Privacy Policy
SoniQ Services GmbH, Boxhagener Straße 78, 10245 Berlin, Germany, operates a website accessible online at https://soniq.tech and in the relevant subdirectories (hereinafter referred to as the ‘Website’). This Privacy Notice gives you an overview of the processing of your data by SoniQ Services. It applies to our websites and our apps.
With this Privacy Notice, we would like to inform you about which data are processed in which form when you visit and use our Website and/or apps. We hereby also comply with our obligation to inform in accordance with article 13 and article 14 General Data Protection Regulation (GDPR).
I. Controller and contact information of the data protection officer
The controller for the data processing on our Website is
SoniQ Services GmbH
Boxhagener Straße 78
10245 Berlin
Deutschland
E‑Mail: info@soniq.tech
Telefonnummer: (030) 57 711 600
You can reach our data protection officer, Julian Höppner, at:
SoniQ Services GmbH
- Data Protection Officer -
Boxhagener Straße 78
10245 Berlin
Germany
datenschutz@soniq.tech
II. Purpose and legal basis as well as the duration of the data processing
1. General use of the Website
Our host’s web server automatically records access to our Website, so when you visit our site, certain technical data are automatically transmitted to us. This includes the following information:
IP address;
content accessed;
information about the transfer;
date of access;
amount of data transferred;
the referrer;
the web browser/user agent.
The collection of the IP address when establishing the connection is based on Art. 6(1)(f) GDPR. We have a legitimate interest in providing our Website for you to access and enabling you to use the Website.
Our host also creates log files to maintain system security in order to guarantee the security and integrity of our IT systems. These purposes also constitute a legitimate interest, for the protection of which the processing takes place (Art. 6(1)(f) GDPR). We store the log files for a period of 30 days and erase them thereafter.
2. Registration
When you register for our members’ area, we ask you for certain information, including personal data about you. We ask for:
your first name and surname;
your company;
your email address and telephone number; and
a password for subsequent access.
We use these data to manage your customer account; the information about your company is used to ensure that you are a business customer.
When you register with us or enquire about or order one of our service products, we use your contact details in particular, such as your telephone number and email address, for any queries and to answer your enquiries satisfactorily. We only process the access data you provided when registering to enable you to access your customer account. The legal basis for the aforementioned data processing is Art. 6(1)(b) GDPR.
We process your registration data for as long as you maintain a customer account with us. You can erase your customer account at any time by contacting our customer services team by email (kunden@soniq.tech) and asking for your customer account to be erased.
3. Log-in and provision of the functions for our services
When you log in as a user on our Website, we process the personal data described above in the context of general usage in order to technically provide you with the functions of our Website. Otherwise, we act as our customer’s processor bound by instructions when providing the services.
4. Newsletter
You can subscribe to our newsletter on our Website. In this case, we process your email address for the purpose of sending it until further notice. The legal basis is your consent (Art. 6(1)(a) GDPR). You can revoke your consent to sending the newsletter and unsubscribe from the newsletter at any time. You can declare your revocation, for example, by clicking on the link provided in every newsletter email.
In addition, in the case of the email newsletter, we process the time of registration and your double opt-in confirmation. This is done to protect our legitimate interest in being able to prove your registration. The legal basis for this is Art. 6(1)(f) GDPR and Art. 6(1)(c) GDPR in conjunction with Art. 5(2) GDPR. In addition to the pure e-mail dispatch, we also analyze your use of our e-mail newsletter, e.g. whether you have opened it or clicked on certain links, and process this data to optimize or improve our newsletter. This purpose also represents the legitimate interest that we pursue with this processing (Art. 6 para. 1 lit. f DSGVO). We use a cloud product of the provider Pipedrive Inc, which processes personal data in the United States of America, to send and analyze our newsletters. The legal basis for the transfer of data to the third country within the meaning of Chapter V of the GDPR are the relevant standard contractual clauses agreed with Pipedrive Inc in accordance with the Implementing Decision of the European Commission (EU) 2021/91 of 4 June 2021, which you can access here and here.
5. Contact
a) Telephone, email and contact form
We offer you the possibility to contact us, for example, via our email address and by filling out a contact form. In the case of an email, at least provide us with your email address and, if applicable, your name, a subject and the content of your enquiry. For our contact form, we collect your name, company name, postcode, country, telephone number and company email address. We process these data in order to be able to answer your enquiry. This purpose also forms the basis for our legitimate interest in data processing (Art. 6(1)(f) GDPR).
We will process your enquiry for as long as is necessary for the stated purpose, but will also erase it before then upon request. If the enquiry is made in the context of an existing or prospective contractual relationship with us, the storage period shall depend on the contractual relationship to be initiated or on which it is based.
b) Chat function via Salesforce LiveAgent
Within the framework of our Website, we offer you the option of contacting one of our experts. For this, we use the LiveAgent technology from the company Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Germany (‘Salesforce’). During the conversation, we may, depending on the situation, also ask you for personal data that Salesforce processes on our behalf. An order processing agreement exists with Salesforce in accordance with the legal requirements. We use these data to offer you the best possible customer and prospective customer service. This purpose also forms the basis for our legitimate interest in data processing (Art. 6(1)(f) GDPR). For more details on the data processing of and by Salesforce, please see the Salesforce Privacy notice at: https://www.salesforce.com/de/company/privacy/.
