The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can be used to personally identify you. Detailed information on data protection can be found in the privacy policy set out below.
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the Controller” in this privacy policy.
Some data is collected when you provide it to us. This may include, for example, data that you enter into a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This mainly includes technical data, such as your internet browser, operating system or the time at which the page was accessed. This data is collected automatically as soon as you enter this website.
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.
You have the right to obtain information, free of charge and at any time, about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You may contact us at any time regarding this or any other questions relating to data protection.
When you visit this website, your browsing behaviour may be statistically evaluated. This is mainly carried out using analytics programs.
Detailed information about these analytics programs can be found in the following privacy policy.
We host the content of our website with the following provider:
The provider is RAIDBOXES GmbH, Hafenstr. 32, 48151 Münster, Germany, hereinafter referred to as “RAIDBOXES”. When you visit our website, RAIDBOXES collects various log files, including your IP address.
Further details can be found in RAIDBOXES’ privacy policy. https://raidboxes.io/legal/privacy/.
RAIDBOXES is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, for example through device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
We have concluded a data processing agreement for the use of the service specified above. This is a contract required under data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect, what we use it for, and how and for what purpose the processing takes place.
Please note that data transmission over the internet, for example when communicating by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
The controller responsible for data processing on this website is:
Quesadilla Kaiserslautern GmbH
Am Altenhof 8
67655 Kaiserslautern
Telephone: +491715539519
Email: kaiserslautern@quesadilla.eu
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses.
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data, such as retention periods under tax or commercial law. In the latter case, the data will be erased once these reasons no longer apply.
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR where special categories of data within the meaning of Art. 9(1) GDPR are processed. Where you have expressly consented to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, data processing is additionally carried out on the basis of Section 25(1) TDDDG. Consent may be withdrawn at any time. Where your data is required for the performance of a contract or in order to take steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. Where your data is required to comply with a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. Information on the legal basis applicable in each individual case is provided in the following sections of this privacy policy.
As part of our business activities, we work with various external organisations. In some cases, it is necessary to transfer personal data to these external organisations. We only disclose personal data to external organisations where this is necessary for the performance of a contract, where we are legally obliged to do so, for example by disclosing data to tax authorities, where we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or where another legal basis permits the disclosure. When using processors, we only disclose our customers’ personal data on the basis of a valid data processing agreement. In the case of joint processing, an agreement on joint processing is concluded.
Many data processing operations are only possible with your express consent. You may withdraw consent that you have already given at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR UNLESS THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. THIS IS AN OBJECTION PURSUANT TO ART. 21(1) GDPR.
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES. THIS IS AN OBJECTION PURSUANT TO ART. 21(2) GDPR.
In the event of an infringement of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
You have the right to receive data that we process automatically on the basis of your consent or in the performance of a contract in a commonly used, machine-readable format, or to have this data transmitted to a third party. If you request the direct transfer of the data to another controller, this will only be carried out where technically feasible.
Within the framework of the applicable legal provisions, you have the right at any time to obtain information, free of charge, about your stored personal data, its origin and recipients, and the purpose of the data processing. Where applicable, you also have the right to request the rectification or erasure of this data. You may contact us at any time regarding this or any other questions relating to personal data.
You have the right to request that the processing of your personal data be restricted. You may contact us at any time for this purpose. The right to restriction of processing applies in the following cases:
Where you have restricted the processing of your personal data, this data may, apart from storage, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock symbol displayed in your browser.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Our website uses so-called cookies. Cookies are small data packages and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session, known as session cookies, or permanently, known as persistent cookies. Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us, known as first-party cookies, or from third-party companies, known as third-party cookies. Third-party cookies enable certain services provided by third-party companies to be integrated into websites, such as cookies used to process payment services.
Cookies perform various functions. Many cookies are technically necessary because certain website functions would not work without them, such as the shopping basket or the display of videos. Other cookies may be used to analyse user behaviour or for advertising purposes. Cookies that are required to carry out electronic communications, provide certain functions requested by you, such as the shopping basket, or optimise the website, such as cookies used to measure website audiences, are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimised provision of its services. Where consent has been requested for the storage of cookies and comparable recognition technologies, processing is carried out exclusively on the basis of this consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
Cookies, die zur Durchführung des elektronischen Kommunikationsvorgangs, zur Bereitstellung bestimmter, von Ihnen erwünschter Funktionen (z. B. für die Warenkorbfunktion) oder zur Optimierung der Website (z. B. Cookies zur Messung des Webpublikums) erforderlich sind (notwendige Cookies), werden auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO gespeichert, sofern keine andere Rechtsgrundlage angegeben wird. Der Websitebetreiber hat ein berechtigtes Interesse an der Speicherung von notwendigen Cookies zur technisch fehlerfreien und optimierten Bereitstellung seiner Dienste. Sofern eine Einwilligung zur Speicherung von Cookies und vergleichbaren Wiedererkennungstechnologien abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage dieser Einwilligung (Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG); die Einwilligung ist jederzeit widerrufbar.
