Privacy Policy

We, Drakos GmbH, Hessen-Homburg-Platz 4, 63452 Hanau, are the responsible party for all personal data that you provide to us in the context of our business relationship.

Depending on the nature of our business relationship, we collect and process, in particular, the following categories of personal data:

• Professional or private contact information such as full name, address, telephone number, mobile number, fax number and email address, the identification number of your mobile phone and the IP address of your computer when you use our websites or online services.
• Payment information, e.g. data required for processing payments and preventing fraud, including credit/debit card numbers, security codes and other billing information.
• Further business information, which are necessarily processed in a contractual or other contractual relationship with DRAKOS or voluntarily provided by you, such as orders placed, purchases, services and other business transactions, feedback on products, services and other information that you provide to us in the context of a business relationship or
  resulting from it.
• Information about your preferences and interests that we obtain from web tracking or analysis technologies received, in particular regarding the use of our websites, products or other online services that we offer you (e.g. downloadable content). This may include information about which content you download from our website and which content you have clicked on or viewed in what way.
• Information that we obtain from public sources, databases and credit reference agencies.
• Information that we must collect due to legal or regulatory obligations, such as information about legal disputes or court proceedings in which you or individuals with whom you have a business relationship are involved, as well as information about interactions with you that may be of antitrust relevance.
• Special categories of personal data. In certain situations, where legally required or where you have given us your consent, we may also collect special categories of your personal data that are subject to specific data protection safeguards. For example, in connection with your registration for and participation in an event or seminar, we may ask you for information about your health to identify and accommodate any disabilities or special dietary needs you may have. Such information will only be used with your consent. However, if you do not provide us with this information, we may not be able to make the necessary arrangements.

Depending on the nature of our business relationship, we use your personal data for the following purposes (“Permissible purposes“):

• Initiation, execution and management of your contractual relationship (or the contractual relationship of your organisation) with DRAKOS, e.g. through the execution of transactions and orders for products or services, processing of payment transactions, accounting, auditing, billing and debt collection activities, arranging shipments and deliveries, repairs, maintenance and the provision of supporting services or other services that you may have commissioned or requested.
• Maintaining and protecting the security of our products and services as well as our IT systems, databases, websites or other digital infrastructure, preventing and detecting security risks, fraud cases or other criminal or unlawful activities.
• Ensuring compliance with our legal and regulatory obligations and requirements. This includes, for example, the retention of business records for tax or other purposes or the sending of legally required notifications and other announcements, compliance screenings or record-keeping obligations (e.g. due to anti-money laundering laws, know-your-customer regulations, competition law, export law, trade sanctions and embargo regulations or for the prevention of economic crime). In this context, we may be obliged to take the following actions: matching your contact or identity data with relevant sanctions lists and confirming your identity in the event of a possible match, recording your cooperation with third parties, insofar as this may be of antitrust relevance or reporting to or inspection by competent supervisory, law enforcement or other competent authorities.
• Information within an existing business relationship about similar or related products or services from DRAKOS, provided this is permissible under applicable law.
• Resolution of disputes, enforcement of our contractual agreements, and the assertion, exercise, or defence of legal claims.

To the extent that you have expressly given us your consent or this is permissible under data protection law, we may also use your personal data for the following purposes:

• Communication with you through the communication channels you have consented to, to keep you informed about the latest announcements, offers, and other information regarding products, technologies, and services from DRAKOS (including marketing-related newsletters) as well as events and projects from DRAKOS;
• Conducting customer surveys, marketing campaigns, market analyses, competitions, or other promotional measures or events or
• Profiling and automated processing: We collect information about your preferences based on your activities when using our websites, products or other services that we offer to you online (e.g. content available for download). Based on this information (e.g. which content has been downloaded and how long and how often it has been clicked or viewed), we create a user profile to make our communication and interaction with you more personal and to improve its quality (for example, through newsletter tracking or website analytics). The purpose of our profiling activities is to identify areas that may be useful or of interest to you and to inform you about them in a tailored manner. The algorithms we use apply this logic and therefore automatically provide you with targeted content and information.

Note: According to Article 21(2) of the EU General Data Protection Regulation ("GDPR"), you have

the right to object to the processing of your personal data for marketing purposes,

including the profiling described above. Please refer to

the subsection "Your Rights" for a detailed explanation of your rights and how you can

assert them.

We may apply modern technologies to monitor and analyse data regarding our products (also known as the "Internet of Things"). The relevant information will be used to support our customers, e.g. by improving our product design and our product service. Typically, no personal data is processed in connection with such technologies. If this is the case, personal data will be processed strictly in accordance with this data protection information and in compliance with the relevant laws.

