Privacy policy

Controller

The controller within the meaning of the GDPR is CreativeQuantum GmbH, Am Studio 2, 12489 Berlin, Germany.

Contact for data protection enquiries: contact@webchem.eu

Visiting our website

When you visit our website, technical access data (including IP address, date/time, page accessed, browser type) are automatically collected in server log files and stored with our hosting provider. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).

Retention period: The server log files are stored for as long as this is required to ensure the security and stability of the website; according to our hosting provider, as a rule for no longer than 7 days.

Contacting us

If you contact us (for example by form or by email), we process the data you provide in order to handle your request (Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where there is a contractual context). The data are erased as soon as they are no longer required for this purpose.

Registration and use of the platform

Use of the platform requires a customer account. For this purpose we process your name, business email address, access credentials and usage/log data in order to perform the contract (Art. 6(1)(b) GDPR) and store these for the duration of the contractual relationship; after the contract ends, the data are regularly erased within 30 days, unless statutory retention obligations preclude this (our terms and conditions, which we make available to you before the contract is concluded, govern the details).

If you conclude a paid contract with us (for example after a free trial period has expired), we additionally process your name, address, email address and payment data for invoicing and in order to comply with obligations under commercial and tax law (Art. 6(1)(b), (c) GDPR). The statutory retention periods apply (as a rule 6–10 years).

Cookies

We use exclusively technically necessary cookies (for example to maintain your login session). The legal basis is Section 25(2) no. 2 TTDSG or Art. 6(1)(f) GDPR; consent is not required for this.

Processing within our platform

Where our business customers process personal data of third parties (for example of their own customers or employees) via our platform, this takes place on the basis of a separate data processing agreement (DPA); in this case the contact for data subject rights is the respective business customer.

Recipients of our data

Where required, we pass your data on to our hosting provider. No disclosure to third parties beyond this currently takes place.

International data transfers

Processing takes place exclusively within the EU/EEA. No transfer to third countries takes place.

Your rights

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.