We are very pleased about your interest in our company. Data protection has a particularly high priority for the management of Dradura Holding GmbH. The use of the web pages of Dradura Holding GmbH is possible without providing any personal data as a matter of principle. If an affected person would like to make use of particular services provided by our company via our website, however, it may be necessary to process personal data. If it is necessary to process personal data and if there is no legal basis for such processing, we will obtain the consent of the affected person on an individual basis.
Personal data, for example, name, address, email address or telephone number of an affected person is processed in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection provisions that apply to us, including the Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).
Our company would like to use this data protection statement to inform the public about the nature, scope and purpose of the personal data processed by us. Furthermore, this data protection statement will advise affected persons about the rights to which they are entitled.
Dradura Holding GmbH has taken comprehensive technical, organizational and contractual measures to ensure that personal data obtained via this website is protected as seamlessly as possible. Nevertheless, internet-based data transmissions can feature security gaps as a matter of principle, meaning that absolute protection cannot be ensured. For this reason, every affected person is also free to transfer personal data to us in alternative ways, for example over the telephone.
Our data protection statement is intended to be easy to read and understand for both the public and our customers and business partners. In order to ensure this, we would like to explain the terms used beforehand.
Any identified or identifiable individual, whose personal data is processed, is an affected person.
Personal data
This is all information relating to an affected person. For example name, identification numbers, location details, online identification or one or more attributes that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this individual.
Processing is any procedure carried out with or without the help of automated processes in connection with personal data: collecting, recording, sorting, changing, reading, using, erasing or deleting. As is being linked to other data, forwarded or provided internally or externally.
Person responsible
The person responsible for processing is the individual or legal entity, authority, institution or other body, which decides on its own or together with others about the purposes and means of processing personal data.
Marking saved personal data with the aim of restricting its future processing.
Profiling
Any kind of automated processing of personal data in order to analyze or predict personal aspects relating to an individual. For example, work performance, economic situation, health, personal preferences, interests, political opinions, sexual orientation, religion, reliability, conduct and whereabouts.
Processing personal data in a way in which personal data can no longer be attributed to an affected person without drawing on additional information is called pseudonymization. This requires, however, that the additional information is kept separately and is subject to technical and organizational measures, which ensure that the personal data is not assigned to an identified or identifiable individual.
Anonymization is processing personal data in a way in which personal data can no longer be attributed to an affected person.
A processor is an individual or legal entity, authority, institution or other body that processes personal data on order.
A third party is an individual or legal entity, authority, institution or body other than the affected person, the person responsible, the processor and the persons who are allowed under the direct authority of the controller or processor to process the personal data.
Consent is any declaration of intention given voluntarily for the particular case in an informed and unambiguous way by the affected person in the form of a statement or an otherwise clear, confirming action, with which the affected person indicates that he or she agrees to the processing of the personal data concerning him or her.
Dradura Holding GmbH
Talstrasse 2
67317 Altleiningen
Telephone: +49 (0) 6356 / 966-0
Email: postmaster@dradura.com
Any affected person can get directly in touch with our data protection officer if they have any questions and ideas about data protection.
Data protection officer:
Torsten Adam
Dradura Holding GmbH
Talstrasse 2
67317 Altleiningen
Email: dataprotectionofficer@dradura.com
The web pages of Dradura Holding GmbH record a series of general data and information every time they are accessed. This general data and information is saved in the server's log files.
The following can be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website, from which an accessing system comes to our website, (4) the sub-websites, which are directed to our website via an accessing system, (5) the date and time that the website is accessed, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information.
When it comes to using this general data and information, Dradura Holding GmbH does not draw any conclusions about the affected person. Instead, this information is required to (1) correctly deliver the contents of our website, (2) optimize the content of our website as well as the advertising for it, (3) ensure the continuous functionality of our information technology systems and the technology of our website and (4) avert any danger in case our information technology systems are attacked and to provide the law enforcement authorities with the information necessary to make a prosecution in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by Dradura Holding GmbH statistically on the one hand and furthermore with the aim of increasing data protection and data security at our company, in order to ultimately ensure an optimal protection level for the personal data processed by us. The anonymous data on the server log files is saved separately from all personal data given by an affected person.
