With this privacy policy, we would like to inform you about the nature, scope, and purpose of the processing of personal data on our website. Personal data includes all data that has a personal reference to you, such as name, address, email address, or user behavior.

Responsible for data processing:

Responsible for data processing are: RAe Dr. Meinulf Dregger & Hendrik Hagen Erich-Ponto-Straße 22 01097 Dresden Germany Phone: +49-351-808010 Email: info@dregger-hagen.de Website: www.dregger-hagen.de

Processing of your data in the context of our core business activities:

We process your personal data transferred to us within the framework of the contractual and pre-contractual relationships between us. The extent, nature, purpose, and necessity of the processing depend on the underlying contractual relationship. For this purpose, we store and process your data in the computer systems we use. The data processed by us may include the following:

• Name and address

• Email address and phone number

• Contract data

• Payment data

The processing is limited to the data necessary and appropriate for responding to inquiries and/or fulfilling a contract concluded between you and us. Personal data will only be disclosed to third parties if it is necessary for the provision of the service or for the organization of our business operations for accounting and compliance with legal obligations. In this case, only data that is necessary and appropriate for the fulfillment of the contract or for the execution of accounting and compliance with legal obligations will be transferred to external service providers. The processing by us is carried out according to your instructions or legal provisions.

Legal basis: The processing of your personal data and its transmission to third parties is carried out in accordance with Art. 6 para. 1 lit. b) GDPR and serves to fulfill the contract between you and us. In other cases, we will only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) GDPR, or if there is a legitimate interest, Art. 6 para. 1 lit f. GDPR. This is the case, for example, if it is necessary to pursue our claims. Deletion: Your data will be deleted as soon as it is no longer necessary for the fulfillment of contractual or legal duties of care and for handling any warranty and similar obligations. Legal retention periods remain unaffected.

Web hosting

To maintain our online presence, we use an internet service provider whose server hosts the website (hosting) and makes our site available on the internet. The internet service provider processes contact data, content data, contract data, usage data, inventory data, as well as meta- and communication data on our behalf. Name and address of the internet service provider: confuture Innovationssysteme GmbH Gohliser Str. 8, 04105 Leipzig, Germany. You can view their privacy policy here: https://www.confuture.com/datenschutz/ Legal basis: The internet service provider processes the aforementioned data on our behalf, Art. 28 GDPR. The data processing is based on our legitimate interest in providing our internet offering efficiently and securely, Art. 6 para. 1 lit. f) GDPR. If you use our website purely for informational purposes, only the personal data that your browser transmits to its server will be collected by our internet service provider. These data are:

• IP address

• date and time of access to our website

• time zone difference to Greenwich Mean Time (GMT)

• access status (HTTP status)

• transferred data volume

• internet service provider of the accessing system

• the browser type and its version used by you

• the operating system used by you

• the website from which you may have accessed our website

• the pages or subpages you visit on our website.

The aforementioned data is stored as log files on the servers of our internet service provider. This is necessary to display the website on the device you are using and to ensure its stability and security. Our legitimate interest in data processing lies in the purposes mentioned above. Legal basis: Data processing is carried out based on our legitimate interest in efficiently and securely providing our internet service, Art. 6 para. 1 lit. f) GDPR. Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on the device you are using. Cookies do not transmit viruses nor can they execute programs. Rather, they primarily serve to exchange information between the device you are using and our website, to make our internet offering more user-friendly and effective for you. It is important to distinguish between temporary (transient) cookies and persistent cookies. Transient cookies include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to the common session. This way, our website recognizes your computer when you return to our website. Session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a specified duration, which can vary depending on the cookie. You have the option to delete these cookies at any time in your browser’s security settings. The cookies are used to make our website more user-friendly. Some elements of our website require the calling browser to be identified even after a page change. These cookies may contain information about language settings or login information. In addition, we also use cookies on our website that enable an analysis of your visit to our web pages. These cookies may store information about entered search terms, frequency of page views, or the use of website functions. This allows us to understand how often and in what way the website and its functions are used on the Internet. They serve to continuously improve the quality and user-friendliness of our website, especially its content and functions. The data collected in this way is pseudonymized through technical measures. Therefore, it is not possible to assign the data to your person. The data is not stored together with other personal data concerning you. Our legitimate interest in data processing lies in the purposes mentioned above. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR. Since cookies are stored on your computer, you as a user also have full control over the use of cookies. You have the option to specify in your browser’s security settings whether cookies are stored at all. You can, for example, choose to accept no cookies at all or only on request, or specify that cookies are deleted after each closing of your browser. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Storage period/Deletion

We delete or block your personal data as soon as the purpose of storage is achieved or no longer exists. Storage beyond this period only takes place if required by national or European regulations. Blocking or deletion of the data occurs in this case when the storage period prescribed in the respective regulations has expired, unless we need your data to fulfill a contract concluded between us or if it is necessary to assert, exercise, or defend legal claims.

