 6 paragraph 1 sentence 1 lit. a GDPR.
It is not necessary to create a user account for the use of our site or for orders that you wish to place with us. We provide you with the option of also placing your order as a guest (see under Section 2. b) ). In this case, you have fully re-enter your data at each order.
After deletion of your user account, your data will be deleted automatically for further use, unless we are committed to a longer storage pursuant to Article 6 paragraph 1 sentence 1 lit. c GDPR on account of retention and documentation duties under tax and commercial law (from HGB (German Commercial Code), StGB (German Criminal Code) or AO (German Fiscal Code)) or you have consented to the longer storage pursuant to Art. 6 paragraph 1 sentence 1 lit. a GDPR.
d) When subscribing to our newsletter
If you have expressly consented to this pursuant to Art. 6 paragraph 1 sentence 1 lit. a GDPR, we shall use your email address to regularly send you our newsletter. The indication of an email address is sufficient to receive the newsletter.
We might also use your email address for sending you information about similar products from our company if you are an existing customer and have not objected to the use of your email address.
In both cases, it is possible to unsubscribe at any time, e.g. via a link at the end of each newsletter. Alternatively, you can send your wish to unsubscribe by email to email@example.com at any time.
e) When using our contact form
If you have any questions, we provide the option of contacting us via a form made available on the website. Here it is necessary to enter a valid email address so that we know who the query originates from and in order to be able to answer it. Other information can be provided on a voluntary basis.
The data for the purpose of contacting us is processed according to Art. 6 paragraph 1 sentence 1 lit. a GDPR based on your voluntary consent.
The personal data we collect for use of the contact form will be deleted automatically after dealing with the request you have sent.
3. Communication of data
You personal data will not be communicated to third parties for purposes other than those listed below.
a) For contract processing
Insofar as this is permissible and necessary pursuant to Art. 6 paragraph 1 sentence 1 lit. b GDPR for contractual transactions, your personal data will be communicated to third parties. This includes, in particular, communication to shipping companies for the purpose of delivery of the goods you have ordered and the communication of payment data to payment service providers or credit institutes in order to enact a payment transaction. The communicated data may only used for the above purposes by the third parties.
b) For further purposes
In addition, we shall only communicate your personal data to third parties if:
- you have granted your explicit consent to this pursuant to Art. 6 paragraph 1 sentence 1 lit. a GDPR,
- the communication is necessary pursuant to Art. 6 paragraph 1 sentence 1 lit. f GDPR for enforcing, exercising or defending legal claims and there is no reason to assume that you have a predominant, protection-worthy interest in the non-disclosure of your data, as well as
- in case there is a legal obligation for the communication pursuant to Art. 6 paragraph 1 sentence 1 lit. c GDPR.
Information is stored in the cookie, which results in conjunction with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.
We also use temporary cookies to optimise user-friendliness, which are saved on your end device for a specifically defined period of time. If you visit us again in order to make us of our services, the system will automatically recognise that you were with us before and what entries and/or settings you have made so that you do not have to do these again.
The data processed by cookies is necessary for the above purposes in order to safeguard our justified interests as well as those of third parties pursuant to Art. 6 paragraph. 1 S. 1 lit. f GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or an indication always appears before a new cookie is created. However, the complete deactivation of cookies can entail you not being able to use all functions of our website.
5. Analysis tools
a) Tracking tools
The tracking measures listed below and used by us are realised based on Art. 6 paragraph 1 sentence 1 lit. f GDPR. With the tacking measures used, we aim to ensure a design that is in line with requirements as well as continuous optimisation of our website. We also use tracking measures to record the use of our website statistically and as analysis for the purpose of optimising our offer for you. These interests are to be regarded as justified in accordance with the above regulation.
The relevant data processing purposes and data categories are discernible from the corresponding tracking tools.
i) Google Analytics
To enable requirements-oriented design and continuous optimisation of our pages, we use Google Analytics, a web analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised utilisation profiles are created and cookies (see under Section 4) used. The information generated by the cookie concerning your use of this website such as
- Browser type/version,
- operating system used,
- Referrer URL (the page last visited),
- Host name of the accessing computer (IP address),
- Time of the server request,
is transferred to a server of Google in the USA and stored there. The information is used to analyse use of the website in order to compile reports concerning the website activities and in order to provide further services associated with the website use and Internet utilisation for purposes of market research and requirements-oriented design of these Internet sites. If necessary, this information will also be transferred to third parties, insofar as this is stipulated by law or insofar as third parties process this data on behalf of us. On no account will your IP address be combined with other data from Google. The IP addresses are anonymised so that an assignment is not possible (IP masking).
You can prevent the installation of cookies by a corresponding setting in the browser software; however, we point out that it might not be possible to utilise all functions of this website to the full extent in this case.
You can also prevent logging of the data generated by the cookie and referring to your use of the website (including your IP address) as well as processing of this data by Google by downloading and installing a browser add-on.
Alternatively to the browser add-on, particularly in case of browsers on mobile end devices, you can prevent logging by Google Analytics by clicking on this Link. An opt-out cookie is set, which prevents future logging of your data when visiting this website. The opt-out cookie only applies in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
You can find further information on data protection in conjunction with Google Analytics in the Google Analytics help.
ii) Google Adwords conversion tracking
In order to log the use of our website statistically and evaluate this for the purpose of optimising our offer for you, we also use Google conversion tracking. Here a cookie (see Section 4) is placed by Google Adwords on your computer insofar as you have accessed our website via a Google advertisement.
