DATA PROTECTION STATEMENT

We are very pleased about your interest in our company. Data protection has a particularly high priority for the management of Dradura Group GmbH. The use of the web pages of Dradura Group GmbH is possible without providing any personal data as a matter of principle. If an affected person would like to make use of particular services provided by our company via our website, however, it may be necessary to process personal data. If it is necessary to process personal data and if there is no legal basis for such processing, we will obtain the consent of the affected person on an individual basis.

Personal data, for example, name, address, email address or telephone number of an affected person is processed in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection provisions that apply to us, including the Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).

Our company would like to use this data protection statement to inform the public about the nature, scope and purpose of the personal data processed by us. Furthermore, this data protection statement will advise affected persons about the rights to which they are entitled.

Dradura Group GmbH has taken comprehensive technical, organizational and contractual measures to ensure that personal data obtained via this website is protected as seamlessly as possible. Nevertheless, internet-based data transmissions can feature security gaps  as a matter of principle, meaning that absolute protection cannot be ensured. For this reason, every affected person is also free to transfer personal data to us in alternative ways, for example over the telephone.

1. Explanation of the terms used

Our data protection statement is intended to be easy to read and understand for both the public and our customers and business partners. In order to ensure this, we would like to explain the terms used beforehand.
 

Affected person

Any identified or identifiable individual, whose personal data is processed, is an affected person.

Personal data

This is all information relating to an affected person. For example name, identification numbers, location details, online identification or one or more attributes that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this individual.
 

Processing

Processing is any procedure carried out with or without the help of automated processes in connection with personal data: collecting, recording, sorting, changing, reading, using, erasing or deleting. As is being linked to other data, forwarded or provided internally or externally.

Person responsible

The person responsible for processing is the individual or legal entity, authority, institution or other body, which decides on its own or together with others about the purposes and means of processing personal data.
 

Restriction of processing

Marking saved personal data with the aim of restricting its future processing.

Profiling

Any kind of automated processing of personal data in order to analyze or predict personal aspects relating to an individual. For example, work performance, economic situation, health, personal preferences, interests, political opinions, sexual orientation, religion, reliability, conduct and whereabouts.

 

Pseudonymization

Processing personal data in a way in which personal data can no longer be attributed to an affected person without drawing on additional information is called pseudonymization. This requires, however, that the additional information is kept separately and is subject to technical and organizational measures, which ensure that the personal data is not assigned to an identified or identifiable individual.

 

Anonymization

Anonymization is processing personal data in a way in which personal data can no longer be attributed to an affected person.
 

Processor

A processor is an individual or legal entity, authority, institution or other body that processes personal data on order.
 

Third party

A third party is an individual or legal entity, authority, institution or body other than the affected person, the person responsible, the processor and the persons who are allowed under the direct authority of the controller or processor to process the personal data.
 

Consent

Consent is any declaration of intention given voluntarily for the particular case in an informed and unambiguous way by the affected person in the form of a statement or an otherwise clear, confirming action, with which the affected person indicates that he or she agrees to the processing of the personal data concerning him or her.


2. Person responsible for data processing

Dradura Group GmbH

Talstrasse 2

67317 Altleiningen

Telephone: +49 (0) 6356 / 966-0 

Email: postmaster@dradura.com
 

3. Data protection officer/coordinator

Any affected person can get directly in touch with our data protection officer if they have any questions and ideas about data protection.
 

Data protection officer:

Claus Bauer

Telefon: +49(621) / 43028454

E-Mail: claus.bauer@derdat.de

 

4. Recording general data and information

The web pages of Dradura Group GmbH record a series of general data and information every time they are accessed. This general data and information is saved in the server's log files.
 

The following can be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website, from which an accessing system comes to our website, (4) the sub-websites, which are directed to our website via an accessing system, (5) the date and time that the website is accessed, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information.
 

When it comes to using this general data and information, Dradura Group GmbH does not draw any conclusions about the affected person. Instead, this information is required to (1) correctly deliver the contents of our website, (2) optimize the content of our website as well as the advertising for it, (3) ensure the continuous functionality of our information technology systems and the technology of our website and (4) avert any danger in case our information technology systems are attacked and to provide the law enforcement authorities with the information necessary to make a prosecution in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by Dradura Group GmbH statistically on the one hand and furthermore with the aim of increasing data protection and data security at our company, in order to ultimately ensure an optimal protection level for the personal data processed by us. The anonymous data on the server log files is saved separately from all personal data given by an affected person.


