1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data includes all data that can be used to personally identify you.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Joel Ladwig and Gerrit Holzer, drimaco GbR, Bausenhagener Straße 3a, 58730 Fröndenberg, Germany, Tel.: +491729329068, Email: contact@drimaco.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Data will not be disclosed or otherwise used. However, we reserve the right to subsequently review server log files if there are specific indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., inquiries or orders directed to the controller). You can recognize an encrypted connection by the string "https://" and the lock icon in your browser line.
3.1 Amazon Web Services
We use the system of the following provider to host our website and present its content: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.
All data collected on our website is processed on the provider's
servers.
We have concluded a data processing agreement with the provider to
ensure the protection of our website visitors' data and to prevent
unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
3.2 AWS-CloudFront
We use a Content Delivery Network (CDN) provided by Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.
This service enables us to deliver large media files such as graphics, content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
To make your visit to our website more appealing and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing your browser (so-called "session cookies"), while others remain on your device and allow us to save settings for future visits (so-called "persistent cookies"). You can find the specific storage duration of persistent cookies in your browser's cookie settings.
If personal data is processed using cookies deployed by us, the processing is carried out either for the performance of the contract in accordance with Art. 6(1)(b) GDPR, based on your consent pursuant to Art. 6(1)(a) GDPR, or to safeguard our legitimate interest in ensuring the optimal functionality of the website as well as a customer-friendly and effective design of the site visit in accordance with Art. 6(1)(f) GDPR.
You can configure your browser to inform you about the placement of cookies and decide on their acceptance individually or to exclude cookies in certain cases or in general.
Please note that if cookies are not accepted, the functionality of our website may be limited.
When contacting us (e.g., via contact form or email), personal data is collected. The data collected when using a contact form is evident from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after the final processing of your inquiry, provided that no statutory retention obligations apply and it can be inferred from the circumstances that the matter has been fully resolved.
You can register on our website by providing personal data. The personal data processed for registration is evident from the input form used for registration. We use the so-called double opt-in procedure for registration, which means that your registration is not complete until you confirm your registration via a confirmation email sent to you for this purpose by clicking on the link contained therein. If your confirmation is not received within 24 hours, your registration will be automatically deleted from our database. Providing the previously mentioned data is mandatory. Any other information can be provided voluntarily through the use of our portal.
When you use our portal, we store your required data for contract fulfillment, including any details on payment methods, until you permanently delete your access. We also store the voluntary data you provide during your use of the portal, as long as you do not delete it beforehand. All information can be managed and modified in the protected customer area. The legal basis is Art. 6(1)(f) GDPR.
Additionally, we store all content you publish (e.g., public posts, wall entries, guestbook entries, etc.) to operate the website. We have a legitimate interest in providing the website with the full user-generated content. The legal basis for this is Art. 6(1)(f) GDPR. If you delete your account, your public statements, especially in the forum, remain visible to all readers; however, your account is no longer accessible. All other data will be deleted in this case.
Amazon SES
Our email newsletters are sent via the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA.
Based on our legitimate interest in effective and user-friendly newsletter marketing, we forward the data you provide during newsletter registration to this provider in accordance with Art. 6(1)(f) GDPR, so they can send newsletters on our behalf.
Subject to your explicit consent pursuant to Art. 6(1)(a) GDPR, the provider also performs statistical analysis of newsletter campaigns using web beacons or tracking pixels included in the emails sent. These allow us to measure opening rates and specific interactions with the contents of the newsletters. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed but not combined with other datasets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision by the European Commission.
8.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your website usage.
By default, no cookies are used by Google Analytics 4 unless you explicitly agree to their use. Instead, information about your usage behavior is collected and processed using so-called pings (small data packets sent to a host device). The data collected includes your IP address, which Google truncates to exclude direct personal identification.
The information is transmitted to Google servers and processed there. Data transfers to Google LLC in the USA may also occur.
Google uses the collected information on our behalf to evaluate your website use, compile reports on website activity, and provide additional services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.
All processing described above, including data transmission via "pings" and the possible setting of cookies by Google Analytics, occurs only if you have given your explicit consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your website visit. You can revoke your consent with effect for the future at any time by disabling this service through the "cookie consent tool" provided on the website.
We have concluded a data processing agreement with Google to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.
For additional legal information about Google Analytics 4, visit https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en&gl=en, and https://policies.google.com/technologies/partner-sites.
9.1 Under applicable data protection laws, you have the following rights with respect to the processing of your personal data:
9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST PURSUANT TO ART. 6(1)(F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA AFFECTED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.
The duration of the storage of personal data is determined based on the applicable legal basis, processing purpose, and—if applicable—the respective statutory retention period (e.g., commercial and tax law retention periods).
If personal data is processed based on explicit consent under Art. 6(1)(a) GDPR, the data is stored until you revoke your consent.
If statutory retention periods apply to data processed under Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention periods expire, provided the data is no longer required for contract fulfillment or initiation and no legitimate interest in further storage exists on our part.
When processing personal data under Art. 6(1)(f) GDPR, such data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing serves to establish, exercise, or defend legal claims.
Personal data processed for direct marketing purposes under Art. 6(1)(f) GDPR is stored until you exercise your right to object under Art. 21(2) GDPR.
Unless otherwise specified in this policy, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.