Data protection policy
For information about the data controller (“Dräger” or “we”), as defined under the Data Protection Act, please refer to our Provider Identification (for users from the European Union: Article 4 (7) of the General Data Protection Regulation). Notwithstanding the above, the Company of Dräger responsible for the provision of goods or services is the Dräger Company that is your contractual partner for the provision of the goods or services within the meaning of the Data Protection Act. Information on the relevant Dräger Company can be found in the terms and conditions of delivery of the relevant goods or services.
What are my data protection rights?
You have the right to:
Who can I contact at Dräger if I have questions about data protection?
Our data protection officer is happy to answer your questions about the processing of your personal data and handle your requests for information, amendments or deletion.
Drägerwerk AG & Co. KGaA
Moislinger Allee 53-55
What data does Dräger process from me?
When you visit our website, we process personal data that your browser transmits to our server. These data (so-called log files) are technically necessary to display our website and to ensure stability and security.
The following data is recorded in log files:
Information on request and response headers, such as HTTP status (e.g. success or failure), web page where the request originated, user agent information indicating browser, operating system and versions. The processing is based on Art. 6 (1) lit. f) GDPR to protect our legitimate interest in the smooth operation of our website. “For what purposes does Dräger use my data?”
To make our offer as user-friendly as possible, we too, like many other companies, use so-called cookies and similar technologies.
What are cookies?
The processing of personal data collected through cookies that are technically necessary for the provision of our offers takes place on the basis of Art. 6 (1) f) GDPR to protect our legitimate interest in the trouble-free provision of our offers on our website. Otherwise, we process your personal data in connection with cookies (in particular for the provision of certain functionalities, for analysis and advertising purposes and in connection with the external providers described below) only if you have given us your prior consent in accordance with Art. 6 (1) a) GDPR. The processing is for the purpose of advertising, market research and the design of our website to meet your needs.
What tools does Dräger use for analysis and marketing?
When you visit our website, information about its use is automatically collected. This information is important to Dräger because it is the only way for us to find out what content on our websites is of interest to you and how we can continue to improve our services for you in the future. To this end, we use the following:
This website uses the web analytics service Adobe Analytics to evaluate users’ access to this website. The analysis involves storing cookies on your end device and collecting information about your end device, which is also stored on servers of our contract processor Adobe Systems Software Ireland Limited, located at 4-6 Riverwalk, Citywest Business Park 0000 Dublin 24, Ireland (“Adobe”). The information stored on Adobe servers cannot be directly linked to a specific person because Adobe Analytics is used with the settings “Before Geo-Lookup: Replace visitor’s last IP octet with 0” and “Obfuscate IP-Removed”. The setting “Before Geo-Lookup: Replace visitor’s last IP octet with 0” ensures that the IP address is anonymised by replacing the last octet of the IP address with zeros before this so-called geolocation. The estimated location of the user is added to the tracking packet that still contains the full IP address for statistical analysis. Before the tracking packet is saved, the IP address is replaced by a single fixed IP address – this is called a generic IP address – if the setting “Obfuscate IP -Removed” is configured. This means that the IP address is no longer included in any stored record.
For our online marketing activities, we use HubSpot, an integrated software solution from HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA or HubSpot European Office, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland (“HupSpot”) which allows us to cover a wide range of aspects, including:
For contact forms on some websites, we may also use forms that collect and store, in addition to the personal data requested, the website most recently visited by the user (‘referrer URL’).
For what purposes does Dräger use my data?
Dräger collects your data for
the following purposes:
The following section applies to the processing of your application data on our job website.
Would you like to register as an applicant on Dräger’s job site? Then you must first create a user account. A user account contains at least the following information.
We are required to retain your user account data. We retain this data for a period of six months after which you will be asked for your consent to data processing again. Once you have granted your consent, your account will then be retained for an additional six months. If the retention period for your account expires soon and you are still in the middle of applying for a job vacancy with Dräger, the period will be extended until your application process is completed.
We store information you provide us through the job website as part of your application along with your name for up to three months after the application process is completed. After this, the results are only stored in anonymised form for statistical evaluation. It is not possible to draw any conclusions about your person on the basis of this statistical data.