5. Contact via a website

Due to legal requirements, the website of Dradura Holding GmbH contains information that enables a fast way of getting in contact with our company electronically as well as direct communication with us; this involves a general email address. If an affected person contacts the body responsible for processing by email or via a contact form, the personal data sent by the affected person is automatically saved. Such personal data sent to use by an affected person on a voluntary basis is saved for the purposes of processing the inquiry, getting in contact with the affected person or in case of follow-up questions and deleted once the inquiry has been processed.


6. Legal basis for processing

Art. 6 a of the GDPR is used by Dradura Group GmbH as the legal basis for processing procedures, during which we obtain consent for a particular processing purpose. 
 

If the processing of personal data is necessary to fulfil a contract with the affected person, for example to deliver goods or to provide any other service or return service, then processing is based on Art. 6 b of the GDPR.
 

The same applies to carrying out pre-contractual measures, for instance in case of inquiries about our products or services. In order to fulfil legal obligations such as tax responsibilities, processing is based on Art. 6 c of the GDPR.
 

Art. 6 f of the GDPR acts as the basis for processing procedures to protect a legitimate interest of our company or a third party, as long as the interests, fundamental rights and freedoms of the person affected do not prevail. Such processing procedures are particularly permitted to us because they were specially mentioned by the European legislator. In this respect it took the view that a legitimate interest could be assumed if the affected person is a customer of the person responsible (Recital 47 Clause 2 of the GDPR).


7. Erasing and blocking personal data

As a matter of principle, Dradura Group GmbH only processes and saves personal data of the affected person for the period necessary to achieve the purpose of saving it. Something different applies in case we are obliged, due to regulations under tax or commercial law, to keep personal data or to document processing procedures in this respect. If the purpose for saving data lapses or a retention period prescribed by the legislator expires, the personal data is routinely blocked or erased according to the legal requirements, taking into account the available technology and the economic appropriateness.


8. Rights of the affected person

a. Right to information
 

Every person affected by the processing of personal data has the right to receive information free of charge and at any time about the personal data saved by us regarding its person. Also about
 

• the purposes of processing

• the categories of personal data that are processed

• the recipients to whom the personal data has been disclosed or is still being disclosed, particularly in case of recipients in third countries or at international organizations

• the planned period for which the personal data is saved if possible, or, if this is not possible, the criteria for determining this period
 

• the existence of a right of appeal at a regulatory authority

• all the available information about the origin of the data, if this is not collected from the affected person

• the existence of automated decision-making including profiling according to Article 22 Para. 1 and 4 of the GDPR and - at least in these cases - meaningful information about the involved logic as well as scope and the intended effects of such processing for the affected person.
 

Furthermore, the affected person is entitled to information as to whether personal data has been transmitted to a third country or an international organization. If this is the case, then the affected person also has the right to receive information about the appropriate guarantees in connection with the transmission.
 

b. Right to rectification
 

Every affected person has the right to demand that incorrect or incomplete personal data concerning him or her is rectified without delay.
 

c. Right to restriction of processing
 

Every affected person has the right to demand that processing is restricted if one of the following conditions applies:
 

• The accuracy of the personal data is contested by the affected person, for a period enabling the person responsible to verify the accuracy of the personal data.

• The processing is unlawful and the affected person opposes the erasure of the personal data and requests the restriction of its use instead.
 

• The person responsible no longer needs the personal data for the purposes of the processing, but they are required by the affected person for the establishment, exercise or defence of legal claims.

• The person affected has objected to processing and it has not yet been established whether the legitimate reasons of the person responsible outweigh those of the affected person.
 

d. Right to data portability
 

Every affected person has the right to receive the personal data concerning him or her from us in a structured, commonly used and machine-readable format. The person also has the right to transmit this data to another person responsible without hindrance from us, as long as the processing is based on consent pursuant to Art. 6 Para. 1 a of the GDPR or Art. 9 Para. 2 a of the GDPR or on a contract pursuant to Art. 6 Para. 1 b of the GDPR and processing is carried out by automated means. This shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been transferred to the person responsible.

The affected person, when exercising his or her right to data portability pursuant to Art. 20 Para. 1 of the GDPR, may ask for the personal data to be transmitted directly from us to another person responsible, if this is technically feasible and the rights and freedoms of other persons are not impaired by this.
 

e. Right to object
 

Every affected person has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her, which is based on Art. 6 Para. 1 e or f of the GDPR. This also applies to profiling based on these provisions.
 

