Data Protection

Please feel free to contact our Group Data Protection Officer with your questions about the processing of your personal data and to request information, correction, or deletion by e-mail: dataprivacy@draeger.com or by mail: 

Drägerwerk AG & Co. KGaA 

Group Data Protection Officer 

Moislinger Allee 53-55 

23558 Lübeck 

Germany 

When you visit our website, we process personal data that your browser transmits to our server. This data (so-called log files) is technically necessary to display our website and to ensure stability and security. 

Log files record the following data: 

• IP address 
• Date and time of the request 
• Time zone difference from Greenwich Mean Time (GMT) 
• Content of the request (specific page) 
• Access status/HTTP status code 
• Amount of data transferred in each case 
• Web page from which the request comes 
• Browser 
• Operating system and its interface 
• Language and version of the browser software 

For users from the European Union: The processing is based on Art. 6 (1) (f) GDPR to protect our legitimate interest in the trouble-free operation of our website. The data is stored for a period of up to 30 days and then automatically deleted or anonymized. 

We also process personal data that you voluntarily share with us as part of a contract, a survey, in the processing of your request, or your registration, or when you log in. 

We collect and process your data exclusively for predefined purposes. These may result from technical necessities, contractual requirements or explicit user requests. In addition, we only use your data if you have given us your prior consent. Some of our web offers are located in closed user areas for which registration with login is necessary, e.g. for the career portal. Your access and authorizations for the respective functions are controlled via such a login. We request your personal data, which is collected and stored during a login, as part of the respective web offer. 

Further information on the storage, processing and purpose of the respective collection can be found below and, where applicable, additionally in the instructions for use of the individual web offers. 

Registration

Some of our web offers are located in closed user areas, for which a registration with login is necessary ("user account"). The user is authenticated via such a login. Authorizations can be assigned to the user account, e.g. access for the respective functions is controlled via this.

To create a user account, certain mandatory information is required in order to be able to create the user account in our online user data administration, which is determined from the registration form of the respective application. In addition, further voluntary information can be provided. Which of the details are mandatory in each case can be seen from the correspondingly marked mandatory fields. When you send us the completed registration form, you will receive an e-mail from us verifying the e-mail address used in order to complete the registration and create your user account. 

For users from the European Union: We process your personal data in connection with your user account to provide our services and to protect our legitimate interests on the legal basis of Art. 6 (1) (b) and (f) GDPR. Our legitimate interest is to be able to offer the service to our users and to avoid disruptions and fraud attempts. 

You can change or delete your data in your user account at any time. If you delete your user account, we will also irrevocably remove all permissions attached to the account and delete your personal data collected in connection with the user account, unless there is a legal or contractual obligation to retain it. In the event of such retention obligations, we will restrict processing to the extent possible. For users from the European Union: In this case, the legal basis for processing is Art. 6 (1) (b) and (c) GDPR.

We carry out the registration and user administration using the following service providers:

- Microsoft Ireland Operations Limited ("Microsoft Azure B2C") seated in Ireland.

- Okta Inc ("Okta ID") seated in the USA.

Provision of goods or services 

When you order goods or services from Dräger, we use the personal data you provide to us to process your order or deliver the requested goods. We may also use the personal data you provided to carry out the necessary steps prior to concluding the contract, answer your related questions, send shipping and billing information and processing or providing of customer feedback and support. 

For users from the European Union: The legal basis for the processing of this data is the performance of a contract or the planned conclusion of a contract within the meaning of Article 6 (1) (b) GDPR. 

In order to technically process your personal data, Dräger uses external service providers and contract processors to provide goods or services. These include, for example, operators of eLearning platforms and web shops. You will find more detailed information in the applicable terms of use or general terms and conditions. 

Depending on which payment service provider you select in the order process, we will pass on the payment data collected for this purpose to payment service providers commissioned by us or to the selected payment service for the processing of payments. In some cases, the selected payment service providers may also collect this data from you themselves, if you open an account there. In this case, you must log on to the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies. 

E-mail marketing 

Have you signed up for one of our newsletters or stated your interest in information from Dräger in another context (e.g., when filling out a contact form)? If this is the case, we are then able to use your e-mail address to send you information (e.g., invitations to events, webinars, or product information) on the basis of your interests. You may object to the use of your data at any time if you are no longer interested in our information. To do so, simply click the “Cancel” link in the respective newsletter. 

For users from the European Union: The legal basis for the processing of this data is the declaration of consent given by you within the meaning of Article 6 (1) (a) GDPR. 

Sweepstakes  

Are you taking part in one of our sweepstakes? In this case, we process your personal data (such as name, e-mail address, address) for the purpose of enabling you to participate in the sweepstakes. The data processing is insofar necessary for the execution and fulfillment of the contractual relationship. 

For users from the European Union: The legal basis for the processing of this data is the execution or fulfillment of the contract within the meaning of Article Art. 6 (1) (b) GDPR.

 Dräger will only store your personal data for as long as it is required for the aforementioned purposes. In general, we will delete the personal data stored with regard to the competition after the campaign has ended, the winners have been notified and the prizes have been handed over.

Contacting you 

Have you used one of our contact forms to request information about products and services from Dräger? Generally speaking, we use the data you state in the form to process your request. You can also give us your separate consent before sending your contact request if you are also interested in additional information, such as invitations to events, webinars, or product information.  

For users from the European Union: The legal basis for the processing of this data is the declaration of consent given by you within the meaning of Art. 6 (1) (b) GDPR. 

In addition - with your consent - an ID is created when the contact form is sent, which we transfer separately from the other entries to our HubSpot system and then to the Dräger Data Platform. Via the Dräger Data Platform, your entries are linked to those in Adobe Analytics in order to measure the reach and success of marketing measures.The ID is created and linked exclusively with your consent. For users from the European Union: The legal basis for the processing is your consent in accordance with Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future by deselecting the “Marketing” cookie group.     
Website optimization 

Our objective is to further improve our website for you. To this purpose, we use various web analysis tools that provide us with answers to certain questions, such as: Which of our pages did you visit? Which links did you click on? A list of these tools can be found at: "What services does Draeger use on the website?". 

