Privacy

Preamble

We aim to work together with all interested parties, customers, and business partners in a trusting and cooperative manner. This also includes the responsible handling of data. Therefore, we take the protection of your and our personal data very seriously and conscientiously handle collected data both morally and technically.

In the following text, we would like to explain to you which data we collect, process and use when and for what purposes. The objective of this is to explain how our services work and how the protection of your personal data is guaranteed.

We only collect, process, and use personal data if you agree to it or if a law permits the collection.

This privacy policy may change from time to time as we continue to develop our website to comply with legal requirements. Hence, we recommend that you re-read our privacy policy from time to time. Our data protection declaration can be called up, saved, and printed out at any time under the URL:
https://drewes-group.com/privacy/

Responsible body

The responsible body for the data protection laws is:

Drewes GmbH & Co. Investitions-KG
Auf dem Dreieck 5
28197 Bremen, Germany

If you have any general questions or suggestions regarding data protection, please do not hesitate to contact us by phone at +49 421 55908-0

Right of revocation

Some data processing procedures are only possible with your expressed consent. Revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing up to the revocation remains unaffected.

Right of appeal to the competent supervisory authority

As the person concerned, you have the right to appeal to the responsible supervisory authority in the event of a breach of data protection. The responsible supervisory authority concerning data protection issues is the data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: bfdi.bund.de

Right of data transferal

You have the right to have data that we process automatically based on your consent or in fulfilment of a contract handed over to yourself or third parties. It is provided in a machine-readable format. If you request the direct transfer of the data to another person responsible, this will only take place if it is technically feasible.

General information on the processing of personal data

This data protection declaration applies to data, including personal data, collected about you by Drewes GmbH & Co. Investitions-KG. Personal data is data or a combination of individual data that can be used to identify you.

We process your personal data in compliance with the data protection laws of the Federal Republic of Germany and the European data protection regulations. Under no circumstances will we pass on your personal data to third parties for advertising or marketing purposes without your consent.

As a company, we use external service providers. As far as the processed data is personal content, appropriate contractual agreements and organisational measures have been taken following applicable law to ensure the security of your data.

The use of our website is generally possible without providing personal data. As far as on our sides personal data (for example name, address or e-mail addresses) are raised, this takes place, as far as possible, always voluntarily.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. We try to protect your data against unauthorized access by third parties by taking precautions such as pseudonymization, data economy, observance of deletion deadlines, and taking into account the current state of technology. Despite these protective measures, however, we cannot completely rule out unlawful processing by third parties.

Data collection and data processing

As part of our business relationship, you must provide the personal data required for the establishment and execution of the respective business relationship and the fulfilment of the associated contractual obligations or which we are legally obliged to collect.

Without this data, we will generally not be able to enter into the business relationship with you and to fulfil the resulting obligations. We process personal data that we receive from you in the course of our business relationship.

We receive the data directly from you, e.g. in the context of inquiries, orders, newsletter subscriptions, or through personal contacts with our employees. Additionally, we process - to the extent necessary for the provision of our services - your personal data which we may obtain from publicly accessible sources (e.g. commercial and association registers, press, Internet).

Specifically, we process the following data:

• Contract master data (e.g. name, address, contact details)
• Order data (e.g. in the context of order processes)
• Documentation data (e.g. call notes, visit logs)
• Data on the initiation and implementation of our business relationships
• Correspondence (e.g. correspondence)
• Advertising and sales data (e.g. on products of potential interest to you)

We process your personal data following the provisions of the European Data Protection Ordinance (DSGVO) and the Federal Data Protection Act (BDSG). In the following, we will inform you on which legal basis we process your data.

Based on your consent

If you have given us your consent to process personal data for specific purposes, the respective consent is the legal basis for the processing stated there.

This applies in particular to:

• Advertising by e-mail and/or telephone as well as development and provision of advertising adapted to your interests
• Dispatch of products and information
• Delivery of other services we have offered you
• Surveys on our websites
• Transmission of data within Drewes GmbH & Co. Investitions-KG
• Transfer of data to third parties

You can revoke your consent at any time. This also applies to the revocation of declarations of consent that you have given us before the validity of the DSGVO, i.e. before 25 May 2018. The revocation of consent is only valid for future processing.

For the fulfilment of contractual obligations (Art. 6 para. 1b DSGVO)

The processing of data takes place for the fulfilment of a contract with you or for the execution of pre-contractual measures, which take place based on your inquiry. The purposes of data processing depend in detail on the concrete business relationship or the concrete assignment by you.