You can configure your browser to inform you when cookies are being set, allow cookies only in individual cases, reject cookies in certain cases or in general, and automatically delete cookies when the browser is closed. Disabling cookies may restrict the functionality of this website.
Information about the cookies and services used on this website can be found in this privacy policy.
Our website uses Borlabs Cookie consent technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this consent in compliance with data protection law. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany, hereinafter referred to as “Borlabs”.
When you enter our website, a Borlabs cookie is stored in your browser. This cookie stores the consent you have given or the withdrawal of that consent. This data is not disclosed to the provider of Borlabs Cookie.
The collected data will be stored until you ask us to erase it, delete the Borlabs cookie yourself, or until the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details about data processing by Borlabs Cookie can be found in the Borlabs Cookie knowledge base. https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Borlabs Cookie consent technology is used to obtain the consent required by law for the use of cookies. The legal basis is Art. 6(1)(c) GDPR.
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that enables us to integrate tracking or analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies or carry out independent analyses. It is used solely to manage and deploy the tools integrated through it. However, Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States.
Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and straightforward integration and management of various tools on the website. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, for example through device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
The company is certified under the EU-U.S. Data Privacy Framework, or DPF. The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider via the corresponding Data Privacy Framework entry. https://www.dataprivacyframework.gov/participant/5780.
This website uses functions provided by the Google Analytics web analytics service. The provider is Google Ireland Limited, known as “Google”, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, including page views, time spent on the website, operating systems used and the user’s geographical origin. This data is combined under a user ID and assigned to the respective device used by the website visitor.
Google Analytics may also allow us to record your mouse movements, scrolling movements and clicks. Google Analytics also uses various modelling approaches to supplement the collected datasets and uses machine-learning technologies to analyse the data.
Google Analytics uses technologies that enable users to be recognised for the purpose of analysing user behaviour, such as cookies or device fingerprinting. The information collected by Google about your use of this website is generally transferred to a Google server in the United States and stored there.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
The transfer of data to the United States is based on the European Commission’s Standard Contractual Clauses. https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the EU-U.S. Data Privacy Framework, or DPF. The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider via the corresponding Data Privacy Framework entry. https://www.dataprivacyframework.gov/participant/5780.
Google Analytics IP anonymisation is enabled. As a result, your IP address is shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transferred to the United States. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available through Google’s opt-out page. https://tools.google.com/dlpage/gaoptout?hl=de.
Further information on how Google Analytics handles user data can be found in Google’s privacy policy. https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited, known as “Google”, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when users enter certain search terms into Google, known as keyword targeting. Targeted advertisements may also be displayed on the basis of user data held by Google, such as location data and interests, known as audience targeting. As the website operator, we can quantitatively evaluate this data by analysing, for example, which search terms caused our advertisements to be displayed and how many advertisements resulted in corresponding clicks.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
The transfer of data to the United States is based on the European Commission’s Standard Contractual Clauses. https://policies.google.com/privacy/frameworks und https://business.safety.google/controllerterms/.
The company is certified under the EU-U.S. Data Privacy Framework, or DPF. The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider via the corresponding Data Privacy Framework entry. https://www.dataprivacyframework.gov/participant/5780.
This website uses the visitor action pixel provided by Facebook and Meta to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, however, the collected data is also transferred to the United States and other third countries.
This allows the behaviour of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market-research purposes and allows future advertising measures to be optimised.
The collected data is anonymous to us as the operator of this website, and we cannot draw any conclusions about the identity of individual users. However, the data is stored and processed by Facebook, meaning that it may be associated with the respective user profile. Facebook may use the data for its own advertising purposes in accordance with Facebook’s data usage policy.https://de-de.facebook.com/about/privacy/This allows Facebook to display advertisements on Facebook pages and outside Facebook. We, as the website operator, have no control over how this data is used.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
We use the enhanced matching feature within Meta Pixel.