Identification of rejected applicants
Have you been rejected after your application to Dräger? In this case, we keep a data set to identify you if you reapply to Dräger for the same position. However, this data set does not contain your full professional qualifications.
The data set for identification contains the following information:
Identification data will be permanently deleted no longer than three months after the application process is completed.
Simultaneous job applications at several Dräger Group companies
Have you simultaneously applied for several positions at different companies in the Dräger Group? If so, the relevant human resources departments where you submitted your application directly will be informed that you have several applications running simultaneously.
Accessibility of applicant data
Have you applied for a specific position (direct application)? Then your data will be made accessible to the department advertising the position and to the HR department concerned.
With your consent, we record your application data in a talent pool for six months. We store your contact and application data in this talent pool in order to find potentially suitable candidates for vacancies. In such a case, we will contact you.
Security when processing personal data
Your data is automatically encrypted during transmission. The steps we take to secure your data are always in line with the latest technology.
Online test for trainees (Germany)
To assess your suitability as part of your application process for trainees, Dräger processes the following personal data of the applicant as part of an online test:
This data is deleted as soon as the application process is completed. Nevertheless, the aforementioned time limits for data deletion also apply to the applicant’s user account.
For users from the European Union, the legal basis for processing this data is the following declaration of consent you have given within the meaning of Article 6(1)(a) AVG:
Processing of personal data: Yes, I consent to Dräger processing my personal data for the purpose of processing my application in accordance with the data protection declaration.
Have you signed up for one of our newsletters or expressed an interest in information from Dräger in another context (e.g. when filling in a contact form)? If so, we may use your e-mail address to send you information (e.g. invitations to events, webinars or product information) based on your interests. You can object to the use of your data at any time if you are no longer interested in our information. To do so, please click on the “Cancel” link in the relevant Dräger newsletter.
For users from the European Union, the legal basis for processing this data is the declaration of consent you have given within the meaning of Section 6(1)(a) AVG.
Have you used one of our contact forms to request information about Dräger products and services? In general, we use the data you provide in the form to process your request. You can also give us your separate consent before sending your contact request if you are also interested in additional information, such as invitations to events, webinars or product information: For users from the European Union, the legal basis for processing this data is the declaration of consent you have given within the meaning of Article 6(1)(b) AVG:
Supply of goods and services
When you order goods or services from Dräger, we use the personal data you provide to process your order or deliver the requested goods. We may also use the personal data you provide to take the necessary steps prior to contract conclusion, answer your related questions, send shipping and billing information, and process or provide customer feedback and customer service. For users from the European Union, the legal basis for processing this data is the performance of a contract or the planned conclusion of a contract within the meaning of Article 6(1)(b) AVG.
Customer satisfaction surveys
Have you recently bought or had a Dräger product repaired? We would like to know whether you were satisfied with the service we provided and whether there is anything we can do differently in the future. To this end, we use the contact data shared in this context to contact a randomly selected group of customers after our interaction. To contact customers, Dräger sometimes uses external service providers with whom corresponding data protection agreements have been concluded. For users from the European Union, the legal basis for processing this data is our legitimate interest within the meaning of Article 6(1)(f) AVG: Our legitimate interest is derived from the following purposes of data collection: determining the satisfaction of existing Dräger customers after the purchase or repair of a Dräger product. Since you are already a Dräger customer at that time, we assume that you consent to us contacting you to ask whether you are satisfied with us.
We strive to keep improving our website for you. To do this, we use various types of web analytics tools that give us answers to specific questions, such as: Which of our pages did you visit? Which links did you click on? You will find a list of these tools under “What tools does Dräger use for analysis and marketing?”. For users from the European Union, the legal basis for processing this data is Article 6(1)(f) AVG: Our legitimate interest is derived from the following purposes of data collection: ensuring trouble-free connection and user-friendliness of our website and/or application, and analysis of system security and stability.
Does Dräger share my information with others?
Dräger reserves the right to share the data you send with our branches and sales partners (dealers) around the world. However, we only share this data if its processing is necessary for the intended purpose. For the technical processing of data, Dräger sometimes uses external service providers. We may transmit and process your data outside the country in which you reside or in one of the countries in which Dräger or branches or in which sales partners (dealers) or service providers and suppliers of Dräger operate. Such entities may be located outside the European Economic Area. Contractual obligations regarding compliance with data protection legislation exist both within the Company and with our sales partners, service providers and suppliers.