Insofar as personal data is processed, this processing is based on our legitimate interest for users from the European Union pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest results from the following purposes of data collection: ensuring a smooth connection setup, ensuring a comfortable use of our website and/or application, and analyzing system security and stability. 

Application Insights 

We have a automated analysis services. For this purpose, we use Application Insights, a service provided by Microsoft Ireland Operations Limited at South County Business Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521, Ireland ("Application Insights"). This cloud service, hosted by Microsoft Azure, analyzes user behavior on our website. For this purpose, we collect various technical user information that is transmitted when the website is called up. This concerns in particular the date, time and address (URL) of the request. In addition, the IP address is recorded for localization and subsequently anonymized. 

For more information about the processing of personal data in connection with Application Insights, please visit https://learn.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview?tabs=net and https://www.microsoft.com/en-us/trust-center/privacy. 

Digital advisor 

On our website we offer you the possibility to use an interactive digital advisor to help you find the most suitable product and service for your application. We offer this functionality under our own control. No data is transferred to third parties. 

For this purpose, we process the following categories of data: 

• - Usage data 
• - Browser / operating system / device used 
• - Source of the reference

The usage data collected (using a cookie ID) is used to improve the Digital Product Advisor experience, for technical purposes and to improve the service. It is not possible to infer user identity from the ID we use. The cookies and the personal data collected in this context are deleted or anonymized after the session. 

Customer satisfaction surveys 

Have you recently purchased a Dräger product, sent in a repair or made a request for a service? We are very interested in finding out whether you were satisfied with the service we provided and whether we can do anything differently in the future. We therefore use the contact data shared in this context to contact a group of customers selected at random following our interaction with them. 

We also carry out online surveys to determine satisfaction with our website. Some visitors of our websites are asked to take part in our survey via a pop-up. The questions can be answered voluntarily in full or in part.
For data processing, Dräger sometimes uses external service providers with whom corresponding data protection agreements exist. We carry out the surveys on customer satisfaction with regard to the design of our website together with Adlytics GmbH in Germany, which processes the data on our behalf.

For users from the European Union: The legal basis for the processing of this data is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest is derived from the following purposes of data collection: determining the satisfaction of current Dräger customers following the purchase or repair of a Dräger product. Since you are already a Dräger customer at that time, we presume that you agree to us contacting you to find out whether you are satisfied with us. 

Determining the satisfaction of website visitors when using the website and existing Dräger customers after purchasing or repairing a Dräger product or using a service. determining the satisfaction of current Dräger customers following the purchase or repair of a Dräger product. Since in the second case you are already a Dräger customer at that time, we presume that you agree to us contacting you to find out whether you are satisfied with us.

Career portal

To ensure that we receive your data quickly and securely, Dräger uses an online application portal (“career portal”). 
Would you like to apply for a job at Dräger? Then either send us your direct application online and we will create a user account for you in our career portal or you can register in the Dräger career portal yourself and create your own user account there. A user account consists of at least the following information:
- First name

- Surname

- E-mail address and telephone number

- user name 

- password

Insofar as Dräger collects, processes or uses personal data of the user via the career portal, this is done in accordance with the statutory provisions and the respective data protection regulations of Dräger. For users from the European Union: The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR. 

The data you enter in the career portal will be processed by us for the purpose of processing your application and any resulting employment. Dräger will take all reasonable steps to ensure that your application is processed carefully and completely. To this end, your application data must be truthful, up-to-date and complete and must not contain any misleading or deceptive information. Your personal data and information will only be made available to authorized persons within Dräger.

You can view the data you have entered in the career portal at any time. Please inform us immediately of any changes to your application data by updating the career portal. By submitting your application, you agree to the storage and electronic processing of your data. You check the electronic box provided for this purpose during registration or when applying directly. Only in this case can you complete your online application. Your consent to data processing will be logged. You can withdraw this consent at any time. Deleting your online applicant account also ends the data processing by us. You can carry out this deletion yourself or arrange for us to do so. You can find out how to change your password or what to do if you have forgotten it in the “Frequently asked questions” (FAQs; https://www.draeger.com/de_corp/karriere/Jobs-Und-Bewerbung/Haeufige-Fragen).

If you delete your online applicant account yourself in the course of an active application process or withdraw your consent to data processing, we will no longer be able to consider your application as part of the recruitment process. We also regularly check that the data in the online application portal is up to date and delete user accounts that are no longer used after the retention period has expired. This is 6 months. If you have given your consent again, the retention period for your account will be extended by a further six months. The retention period for your account has expired, but you are still in the middle of the application phase? Then this period will be extended until your application process has been completed.

We will contact you before we delete your personal data and other information. By logging into the online application portal again, you confirm your interest in maintaining your account. And if you really no longer need your account? Then you don't need to do anything.

Confirmation of registration and receipt
Registration: After you have registered in our career portal, you will automatically receive an e-mail confirming your registration. You will also receive an automatic confirmation of receipt from us shortly after sending your application. If you do not receive this, please check your spam folder first. If you do not receive the confirmations, please get in touch with the contact person on the relevant job vacancy.

Direct application: After you have applied via our career portal, you will automatically receive an e-mail in which you must confirm your application. You will then receive an automatic confirmation of receipt from us. If you do not receive this, please check your spam folder first. If you do not receive the confirmation, please get in touch with the contact person on the relevant job vacancy.
Application process
We will first check your application documents. Depending on which position you are applying for, you will receive an invitation from us to take an online aptitude test. If any important questions remain unanswered, we will conduct a short telephone interview with you. If you have convinced us, we will invite you to meet your future manager and the responsible HR manager in person. As a rule, we will conduct two personal interviews with you as part of the recruitment process.
Application-related data 

We store information you provide to us as part of your application via the careers website along with your name for up to six months after the application process has been completed. After that, the results will be saved only in anonymized form for statistical evaluation. It is not possible to draw any conclusions regarding your person based on this statistical data. 

Identification of rejected applicants 

Was your application to work at Dräger unsuccessful? In this case, we will save a data set to identify you in case you apply again for the same position at Dräger. However, this data set does not contain your entire professional qualifications. 

The identification data set contains the following information: 

• last name 

• first name 

• date of birth 

• e-mail address 

• applicant number 

The identification data set will be permanently deleted no later than three months after the end of the application process. 

