PRIVACY POLICY

1. Data Controller

The data controller is Draftex Automotive GmbH, Bahnstrasse 29, DE 47929 Grefrath.

Contact: info@draftex.de.

2. Collected Data

We collect the following personal data via our contact and recruitment forms:

• Name and surname

• Phone number

• Email address

• Documents submitted for recruitment purposes (e.g., CV)

• IP address

3. Purpose of Data Processing

Personal data is processed to:

• Handle recruitment processes

• Respond to inquiries from clients, suppliers, or stakeholders

4.Legal basis of data processing

The personal data provided in the contact form will be processed for the purpose of responding to inquiries and conducting the current recruitment process, based on:

• Art. 6(1)(f) GDPR – the legitimate interest of the controller in handling inquiries and communication,

• Art. 6(1)(b) GDPR – if the inquiry is related to the recruitment process,

• Art. 6(1)(a) GDPR – if the candidate has given explicit consent to further processing,

• Art. 6(1)(c) GDPR – if the processing is necessary to comply with legal obligations.

Providing the data contained in recruitment documents is voluntary, but necessary for participation in the recruitment process at Draftex Automotive GmbH.

The data of job candidates may be shared with entities acting on behalf of the Data Controller, such as recruitment support service providers, under relevant data processing agreements.

Additionally, the website uses Google Analytics for traffic analysis and Google reCAPTCHA v2 to protect against spam and abuse. These services may process data based on Art. 6(1)(f) GDPR (legitimate interest in ensuring website security and performance).

5. Data Retention 

Personal data is stored for a maximum of 1 year or until consent is withdrawn.

6. Third-Party Services and Plugins

The website uses the following third-party services:

• Google Webkit (for analytics)

• Google reCAPTCHA v2 (spam protection)

• Google Maps (location services)

• YouTube iframes (embedded videos)

• Plugins: Polylang (automatic language detection)

These services may involve the transfer of data outside the European Economic Area (EEA), particularly to the United States. Google ensures an adequate level of data protection through the use of Standard Contractual Clauses (SCCs). Users acknowledge that data transfer to third countries carries certain risks.

7. Data Subject Rights

The data subject has the right to:

• access their personal data,

• request their rectification, erasure, or restriction of processing (under Art. 18 GDPR),

• withdraw consent at any time if the processing is based on consent (Art. 6(1)(a) GDPR),

• object to processing based on legitimate interest,

• lodge a complaint with the Federal Commissioner for Data Protection and Freedom of Information (BfDI) in Germany – (Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit, Husarenstraße 30, 53117 Bonn, Germany, www.bfdi.bund.de).

8. Legal Basis

Data processing is based on user consent (Art. 6(1)(a) GDPR) or the necessity to fulfill pre-contractual requests (Art. 6(1)(b) GDPR).

9. Data Security

We do not transfer personal data outside the EEA unless required by third-party services as outlined above. The website is hosted on servers in Frankfurt, Germany.

10. Final Provisions

This privacy policy may be updated as necessary. Users are encouraged to review it periodically.

Google Analytics & reCAPTCHA

This website uses Google Analytics to collect anonymous statistical data about user interactions. Google may store cookies on the user’s device and process data in accordance with Google’s Privacy Policy. Users can manage their cookie preferences through their browser settings.

Additionally, Google reCAPTCHA v2 is implemented to protect the website from automated abuse (bots). By using the contact form, the user agrees to Google’s data processing policies.

Providing personal data in the contact form is voluntary but necessary to receive a response.
Personal data will not be used for automated decision-making, including profiling.
No data is transferred outside the European Economic Area (EEA) unless explicitly stated in Google’s policies.