Due to legal requirements, the website of Dradura Holding GmbH contains information that enables a fast way of getting in contact with our company electronically as well as direct communication with us; this involves a general email address. If an affected person contacts the body responsible for processing by email or via a contact form, the personal data sent by the affected person is automatically saved. Such personal data sent to use by an affected person on a voluntary basis is saved for the purposes of processing the inquiry, getting in contact with the affected person or in case of follow-up questions and deleted once the inquiry has been processed.
Art. 6 a of the GDPR is used by Dradura Holding GmbH as the legal basis for processing procedures, during which we obtain consent for a particular processing purpose.
If the processing of personal data is necessary to fulfil a contract with the affected person, for example to deliver goods or to provide any other service or return service, then processing is based on Art. 6 b of the GDPR.
The same applies to carrying out pre-contractual measures, for instance in case of inquiries about our products or services. In order to fulfil legal obligations such as tax responsibilities, processing is based on Art. 6 c of the GDPR.
Art. 6 f of the GDPR acts as the basis for processing procedures to protect a legitimate interest of our company or a third party, as long as the interests, fundamental rights and freedoms of the person affected do not prevail. Such processing procedures are particularly permitted to us because they were specially mentioned by the European legislator. In this respect it took the view that a legitimate interest could be assumed if the affected person is a customer of the person responsible (Recital 47 Clause 2 of the GDPR).
As a matter of principle, Dradura Holding GmbH only processes and saves personal data of the affected person for the period necessary to achieve the purpose of saving it. Something different applies in case we are obliged, due to regulations under tax or commercial law, to keep personal data or to document processing procedures in this respect. If the purpose for saving data lapses or a retention period prescribed by the legislator expires, the personal data is routinely blocked or erased according to the legal requirements, taking into account the available technology and the economic appropriateness.
a. Right to information
Every person affected by the processing of personal data has the right to receive information free of charge and at any time about the personal data saved by us regarding its person. Also about
• the purposes of processing
• the categories of personal data that are processed
• the recipients to whom the personal data has been disclosed or is still being disclosed, particularly in case of recipients in third countries or at international organizations
• the planned period for which the personal data is saved if possible, or, if this is not possible, the criteria for determining this period
• the existence of a right of appeal at a regulatory authority
• all the available information about the origin of the data, if this is not collected from the affected person
• the existence of automated decision-making including profiling according to Article 22 Para. 1 and 4 of the GDPR and - at least in these cases - meaningful information about the involved logic as well as scope and the intended effects of such processing for the affected person.
Furthermore, the affected person is entitled to information as to whether personal data has been transmitted to a third country or an international organization. If this is the case, then the affected person also has the right to receive information about the appropriate guarantees in connection with the transmission.
b. Right to rectification
Every affected person has the right to demand that incorrect or incomplete personal data concerning him or her is rectified without delay.
c. Right to restriction of processing
Every affected person has the right to demand that processing is restricted if one of the following conditions applies:
• The accuracy of the personal data is contested by the affected person, for a period enabling the person responsible to verify the accuracy of the personal data.
• The processing is unlawful and the affected person opposes the erasure of the personal data and requests the restriction of its use instead.
• The person responsible no longer needs the personal data for the purposes of the processing, but they are required by the affected person for the establishment, exercise or defence of legal claims.
• The person affected has objected to processing and it has not yet been established whether the legitimate reasons of the person responsible outweigh those of the affected person.
d. Right to data portability
Every affected person has the right to receive the personal data concerning him or her from us in a structured, commonly used and machine-readable format. The person also has the right to transmit this data to another person responsible without hindrance from us, as long as the processing is based on consent pursuant to Art. 6 Para. 1 a of the GDPR or Art. 9 Para. 2 a of the GDPR or on a contract pursuant to Art. 6 Para. 1 b of the GDPR and processing is carried out by automated means. This shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been transferred to the person responsible.
