1. Name and contact details of controller
This privacy notice applies to data processing by:
Valeta GmbH
Glarnerstr. 2
D-79713 Bad Säckingen
Telefon: 0049 (0) 7761 55 05 0
Mail: info@valeta-group.com
2. Name and contact details of the data protection officer
Vanessa Egle
E-Mail: datenschutz@drumag.com
Our external data protection officer Vanessa Egle can be contacted directly via the e-mail address provided and at the above address. Please send postal correspondence to the attention of Ms. Vanessa Egle and indicating “Confidential” or “Data Protection”.
3. Processing of your personal data
When visiting our website:
When you visit our website, data is automatically collected by our IT systems. This is mainly technical data (e.g. internet browser, operating system or time of page view). The collection of this data automatically takes place as soon as you enter our website.
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.
Personal data such as name, address, telephone number, e-mail address or other identifying information is not collected. We will only collect this data if you provide it to us voluntarily, for example by sending us an e-mail.
Accordingly, you can visit our website without providing any personal data.
We reserve the right to anonymize the data you provide, to store it in aggregated form and, if necessary, to combine it with other data in order to be able to compile anonymous statistics (e.g. on the number of visitors).
If you contact us by e-mail, the data you provide will be stored automatically. We process your personal data exclusively for answering your inquiries and for the case of follow-up questions, or they are stored for further contact with you.
We point out that data transmission on the Internet, for example, when communicating by e-mail, bear the risk of security gaps, and therefore a complete protection of data from access by third parties cannot be guaranteed from our side.
We point out that the complete protection of data, e.g. when communication via e-mail, cannot be guaranteed from our side due to the risk of security gaps, which are out of our control and might lead to access of third parties.
4. Storage, use and processing of your data
We use, process and store your personal data to fulfill your requests, such as to answer your inquiries, to process orders and to prepare, negotiate, execute and fulfill contracts and to provide certain information to you.
5. Sharing your data
Your data will only be passed based on contractual agreements
(Article 6 1b GDPR) or legal obligations (Article 6 1c GDPR).
Within the scope of commissioned processing according to Article 28 GDPR, we use external service providers (e.g. in the area of IT services). These have been carefully selected and commissioned by us and are bound by our instructions.
This website is hosted by an external service provider. The personal data collected on this website is stored on the provider servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.
The provider is used for the purpose of fulfilling contracts with our potential and existing customers (Article 6 1b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Article 6 1f GDPR).
6. Your rights regarding the processing of your personal data
To exercise your rights, please contact datenschutz@drumag.com
a) Right of access by the data subject
You have the right to request information about your personal data processed by us.
As part of your data subject rights, you can request the following:
• Information on processing purposes and categories of personal data concerned
• Categories of recipients to whom your personal data have been or will be disclosed
• Storage duration
• Existence of a right to rectification, erasure, restriction of processing or object to such processing
• The right to lodge a complaint with a supervisory authority
• Origin of your data if it was not collected by us
• Existence of automated decision-making, including profiling
b) Right to rectification
You have the right to have inaccurate or incomplete personal data corrected without undue delay.
c) Right to erasure (“right to be forgotten”)
You have the right to immediate deletion (“right to be forgotten”) of your personal data if, for example, the purpose of the processing is no longer necessary, upon revocation of consent or if there is no legal basis.
d) Right to restriction of processing
You have the right to restrict the processing of your personal data if, for example, the accuracy of the data is contested, the processing is unlawful and you refuse the deletion and instead request the restriction of use if we no longer need it for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims
e) Right to data portability
You have the right to have personal data which you have provided to us handed over to you in a structured, commonly and machine-readable format or transferred to another controller, provided that the processing is automated.
A direct transfer of your personal data to another controller will only take place if this is technically feasible.
f) Right to object
You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
Your data will no longer be processed after a revocation, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
Furthermore, you may object to the processing of your personal data for the purpose of direct marketing at any time.
The lawfulness of the data processing carried out until the revocation remains unaffected.
g) Automated individual decision making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This means that you have the right to question this decision and, if necessary, to have it rectified.
h) Right of complaint to a supervisory authority
In the event of violations of data protection law or if you believe that the processing of your personal data is unlawful, you have the right to lodge a complaint with a supervisory authority.