Due to legal requirements (Art. 6 Par. 1c DSGVO)

We are subject to various legal obligations, e.g. by the Commercial Code or the Industrial Code. The purposes of the processing include, inter alia

• Enforcement of our general terms and conditions
• Administration of our business
• Processing for the fulfilment of legal storage or documentation obligations

Within the scope of weighing up interests (Art. 6 para. 1f DSGVO)

If necessary, we process your data beyond the actual performance of the contract to protect the legitimate interests of us or third parties. This is done for the following purposes, among others:

• General business management
• Testing, optimization and further development of products and services
• Needs analysis of the use of our products, services, and websites to address customers directly
• Advertising or market and opinion research, unless you have objected
• The assertion of legal claims and defence in legal disputes
• Guarantee of IT security and IT operation of Drewes GmbH & Co. Investitions-KG
• Prevention and investigation of criminal offences
• Transmission of data within Drewes GmbH & Co. Investitions-KG, insofar as this is necessary for the processing of the respective business relationship

Our interest in the respective processing arises from the respective purposes and is otherwise economic (efficient performance of tasks, distribution, avoidance of legal risks). As far as the specific purpose permits, we process your data pseudonymised or anonymised.

For access from the Internet

When you visit our websites, our web servers temporarily store each access in a log file. The following data is recorded and stored until it is automatically deleted:

• The anonymised IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved data
• Message as to whether the retrieval was successful
• Identification data of the browser and operating system used
• The webpage from which access is made
• Name of your Internet access provider

The lawful processing of this data takes place for the purpose of enabling the use of the website (connection establishment), system security, technical administration of the network infrastructure, and optimisation of the Internet offer. By agreeing to this privacy policy, you give your consent that we may collect this data. You can object to this data processing. If you object to the use of the data, we would like to point out that only limited use of our services may be possible.

Beyond the cases mentioned above, these personal data will not be processed unless you expressly consent to further processing.

Data processing

Your data will be passed on within Drewes GmbH & Co. Investitions-KG if this is necessary to fulfil our contractual and legal obligations or if the internal organisation requires the passing on (e.g. financial accounting and sales and marketing). Within our company, appropriate and legal requirements for the protection of your personal data have been met.

Your personal data will not be passed on to third parties (bodies outside Drewes GmbH & Co. Investitions-KG) unless you have given us your prior consent or a legal basis exists. A legal obligation is particularly considered for the following recipients:

• Public authorities, supervisory authorities, and bodies, such as tax authorities
• Judicial/criminal prosecution authorities, e.g. police, public prosecutors, courts
• Lawyers and notaries, e.g. in insolvency proceedings
• Certified public accountant

Also, we employ various service providers (contractors according to Art. 28 DSGVO), which we contractually oblige according to the specifications of the DSGVO and whose compliance we monitor. These include companies in the areas of IT services, administrative services, tax services or sales and marketing. Contractors may only use personal data under our instructions and for a specific purpose.

Excluded from this is the passing on to service partners, such as parcel service providers or forwarding agencies, insofar as the transfer is necessary for order processing or delivery of the goods. The logistics service providers receive the data required for delivery for their own use. We limit ourselves to the transmission of the data necessary for delivery.

Purpose of data use

In accordance with the principle of data avoidance and data economy of the basic data protection regulation, we only collect personal data on our website if it is either necessary for the purpose you require, if we are obliged to do so under legal regulations or contract, if we have a legitimate interest, and/or if you provide it to us voluntarily.

When entering personal or business data (e.g. e-mail address, name, address), the disclosure of your data is expressly voluntary.

We process your contact, business, and business-relevant data based on legal regulations within the framework of the existing or imminent business relationship. By entering the data, you agree that the data entered will be collected, processed, or used for the legitimate purpose or for the purpose you have specified. Your stated data will only be processed and stored by us as long as the purpose requires and will be deleted after the purpose has been fulfilled or after the expiry of the respective storage periods. They are not collected, processed, or used for any other purpose. Your consent to the use of your data can be revoked at any time with effect for the future. If you object to the use of the data, we would like to point out that only limited use of our services may be possible.

The following are ways we can use the information:

Due to legal regulations

• Enforcement of our General Terms and Conditions
• Administration of our business
• Protection against or detection of possible fraudulent transactions

Due to contractual purposes

• Payment processing for purchases and other services

Based on your consent

• Contacting
• Dispatch of products and information
• Registration for competitions, programs or offers at your request
• Delivery of other services we have offered you
• Surveys on our websites
• Development and provision of advertising adapted to your interests

Due to our legitimate interest

• Determining the effectiveness of our advertising
• Development of new products and services
• Analysis of the use of our products, services, and websites
• Knowledge of how you came to our website
  

Duration of data storage

If necessary, we process your personal data for the duration of the business relationship, this includes the initiation and processing of this as well as the storage due to legal retention periods.

If the data is no longer required for the fulfilment of contractual or legal obligations, it will be deleted. Unless there are legal obligations of the responsible person against a deletion. This can be the case for the following purposes, among others:

• Fulfilment of obligations under commercial and tax law, e.g. the German Commercial Code (HGB), Fiscal Code (AO), Money Laundering Act (AMLA). The periods for storage and documentation specified there range from two to ten years.
• Preservation of evidence within the framework of the statutory statute of limitations. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years.
  

Protection of minors­

As a rule, children and persons under the age of 18 do not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and we assure that we do not knowingly collect personal data from children, use it in any way or disclose it to third parties without authorization.