Application at multiple Group companies at the same time 

Have you applied for multiple positions at different Dräger companies at the same time? In that case, the respective HR departments to which you directly submitted your application may be informed that you have filed multiple applications at the same time. 

Accessibility of applicant data 

Have you applied for a specific position (direct application)? Then your data will be made accessible to the department advertising the job as well as the appropriate HR department. 

Talent Pool 

With your consent, we will include your application data in a talent pool for a period of 12 months.  In this talent pool, we store your contact and application data in order to find potentially suitable candidates for positions that become vacant. If necessary, Dräger matches vacancies with your application data in order to be able to offer you job opportunities that match your personal profile. If we consider the position to be potentially suitable for you based on your application data, we will contact you from our end. For users from the European Union: The legal basis for the processing is your consent is Art. 6 (1) (a) GDPR. 

Security in handling personal data 

Your data is automatically encrypted during transmission. Our precautions for securing your data always correspond to the current state of technology.

Online test for trainees (Germany) 

To assess your aptitude as part of our application process for trainees, Dräger will process the following personal applicant data as part of an online test: 

• personal master data (e.g., first and last name, address, date of birth) 
• communication data (e.g., e-mail address, telephone number) 
• data on personal structure and cognitive abilities based on answers given during the online test

This data will be deleted after completion of the application process. The aforementioned time limits for the deletion of data nevertheless also apply to the applicant’s user account. 

For users from the European Union: The legal basis for the processing of this data is the following declaration of consent given by you within the meaning of Article Art. 6 (1) (a) GDPR.

In order to make our offer as user-friendly as possible, we also use so-called cookies and similar technologies, as do many other companies.  

What are cookies? 

Cookies are small text files that your browser automatically creates and that are stored on your end device (e.g. laptop) when you visit our website. Information is stored in the cookie that arises in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity. The use of cookies serves to make the use of our offers continuously more pleasant and suitable for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. This enables you, for example, to place individual products that you find on our website in your shopping basket without having to create a customer account or be logged into one. The session cookies are automatically deleted after you leave our website. In addition, we also use so-called temporary cookies for the purpose of user-friendliness, which are stored on your end device for a certain fixed period of time. As soon as you visit our website again, it is automatically recognised that you have already been with us and which entries and settings you have made so that you do not have to enter them again. Usually the temporary cookies are deleted after 30 days. In addition to our own cookies, we also use cookies from third-party providers (so-called third-party-cookies) to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you, as well as to display information and advertising tailored specifically to you. These cookies also enable us to recognise that you have already been to our website when you visit it again. These cookies are automatically deleted after a set period of time. We explain the individual cookies from third-party providers we use in more detail in the following points. 

Cookie-Settings 

Most browsers accept cookies automatically. However, you can also set your browser so that no cookies are stored on your end device or a message always appears before a new cookie is created In addition, you have the option of deciding for yourself which non “Technically required” cookies you wish to accept and which you do not wish to accept via the Cookie-Settings link in the footer.  

You can change these settings at any time and also deactivate already activated cookies by selecting and deselecting the individual cookie groups, e.g. "Functional", "Statistics" or “Marketing”, and thus revoke any consent you may have given. In this way, the use of cookies becomes transparent for you. Please note, however, that the deactivation of certain cookie groups or the complete deactivation of cookies may mean that you cannot use all the functions of our website without restriction. 

For users from the European Union: The processing of personal data collected by means of cookies, which are technically necessary for the provision of our offers, is carried out on the basis of Art. 6 (1) (f) GDPR to protect our legitimate interest in the trouble-free provision of our offers on our website. Otherwise, we process your personal data in connection with cookies (in particular for the provision of certain functionalities, for analysis and advertising purposes and in connection with the third-party providers described below) only if you have given us prior consent to do so in accordance with Art. 6 (1) (a) GDPR. The processing is for the purpose of advertising, market research and the design of our website to meet your needs. 

When you visit our website, information about its use is automatically collected. This information is important to Dräger because it is the only way for us to find out what content on our websites is interesting to you and how we can continue to improve our services for you in the future. To do so, we use the following: 
Usercentrics - Consent Management Platform
We use the Usercentrics service from Usercentrics GmbH in Germany as our Consent Management Platform (CMP). The purpose of this CMP is to collect and transfer personal data and to manage and document consent.
The following website visitor data is collected when the CMP is used:

• Consent data (consent ID, consent number, time consent was granted, opt-in or opt-out, banner language, customer settings, template version)
• Device data (HTTP agent, HTTP referrer)
• IP address
• Geolocation

The processing is carried out for users from the European Union on the legal basis of Art. 6 (1) (f) GDPR to ensure our legitimate interest in consent management and the administration of the services on our website. 
Further information on the processing of your personal data by Usercentrics GmbH can be found in Usercentrics' data protection information: https://usercentrics.com/trust-center/

Adobe Analytics
This website uses the web analytics service Adobe Analytics to evaluate user access to this website. For the analysis, cookies are stored on your terminal device and information is collected about it, which is also stored on servers of our contract processor Adobe Systems Software Ireland Limited, located at 4-6 Riverwalk, Citywest Business Park 0000 Dublin 24, Ireland ("Adobe"). 
The information stored on Adobe servers cannot be directly linked to a specific person because Adobe Analytics is used with the settings "Before Geo-Lookup: Replace visitor's last IP octet with 0" and "Obfuscate IP-Removed". The setting "Before Geo-Lookup: Replace visitor's last IP octet with 0" ensures that the IP address is anonymized by replacing the last octet of the IP address with zeros before this so-called geolocation. The approximate location of the user is added to the tracking packet that still contains the full IP address for statistical analysis. Before the tracking packet is stored, the IP address is then replaced with a single fixed IP address - this is called a generic IP address - if the "Obfuscate IP -Removed" setting is configured. This means that the IP address is no longer included in a stored record. 
For users from the European Union: We only use Adobe Analytics in connection with your personal data if you have given us your express consent in advance. Your consent is also the legal basis for the use of Adobe Analytics pursuant to Art. 6 (1) (a) GDPR. You can decide yourself about the setting of cookies as described above in your Cookie-Settings on our website and, in particular, deactivate already activated cookies from Adobe Analytics by deselecting the cookie group "Statistics" and thus revoking your consent. In addition, you can also disable the setting of cookies altogether in your browser settings. Your personal data collected in connection with Adobe will be deleted or anonymized after 24 months. 
Data processing by Adobe Analytics is governed by Adobe's privacy policy. Learn more about Adobe Analytics' privacy policy at https://www.adobe.com/de/privacy/policy.html 

Google Tag Manager
We use the Google Tag Manager of Google Ireland Limited (“Google Tag Manager”) on our website. Google Tag Manager is used to manage our website tags via an interface. The Google Tag Manager is a domain to which the IP address is transmitted for technical reasons. The Google Tag Manager then triggers other tags, which in turn may collect data. 

