Data protection declaration

QNAP Systems, Inc. Data Protection Officer

3F, No. 22, Zhongxing Rd., Xizhi District

New Taipei City 221

Taiwan

uksales@qnap.com

 

Thank you for your interest in our online store. The protection of your privacy is very important to us. In the following we will inform you in detail about how we handle your data.

You can visit our website without giving any personal information. Each time a website is called up, the web server only automatically saves a so-called server log file, which contains for example the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data), and documents the call.

These access data are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves according to Art. 6 Para. 1 p. 1 lit.f GDPR for safeguarding our predominantly legitimate interests in a correct presentation of our offer in the context of a weighing of interests.

We collect personal data if you voluntarily provide them to us as part of your order or when you contact us (e.g. using the contact form or email). Mandatory fields are marked as such, as we need the data to process the contract or to process your contact in these cases and you cannot send the order or the contact without providing them. Which data are collected can be seen from the respective input forms. We use the data provided by you according to Art. 6 Para. 1 p. 1 lit. b GDPR for contract processing and for processing your queries.

Insofar as you have given your consent to this according to Article 6 Para. 1 p. 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account.

After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration. The deletion of your customer account is possible at any time and can take place either by sending a message to the contact option described below or using a function provided for this in the customer account.

In order to fulfill the contract according to Art. 6 Para. 1 p. 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for this purpose to the credit institute commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In part, the selected payment service providers also collect these data themselves if you create an account there. In this case, you have to log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect.

The same applies to the transfer of data to our manufacturers or wholesalers in those cases in which they take over the shipping for us (drop shipment).

• Data transfer to shipping service providers
  If you have given us your express consent for this during or after your order, we will forward your email address and telephone number to the selected shipping service provider on the basis of this according to Art. 6 Para. 1 p. 1 lit. a GDPR, so that he can contact you for the purpose of delivery notification or coordination.
  The consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you have provided for this, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
  Name
  Street and house number
  Postcode and city
  Country
• Data transfer to debt collection agencies
  In order to fulfill the contract according to Art. 6 Para. 1 p. 1 lit. GDPR, we pass your data on to a commissioned debt collection company if our payment claim has not been paid despite a previous reminder. In this case, the debt will be collected directly from the debt collection company. In addition, the transfer serves to safeguard our predominantly legitimate interests in an effective assertion or enforcement of our payment claim according to Art. 6 Para. 1 p. 1 lit.f GDPR.

• Email advertising with registration for the newsletter
  When you register for our newsletter, we use the data required for this or separately provided by you in order to regularly send you our email newsletter based on your consent according to Art. 6 Para. 1 p. 1 lit. a GDPR.
  The cancellation of the newsletter is possible at any time and can be done either by sending a message to the contact option described below or using a link provided for this in the newsletter. After cancellation, we will delete your email list from the list of recipients, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
• Email advertising without registering for the newsletter and your right to object
  If we receive your email address in connection with the sale of a product or service and you have not objected, we reserve the right to send you regular offers by email about products from our range similar to those already purchased on the basis of § 7 para. 3 UWG. This serves to safeguard our legitimate interests, which are predominant in the context of a weighing of interests, in addressing our customers for advertising purposes.
  You can object to this use of your email address at any time by sending a message to the contact option described below or via a link provided in the advertising email without incurring any costs other than the transmission costs according to the basic tariffs.
• Postal advertising and your right to object
  In addition, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our predominantly legitimate interests in addressing our customers with advertising according to Art. 6 Para. 1 p. 1 lit.f GDPR.

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our predominantly legitimate interests in an optimizsed presentation of our offer according to Art. 6 Para. 1 p. 1 lit.f GDPR. Cookies are small text files that are automatically saved on your device.

Some of the cookies (so-called session cookies) used by us are deleted again at the end of the browser session, that is, after you close your browser. Other cookies remain on your device and enable us to recognisze your browser again on your next visit (persistent cookies). You can see the duration of the storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of every browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:

• Internet Explorer™
• Safari™
• Chrome™
• Firefox™
• Opera™

 

If you do not accept cookies, the functionality of our website may be restricted.