7. Protection of your data when visiting our website
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by others.
8. Data collection on our website
a) Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
• Visited pages (subpages)
This data cannot be assigned to a specific person.
We are not able to draw conclusions about your identity. The data of the log files are always stored separately from other personal data.
We process this data to deliver the content of our website and to ensure the functionality of our information technology systems, to optimize our website and to evaluate system security and stability.
This data is not merged with other data sources.
The basis for the data processing is Article 6. 1f GDPR. We have a legitimate interest to ensure the error-free presentation and security of our website.
b) Contact form
If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Article 6 1b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Article 6 1f GDPR) or on your consent (Article. 6 1a GDPR) if this has been requested.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.
c) Processing of applicant data
You have the possibility to apply for a job with us. (e-mail, postal mail, application form)
To process online applications, we use the applicant management software MANA HR. Information on data processing can be found at https://mana-hr.de/datenschutz
If you send us an application, we will process your contact data and your application documents. Your personal data will only be passed on within our company to persons who are involved in processing your application. In the event of a successful application, the data you submit will be stored in our data processing systems in accordance with Article 6 1b GDPR, for the purpose of implementing the employment relationship. If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have submitted for up to 6 months after completion of the application process (rejection or withdrawal of the application) based on our legitimate interests pursuant to Article 6 1f GDPR.
Subsequently, the data will be deleted and the physical application documents destroyed. The
Retention is for evidence purposes in the event of a legal dispute. If it is apparent that the data is still needed after the 6-month period has expired (e.g., due to an impending or pending legal dispute), it will not be deleted until the purpose for continued retention no longer applies. Longer storage may also take place if you have given your express consent in accordance with Article 6 1a GDPR or if legal storage obligations prevent deletion.
9. Third-party analytics and tools
a) Cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your terminal device and saved by your browser. They serve to make the offer on this website more user-friendly, effective, and secure.
The cookies used on this website are so-called “session cookies”. These are automatically deleted from your end device after the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can set your browser to be informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.
For information on cookie settings, please refer to the user manual of the browser you are using.
Cookies required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function, registration) are stored on the basis of Article 6 1f GDPR. We as the website operator have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. If other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, they are treated separately in this privacy notice.
Note on data transfer to the USA and other third countries:
Among other things, tools from companies based in the USA or other third countries that are not secure under data protection law are integrated on our website. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that data protection comparable to the level as in the EU cannot be guaranteed in these countries.
For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.
b) Google Tag Manager
Our website uses the Google Tag Manager, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that can be used to integrate tracking or statistical tools and other technologies on this website. No user profiles are created by the Google Tag Manager, it does not store cookies and does not perform any independent analyses. It is used for the administration and playout of the tools integrated via it. It records your IP address, which is transmitted to the parent company Google in the United States.
c) Google Analytics
Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by cookies about your use of our website is usually transferred anonymously to a Google server in the USA and stored there.
Google Analytics gives us the opportunity to analyze the behavior of website visitors. We receive various user data such as the origin of the user, duration of the visit, page views and the operating system used. This data is assigned to the user’s terminal device. There is no assignment of a user ID. Google Analytics also uses technologies that enable the recognition of the user (e.g. cookies or device fingerprinting).
Google Analytics is used in accordance with Article 1 para. 1 lit. 1. You can revoke your consent at any time for the future.
More information on the handling of user data at Google Analytics can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de.
d) LinkedIn
We only use the LinkedIn button embedded into our pages as a hyperlink to our LinkedIn page. If you click on the LinkedIn button while you are logged into your account, LinkedIn can assign the visit to our pages to your user account. We would like to point out that, as the provider of the LinkedIn fan page, we have no knowledge of the content of the transmitted data or its use.
You can find further information on this in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy
If you do not want LinkedIn to be able to associate your visit to our pages with your user account, please log out of it.
10. Actuality and change of the privacy notice
The data protection information was adjusted in March 2024 and corresponds to the status. We reserve the right to adapt it accordingly in the event of changes.