We will not use your personal data to make automated decisions that affect you or to create profiles in any way other than as described above.

We will only process your personal data for the permissible purposes mentioned above to the extent that

• the processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract;
• the processing is necessary for the purposes of our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms override those interests. Our "legitimate interests" may include, for example, our economic interest in maintaining our business operations properly and sustainably in accordance with all legal and regulatory requirements;
• the processing is necessary for compliance with our legal obligations; the processing is necessary to protect your vital interests or those of another person; or
• You have unambiguously or, where necessary, expressly given your consent to the processing of your data. We will inform you prior to obtaining your consent about the purpose and scope of the intended data processing and your related rights.

The legal bases for the processing of your personal data are set out in Article 6 of the GDPR.

Normally, we will collect your personal data directly from you as part of our interaction, e.g. when you visit our website, communicate with us regarding our products and services, request a product or service, sign up for our newsletter or other marketing information, or participate in our customer surveys. If you have expressly consented, we may also receive personal data from third parties for marketing purposes. If this is the case, we will inform you in accordance with legal requirements.

Furthermore, we do not receive personal data from third parties.

DRAKOS is a globally operating company. In the course of our business activities, it is possible that we may also transfer your personal data to recipients in countries outside the European Economic Area ("third countries") where the same level of data protection does not exist as in your home country. To the extent that we do this, we comply with applicable data protection requirements and take appropriate security measures to ensure that your personal data is protected and secure, particularly by entering into EU standard contractual clauses, which [here] are available. If you would like more information about these security measures, you can contact us at any time using the contact details provided below.

To protect your personal data, we take physical, electronic, and procedural security measures that comply with the current state of technology and legal data protection requirements. These protective measures include the implementation of certain technologies and procedures to safeguard your privacy, such as secure servers, firewalls, and SSL encryption. We always act in accordance with applicable laws and regulations regarding the confidentiality and security of personal data.

We may share your personal data as follows:

• With service providers (so-called processors) within or outside the DRAKOS group, domestically or abroad (e.g., shared service centres or cloud providers), who have been contracted by us to process personal data on our behalf and solely according to our instructions for the permitted purposes. DRAKOS retains control over and responsibility for your personal data and will take appropriate protective measures required by applicable law to ensure the integrity and security of your personal data when engaging such service providers.
• With courts, supervisory authorities, law enforcement agencies, or other competent authorities or legal advisors as far as legally permissible and necessary to comply with a legal obligation or to establish, assert, or defend legal claims.
• To credit reporting agencies and other companies in the context of credit decisions, to prevent fraud and for debt collection.
• In addition, your personal data may also be shared with third parties if we sell or buy business units or assets; in this case, we may disclose personal data to the potential buyer or seller and their advisors. If DRAKOS or essentially all of its assets are acquired by a third party, the personal data we hold about customers and other contacts will be part of the transferred assets.

Otherwise, we will only share your personal data if you

instruct us to do so or give your consent, if we are legally required to do so or due to a court or

regulatory order, or if we suspect that

fraudulent or criminal activities are taking place.

We will store your personal data for as long as necessary to provide the services, products, or information you have requested and to conduct and manage our business relationship with you. If you have requested that we do not contact you, we will retain this information for as long as necessary to comply with that request. Furthermore, we are legally obliged to retain certain types of personal data for specific periods (e.g., due to commercial or tax retention obligations). Your personal data will be deleted promptly when it is no longer required for these purposes.

Under certain legally defined conditions, you can request information about your personal data, its correction or deletion, or the restriction of its processing. You can also object to the processing or assert your right to data portability. In particular, you have the right to request a copy of the personal data we hold about you. If you make such requests repeatedly, we may charge a fee for this. For more detailed information about your data protection rights, please refer to Articles 15-22 of the GDPR.

If you have consented to the processing of your personal data, you can withdraw your consent at any time with effect for the future, i.e. the withdrawal of consent does not affect the lawfulness of processing based on consent before the withdrawal. In the event of a withdrawal of consent, we will only continue to process the personal data if there is another legal basis for the processing or we are legally obliged to do so.

To make one of the aforementioned requests, please send a brief description of the personal data in question, along with your name and a suitable form of identification (e.g. your customer number) to the contact address below. We may require additional identification to protect your personal data against unauthorised access. We will carefully review your request and, if necessary, discuss with you how we can best comply with it.

If you have concerns about how we process your personal data, or wish to make a complaint, you can contact us at the address below to have this investigated. If you are not satisfied with our response or believe that we are not processing your personal data in accordance with applicable law, you can file a complaint with the relevant data protection authority in your country.