 

Insofar as you have given your consent to this according to Art. 6 Para. 1 p. 1 lit. a GDPR, this website also uses the so-called DoubleClick cookie for advertising purposes within the scope of Google Analytics (see below), which recognises your browser when visiting other websites. The information automatically generated by the cookie about your visit to this website is usually transferred to a Google server in the USA and stored there. The IP address is thereby shortened by activating IP anonymisation on this website prior to transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will be sent to a Google server in the USA and shortened there only in exceptional cases. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google will use this information to compile reports on website activity and to provide other services related to website activity. Google may also transfer this information to third parties if required by law or if third parties process these data on behalf of Google. After purpose loss and the end of the use of Google DoubleClick by us, the data collected in this context will be deleted.

Google Double Click is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.com).

Insofar as information is transmitted to Google in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can revoke your consent at any time with future effect by deactivating the DoubleClick cookie via this Link. In addition, you can obtain information about the setting of cookies from Digital Advertising Alliance and make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

• Use of Google (Universal) Analytics for web analysis
  Insofar as you have given your consent to this according to Art. 6 Para. 1 p. 1 lit. a GDPR, this website uses Google (Universal) Analytics for the purpose of website analysis. The web analysis service is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.com). Google (Universal) Analytics uses methods that enable your use of the website to be analysed, such as cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. By activating the IP anonymisation on this website, the IP address is thereby shortened prior to transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will be sent to a Google server in the USA and shortened there only in exceptional cases. The anonymised IP address transmitted by your browser as part of Google Analytics will fundamentally not be merged with other Google data. After purpose loss and the end of the use of Google Analytics by us, the data collected in this context will be deleted.
  Insofar as information is transmitted to Google in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
  You can revoke your consent at any time with effect for the future by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB. This prevents the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of these data by Google.
  As an alternative to the browser plug-in, you can

  create an Opt-Out link for Google Analytics

  to prevent click this link An opt-out cookie will then be stored on your device. If you delete your cookies, you will be asked again for your consent.
  Insofar as you have given your consent to this according to Art. 6 Para. 1 p. 1 lit. a GDPR, this website additionally uses Google Signals. This is an expansion function of Google Analytics that enables so-called "cross-device tracking". This means that as long as your internet-enabled devices are linked to your Google account, Google can generate reports on usage behaviour (in particular the number of users across all devices), even if you change your end device. Google uses data for this, provided you have activated the “personalied advertising” setting in your Google account.
  We do not process personal data, we only receive statistics based on Google Signals.
  You can revoke your consent at any time with effect for the future by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB. This prevents the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of these data by Google. You can also deactivate the “personalied advertising” setting in your Google account. Details can be found here.

• Google Ads Remarketing
  We use Google Ads to advertise this website in Google search results and on websites of third parties. For this, the so-called remarketing cookie from Google is set when visiting our website, which automatically enables interest-based advertising by means of a pseudonymous Cookie ID and based on the pages you have visited. This serves to safeguard our predominantly legitimate interests in the optimal marketing of our website according to Art. 6 Para. 1 p. 1 lit. a GDPR. After purpose loss and the end of the use of Google Remarketing by us, the data collected in this context will be deleted.
  Any further data processing will only take place if you have consented to Google linking your web and app browser history to your Google account and information from your Google account to be used to personalise advertisements you see on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this, your personal data are temporarily linked by Google with Google Analytics data in order to form target groups.
  Google Ads is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.com).
  Insofar as information is transmitted to Google in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
  You can deactivate the remarketing cookie via this Link In addition, you can obtain information about the setting of cookies from Digital Advertising Alliance and make settings for this.