These cookies become invalid after 30 days and do not serve for personal identification. If the user visits certain pages of the website belonging to the Adwords customer and the cookie has not yet expired, Google and the customer can recognise that the user has clicked on the advertisement and has been directed to this page.
Each Adwords customer receives another cookie. Cookies cannot therefore by tracked via the websites of Adwords customers. The information obtained via the conversion cookie serves to compile conversion statistics for Adwords customers who have opted for conversion tracking. The Adwords customers find out the total number of users who have clicked on their advertisement and who have been directed to a page provided with a conversion tracking tag. They do not receive any information that can be used to identify users personally.
If you do not wish to participate in the tracking process, you can also reject the activation of a cookie required for this – for instance via a browser setting, which generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser so that cookies are blocked by the domain “www.googleadservices.com”. You can find Google’s data privacy notice concerning conversion tracking here.
b) Targeting tools
The targeting measures listed below and used by us are realised based on Art. 6 paragraph 1 sentence 1 lit. f GDPR. With the targeting measures used, we aim to ensure that only advertising oriented to your actual or presumed interests is shown to you on your end devices. These interests are to be regarded as justified in accordance with the above regulation.
The relevant data processing purposes and data categories are discernible from the corresponding targeting tools.
i) Google Adwords remarketing
However, we point out that it might not be possible to use all functions of this website to the full extent in this case. In using this website, you declare your consent to processing of the data collected about you by Google in the manner described above and for the aforementioned purpose. You can find information on the policies of Google here.
ii) Facebook retargeting / remarketing
Remarketing tags of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA (“Facebook”) are integrated on our pages. If you visit our pages, a direct link is established between your browser and the Facebook server. Facebook receives information in this way that you have visited our page with your IP address. As a result, Facebook can assign the visit to our pages to your user account. We can use the information obtained in this way to display Facebook ads.
We point out that we, as a provider of the pages, have no knowledge concerning the content of the transferred data or its use by Facebook.
You can find further information in the Data Privacy statement of Facebook.
iii) Facebook Custom Audiences
We also use Facebook Website Custom Audiences. This involves a marketing service of Facebook. It enables us to show certain groups of pseudonymised visitors to our website, who also use Facebook, individually tailored and interest-relevant advertising on Facebook.
A Facebook Custom Audience pixel is integrated on our website. This involves a Java Script code, via which some non-personal data concerning the use of the website is saved. This includes your IP address, the browser used as well as the origin and destination page. This information is transferred to servers of Facebook in the USA. An automatic synchronisation occurs there concerning whether you have stored a Facebook cookie. The Facebook cookie serves to automatically ascertain whether you belong the relevant target group for us. If you belong to the target group, corresponding advertisements will by displayed by us to you on Facebook. You are not identified personally by us or by Facebook through the data synchronisation in this process.
You can reject use of the Custom Audiences service on the website of Facebook. After logging into you Facebook account you will be taken to the settings for Facebook advertising displays.
You can find more detailed information concerning data protection at Facebook in the Data Privacy Guidelines of Facebook.
6. Rights of persons affected
You have the right:
- pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of the recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of the processing or objection, the existence of a right of complaint, the origin of your data, insofar as this has not been collected by us, as well as concerning the existence of an automated decision making including profiling and possibly meaningful information on its individual details;
- pursuant to Art. 16 GDPR to immediately demand the correction of incorrect personal data or completion of incomplete personal data saved at us;
- pursuant to Art. 17 GDPR to demand the deletion of your personal data we have saved, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of the public interest or for enforcing, exercising or defending legal claims;
- pursuant to Art. 18 GDPR to demand restriction of the processing of your personal data, insofar as the correctness of the data is disputed by you, the processing is unlawful, but you decline its deletion and we no longer require the data, but you require this for the enforcement, exercising or defence of legal disputes or you have filed an objection to the processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 GDPR to receive your personal data that you have made available to us in a structured, current and machine-readable format or request the transfer to another responsible party;
- pursuant to Art. 7 paragraph 3 GDPR to rescind your consent previously granted to us at any time. This means that we may no longer continue the data processing based on this consent in the future and
- to lodge a complaint to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company head office for this.
7. Right of objection
Insofar as your personal data is processed on the basis of justified interests pursuant to Art. 6 paragraph. 1 sentence 1 lit. f GDPR, you have the right pursuant to Art. 21 GDPR to file an objection to the processing of your personal data, insofar as there are reasons that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection that is implemented by us without indication of a particular situation.
If you wish to exercise your right of revocation or objection, you only need to send an email to firstname.lastname@example.org.
8. Data security
We use the widespread TLS procedure (Transport Layer Security) in conjunction with the highest encryption level that is supported by your browser within an ordering process. This generally involves 256 bit encryption. If your browser does not support 256 bit encryption, we provide recourse to 128 bit v3 technology instead. You can recognise whether an individual page of our Internet site is transferred with encryption from the closed depiction of the key or lock symbol in the lower status bar of your browser.
We also utilise suitable technical and organisational security measures in order to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continually improved corresponding to technological developments.
9. Latest version and changes to this Data Privacy Statement
This Data Privacy Statement is currently up-to-date, version May 2018.
As a result of further development of our website and offers concerning it or on account of changed statutory or official regulations, it may be necessary to amend this Data Privacy Statement. You can call up and print out the current Data Privacy Statement at any time on the website at www.q-cells.eu/privacy-policy.