The legal basis for users of the EU for the transmission of the IP address is our legitimate interest in managing our website services and triggering other tags in accordance with Art. 6 para. (1) (f) GDPR. Further information on data processing can be found at: https://support.google.com/tagmanager/answer/7157428.
Google Ads 
We also use the online advertising program Google Ads from Google LLC, Amphitheatre Parkway Mountain View, CA 94043, USA (""Google Ads"").  
In this context, we use the remarketing function of Google with your consent. This enables us to show you targeted advertisements across devices and present them according to your interests. You will be shown products on websites for which an interest has been identified on other websites in the Google network - also across devices - through your surfing and usage behavior.

For this function, technical information (e.g. IP address, time of visit, device and browser information) is read and cookies are set. Additional data processing only takes place if you have activated the "personalized advertising" setting in your Google account. In this case, if you are logged into your Google account while visiting our website, Google uses your data to create target group lists for cross-device remarketing.  Furthermore, we use the conversion tracking function to measure the effectiveness of individual ads, offers and features. Conversion tracking is supported by the Google function of the so-called conversion linker. Conversion linker tags are used to help tags measure click data so that conversions can be measured effectively. For more information, please visit: https://support.google.com/tagmanager/answer/7549390?hl=en-AU. 

To measure conversion, cookies are set on your end device as soon as you click on a Google ad. These cookies do not identify you personally, but are intended to enable us to determine whether you return to the website with the specific offer during the 30-day validity of the cookies.  
When you click on our website as a website visitor, the URL of the conversion page on your website usually contains information about the click. When a website visitor performs an action that you have marked as a conversion (for example, when a Google Ads conversion tag is triggered), the click information is used to link that conversion to the click that brought the visitor to your website.  
The information collected using the conversion cookie is used to create conversion statistics for us. We learn the total number of users who clicked on an ad and were redirected to a website tagged with a conversion tracking tag. The data collected in this way is transferred in anonymized form to Google servers in the USA and stored there.

We only use Google Ads in connection with your personal data if you have given us your prior explicit consent. For users from the European Union, the legal basis for the use of Google Ads is Art. 6 (1) (a) GDPR. You can decide about the setting of cookies yourself in your cookie settings on our website as described above and in particular deactivate previously activated cookies and thus revoke your consent. In addition, you can disable the setting of cookies altogether in your browser settings. Your personal data collected in connection with Google Ads will be deleted or anonymized after one month (in relation to the IP address) or three months (in relation to cookie information).

Information that Google uses to display advertisements can be set by Google at the following link https://adssettings.google.com/. 

Alternatively, you can deactivate cookies on the Digital Advertising Alliance site at the following link https://optout.aboutads.info/ or on the Your Online Choices site at https://www.youronlinechoices.com/de/. Further information on your rights as a data subject in relation to Draeger, including the right of withdrawal, can be found below in this data protection information. In addition, you will find further information on setting and revocation options in Google's data protection declaration for advertising at https://policies.google.com/technologies/ads and on data protection at Google as a whole in Google's general data protection declaration at https://policies.google.com/privacy.  
Google Consent Mode
We use the Google Consent Mode of Google Ireland Limited (“Consent Mode”) on our website. Consent Mode is a consent procedure for Google services (e.g. Google Ads or Google Analytics) with which Google complies with the legal obligations of the EU Regulation on contestable and fair markets in the digital sector (“Digital Markets Act”). The Digital Markets Act states that Google, as a central platform service, must obtain its own consent from the Google service user. To enable Google to comply with this legal obligation, we have implemented this consent process in our consent management tool. We therefore forward your decision to use certain Google services to Google. For this purpose, we transfer technical information (e.g. IP address) to Google Ireland Limited.
We have implemented Consent Mode in the basic version. Google tags are only loaded once you have consented to the respective Google service. No data will be transmitted to Google Ireland Limited - including the consent status - until the consent decision has been made and in the event of a rejection of the use of the respective Google service. The triggering of Google tags is completely blocked. The conversion modeling of the consent mode in ads is then based on a general model.If the user gives their consent, the APIs for the consent mode of Google tags are loaded and executed.
The legal basis for the transmission of technical information together with your consent decision is for users from the European Union the consent in accordance with Art. 6 (1) (a) GDPR. 
Further information on data processing can be found at: https://support.google.com/google-ads/answer/14505993?sjid=7368176355893656468-EU, https://support.google.com/adsense/answer/13554116?hl=en&sjid=7279182705469732813-EU#zippy=%2Cgoogle-certified-cmps, https://support.google.com/google-ads/answer/10000067?hl=en and https://support.google.com/google-ads/answer/14505993?sjid=7368176355893656468-EU.

