State-Specific Privacy Information

California and Other State-specific Privacy Information

These additional disclosures are required under the California Privacy Rights Act by certain state privacy laws, and provide a Notice at Collection under the California Privacy Rights Act:

Categories of personal information collected. The personal information that QSC collects or has collected from consumers in the twelve months prior to the effective date above, fall into the categories described in the What Information Do We Collect About You? section of this Privacy Notice.
Categories of personal information disclosed for a business purpose. The personal information that QSC may have disclosed for a business purpose to the third parties identified in the “What Information Do We Share About You?” section of this Privacy Notice in the twelve months prior to the effective date above fall into the categories described in the What Information Do We Collect About You? section of this Privacy Notice.
Advertising. As explained in the “Advertising and Analytics Services Provided by Others” section in this Privacy Notice, QSC shares and processes personal information for the purposes of targeted advertising as that term is defined under certain state privacy laws. Any personal information QSC may have shared for the purpose of cross-context behavioural advertising, as that term is defined by the California Privacy Rights Act, in the twelve months prior to the effective date above falls into the following categories:
- identifiers such as a cookie, a device identifier, or a code derived from applying irreversible cryptography to other information like an email address; we do not share your name or other information that directly identifies you with ad companies.
- internet or other electronic network activity information, such as whether you downloaded an app or other measures of ad effectiveness; for example, if you have already downloaded one of our apps, we will share an advertising identifier and data about that event so that you will not be served an ad to download the app again.
- inference data; while we do not share your specific shopping actions like purchases, product views, or searches with ad companies, we may share an advertising identifier and an estimate of the value of the ads they show you on our behalf so they can serve you with more effective QSC ads.

The categories of third parties with whom QSC may share personal information for the purpose of cross-context behavioural advertising are identified in the “What information do we share about you?” and “Advertising and Analytics Services Provided by Others” sections of this Privacy Notice.

Children and Teens. As stated in this Privacy Notice QSC does not allow individuals under the age of 18 to use this website or QSC Services.
No sale of personal information. In the twelve months prior to the effective date of this disclosure, QSC has not sold any personal information of consumers, as those terms are defined under the California Privacy Rights Act.
De-identified Data Disclosure. QSC may use de-identified data in some instances. QSC either maintains such data without attempting to re-identify it or treats such data as personal information subject to applicable law.
California Privacy Rights Act Sensitive Personal Information Disclosure. The categories of data that QSC collects and discloses for a business purpose include “sensitive personal information” as defined under the California Privacy Rights Act. QSC does not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.
California Privacy Rights Act Retention Disclosure. We retain your personal information as set forth in the How Long Do We Retain Your Personal Information? section of this Privacy Notice.
California Privacy Rights Act Non-discrimination Statement. QSC will not discriminate against any consumer for exercising their rights under the California Privacy Rights Act.
Colorado Privacy Act and Oregon Consumer Privacy Act Profiling Disclosure. QSC does not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act or the Oregon Consumer Privacy Act.
Oregon Consumer Privacy Act Controller Entity Disclosure. The controller entities that are subject to this Privacy Notice and this Disclosure include QSC, LLC.
Consumer Privacy Rights. You have certain choices regarding our use and disclosure of personal information about you, as described below. To exercise any of these rights please email our team at privacy@qsc.com.
- Access: You have the right to request, twice in a 12-month period, that we disclose to you the personal information related to you we have collected during the past 12 months. This may include:
  - The categories and specific pieces of personal information we have collected about you
  - The categories of sources from which we collected the personal information
  - The business or commercial purpose for which we collected or sold the personal information
  - The categories of third parties with whom we shared the personal information
  - The categories of personal information about you that we sold or disclosed for a business purpose, and the categories of third parties to whom we sold or disclosed that information for a business purpose
- Correction: You have the right to request that we correct certain personal information we have collected, considering the nature of the personal information and the purposes of the processing of the personal information. If you make a correction request, we may correct or instead delete information as allowed by law.
- Deletion: You have the right to request that we delete certain personal information we have collected from you.
- Opt-Out of Sharing: You have the right to opt-out of the sharing of your personal information for cross-context behavioural advertising (i.e., targeted advertising).
- Limit use of Sensitive Information: You have the right to limit the use and disclosure of sensitive information collected about you.
- Opt-Out of Sale: You have the right to opt-out of the sale of personal information about you.
- Object to use of AI Tools: You have the right to object to the use of AI Tools with your personal information where the use of such AI Tools with your personal information impacts your rights or otherwise has a significant effect on you.
Appeals. You may have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a data request. Depending on your data choices, certain services may be limited or unavailable.
Reports. You may request information on the number and processing of the following types of requests to QSC by delivering the request via privacy@qsc.com: Access Requests; Deletion Requests; Opt-Out of Sharing Requests; Limitation on Use Requests; Objections to the use of AI Tools; and Correction Requests.