The affected person, when exercising his or her right to data portability pursuant to Art. 20 Para. 1 of the GDPR, may ask for the personal data to be transmitted directly from us to another person responsible, if this is technically feasible and the rights and freedoms of other persons are not impaired by this.
e. Right to object
Every affected person has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her, which is based on Art. 6 Para. 1 e or f of the GDPR. This also applies to profiling based on these provisions.
Dradura Holding GmbH will no longer process the personal data in case of objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the affected person, or if the processing is used to establish, exercise or defend legal claims.
If Dradura Holding GmbH processes personal data for direct marketing purposes, then the affected person has the right to object at any time to processing of personal data for the purpose of such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the affected person objects to processing for direct marketing purposes, then we shall no longer process the personal data for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the affected person is also free to exercise his or her right to object by automated means using technical specifications.
f. Right to withdraw consent
Every affected person has the right to withdraw consent given to process personal data at any time.
g. Right to erasure (right to be forgotten)
Every affected person has the right to the personal data concerning him or her being erased without undue delay, as long as further processing is not necessary. Above all when one of the following reasons applies:
• The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
• The affected person withdraws consent and there is no other legal basis for the processing.
• The affected person objects to the processing and there are no overriding legitimate grounds for the processing.
• The personal data has been unlawfully processed.
• The personal data has to be erased for compliance with a legal obligation under Union law or the law of the member states to which the controller is subject.
Where Dradura Holding GmbH has made the personal data public and we are obliged to erase the personal data, then we shall, taking account of available technology and the cost of implementation, take appropriate and reasonable measures to inform third parties, which have processed the published personal data, that a request has been made to erase this personal data.
We collect and process personal data belonging to applicants for the purpose of handling the application process. The processing can also be done electronically. This is particularly the case if an applicant sends us corresponding application documents by electronic means, for example by email. If we enter an employment contract with an applicant, the data transmitted will be saved for the purpose of handling the employment relationship, taking account of the statutory regulations. If we do not enter an employment contract with the applicant, then the application documents will be automatically erased six months after notification of the decision, as long as their erasure does not oppose any other legitimate interests on our part. Other legitimate interests in this sense are, for example, an obligation to provide evidence in a procedure under the General Equality of Treatment Act (AGG).
Our web pages may contain links to websites of other providers, to which this data protection statement does not extend. If the collection, processing or utilization of personal data is connected with the use of websites operated by other providers, please take note of the data protection information issued by the respective providers.
Dradura Holding GmbH reserves the right to change this data protection statement in compliance with the applicable data protection regulations. For the use of our website, the version of the data protection statement accessible online at the time of your visit always applies.
Our site offers you various functions, during the use of which personal data is processed by us. Below we explain what happens to this data:
a. Anonymous/pseudonymized use of the website
As a matter of principle you are able to visit our website without giving any personal data. Pseudonymized usage data is not merged with the data pertaining to the bearer of the pseudonym. No pseudonymous usage profiles are created.
b. Use of cookies:
On various pages we use cookies to make visits to our website attractive and to enable certain functions to be used. So-called 'cookies' are small text files, which your browser can store on your computer. The process of storing a cookie file is also called "setting a cookie". You can set your browser yourself according to your wishes so that you are advised about the setting of cookies, can decide case by case about accepting them, or accept or decline cookies as a matter of principle. Cookies can be used for different purposes, e.g. to recognize that your PC has already had a link to a website (permanent cookies) or to save web content recently looked at (session cookies). We use cookies to offer you increased user convenience. In order to make use of our convenience functions, we recommend that you allow cookies to be accepted for our web content. If you have disabled cookies in the Internet browser used, not all of the functions of our website may be fully usable in some circumstances.
As at: July 2021