Meta Features 
We also use the Meta pixel on our website with your consent. Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta") is the controller of your personal data within Meta. 
With the help of the Meta pixel, the activities of a website visitor are tracked. For this purpose, a connection to the Meta servers is established via this pixel using your IP address when you visit our website. We use the meta pixel to assign the user to target groups (so-called "website custom audiences") for remarketing purposes and to align the ad delivery on Meta advertising spaces (so-called "Facebook ads" and "Instagram ads", hereinafter "meta ads") accordingly. Accordingly, we use meta pixels to display meta ads set by us to meta users who also have an interest in our websites or who have certain attributes (e.g. interests in certain topics or products determined based on the websites visited) that we transmit to Meta. With the help of the Meta pixel, we also want to ensure that our Meta ads correspond to the potential interest of the users and do not have a harassing effect. 
In addition, the data collected is processed statistically for the purpose of measuring, evaluating and optimizing the effectiveness of Meta ads by seeing whether users were redirected to our website after clicking on a Meta ad and what actions they performed there (e.g. downloads) (so-called "conversion"). We receive reports from Meta in anonymized form. Meta assigns this information, transmitted in hashed form, to your Meta account, if you have one.  
Meta is controller, in the same way as we are, of the use of your personal data for targeting purposes on Meta. We have therefore entered into a Joint Controller Agreement with Meta Platforms Ireland Ltd. which you can access here: https://www.facebook.com/legal/controller_addendum . 
In this agreement, we have divided the data protection obligations as follows:  
We are responsible for providing you with all information pursuant to Articles 13 and 14 of the GDPR regarding the joint processing of personal data; 
Meta Platforms Ireland Ltd. is responsible for providing you with the rights set forth in Art. 15 to 20 GDPR with respect to the personal data stored by Meta after the joint processing.
Meta is solely responsible for the subsequent processing of the transmitted data.  
Cookies can be set on the end device via the meta pixel. The processing of the aforementioned information by the meta pixel and the setting as well as reading of the meta cookie only takes place with your consent. Your consent is also the legal basis for the use of the meta pixel, for users from the European Union in accordance with Art. 6 (1) (a) GDPR.  
You can decide yourself about the collection by the meta pixel and the use of your data for the display of meta ads as described above in your cookie settings on our website and, in particular, deactivate previously activated cookies and thus withdraw your consent. You can also deactivate the setting of cookies altogether in your browser settings as described above. In addition, you can visit the following page set up by Meta and follow the instructions there regarding the settings for usage-based advertising ("Your Advertising Preferences") to set which types of advertisements are displayed to you within Meta: https://www.facebook.com/settings?tab=ads. The settings are made in a platform-independent manner, i.e. they are applied to all devices, such as desktop computers or mobile devices. Your personal data collected in connection with the Meta pixel will be deleted or anonymized after 420 days. 
For more information on data protection - in particular Meta's contact details and Meta's data protection officer - as well as your rights and setting options, please refer to the Terms of Use for Meta Business Tools, including the Responsible Party Addendum, as well as Meta's Data and Cookie Policy at https://www.facebook.com/policy and https://www.facebook.com/policies/cookies/. 

LinkedIn ("Insights Tag") 
Furthermore, we use the so-called conversion tracking with LinkedIn Insights Tag, a tool of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, ("LinkedIn") on our website. For this purpose, the LinkedIn Insight Tag is integrated on our pages and a cookie is set on your end device by LinkedIn. This informs LinkedIn that you have visited our web pages, whereby your IP address is also collected. In addition, timestamps and events such as page views are stored. This enables us to statistically evaluate the use of our website in order to constantly optimize it. We learn, for example, through which LinkedIn ad or interaction on LinkedIn you came to our website. This allows us to better control the display of our advertising. 
In addition, we can use LinkedIn "insight tags" to create so-called "website audiences" and thus display ads for our website around LinkedIn members who have visited our website. In doing so, cookie information is matched with LinkedIn member data to build the audience. Direct identifiers are removed from this data within seven days and the remaining data is deleted at the latest after 180 days.  
We only use Insights tags if you have given us your explicit consent beforehand. Your consent is also the legal basis for the use of the Insights tag, for users from the European Union in accordance with Art. 6 (1) (a) GDPR. You can decide yourself about the setting of cookies as described above in your cookie settings on our website and in particular deactivate previously activated cookies by deselecting the cookie group "Marketing" and thus withdraw your consent. In addition, you can also deactivate the setting of cookies altogether in the settings of your browser. Your personal data collected in connection with the LinkedIn Insights tag will be deleted or anonymized after 90 days. 
For more information on conversion tracking, please visit https://www.linkedin.com/help/linkedin/answer/67595/linkedin-conversion-trackingubersicht. Please note that the data may be stored and processed by LinkedIn so that a connection to the respective user profile is possible and LinkedIn may use the data for its own advertising purposes. For more information, please see LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy. You can prevent the analysis of your usage behavior by LinkedIn as well as the display of interest-based recommendations via https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. 

YouTube  
We have embedded videos of the video service YouTube of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, on our website, whereby the video services in the European Economic Area and in Switzerland are provided by the European Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("YouTube"). 
We use the embedded YouTube videos only in the so-called extended data protection mode. This means that YouTube does not store cookies for users who only visit the website with the embedded YouTube video and do not click on the video to start the playback of the YouTube video. If you click on the embedded YouTube video player on our website, YouTube may store cookies on your end device and may receive personal data from you. If you are logged in to YouTube at the same time, YouTube can assign any collected data to your YouTube account. 
If you do not want this, please do not use this function or do not start the YouTube videos. For users from the European Union, the processing of personal data collected in the context of the use of YouTube is carried out on the basis of Art. 6 (1) (a) GDPR on the basis of the consent given by you to play the respective video. Your consent can be withdrawn at any time for the future. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Information on data processing and notes on data protection by YouTube can be found in the general privacy policy of Google https://policies.google.com/privacy?hl=de&gl=de. 

Instagram 
We use a feed from the Instagram service on our website. Instagram is an audiovisual social media platform that allows users to share photos and videos and redistribute such data on other social networks ("Instagram"). The operating entity of the Instagram services for users in the European Economic Area is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. 
The Instagram feed is integrated into our website via an iFrame and ensures that we can show you our Instagram content (such as photos and videos) on our website. The feed is disabled (grayed out) by default. Only when you click on the "I agree" button does your browser make a request to the Instagram media server, which also transmits your IP address so that the iFrame with our Instagram content can be displayed to you. This is technically necessary for the transmission. For users from the European Union, the legal basis for this is Art. 6 (1) (a) GDPR. 
Incidentally, our websites contain links to our Instagram account so that you can follow us on Instagram. 
Further information on data protection and your rights and settings options in this regard are available in Instagram's privacy policy at https://help.instagram.com/155833707900388/. 

