Privacy Policy - Q ENERGY

When you visit our website www.qenergy.eu, the following information is automatically sent to our website server by the browser used on your end device and temporarily stored in a so-called log file:

IP address of the requesting computer,
date and time of access,
name and URL of the accessed file,
website from which the access is made (referrer URL),
browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the aforementioned data for the following purposes:

ensuring a smooth connection to the website,
ensuring a comfortable use of our website,
evaluation of system security and stability, and for
other administrative purposes.

The legal basis for data processing is Art. 6 (1)(1)(f) GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations of this in the following sections of this data protection policy.

2.2. When using our contact form

If you have any questions, we offer you the possibility of contacting us via a contact form provided on the website. In doing so, it is necessary to provide a valid e-mail address so that we know who the enquiry is from and so that we can answer it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is based on your voluntarily given consent in accordance with Art. 6(1)(1)(a) GDPR.

The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.

3. Transfer of data

Your personal data will not be transferred to third parties.

3.1. Transfer to third countries

A transfer of personal data to third countries only takes place if the requirements of Art. 44 ff. GDPR are given.

A third country is a country outside the European Economic Area (EEA) in which the GDPR is not directly applicable. A third country is deemed to be insecure if the EU Commission has not issued an adequacy decision for this country pursuant to Art. 45(1) GDPR confirming that adequate protection for personal data exists in the country.

With EU-USA Data Privacy Framework adopted on 10 July 2023, the European Commission concluded that the United States ensures an adequate level of protection – comparable to that of the European Union – for personal data transferred from the EU to US companies under the new framework. Based on the new adequacy decision, personal data can flow safely from the EU to US companies participating in the EU-U.S. Data Privacy Framework without having to put in place additional data protection safeguards.

In this privacy notice, we inform you when and how we transfer personal data to unsecure third countries. We only transfer your personal data if:

the recipient provides sufficient guarantees in accordance with Art. 46 GDPR for the protection of the personal data,
you have expressly consented to the transfer, after which we have informed you of the risks, in accordance with Art. 49 (1)(a) GDPR,
the transfer is necessary for the fulfilment of contractual obligations between you and us, or
another exception from Art. 49 GDPR applies.

Guarantees according to Art. 46 GDPR can be so-called standard contractual clauses. In these standard contractual clauses, the recipient assures to sufficiently protect the data and thus to guarantee a level of protection comparable to the GDPR.

3.2. For further purposes

We will only disclose your personal data to third parties if:

you have given your express consent to do so in accordance with Art. 6(1)(1)(a) GDPR,
the disclosure is necessary for the assertion, exercise or defence of legal claims in accordance with Art. 6 (1)(1)(f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, as well as
in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1)(1) (c) GDPR.

4. Cookies

We use cookies on our website. These are small files that your browser automatically creates and stores on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device and do not contain any viruses, trojans or other malware. Information is stored in cookies that is related to the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

The legal basis for processing personal data using cookies depends on the category of cookies used. The use of cookies that are necessary to maintain the functions of the website (Necessary Cookies) are used by us to protect our legitimate interests pursuant to Art. 6(1)(1) (f) GDPR. Our legitimate interest is to offer a smoothly functioning and design-appealing website. All other cookies that are not necessary to maintain the functions of the website are only used by us with your consent in accordance with Art. 6 (1)(1)(a) GDPR. You can give this consent via our cookie settings or revoke it at any time with effect for the future. In doing so, you have the option of either agreeing to the use of all cookie categories or making an individual selection. The cookies will be deleted if you revoke your consent to the setting of cookies.

You can adjust your settings via the cookie settings.

5. Analysis tools

5.1. Tracking tools

The tracking measures listed below and used by us are carried out on the basis of your consent in accordance with Art. 6(1)(1)(a) GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Once you have given your consent, you can revoke and manage it at any time with effect for the future via the “Cookie settings” under Cookies of the privacy policy.

5.2. Google Tag Manager

For the purpose of demand-oriented design and continuous optimization of our pages, we use Google Tag Manager, a web analysis service of GOOGLE INC (https://about.google/intl/de/). 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as

Browser type/version,
operating system used,
Referrer URL (the previously visited page),
Host name of the accessing computer (IP address),
time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that they cannot be assigned (IP masking).

The user data collected via cookies is automatically deleted after 14 months.

The processed data may be transferred to servers in the USA and other insecure third countries and processed there. For the transfer, Google relies on standard contractual clauses approved by the EU Commission as a guarantee of a level of data protection comparable to that in the EU. We only transmit data to Google on the basis of your consent.

Further information on data protection in connection with Google Analytics can be found in the GOOGLE Tag Manager HELP.

6. Other tools on the website

6.1. Workable

Vendor
Workable Software Limited, 5 Golden Square, 5th Floor, London, W1F 9BS, United Kingdom.

What data is collected?
To apply for a job at Q ENERGY as an applicant, we use the Workable careers page. The following data is collected: First name, surname, email address, CV and other voluntary information you provide in the application form. In addition, the physical location (calculated from the IP address) and other technical data may be collected.

Purpose of data collection
The purpose of data processing by Workable is to organise and manage the application process.

Legal basis
Art. 6(1)(1)(a) GDPR and Art. 6(1)(1)(f), in conjunction with Art. 49 GDPR for cookies (collected on the careers page).

Link to privacy notice of Workable

Place of processing
EEA, USA

7. Data subject rights

You have the right:

to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us
in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims
in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
in accordance with Art. 7(3) GDPR, to revoke your consent to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and
to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

8. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6(1)(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of cancellation or objection, simply send an email to info@qenergy.eu.

9. Data security

We use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

10. Actuality and amendment of this privacy policy

This privacy policy is currently valid and was last updated in April 2025.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current privacy policy at any time on the website at https://qenergy.eu/solutions/en/privacy-policy/.

Berlin, Germany

Avignon, France

Madrid, Spain