Dradura Group GmbH will no longer process the personal data in case of objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the affected person, or if the processing is used to establish, exercise or defend legal claims.
 

If Dradura Group GmbH processes personal data for direct marketing purposes, then the affected person has the right to object at any time to processing of personal data for the purpose of such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the affected person objects to processing for direct marketing purposes, then we shall no longer process the personal data for these purposes.
 

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the affected person is also free to exercise his or her right to object by automated means using technical specifications.
 

f. Right to withdraw consent
 

Every affected person has the right to withdraw consent given to process personal data at any time.
 

g. Right to erasure (right to be forgotten)
 

Every affected person has the right to the personal data concerning him or her being erased without undue delay, as long as further processing is not necessary. Above all when one of the following reasons applies:


• The personal data was collected or otherwise processed for purposes for which it is no longer necessary.

• The affected person withdraws consent and there is no other legal basis for the processing.

• The affected person objects to the processing and there are no overriding legitimate grounds for the processing.

• The personal data has been unlawfully processed.

• The personal data has to be erased for compliance with a legal obligation under Union law or the law of the member states to which the controller is subject.
 

Where Dradura Group GmbH has made the personal data public and we are obliged to erase the personal data, then we shall, taking account of available technology and the cost of implementation, take appropriate and reasonable measures to inform third parties, which have processed the published personal data, that a request has been made to erase this personal data.

9. Data protection in case of applications and in the application process

We collect and process the personal data of applicants for the purpose of processing the application procedure or a pre-contractual activity (initiation of an employment relationship). Processing may also take place electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail or via a web form on the website. When an application is submitted via our web form, we collect personal data. This includes, in particular, your contact details (such as first name, surname, name affixes, private address, (mobile and telephone number, e-mail address) as well as other data provided by you regarding your career (e.g. curriculum vitae, qualifications and degrees, professional experience) and your person (e.g. covering letter, personal interests). This may also include special categories of personal data (e.g. information on a severe disability).

Only persons/departments (e.g. Human Resources) who absolutely need them to carry out the application process or to fulfil our legal obligations have access to your personal data. If necessary, your application will be forwarded to the responsible person for processing. Under no circumstances will your personal data be passed on to third parties without authorisation.

In the context of application management, we use software and services provided by ComvaHRo GmbH, Bretonischer Ring 16, 85630 Grasbrunn, Germany, as an order processor. ComvaHRo GmbH is contractually obliged to comply with the provisions of data protection law.

You can view the data protection declaration of ComvaHRo GmbH at the following address: https://comvahro.de/datenschutzvereinbarungen/.

As a rule, your personal data is collected directly from you as part of the application process and is encrypted during electronic transmission.

If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude a contract with the applicant, the application documents are automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests on our part oppose deletion.

The legal basis for the processing of your data is your consent Art. 6 para. 1 p. 1 lit. a) GDPR  in conjunction with Art. 88 GDPR .

10. Links to websites of other providers

Our web pages may contain links to websites of other providers, to which this data protection statement does not extend. If the collection, processing or utilization of personal data is connected with the use of websites operated by other providers, please take note of the data protection information issued by the respective providers.


11. Change to the data protection statement

Dradura Group GmbH reserves the right to change this data protection statement in compliance with the applicable data protection regulations. For the use of our website, the version of the data protection statement accessible online at the time of your visit always applies.


12. Special functions of the website

Our site offers you various functions, during the use of which personal data is processed by us. Below we explain what happens to this data:
 

a. Anonymous/pseudonymized use of the website

As a matter of principle you are able to visit our website without giving any personal data. Pseudonymized usage data is not merged with the data pertaining to the bearer of the pseudonym. No pseudonymous usage profiles are created.
 

b. Use of cookies:

On various pages we use cookies to make visits to our website attractive and to enable certain functions to be used. So-called 'cookies' are small text files, which your browser can store on your computer. The process of storing a cookie file is also called "setting a cookie". You can set your browser yourself according to your wishes so that you are advised about the setting of cookies, can decide case by case about accepting them, or accept or decline cookies as a matter of principle. Cookies can be used for different purposes, e.g. to recognize that your PC has already had a link to a website (permanent cookies) or to save web content recently looked at (session cookies). We use cookies to offer you increased user convenience. In order to make use of our convenience functions, we recommend that you allow cookies to be accepted for our web content. If you have disabled cookies in the Internet browser used, not all of the functions of our website may be fully usable in some circumstances.

 

As at: July 2021