Is data transferred to countries outside the EU or EEA, respectively?
In principle, the processing of personal data by us takes place exclusively within the EU or the European Economic Area, respectively.
However, in individual cases it may be necessary for us to transfer information to recipients in so-called “third countries”. “Third countries” are countries outside the European Union or the Agreement on the European Economic Area whose level of data protection cannot simply be assumed to be comparable to that in the European Union. If the information transferred includes personal data, we will ensure before such a transfer that the required adequate level of data protection is ensured in the third country concerned or at the recipient in the third country. This may in particular result from a so-called “adequacy decision” of the European Commission, which sets an appropriate overall level of data protection for a given third country. Alternatively, we can also base the data transfer on so-called EU model contractual clauses agreed with a recipient or on a declaration of consent given by you accordingly. Upon request, we will be happy to provide you with further information on the appropriate and sufficient safeguards to ensure an adequate level of data protection. Further information on the so-called EU model contractual clauses (in English) can be found at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en and information on the adequacy decisions (in English) at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.
How long are personal data kept?
In principle, we store personal data as long as this is necessary for the purpose of processing or we have a legitimate interest in such storage and your interest in discontinuing the storage or processing does not outweigh this. This means that we do not retain your data for longer than is necessary to provide our website and related services or as long as we are legally obliged to retain this data. We also delete personal data without any action on the part of the data subject as soon as this data is no longer necessary for the purpose of processing or if the storage is otherwise legally inadmissible.
As a rule
Which plug-ins and social media channels does Dräger use?
In addition to its website, Dräger also has an online presence on social networks and platforms. This is how we communicate with our active customers, stakeholders and online visitors (users). User data may also be processed outside the European Union. There may be risks for users due to the more difficult enforcement of their rights. User data is often processed for market research and advertising purposes and may be used to create user profiles based on user behaviour and resulting interests. Based on these user profiles, advertisements can be placed within and outside the platforms designed to match users’ interests. The user profiles also store data independently of the devices used by users.
For users from the European Union: The legal basis for processing users’ personal data is based on our legitimate interests in and purposeful information for and communication with users in accordance with Article 6(1)(f) AVG. If users are asked by the relevant platform providers to consent to the above data processing, the legal basis for processing is Article 6(1)(a), Article 7 AVG. Please inform yourself of the further display of the relevant processing operations and the possibilities for objection (opt-out) and take note of the information from the providers linked below.
We use a feed from the Instagram service on our website. Instagram is an audio-visual social media platform that allows users to share photos and videos and distribute that data on other social networks (“Instagram”). The company operating the Instagram services for users in the European Economic Area is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. The Instagram feed is integrated into our website via an iFrame and allows us to show you our Instagram content (such as photos and videos) on our website. The feed is disabled (greyed out) by default. Only when you click the “I agree” button, your browser makes a request to Instagram’s media server, which also transmits your IP address, so that the iFrame with our Instagram content can be shown to you. This is technically necessary for the transmission. The legal basis for this is Article 6(1)(a) AVG.
Our websites also contain links to our Instagram account so that you can follow us on Instagram.
We have embedded videos from the video service YouTube, from YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Video services in the European Economic Area and Switzerland are thereby provided by the European Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”).
We use the embedded YouTube videos only in so-called extended data protection mode. This means that YouTube does not store cookies for users who only visit the website with the embedded YouTube video and do not click on the video to start playback of the YouTube video. If you click on the embedded YouTube video player on our website, YouTube may in certain cases store cookies on your end device and receive personal data from you. If you are simultaneously logged in to YouTube, YouTube may assign any collected data to your YouTube account. If you do not want this, please do not use this function or start the YouTube videos. The processing of personal data collected in the context of the use of YouTube takes place pursuant to Article 6(1)(a) of the AVG, based on the declaration of consent given by you to play the respective video. Your consent may be revoked at any time for the future (see Section VII.5 of this data protection information). More information about YouTube can be found at https://www.youtube.com/yt/about/de/. Information on data processing and data protection by YouTube can be found in Google’s general privacy statement: https://policies.google.com/privacy?hl=de&gl=de.