Processing of your communication requests

If you send us enquiries via the contact form, e-mail, or telephone, your details from the enquiry form, e-mail, or telephone call, including the contact data provided by you there, will be stored to process the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

Disclosure of data to third parties

Your personal data will not be passed on to third parties (i.e. outside Drewes GmbH & Co. Investitions-KG) unless you have given us your prior consent. Excluded from this is the passing on to service partners, such as parcel service providers or forwarding agencies, insofar as the transfer is necessary for order processing or delivery of the goods. The logistics service providers receive the data required for delivery for their own use. We limit ourselves to the transmission of the data necessary for delivery.

Beyond that still different Dienstleister for the contract preparation and contract completion become active, like e.g. the Hosting Dienstleister for the Website. These companies work within the scope of so-called order processing for Drewes GmbH & Co. Investitions-KG and may only use the personal data per our instructions.

Furthermore, the transmission of data for order processing and/or delivery of goods or services or accounting and accounting purposes within Elektro-Test Lichtsysteme is transmitted and used. The data can be stored in the cloud application Invoiz of Buhl Data Service GmbH. No further transmission to third parties takes place without your consent. In all these cases, the data will be transmitted following the applicable national and European data protection regulations; the amount of data transmitted will be limited to the minimum necessary.

Use of cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our website more user-friendly, effective, and secure.

Some cookies are "session cookies." Such cookies are deleted automatically at the end of your browser session. However, other cookies will remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

You can use a modern web browser to monitor, restrict, or prevent the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the program is closed. Deactivation of cookies may result in limited functionality of our website.

The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions desired by you (e.g. shopping cart), takes place based on Art. 6 para. 1 letter f DSGVO. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these are treated separately in this data protection declaration.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send us, our website uses SSL or TLS encryption. This means that the data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Website analysis with Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of this service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "Cookies." These are small text files that your web browser stores on your end device and enable an analysis of website usage. The information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.

The setting of Google Analytics Cookies takes place on basis of Art. 6 exp. 1f DSGVO. As the operator of this website, we have a legitimate interest in analysing user behaviour to optimise our website and, where applicable, our advertising.

IP anonymization

We use Google Analytics in conjunction with IP anonymization. It ensures that Google shortens your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area prior to transmission to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, create reports on website activity, and provide us with other services relating to website and Internet use. The IP address transmitted by Google Analytics is not merged with other Google data.

The setting of cookies by your web browser is preventable. However, some functions of our website may be restricted by this. You may also opt-out of the collection of information about your use of the website, including your IP address and subsequent processing by Google. This is possible by downloading and installing the following browser plugin which can be reached via a Link

Details on the handling of user data at Google Analytics can be found in the data privacy of Google.

Job processing

To fully comply with legal data protection requirements, we have conducted an order processing agreement with Google.

Demographic features on Google Analytics

Our website uses the "demographic features" function of Google Analytics. It can be used to create reports that contain information on the age, gender, and interests of site visitors. This data comes from interest-related advertising by Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. You can do this through the ad settings in your Google Account or by prohibiting Google Analytics from collecting your information, as explained in the "Opt-out of data collection" section.

Using Google Tag Manager

This website uses the Google Tag Manager (GTM). The provider of this service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. GTM allows the recording of certain events triggered by the visitor of a website (e.g. clicking on a certain link). When an event is triggered, no data about the current user is recorded. The data includes only the timestamp, the clicked element (e.g. the unique ID of a web page element), and general information about the browser and device type used (e.g. Safari on iOS).

If you deactivate the collection of data using Google Analytics as described, GTM will also no longer collect any data.

Your rights as a data subject

You have the right to free information about your stored personal data, their origin, and recipients and the purpose of data processing as well as the right to correct, block, restrict or delete these data at any time. You also have the right to receive the personal data concerning yourself that was provided to a controller in a structured, common, and machine-readable format.

You can also revoke your consent to the processing and use of your data at any time, which is not required by law or directly for the processing of an existing contractual relationship. Please contact us at the address given in the imprint if you have any further questions on the subject of personal data. Upon request, we will inform you in writing following the applicable law whether and which personal data about you is stored by us.

According to the Basic Data Protection Ordinance, our customers have, among other things, a right to free information about their stored data. Upon request, you will be informed in writing following applicable law whether and what personal data we have stored about you.

You are a customer of Drewes GmbH & Co. Investitions-KG

Contact us by phone at +49 421 55908-0. Upon request, you will be informed in writing whether and/or which of your personal data we have stored.

You are not yet a customer of Drewes GmbH & Co. Investitions-KG

To ensure that personal data are not disclosed to third parties, please send your request by post, clearly identifying yourself (e.g. by enclosing a copy of your identity card):

Drewes GmbH & Co. Investitions-KG

Auf dem Dreieck 5

28197 Bremen, Germany

Please black everything except your first and last name, your address, and your date of birth. Though it may be inconvenient, this is the necessary means to ensure that we lawfully provide information.

Contact person in data protection matters

If you have any questions regarding the processing of your personal data, you can contact our data protection officer and his team directly, who are also available in cases of requesting for information, applications or complaints:

Drewes GmbH & Co. Investitions-KG

Auf dem Dreieck 5

28197 Bremen, Germany