European Union & United Kingdom:

What is the legal basis for our data processing in the European Union and United Kingdom?

The legal basis for our data processing is in many cases the initiation or fulfillment of a contract according to Art. 6 (1) b GDPR or UK GDPR. If we ask for your consent, the legal basis is Art. 6 (1) GDPR or UK GDPR. Some processing is done for QSC’s legitimate interest according to Art. 6 (1) f GDPR or UK GDPR. Then we consider that our economic or technical interest outweighs the interest of the data subjects. Data subjects can object to this processing. For this purpose, they can contact us as indicated in the “Contact Us” section below.

Notice of transfer of personal data from Europe to the United States

The European Union General Data Protection Regulation (“GDPR”) and other data privacy laws seek to protect and enhance the rights of data subjects. These rights cover the safeguarding of personal data, protection against its unlawful processing, and its movement within and outside of the European Union. In the United Kingdom, the Data Protection Act 2018 and UK General Data Protection Regulation (“UK GDPR”) serve similar purposes.

The data of individuals from the European Union, the EEA (European Economic Area), the United Kingdom and Switzerland is processed by QSC EMEA GmbH, Germany or other European subsidiaries. The U.S. parent company, QSC, LLC, is the processor for all IT services. User data is processed outside the European Union in a so-called third country. This could result in risks for the data subjects, for example because it could make it more difficult to enforce their rights. A contract for data processing, the EU Standard Contractual Clauses, type controller to processor, has been concluded with QSC, LLC. Data processing operations will be reviewed and, if necessary, safeguarded by organizational and technical measures.

Some data may also be transferred to the U.S. parent company as a controller for other purposes. We will always inform you about this at the time of data collection and, if necessary, obtain your consent.

If QSC, LLC commissions further processors with the data processing, it will ensure that the conditions of the EU standard contractual clauses are also met. The legal basis for the transfer of data is our legitimate interest or your consent pursuant to Art. 6 (1) f GDPR or UK GDPR.

Saudi Arabia

What is the legal basis for our data processing in the Kingdom of Saudi Arabia?

The legal basis for our data processing is in many cases the initiation or fulfillment of a contract. If we ask for your consent, the legal basis is Art. 5 of the Personal Data Protection Law (“PDPL”). Some processing is done for QSC’s legitimate interests, according to Art. 6 of the PDPL. Data subjects can object to this processing. For this purpose, they can contact us as indicated in the “Contact Us” section below.

Notice of Transfer of Personal Data from the Kingdom of Saudi Arabia to Locations Outside the Kingdom of Saudi Arabia

The PDPL and other data privacy laws seek to protect and enhance the rights of data subjects. These rights cover the safeguarding of personal data, protection against its unlawful processing, and its movement within and outside of the Kingdom of Saudi Arabia.

What are your rights if you are in the Kingdom of Saudi Arabia?

Under the PDPL and its implementing regulations (the “Regulations”):

the right to be informed, which includes informing you of the legal basis and the purpose of collecting your Personal Data;
the right to access your Personal Data held by us, in accordance with the rules and procedures set out in the Regulations, and without prejudice to the provisions of Article 9 of the PDPL;
the right to request correcting, completing, or updating of your Personal Data held by us.
the right to request the Destruction of their Personal Data held by us, without prejudice to the provisions of Article 18 of the PDPL.
the right to obtain your Personal Data in a legible and clear format, including the right to request the Transfer of your Personal Data to another Controller if this is technically possible, in accordance with the rules and conditions set out in the Regulations.
other rights provided for in the PDPL, as set out in the Regulations.

Further to the above, QSC may not receive information from other third-party sources and combine it with information we collect through the Services, unless personal data is publicly available, or collected from a publicly available source or personal data will not be recorded or stored in a form that makes it possible to directly or indirectly identify you.

