This data protection information describes how we process your personal data in the course of our business contact with you.
1. Purposes of data processing
We will process the categories of your personal data mentioned in the Annex for the following purposes:
- Maintaining business operations;
- Processing an order/contract/project, etc.;
- Contact data management;
- Communication and communication management;
- Client loyalty management;
- Internal and external documentation and record keeping requirements;
- Storage of backups;
- Participation in the Group System Data Network of QPS Holdings, LLC (parent company);
- Business partner qualification;
- Project acquisition, project management, project documentation and project execution
- Accounting and reporting obligations;
- Organization of business travels;
- Building security: access, visitor, and authorization management;
- Settlement of insurance-relevant claims;
- Processing of payment transactions;
- Processing of grants (application, implementation, accounting);
- Compliance with statutory reporting and information obligations;
- Litigation settlement;
- Event planning and event handling;
- Public relations;
- Website development (separate data protection information concerning the website www.qps.com).
We collect this personal data in the course of our business contact either by you providing us the data yourself or from other sources in the course of various operational processes and procedures.
There is no obligation to provide us with the personal data that we ask you to provide. However, certain processes as well as the internal and external communication may be delayed or even be impossible if you do not provide your personal data. Should the provision of your data be mandatory by law in some cases, we will inform you of this separately.
2. Categories of data processed and legal basis for processing
We process the categories of your personal data listed in the Annex based on
- our overriding legitimate interest (Art 6 para 1 lit f GDPR), which is to efficiently structure and manage our business processes, as well as our internal and external communications, and/or
- the performance of the contract concluded with you or in order to take steps prior to entering into a contract, insofar as this is necessary (Art 6 para 1 lit b GDPR), and/or
- the necessity to comply with legal obligations to which we are subject (Art 6 para 1 lit c GDRP), and/or your express consent (Art 6 para 1 lit a GDPR).
3. Transfer of your personal data
If necessary for the above-mentioned purposes, we will transfer your personal data to the following categories of recipients:
- QPS Holdings, LLC and corporations that belong to our group of companies;
- Authorities: tax authorities, various authorities;
- Funding agencies: FFG and SFG funding agency, EU funding body/EU portals, AWS, AMS;
- Clients, sponsors, business partners;
- Insurance institutions (e.g., AUVA), labor inspectorate;
- Auditors;
- Courts, legal representatives;
- Chartered public accountants, tax consultants;
- Banks and other service providers for the handling of monetary transactions;
- Media editorial offices;
- Travel service providers;
- Cloud Services (e.g., Microsoft Cloud Services, etc.);
- Microsoft (MS Teams);
- Rhenus Office Systems Austria GmbH (storage/archiving).
Some of the recipients mentioned above are located or process your personal data outside your country. The level of data protection in other countries may not be the same as in your country. However, we only transfer your personal data to countries for which the EU Commission has decided they have an adequate level of data protection, or we take measures to ensure that all recipients have an adequate level of data protection. For this purpose, we conclude, for example, Standard Contractual Clauses as amended. These are available upon request (see Point 6 for contact details below).
4. Storage Duration
We store your personal data in any case (i) for the duration of the contract as well as (ii) as long as statutory and contractual retention obligations exist or (iii) as long as any legal claims have not yet become time-barred, for the assertion of which or the defense against of which the personal data is required.
5. Your rights in connection with personal data
- request confirmation as to whether or not your personal data is being processed by us and to receive copies of any such data (Art 15 GDPR),
- request the rectification or erasure of your personal data (Art 16 and Art 17 GDPR),
- request us to restrict the processing of your personal data (Art 18 GDPR),
- object to the processing of your personal data (Art 21 GDPR),
- request data portability (Art 20 GDPR), and
- lodge a complaint with the data protection authority (Art 77 GDPR).
6. Our contact details
If you have any questions or concerns about the processing of your personal data, please contact us:
QPS Clinical Services GmbH
Brückenkopfgasse 1, Top 4 und Top 5
8020 Graz
By mail to the attention of Isabella Reicht
Via email to dataprotection.austria@qps.com
Grambach, May 8, 2024