Information about the contact options we provide

If you contact us via email, telephone, fax, post, our contact form, or any other means and provide us with personal data such as your name, telephone number, or email address, or provide further information about yourself or your concerns, this data will be stored and processed by us for the purpose of processing your inquiry. Legal basis: If you submit your inquiry in the context of contractual or pre-contractual relationships with us, the legal basis for processing your data is Art. 6 para. 1 lit. b GDPR. If your inquiry does not fall under one of the aforementioned categories, our legitimate interest in processing your data lies in properly and in your interest responding to your inquiry, Art. 6 para. 1 lit. f GDPR. Deletion: The personal data collected by us will be deleted as soon as it is no longer necessary. We review the necessity every 2 years. In addition, you can revoke the data processing at any time.

Handling of your data in the application process

If you apply to us, we process the personal data transmitted to us in the application process. If you send the data by email or through a contact form on our online presence, the processing takes place electronically. If an employment contract is concluded after the application process, we store your data for the purpose of processing the employment relationship in compliance with legal regulations.

Purpose: The purpose is to process the application process.

Legal basis: The legal basis for processing your data for the purpose described above is Art. 6 para. 1 lit. b GDPR. Deletion: If an employment contract is not concluded, your data will be deleted after the end of the application process or at the latest 2 months after its conclusion. This does not apply if legal provisions oppose deletion or if further storage of your data is necessary for the purpose of providing evidence, for example in a procedure under the General Equal Treatment Act (AGG). The application process is considered completed with the dispatch of the rejection to you. Prevention: In addition, you have the right to withdraw your application at any time or to request the deletion of your personal data.Your rights under the

GDPR

Under the GDPR, you have the following rights, which you can assert at any time with the data controller mentioned in paragraph 1 of this data protection declaration:

Right to information: According to Art. 15 GDPR, you can request confirmation of whether and which personal data we process about you. In addition, you can request information free of charge about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing, or objection, the existence of a right to complain, and the origin of your data, unless it was collected from us. You also have the right to information about whether your personal data has been transferred to a third country or to an international organization. If this is the case, you have the right to obtain information about the suitable guarantees in connection with the transfer.

Right to correction: According to Art. 16 GDPR, you can request the correction of incorrect or completion of incomplete personal data stored by us.

Right to deletion: According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, provided that we do not need to process it for the following purposes:

• to fulfill a legal obligation,

• to assert, exercise, or defend legal claims,

• to exercise the right to freedom of expression and information, or

• for reasons of the cases of public interest mentioned in Art. 17 para. 3 lit c and d GDPR.

Right to Restriction: According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data when

• the accuracy of the data is disputed by you, for a period that allows us to verify the accuracy of the personal data,

• the processing of your data is unlawful, but you refuse its deletion and instead demand the restriction of the use of the data,

• we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise, or defend legal claims,

• you have objected to the processing of your data in accordance with Art. 21 GDPR, but it is not yet clear whether the legitimate reasons that entitle us to further processing despite your objection outweigh your rights.

Right to Information: If you have asserted the right to correction, deletion, or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you has been disclosed of the correction or deletion of the data or the restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

Right to Data Portability: According to Art. 20 GDPR, you can request that we provide you with the personal data concerning you that you have provided to us in a structured, common, and machine-readable format or request the transfer to another controller.

Right to Lodge a Complaint: According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. For this purpose, you can contact the supervisory authority of your usual place of residence, your workplace, or our registered office.

Right of Revocation

According to Art. 7 para. 3 GDPR, you have the right to revoke your consent to the processing of your data at any time. The revocation does not affect the legality of the processing of your personal data carried out until the revocation.

Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data concerning you, which is carried out on the basis of a balancing of interests (Art. 6 para. 1 lit. f GDPR). This is particularly the case if data processing is not necessary for the fulfillment of a contract. If you make use of your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling legitimate reasons for processing outweigh your interests and rights. Regardless of the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes. Please address your objection to the contact address of the controller provided above.

Google Analytics

We use “Google Analytics” on our website, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To capture and statistically evaluate visitor flows on our website, we use Google Analytics. Among other things, Google Analytics collects data about which website you came to our website from (so-called referrer), which subpages of the website you accessed, or how often and for what duration a subpage was viewed, and what interactions you made. To collect and store this data, Google Analytics places a cookie on the device you are using (see the term above under the heading Cookies). We use the AnonymizeIP function to anonymize your IP address so that it is shortened and cannot be associated with your visit to our website. Other transmitted information is not assigned or linked to the anonymized IP address by Google. The information generated in this way is transmitted to Google servers in the USA and stored there. Google may pass on this personally identifiable information obtained through the technical process to third parties. We have concluded a data processing agreement with Google. After that, Google is authorized and obligated to evaluate the information obtained for us and to create statistical reports for us about the nature and extent of website usage. Through these statistics, we can continuously improve our offer, conduct a cost-benefit analysis of our online marketing, and design our website to be more interesting and user-friendly for you as a user. Legal basis: We use Google Analytics on the basis of our legitimate interest in the analysis, optimization, and economic operation of our online offer, Art. 6 para. 1 lit. f GDPR. Deletion: The data collected and transmitted by us in this way will be automatically deleted after 26 months. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may then no longer be able to use all functions of our website to their full extent. Alternatively, you can prevent the storage of cookies by setting an opt-out cookie that will prevent data from being collected from you on our website in the future. To do this, please click on the following link. You also have the option to prevent the storage of cookies by adjusting this in your browser. Already set cookies can be deleted by you at any time.