Mexico

Notice of Transfer of Personal Data From Mexico to the US Pursuant to Local Legislation

Pursuant to local legislation in Mexico, QSC hereby provides notice that we may process, store and transfer your personal data in and to the United States. QSC endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with QSC and the practices described in this Privacy Policy. We will ensure that there is a proper legal agreement that covers the data transfer pursuant to local legislation in Mexico.

What are your rights if you are in Europe, Mexico or the United Arab Emirates?

You have the following rights at any point that QSC is in possession of or processing your personal data if you are in the European Union, EEA, the United Kingdom, Switzerland, the United Arab Emirates or Mexico. To exercise any of these rights, please contact us as indicated in the “Contact Us” section below.

Right to Access

You have the right to request a copy of the information that we collect about you. If you wish to confirm that QSC is processing your personal data, or to have access to the personal data that QSC may have about you, please contact us as indicated in the “Contact Us” section below.

Right to Rectification

You have the right to correct data that we collect about you that is inaccurate or incomplete. If you have a question or cannot find the answer, please contact us as indicated in the “Contact Us” section below.

Right to Erasure (Right to be forgotten)

QSC strives to only process and retain your data for as long as we need to. You can request that the data we collect about you to be erased from our records. In certain cases, we may still have lawful grounds to process your personal data. For more information on retention periods, see the section in this Privacy Policy called “For how long do we retain your data?” If you have a question or cannot find the answer, please contact us as indicated in the “Contact Us” section below.

Right to Restriction of Processing

If the requirements are met, you have the right to restrict the processing of your data. If you feel data about you that we hold is inaccurate, or you believe we should not be processing your data, please contact us as indicated in the “Contact Us” section below to discuss your rights. In certain circumstances, you have the right to ask us to restrict processing.

Right of Portability

You have the right to have data that we collect about you transferred to another organization. QSC ensures that you can take your data with you by allowing you to download your data. In order to do this, please contact us as indicated in the “Contact Us” section below to discuss your rights.

Right to Object

You have the right to object to certain types of processing such as direct marketing. For more information or to exercise this right, please contact us as indicated in the “Contact Us” section below. If this relates to an automated decision performed on you (this means with no human involvement), please let us know and we will review your request.

Right to Object to Automated Processing or Automated Decision-Making including Profiling

You have the right to object to automated processing (including profiling), or automated decision-making: where the decision impacts your rights or otherwise has a significant effect on you. For more information or to exercise this right, please contact us as indicated in the “Contact Us” section below. If this relates to an automated decision performed on you using AI Tools, please let us know. We will review your request.

Right to Withdraw Consent

If we rely on your consent to process your personal data, you have the right to withdraw your consent at any time by contacting us as indicated in the “Contact Us” section below. In addition, you may automatically withdraw consent (“opt out”) to receive promotional communications from QSC by following the opt-out instructions contained within those communications. If you opt out, we may still send you non-promotional communications, such as those about your account or our on-going business relations.

Opt Out of Marketing Messages:

If you no longer want to receive marketing messages from QSC, you can choose to opt out at any time. If you have previously opted in to receive personalized content based on how and where you use our Services, you can also opt out at any time.

The easiest way to opt out is by contacting us as indicated in the “Contact Us” section below.

Please note: You may still receive marketing messages for a short period after opting out while we update our records.

You may have received marketing information from QSC even if you are not a customer or have never had contact with us. This is a result of third party marketing lists, which QSC may acquire from time to time, stating that you have given permission to be contacted by other organizations. If you have registered with us to opt out of marketing from QSC, you should not receive such communications. If you still do, we ask that you let us know immediately by contacting us as indicated in the “Contact Us” section below. This will only stop marketing from us and not stop the third parties from sharing your data unless you contact them directly.

To Manage Cookies and Understand More About What They Are: please see our cookies page.

Right to Object to Cookies

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject essential cookies, this could affect the availability and functionality of the Services.

Right to Review

In the event that QSC refuses your request under your Right of Access, we will provide you with a reason. You have the right to complain as outlined below.