We store your chat history for a period of 24 months and erase it thereafter unless legal provisions preclude erasure, in particular, if further storage is required in accordance with Art. 6(1)(f) GDPR for the purpose of providing evidence or to comply with legal retention periods in accordance with Art. 6(1)(c) GDPR.
6. SoniQ Services Application Portal
When you apply to us for a job, we process the application data you provide (first name, last name, email address, telephone number as well as any attachments such as a CV, cover letter, etc.) solely for purposes related to your interest in current or future employment with us. The legal basis for processing is Section 26(1) sentence 1 German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).
If we are unable to offer you employment, we will erase the data you have provided or hand it over to you six months after the final status of your application has been determined unless legal provisions preclude erasure, in particular if further storage is required in accordance with Art. 6(1)(f) GDPR for the purpose of providing evidence or to answer questions in connection with the rejection of your application.
If necessary, we will ask you whether we may store your personal data for longer, namely until further notice, for example if you are considered for participation in a further recruitment process or if we would like to include you in our pool of applicants. In this case, we will ask you separately for your consent, which will then also constitute the legal basis for further processing (Art. 6(1)(a) GDPR). You can subsequently revoke your consent at any time. For further details, see Section V. of this Privacy Notice.
To operate our application portal, we use the Personio technical solution of Personio GmbH, Buttermelcherstr. 16, 80469 Munich, Germany (‘Personio’). The data you have provided will be stored and processed on our behalf by Personio for the purpose of personnel and application management. An order processing agreement exists with Personio GmbH in accordance with the legal requirements. In the case of technical provision, Personio also processes certain personal data as its own controller. For more details on this, see https://www.personio.de/datenschutzerklaerung/.
III. Other data recipients
We use external service providers if we cannot or cannot reasonably perform the services ourselves. These external service providers are mainly IT services providers, such as our host, email provider or telecommunications provider.
Unless explicitly stated elsewhere in this Privacy Notice, we do not transfer your data to third countries.
IV. Cookies and other Internet-specific data processing
We may additionally use cookies on our Website, which are placed on your end device either by us or by third parties. Cookies do not execute any programs and cannot infect your end devices with viruses or other malware. We use both session cookies, which are automatically erased after you end your browser session, and cookies, which are only erased automatically after a certain storage period has been reached. How long this duration is in individual cases can be displayed in your browser. We use cookies for various things, for example, to provide you with certain technical functions that make your use of our website more pleasant and convenient, to analyze your use of our site, or to show you target-group-specific advertising. Usually, cookies do not include any personal data. However, if this is the case, this data processing is justified on the basis of Art. 6(1)(f) GDPR, as the aforementioned purposes are in our legitimate interest.
We also use certain technologies on our website that also rely on the use of cookies or similar technologies such as pixels or tags. Please find below more detailed information on this and for what specific purposes these technologies are used.
If you wish to prevent the use of cookies in general, you can use your browser settings to prevent the acceptance and storage of new cookies. To find out how this works with the browser you use, you can use your browser’s help function or contact the manufacturer. We would like to point out that it may not be possible to use our Website to its full extent in this case.
All further information on this – and on the option of consenting to the placement of cookies and the processing of the data concerned, amending or completely revoking consents granted – is available here.
V. Rights of the data subject
The General Data Protection Regulation guarantees you certain rights that you can assert against us provided the legal requirements are met.
Art. 15 GDPR – Right of access by the data subject: You have the right to request confirmation from us as to whether or not personal data concerning you are being processed, and, if so, what they are and the circumstances in which they are being processed.
Art. 16 GDPR – Right to rectification: You have the right to request from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of providing a supplementary statement.
Art. 17 GDPR – Right to erasure: You have the right to request from us the erasure of personal data concerning you without undue delay.
Art. 18 GDPR – Right to restriction of processing: You have the right to request us to restrict processing.
Art. 20 GDPR – Right to data portability: You have the right, in the event of processing based on consent or for the performance of a contract, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us or to have the data transmitted directly to the other controller, where technically feasible.
Art. 77 GDPR in conjunction with Section 19 of the German Federal Data Protection Act (BDSG) – Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes applicable law.
VI. In particular, the right to object and the right to revoke consent
Art. 21 GDPR – Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is necessary due to a legitimate interest on our part or for the performance of a task carried out for reasons of public interest or which is carried out in the exercise of public authority.
If you object, we will no longer process your personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object to the processing at any time. If you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.
To exercise your right to object, you can, for example, send us an email to one of the aforementioned email addresses. Withdrawal of consent: If you have granted us consent, you have the right to withdraw your consent at any time. All data processing that we have undertaken until your revocation shall remain lawful in this case.
To unsubscribe to the newsletter, simply click on the link contained in each email or send a message to one of our email addresses. When you inform us in this message that you do not want to receive any emails in future, we will no longer send any messages to the email address you have provided. If you have given us your consent to being included in the pool of applicants, you can also revoke this at any time by sending a message to one of our email addresses.
VII. Obligation to provide data
You have no contractual or legal obligation to provide us with personal data. However, we are unable to provide you with our services without the data you provide.
VIII. Existence of automated decision-making (including profiling)
We do not subject you to any automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR, that has legal effects on you or adversely affects you.
Berlin, February 2023