Twilio SendGrid
The website as well as individual products use the Twilio SendGrid email services ("Twilio SendGrid"), of the provider Twilio Inc, 101 Spear St FL 5 San Francisco, CA, 94105-1554 United States, to communicate with you in the context of providing our services. For this purpose, we process the data necessary for the communication (such as recipient address, subject, date and method of communication). For users from the European Union: the legal basis for the processing of this data is the performance of a contract within the meaning of Art. 6 (1) (b) GDPR.For more information on data processing at Twilio SendGrid, please visit: https://sendgrid.com/resource/general-data-protection-regulation-2/
HubSpot 

For our online marketing activities, we use HubSpot, an integrated software solution from HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA or HubSpot European Office, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland ("HupSpot") that allows us to cover a wide range of aspects, including: 

• e-mail marketing (newsletter, banner and automated e-mails, e.g. to provide downloads) 
• social media publishing and reporting 
• reporting (e.g., sources of traffic, access, etc.) 
• contact management (e.g., user segmentation and customer relationship management) 
• landing pages, blogs, and contact forms 
• services (live-chat, chat-bots, ticket system, polls, knowledge databases) 
  For users from the European Union, the legal basis for the aforementioned online marketing activities - unless otherwise indicated - is the implementation of pre-contractual measures in accordance with Art. 6 (1) (b) and our legitimate interest in the efficient provision of information in accordance with Art. 6 (1) (f) GDPR. 
  In addition, we use the meetings function of HubSpot to effectively and easily arrange appointments with you. For this purpose, free times of our participating employees are shown to you. You can select your preferred appointment time and arrange it with a staff member via "Confirm meeting". For this purpose, we process your first and last name as well as your business e-mail address. As soon as you press the "Continue" button in "Confirm meeting", you will receive a corresponding confirmation e-mail from us. For users from the European Union , the legal basis is the implementation of pre-contractual measures according to Art. 6 (1) (b) as well as our legitimate interest according to Art. 6 (1) (f) GDPR in efficient scheduling.    
  In addition, we use HubSpot's tracking tool for our online marketing activities on our website with your consent. HubSpot uses cookies to enable an analysis of your use of the website by us. HubSpot evaluates the collected information (e.g. IP address, timestamp, geographical location, type of browser, duration of visit and pages viewed) on our behalf so that we can generate reports about the visit and the pages visited. Information collected by HubSpot and the content of our website is stored on servers of HubSpot's service providers.  
  The legal basis for the processing is your consent, for users from the European Union in accordance with Art. 6 para. (1) (a) GDPR, which you can withdraw at any time with effect for the future by deselecting the “Marketing” cookie group. The cookies and the personal data collected in this context will be deleted or anonymized after 13 months at the latest.
  If you give us your advertising consent, the data will be exchanged between HubSpot, Inc. and Microsoft Dynamics 365 (CRM system) of Microsoft Ireland Operations Limited in order to be able to compare and complete the database of both systems.
  We have concluded so-called EU standard contractual clauses with HubSpot to ensure an appropriate level of data protection when transferring personal data from the EU. In addition, HubSpot is certified according to the EU-US Data Privacy Framework, so that an adequate level of data protection within the meaning of Art. 45 GDPR is ensured (adequacy decision).
  Further information on data protection can be found in the HubSpot Data Protection Policy at https://legal.hubspot.com/de/privacy-policy, in the Cookie Policy at https://legal.hubspot.com/de/cookie-policy and on the HubSpot knowledge pages at https://knowledge.hubspot.com/de/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser#cookies-from-third-party-systems.

Microsoft Dynamics 365 (CRM system)
We use a customer relationship management system (CRM system) from Microsoft Ireland Operations Limited, based in Ireland, for communication and data storage.  
We process personal information - in particular business contact information and technical information such as log information - insofar as this is necessary for business communication, contract initiation, contract execution, contract processing, documentation of business processes or fraud prevention.
The legal basis for data processing depends on the context of the data processing situation and may be as follows for user from the EU: 

• Data processing - in particular of business contact information and contract information - may be based on the establishment of a contract and consequently on Art. 6 (1) (b) GDPR.  
• In addition, the fulfillment of legal obligations pursuant to Art. 6 (1) (c) GDPR can also serve as the legal basis for data processing - in particular for statutory retention obligations.  
• Consent to data processing can also form the legal basis for data processing - e.g. for an advertising approach - in accordance with Art. 6 (1) (a) GDPR. In particular, if you give us your advertising consent, the data will be exchanged between HubSpot, Inc. and Microsoft Ireland Operations Limited in order to compare and complete the database of both systems.
• In addition, data processing may be based on our legitimate interest in business communication with contractual partners and the prevention of disruptions and attempted fraud in accordance with Art. 6 (1) (f) GDPR.
  Further information on data protection at Microsoft can be found in Microsoft's privacy policy at: https://privacy.microsoft.com/de-de/privacystatement.

Dräger Data Platform
We collect data centrally via the Dräger Data Platform (“Data Platform”) in order to be able to visualize the data in a uniform environment. 
For this purpose, we use the Data Platform to access information already collected with your consent from the following service providers:

- HubSpot- Microsoft Dynamics 365 (CRM system)
For the scope of the information collected, please see to the information on data processing by Hubspot and Microsoft Dynamics 365 (see above). If there is no consent for the processing of personal data of the aforementioned services, no processing by the Data Platform takes place.
The legal basis for data processing for users from the European Union is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the visualization of information already collected to promote the sale of goods and the provision of services.The following service providers are used to realize the functions of the Data Platform

•  AWS of Amazon Web Services EMEA SARL as infrastructure provider (IaaS). The storage location is Frankfurt am Main (Germany). Further information on data processing by AWS can be found at: https://aws.amazon.com/de/compliance/data-privacy/.  
• Databricks of Databricks Inc (USA) for data management as a SaaS solution on the AWS infrastructure.

We have concluded EU standard contractual clauses with Databricks Inc. to ensure an appropriate level of data protection during the transfer of personal data from the EU. In addition, Databricks Inc. is certified according to the EU-US Data Privacy Framework, so that an adequate level of data protection within the meaning of Art. 45 GDPR is ensured (adequacy decision). Further information on data processing by Databricks Inc. can be found at: https://www.databricks.com/legal/privacynotice.

In addition to its website content, Dräger also has online presences within social networks and platforms.  