Right to Lodge Complaints

If you have any complaints regarding our privacy practices as a data controller, you have the right to lodge a complaint at any time to your local Supervisory Authority and QSC’s data protection representatives. Before contacting your local Supervisory Authority, however, we would appreciate the opportunity to address your concerns first and our data protection representatives can be reached by contacting us as indicated in the “Contact Us” section below.

How to lodge a complaint

If you want to contact us about any of your rights or complain about how we use your information, please contact us as indicated in the “Contact Us” section below and a member of our dedicated team will respond to you. We will do our best to help.

Canada

Notice of Transfer and Your Rights if You Are in Canada

Notice of Transfer

We may process, store and transfer your personal data in and to the United States. QSC endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with QSC and the practices described in this Privacy Policy. We will ensure that there is a proper legal agreement that covers the data transfer. When your information is transferred outside of Canada, the governments, courts, law enforcement, or regulatory agencies of that country may be able to obtain access to your personal data.

Right to request access

Right To Correction

You may have the right to correct personal data that we collect about you that is inaccurate or incomplete. If you would like to make such a request, please contact us as indicated in the “Contact Us” section below.

Right to Withdraw Consent

If we rely on your consent to process your personal data, you may have the right to withdraw your consent at any time by contacting us as indicated in the “Contact Us” section below. Please note that if you withdraw your consent we may not be able to provide you with a particular Product or Service. We will explain the impact to you at the time you are making your decision. In addition, you may automatically withdraw consent (“opt out”) of receiving promotional communications from QSC by following the opt-out instructions contained within those communications. If you opt out, we may still send you non-promotional communications, such as those about your account or our on-going business relations, to the extent permitted by applicable law.

Terms Regarding Requests

We may request specific information from you to help us confirm your identity and your rights in connection with the above requests. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal data that we hold about you, or we may have destroyed, erased, or made your personal data anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal data, we will inform you of the reasons, subject to any legal or regulatory restrictions.

Australia & New Zealand

Notice of Disclosure and Your Rights if You Are in Australia or New Zealand

Under the Australian Privacy Act 1988 (Cth) and Spam Act 2003 (Cth), the New Zealand Privacy Act 1993 (NZ), and Unsolicited Electronic Messages Act 2007 (NZ), you have the following rights at any point that QSC is in possession of or processing your personal data. To exercise any of these rights, please contact us as indicated in the “Contact Us” section below.

Opt Out of Marketing Messages

You may opt out of these messages at any time using the “unsubscribe” function contained in our direct marketing messages, or by contacting us as indicated in the “Contact Us” section below.

Please note: You may still receive marketing messages for a short period after opting out while we update our records.

Notice of Transfer

We may process, store and transfer your personal data in and to the United States. QSC endeavors to apply reasonable safeguards to protect the privacy and security of your personal data and to use it only in accordance with your relationship with QSC and the practices described in this Privacy Policy. We will ensure that there is a proper legal agreement that covers the data transfer pursuant to the requirements of the Australian and New Zealand Privacy Acts.

Right to Access

You may have the right to request access to the personal data that we collect about you. If you wish to confirm that QSC is processing your personal data, or to have access to the personal data that QSC may have about you, please contact us as indicated in the “Contact Us” section below. QSC will endeavor to respond to your request within a reasonable time frame. QSC may charge a reasonable fee for providing such access.

Right to Correction

You may have the right to correct personal data that we collect about you that is inaccurate, out of date, incomplete, irrelevant or misleading. If you would like to make such a request, please contact us as indicated in the “Contact Us” section below. QSC will endeavor to respond to your request within a reasonable time frame.

Right to Review

QSC may refuse a request under your Right of Access or Right to Correction, or may provide the information in a manner other than requested. In the event that QSC refuses your request, we will provide you with a reason the request was denied. You have the right to complain as outlined below.

Right to Lodge Complaints If you have any complaints regarding our privacy practices, you have the right to lodge a complaint with QSC’s data protection representatives using the details in the “Contact Us” section below. A member of our dedicated team will respond to your concern within 30 days of receiving it.

If QSC has been unable to assist you with your concern, you may lodge a formal complaint with your local Supervisory Authority. For Australian consumers, this is the Office of the Australian Information Commissioner. For New Zealand consumers, this is the Office of the Privacy Commissioner.

Singapore

What are your rights if you are in Singapore?

Notwithstanding anything herein, if you are in Singapore, you have the following rights under the Personal Data Protection Act of Singapore if QSC uses, collects or discloses your personal data.