Enhanced matching allows us to transmit different types of data collected from our customers and prospective customers through our website to Meta, formerly Facebook. This data may include place of residence, federal state, postcode, hashed email addresses, names, gender, date of birth or telephone number. Enabling this feature allows us to tailor our Facebook advertising campaigns more precisely to people who are interested in our services. Enhanced matching also improves the attribution of website conversions and expands Custom Audiences.
Where personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing pursuant to Art. 26 GDPR. Joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook. The processing carried out by Facebook after the data has been transmitted is not part of the joint responsibility. Our joint obligations have been set out in a joint processing agreement. https://www.facebook.com/legal/controller_addendumUnder this agreement, we are responsible for providing data protection information when using the Facebook tool and for implementing the tool on our website in compliance with data protection law. Facebook is responsible for the data security of Facebook products. You may exercise your data-subject rights, such as requests for access, concerning data processed by Facebook directly with Facebook. If you exercise your data-subject rights with us, we are obliged to forward your request to Facebook.
The transfer of data to the United States is based on the European Commission’s Standard Contractual Clauses. https://www.facebook.com/legal/EU_data_transfer_addendum und https://de-de.facebook.com/help/566994660333381.
Further information about protecting your privacy can be found in Facebook’s privacy policy. https://de-de.facebook.com/about/privacy/.
You can also disable the “Custom Audiences” remarketing function in the advertising settings section of your Facebook account. https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen You must be logged in to Facebook to do so.
If you do not have a Facebook account, you can disable Facebook’s usage-based advertising through the website of the European Interactive Digital Advertising Alliance. http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified under the EU-U.S. Data Privacy Framework, or DPF. The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider via the corresponding Data Privacy Framework entry. https://www.dataprivacyframework.gov/participant/4452.
This website uses plugins provided by the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages containing a Vimeo video, a connection to Vimeo’s servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo also receives your IP address. This applies even if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to Vimeo’s servers in the United States.
If you are logged in to your Vimeo account, you enable Vimeo to directly associate your browsing behaviour with your personal profile. You can prevent this by logging out of your Vimeo account.
Vimeo uses cookies or comparable recognition technologies, such as device fingerprinting, to recognise website visitors.
Vimeo is used in the interest of presenting our online content in an appealing manner. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, for example through device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
The transfer of data to the United States is based on the European Commission’s Standard Contractual Clauses and, according to Vimeo, on “legitimate business interests”. https://vimeo.com/privacy.
Further information on how Vimeo handles user data can be found in Vimeo’s privacy policy. https://vimeo.com/privacy.
The company is certified under the EU-U.S. Data Privacy Framework, or DPF. The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider via the corresponding Data Privacy Framework entry. https://www.dataprivacyframework.gov/participant/5711.
This website uses so-called Google Fonts provided by Google to ensure the consistent display of fonts. The Google Fonts are installed locally. No connection to Google’s servers is established.
Further information about Google Fonts can be found in the https://developers.google.com/fonts/faq and Google’s privacy policy. https://policies.google.com/privacy?hl=de.
We offer you the opportunity to apply for a position with us, for example by email, by post or using an online application form. The following information explains the scope, purpose and use of the personal data collected from you during the application process. We assure you that your data is collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated as strictly confidential.
If you submit an application to us, we process the associated personal data, such as contact and communication details, application documents and notes taken during interviews, insofar as this is necessary for deciding whether to establish an employment relationship. The legal basis for this is Section 26 BDSG under German law, concerning the initiation of an employment relationship, Art. 6(1)(b) GDPR, concerning general steps prior to entering into a contract, and, where you have given your consent, Art. 6(1)(a) GDPR. Consent may be withdrawn at any time. Within our company, your personal data will only be disclosed to individuals involved in processing your application.
If your application is successful, the data you have submitted will be stored in our data-processing systems on the basis of Section 26 BDSG and Art. 6(1)(b) GDPR for the purpose of carrying out the employment relationship.
If we are unable to offer you a position, you reject an offer of employment or withdraw your application, we reserve the right to retain the data you have submitted for up to six months following the completion of the application process, meaning the rejection or withdrawal of the application, on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. The data will then be erased and physical application documents will be destroyed. The data is retained in particular for evidentiary purposes in the event of a legal dispute. Where it is apparent that the data will still be required after the six-month period has expired, for example because of a pending or anticipated legal dispute, the data will only be erased once the purpose for the extended retention no longer applies.
Data may also be retained for a longer period where you have given corresponding consent pursuant to Art. 6(1)(a) GDPR or where statutory retention obligations prevent its erasure.