• Use of social plugins from Facebook, Twitter, Instagram, Pinterest, LinkedIn
  So-called social plugins ("plugins") from social networks are used on our website.
  When you call up a page on our website that contains such a plugin, your browser establishes a direct connection to the servers of the respective social network. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the USA) and stored there. If you are logged in to one of the services, the providers can directly assign your visit to our website to your profile in the respective social network. If you interact with the plugins, for example press the "Like
• YouTube Video Plugins
  Third-party content is included on this website. This content is provided by Google (“provider”). YouTube is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.com).
  The extended data protection setting is activated for videos from YouTube that are integrated on our site. This means that no information from website visitors is collected and stored on YouTube unless they play the video. The integration of the videos serves to safeguard our predominantly legitimate interests in an optimum marketing of our offer according to Art. 6 Para. 1 p. 1 lit.f GDPR.
  The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as a contact option and your related rights and setting options to protect your privacy can be found in the data protection information of the providers:
  https://www.facebook.com/policy.php
  https://twitter.com/en/privacy
  https://privacycenter.instagram.com/policy
  https://policy.pinterest.com/en-gb/privacy-policy
  https://policies.google.com/privacy
  https://privacy.linkedin.com/settings
  If you do not want the social networks to assign the data collected via our website directly to your profile in the respective service, you must log out of the relevant service before visiting our website. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the script blocker "NoScript".
• Our online presence on Facebook, Twitter, YouTube, Instagram, Pinterest, LinkedIn
  Our presence on social networks and platforms serves for better, active communication with our customers and interested parties. There we provide information about our products and current special promotions.
  When visiting our online presence on social media, your data can be collected automatically and saved for market research and advertising purposes. Using pseudonyms, so-called usage profiles are created from these data. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually used on your device. The visitor behaviour and the interests of the user are stored in these cookies. This serves according to Art. 6 Para. 1 lit. f GDPR for safeguarding our predominantly legitimate interests in a optimied presentation of our offer and effective communication with the customers and interested parties in the context of a weighing of interests. If you are asked for your consent (permission) to data processing by the respective social media platform operator, e.g. with the help of a check box, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR.
  Insofar as the aforementioned social media platforms have their headquarter in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
  The detailed information for the processing and use of the data by the providers on their pages as well as a contact option and your related rights and setting options to protect your privacy can be found in the data protection information of the providers: If you still need help in this respect, you can contact us.
• Facebook:  https://www.facebook.com/about/privacy/
  Data processing takes place on the basis of an agreement between jointly responsible parties according to Art. 26 GDPR, which you can view here.
  You can find further information on data processing when visiting a Facebook fan page (information on Insights data) here.
• Google/ YouTube: https://policies.google.com/privacy?hl=en-GB
• Twitter: https://twitter.com/deen/privacy
• Instagram: https://privacycenter.instagram.com/policy
• Pinterest: https://policy.pinterest.com/en-gb/privacy-policy
• LinkedIn:  https://www.linkedin.com/legal/privacy-policy
• Option of objection (Opt-Out):
  Facebook: https://www.facebook.com/settings?tab=ads
  Google/ YouTube: https://myadcenter.google.com/?hl=en&sasb=true
  Twitter: https://twitter.com/personalization
  Instagram: https://privacycenter.instagram.com/policy
  Pinterest: https://www.pinterest.co.uk/settings/privacy
  LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

If you have given us your express consent to this during or after your order according to Art. 6 Para. 1 p. 1 lit. a GDPR, we will use your email address to remind you of rating your order via the rating system used by us. This consent can be revoked at any time by sending a message to the contact option described below

As an affect person, you have the following rights:

• according to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• according to Art. 16 GDPR, the right to immediately request the correction of incorrect or incomplete personal data stored by us;
• according to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing
  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation;
  • for reasons of public interest or
  • for the assertion, exercise or defense of legal claims is necessary;
• according to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
  • you dispute the correctness of the data;
  • the processing is unlawful, but you refuse to delete it;
  • we no longer need the data, but you need them to assert, exercise or defend legal claims or
  • you have lodged an objection to the processing according to Art. 21 GDPR;
• according to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that they be transmitted to another person responsible;
• according to Art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data and the revocation of any consent given or objection to a specific use of data, please send us a signed and dated request. State your request clearly and accurately within the first sentence of your query. You may contact us through the following methods:

by post or email to

• Data protection officer:
  QNAP Systems, Inc. Data Protection Officer
  3F, No. 22, Zhongxing Rd., Xizhi District
  New Taipei City 221
  
  uksales@qnap.com