LinkedIn LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland, https://www.linkedin.com/legal/privacy-policy
comScore: comScore, 11950 Democracy Drive, Suite 600, Reston, VA 20190, United States, https://www.comscore.com/About_comScore/Privacy_Policy
What rights do you have as a data subject?
As a data subject of data processing within the meaning of Art. 4 No. 1 AVG, you have various rights towards us, about which we would like to inform you in more detail below. Details of these can also be found directly in Articles 15 to 21 of the AVG.
To exercise these rights, you can simply contact our data protection officer, whose contact details can be found above, or you can use the technical means we provide (e.g. the cookie settings to manage or revoke consent given via this means).
Right to information, Art. 15 AVG
You have the right to receive information from us about whether and what data we process about you. This includes information about how long and for what purpose we process the data, where it comes from and to which recipients or categories of recipients we transfer it. In addition, we may provide you with a copy of this data.
Right of rectification, Art. 16 AVG
As a data subject, you have the right to have us promptly correct information about you that is not or no longer correct. In addition, you may request that we supplement your incomplete personal data. If required by law, we will also notify third parties of this correction if we have provided your data to them.
Right to erasure (so-called "right to be forgotten"), Art. 17 AVG
As a data subject, you have the right to request us to delete your personal data without delay if any of the following reasons apply:
your data are no longer necessary for the purposes for which they were collected or otherwise processed, or the purpose has been achieved;
you withdraw your consent and there is no other legal basis for the processing; you object to the processing and there are no compelling legitimate grounds for the processing; where personal data are used for direct marketing, your objection to the processing is sufficient; your personal data have been processed unlawfully; erasure of your personal data is necessary to comply with a legal obligation under EU law or the law of a Member State to which we are subject. Please note that your right to be forgotten may be limited by law. These include, in particular, the restrictions set out in Art. 17 AVG and § 35 BDSG (German Federal Data Protection Act).
Right to restriction of processing (blocking), Art. 18 AVGO
Furthermore, as a data subject, you have the right to request us to restrict the processing of your personal data if one of the following conditions is met: you dispute the accuracy of your personal data for a period of time that allows us to verify the accuracy of the personal data; the processing is unlawful and you object to the erasure of the personal data and instead request the curtailment of the use of your personal data; we no longer need your personal data for the purposes of processing, but you need it for the establishment, exercise or defence of legal claims, or you have objected to the processing, as long as it has not yet been established whether our legitimate grounds outweigh yours. If you have achieved a restriction on processing in accordance with the above enumeration, we will notify you before the restriction is lifted.
Right of withdrawal for consents, Art. 7(3) AVG
You may revoke the consents given to us at any time with validity for the future. This revocation can take place in the form of an informal communication to the contact addresses above or via the technical means we have made available for this purpose. If you revoke a consent, this does not affect the lawfulness of the data processing that has taken place up to that point.
Right to data portability, Art. 20 AVG
As a data subject, you have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable form and to pass it on to others. Details and restrictions can be found in Art. 20 AVG. The exercise of this right does not affect your right to erasure (right to be forgotten).
Right to complain to supervisory authority, Art. 77 AVG
If you believe that our processing of your data is in breach of applicable data protection legislation, you have the right to lodge a complaint with one of the competent supervisory authorities, in particular with the Independent Data Protection Centre Schleswig-Holstein or the relevant supervisory authority in the Member State of your place of residence, your place of work or the location of the alleged data protection breach.
Right to object, Art. 21 AVG
As a data subject, you have the right to object to the processing of your personal data under Art. 6(1)(e) or 6(1)(f) of the AVG on account of your particular situation at any time; this also applies to profiling under these provisions. In the event of such an objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms as a data subject, or if the processing serves the establishment, exercise or defence of legal claims. If we process personal data for the purpose of direct marketing, you as a data subject have the right to object to the processing of your personal data for such marketing at any time; this also applies to profiling insofar as it relates to such direct marketing. If you as a data subject object to processing for direct marketing purposes, we will no longer process the personal data concerned for such purposes.