Transfer of personal data outside Singapore

Where your personal data is transferred to a recipient outside Singapore, we will take reasonable steps to protect such personal data by ensuring that such recipient is either in a jurisdiction which has comparable data protection laws to Singapore, or is contractually bound to protect such personal data to a comparable standard.

Consent

We will not collect, use or disclose your personal data without your consent unless otherwise authorized under any applicable laws. You are deemed to have consented to us collecting, using or disclosing your personal data where:

you access or use our website, Products or Services;
you voluntarily provide your personal data to us for specified purposes, and where it is reasonable that you would voluntarily provide such personal data to us;
such collection, use or disclosure of your personal data is reasonably necessary for the conclusion or performance of a contract between you and us; or
you have not opted out of us collecting, using or disclosing your personal data for specified purposes which we have notified to you.

Right to withdraw consent

The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you. You may withdraw consent and request us to stop collecting, using and/or disclosing your personal data for any or all specified purposes notified to you by contacting us as indicated in the “Contact Us” section below.

Upon receipt of your written request to withdraw your consent, we may require 30 days (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same.

Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our Products or Services to you and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please contact us as indicated in the “Contact Us” section below.

Please note that withdrawing your consent does not affect our right to continue to collect, use or disclose your personal data where such collection, use or disclosure without consent is nevertheless permitted or required under any applicable laws.

Retention of personal data

We may retain your personal data for as long as it is necessary to fulfil the purpose(s) for which it was collected, or as required or permitted by applicable law. We will cease to retain your personal data, or remove the means by which your personal data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose(s) for which such personal data was collected, and is no longer necessary for legal or business purposes.

Right to access and correct personal data

If you wish to make: (i) an access request for access to a copy of your personal data which we obtained from you or information about the ways in which we use or disclose your personal data; or (ii) a correction request to correct or update your personal data which we obtained from you, you may contact us as indicated in the “Contact Us” section below.

We reserve the right to charge a reasonable fee for handling or processing an access request, where applicable. If so, we will inform you of the fee before processing your request. Before we accede to your request, we may also need to verify the identity of the relevant individual making such request by checking his or her identification documents.

United Arab Emirates (UAE)

Notice of Transfer of Personal Data Outside of the UAE

When you access or use our Services this will include transferring personal data outside of the UAE and processing data outside of the UAE, especially transfer to and processing in Germany and the United States.

Also, when we share information about you as described in section ‘What Information do we share about you?’ this will include transferring personal data outside of the UAE and processing data outside of the UAE. Data processing activities may be undertaken in the jurisdictions where QSC is based, especially the United States and Germany, but also in other countries where third parties with whom we share data are operating.

Many of these countries will have legislations for protection of personal data that is equivalent to the protection of your data in the UAE, for example the GDPR applicable for EU countries.

We may, however, also transfer personal data to countries that do not have legislation offering equivalent protection of personal data to the law of the UAE if the transfer or data processing is necessary in connection with contracts entered into with you or with another party for your benefit, or in connection with the performance of the Services.

Our general security measures are outlined in the section ‘Security’. In addition, for any transfer of personal data outside the UAE we will implement appropriate protection measures, which may include entering into data processing agreement or using the EU Standard Contractual Clauses. The processing operations will be reviewed and, if necessary, additionally safeguarded by further organizational and technical measures. If necessary, we will also obtain your specific consent.

When do you apply for a job?

When you apply to QSC, we process the following personal data about you: first name, last name, date of birth, gender, e-mail address, postal address, telephone number, national identity card or passport details, references, recommendations and data from interviews or assessments. The legal basis for this processing is the initiation or fulfillment of a contract – for the European Union and United Kingdom according to the provision in Art. 6 (1) b GDPR and UK GDPR, respectively.

As part of the application process, your data will be entered into our systems and forwarded to the companies, branches or departments for which you have applied. We do not share your data with third parties.

If you get a job with us, we transfer your data to our HR systems. If your application is unsuccessful, we delete your data after six months, unless you have given us permission to retain your data in order to offer you another position in our company. Then we store the data for a maximum of two years.

For your rights in relation to the processing of your data, especially if you are from Mexico or Europe, please see the section above. For questions or complaints, please contact QSC as indicated in the ”Contact Us” section below.