Visiting the social media company page 

Through our company pages, we communicate with our customers, interested parties and online visitors ("users") who are active there. In this context, user data may also be processed outside the European Union. There may be risks for users due to the more difficult enforcement of your rights. Frequently, user data is processed for market research and advertising purposes and user profiles can be created from usage behavior and the resulting interests. On the basis of these user profiles, advertisements can be set within and outside the platforms that are intended to correspond to the interests of the users. Data is also stored in the usage profiles regardless of the devices used by the users. 

Interaction on the Social Media Company Site 

By interacting with us on our social media company page, you disclose personal information to us. Such information may include, for example, your contact details, your username, or the content of a message you send to us. We process this information based on our legitimate interest to interact with you and to get in touch with you. For users from the European Union, the legal basis for the processing of personal data is Art. 6 (1) (f) GDPR. In addition, the processing of personal data of users from the European Union may be based on Art. 6 (1) (a) GDPR, provided that he has given us a corresponding consent. In particular, if we integrate content from the respective providers of the platforms into our websites (e.g. via an iFrame, plug-in, etc.), consent is required for this. 

If we have a legal contractual relationship with you or if such a relationship is imminent, Art. 6 (1) (b) GDPR is the legal basis for data processing for users from the European Union. This applies in particular to participation in sweepstakes. In the case of a sweepstakes, we only process the data in order to contact you and to be able to send the prize. After delivery of the prize or if you have not won, we will delete your data. 

Data processing on Facebook and Instagram 

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"), provides us with anonymized statistics and insights about users' interaction with our social media company page on Facebook and Instagram (so-called "page insights"). However, these page insights cannot be assigned to individual user profiles. The processing follows our legitimate interest to evaluate the type of interactions and thus to optimize our company page. Consequently, the legal basis for data processing for users from the European Union is Art. 6 (1) (f) GDPR. 

The processing of the personal data required to create the page insights is carried out by Meta and us as joint controllers. Therefore, we have concluded a contract with Meta Platforms Ireland Ltd for processing as joint controllers, which regulates the data protection obligations divided between us and Meta. You can find more information about data processing here: https://www.facebook.com/legal/terms/page_controller_addendum   

Please note that according to the meta data protection regulations, meta data is also transferred to the USA or other third countries on the basis of processor-to-processor standard contractual clauses or another suitable legal basis. Further information on this can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum/update 

In this agreement we have divided the obligations under data protection law as follows: 

• We are responsible for providing you with all information pursuant to Art. 13 and 14 GDPR regarding the joint processing of personal data; 
• Meta Platforms Ireland Ltd. is responsible for providing you with the rights set forth in Art. 15 to 20 GDPR with respect to the personal data stored by Meta after the joint processing. 
• Meta is solely controller of the processing of the transferred data following the transfer.  

Please note that according to the meta data protection regulations, meta data is also transferred to the USA or other third countries on the basis of processor-to-processor standard contractual clauses or another suitable legal basis. Further information on this can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum/update 

Data processing on LinkedIn 

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn") is generally the controller of personal data when you visit our LinkedIn company page. However, if you interact with our LinkedIn company page, LinkedIn evaluates these interactions in order to provide us with statistics in anonymized form (so-called "page insights"). This concerns in particular interactions of followers, visitors, employees and competitors. In particular, information such as job function, country, industry, seniority, company size and employment status is evaluated. We receive the page insights only in anonymized form. It is not possible to draw conclusions about individual users from the information in the page insights. Further information on analysis data can be found here: https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=de. 

The processing of personal data on our company site for the creation of page insights, is carried out by us and LinkedIn as joint controllers. For users from the European Union, the legal basis for the processing of personal data is our legitimate interest in the evaluation and the improvement of our LinkedIn company page based on this in accordance with Art. 6 (1) (f) GDPR. We have entered into a contract with LinkedIn for processing as joint controllers, in which the distribution of data protection obligations between us and LinkedIn is specified. You can access this at: https://legal.linkedin.com/pages-joint-controller-addendum. 

LinkedIn Sales Navigator 

We use the LinkedIn Sales Navigator service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn") actively to locate, approach, communicate or initiate business contacts.  

For this purpose, we process the data provided to us by LinkedIn. This is usually profile information, in particular name, company, position in the company, work experience, education as well as the activities and other contacts of the respective member. If communication occurs after an active approach, the content of this communication is processed by us. It is also possible that we transfer this data to our CRM system and merge or link it with data already available there.  

The legal basis for addressing and communicating with business contacts via the InMail function of LinkedIn is the consent of the LinkedIn member, for users from the European Union in accordance with Art. 6 (1) (a) GDPR, provided this was given during registration on LinkedIn. Each member can withdraw their consent at any time by adjusting their communication settings accordingly in the privacy settings at https://www.linkedin.com/psettings/data-sharing or by using the link in each InMail to withdraw. The legal basis for the processing of profile details in the advanced search and the matching with our CRM data and an export of LinkedIn profile details to our CRM is our legitimate interest - for users from the European Union according to Art. 6 (1) (f) GDPR - in effectively finding interesting members as potential business contacts as well as in maintaining a CRM system with correct and complete data records. Should a member send us an inquiry or should a business relationship already exist, the legal basis for users from the European Union may also be Art. 6 (1) (b) GDPR. Further information on data protection at LinkedIn can be found at https://de.linkedin.com/legal/privacy-policy. Information on your rights can be found in our privacy policy under " What rights do I have as a data subject?". 

In principle, the processing of personal data by us takes place exclusively within the EU or the European Economic Area.

In individual cases, however, it may be necessary for us to transfer information to recipients in so-called "third countries". "Third countries" are countries outside the European Union or the Agreement on the European Economic Area in which it cannot be assumed without further ado that the level of data protection is comparable to that in the European Union. If the information transferred also includes personal data, we will ensure before such transfer that the required adequate level of data protection is guaranteed in the respective third country or at the recipient in the third country. This may result in particular from a so-called "adequacy decision" of the European Commission, which establishes an adequate level of data protection for a specific third country as a whole. Alternatively, we may also base the data transfer on the so-called EU standard contractual clauses agreed with a recipient or on a declaration of consent provided by you accordingly.

We will be happy to provide you with further information on the appropriate and adequate safeguards for compliance with an adequate level of data protection upon request. You can find more information on the so-called EU standard contractual clauses at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en and information on the adequacy decisions at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.

Dräger reserves the right to share the data you transmit to us with our subsidiaries and specialist retailers (dealers) throughout the world. However, we share it only if doing so is necessary to process your data for its intended purpose. 

Dräger sometimes uses external service providers for the technical processing of your data. We may transmit and process your data outside the country in which you reside or in one of the countries in which Dräger, its subsidiaries, specialist retailers (dealers), or service providers and suppliers operate. Such entities may be based outside the European Economic Area. Contractual obligations to comply with the provisions under data protection law are in place within the company and in our dealings with our specialist retailers (dealers), service providers, and suppliers. 

In principle, the processing of personal data by us takes place exclusively within the EU or the European Economic Area. 

In individual cases, however, it may be necessary for us to transfer information to recipients in so-called "third countries". "Third countries" are countries outside the European Union or the Agreement on the European Economic Area in which it cannot be assumed without further ado that the level of data protection is comparable to that in the European Union. If the information transferred also includes personal data, we will ensure before such transfer that the required adequate level of data protection is guaranteed in the respective third country or at the recipient in the third country. This may result in particular from a so-called "adequacy decision" of the European Commission, which establishes an adequate level of data protection for a specific third country as a whole. Alternatively, we may also base the data transfer on the so-called EU standard contractual clauses agreed with a recipient or on a declaration of consent provided by you accordingly. 

We will be happy to provide you with further information on the appropriate and adequate safeguards for compliance with an adequate level of data protection upon request. You can find more information on the so-called EU standard contractual clauses at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en and information on the adequacy decisions at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en. 

In principle, we store personal data as long as this is necessary for the purpose of processing or we have a legitimate interest in this storage and your interests in not continuing the storage or processing do not outweigh. This means that we generally only store your data for as long as this is necessary to provide our website and the associated services, or we are legally obliged to store this data. We also delete personal data without any action on the part of the respective data subject as soon as it is no longer required for the processing purpose or the storage is otherwise legally inadmissible. 

As a rule 

• the data is deleted or anonymized after the period of time specified above for the respective data processing or website function described in more detail; 
• the data processed in connection with a business relationship (in particular in connection with products ordered from us) will be deleted after expiry of the statutory retention periods; and 
• the data processed in connection with the customer account will be deleted upon deletion of the respective customer account, unless further storage is required to comply with legal or contractual retention periods in connection with the respective business relationship. 

Those personal data that we have to store to fulfil retention obligations will be stored until the end of the respective retention obligation. Insofar as we store personal data exclusively for the fulfilment of retention obligations, the processing in this regard is generally restricted so that it can only be accessed if this is necessary with regard to the purpose of the retention obligation. 

The data protection laws in the jurisdiction in which you reside may entitle you to specific rights in relation to your personal data. If the legal requirements are met, you as a data subject within the scope of Art. 4 No. 1 of the GDPR have various rights against us, which we would like to inform you about in more detail below. You will also find details on this directly in Art. 15 to 21 of the GDPR.  

In order to exercise these rights, you can simply contact our Group Data Protection Officer, whose contact details are provided above, or conveniently use the technical means provided by us.  

Right of access

You have the right to receive information from us about whether and what data we process about you. This includes, among other things, information about how long and for what purpose we process the data, where it comes from and to which recipients or categories of recipients we transfer it. In addition, we may provide you with a copy of this data.  

Right to rectification

As a data subject, you have the right to request that we rectify information about you that is not or no longer accurate without undue delay. In addition, you can request that we complete your incomplete personal data. If required by law, we will also inform third parties about this correction if we have transferred your data to them.  

Right to erasure (so-called "right to be forgotten")

As a data subject, you have the right to request that we erase your personal data without delay if one of the following reasons applies:  

• Your data is no longer necessary for the purposes for which it was collected or otherwise processed, or the purpose has been achieved;  
• You revoke consent and there is no other legal basis for the processing;  
• You object to the processing and there are no overriding legitimate reasons for the processing; in the case of use of personal data for direct marketing, a sole objection by you to the processing is sufficient;  
• your personal data have been processed unlawfully;  
• the erasure of your personal data is necessary for the purposes of complying with a legal obligation under Union or Member State law to which we are subject.  

Please note that your right to erasure may be restricted by legal provisions. These include in particular the restrictions listed in Art. 17 GDPR.  

Right to restriction of processing (blocking), Art. 18 GDPR  

As a data subject, you also have the right to request us to restrict the processing of your personal data if one of the following conditions is met:  

• You dispute the accuracy of your personal data for a period of time that allows us to verify the accuracy of the personal data;  
• The processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of your personal data;  
• We no longer need your personal data for the purposes of processing, but you need it for the assertion, exercise or defense of legal claims; or You have objected to the processing as long as it has not yet been determined whether our legitimate grounds prevail over yours.  

If you have obtained a restriction of processing in accordance with the above list, we will inform you before the restriction is revoked.  

Right of withdrawal for consents

You may withdraw any consent given to us at any time with effect for the future. This withdrawal can be made in the form of an informal communication to the above contact addresses or via the technical means provided by us for this purpose. If you withdrae your consent, this will not affect the lawfulness of the data processing carried out up to that point.  

Right to data portability

As a data subject, you have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transfer this data to others. Details and restrictions can be found in Art. 20 GDPR. The exercise of this right does not affect your right to erasure.  

Right to lodge a complaint with a supervisory authority

If you have the opinion that the processing of your data by us violates applicable data protection law, you have the right to lodge a complaint with one of the competent supervisory authorities, i.e. in particular the Independent Centre for Data Protection Schleswig-Holstein or the respective supervisory authority in the member state of your place of residence, your place of work or the place of the alleged data protection violation.

Right to object

As a data subject, you have the right to object at any time, on the grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions. In the event of such an objection, we will no longer process the personal data concerning you, unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms as a data subject, or the processing serves the purpose of asserting, exercising or defending legal claims.  

If we process personal data for the purpose of direct marketing, you as the data subject have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing.  

If you, as the data subject, object to processing for direct marketing purposes, we will no longer process the personal data concerned for these purposes.