Legal
privacy policy
Last updated: November 2026 · This English version is provided for convenience only; the German version is legally binding.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
DRAK Chain GmbH
Tagewerbener Str. 33
06667 Weissenfels
Germany
Phone: +49 3443 286 110
Email: info@drak-chain.de
Represented by the managing directors Claude Carlier and Ingo Döhrer.
2. General information on data processing
We only process personal data to the extent necessary to provide a functional website, to answer your enquiries or to comply with legal obligations. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest). Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations prevent deletion.
This website does not use any analytics or tracking tools, advertising cookies or social media plugins.
3. Hosting
This website is hosted by ALL-INKL.COM – Neue Medien Münnich in Germany. When you visit our website, the data generated is processed on the hosting provider's servers. This is based on our legitimate interest in providing our website securely and reliably (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.
Server log files
When you access the website, your browser automatically transmits information that is stored in server log files:
- IP address of the requesting device
- date and time of access
- page or file accessed
- referrer URL (previously visited page)
- browser type and version, operating system
SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the padlock symbol in your browser. Data you send to us, for example via the contact form, cannot be read by third parties.
4. Cookies and storage on your device
For visitors, this website sets no cookies. Only for the accessibility toolbar (button at the bottom right) does your browser store an entry with the display settings – such as font size or contrast – in your device's local storage (localStorage) when the page is loaded. This entry does not leave your device and is not transmitted to us or to third parties. You can delete it at any time via your browser settings. Storage is necessary to provide this function (Section 25(2) No. 2 TDDDG). In addition, technically necessary cookies are set when our editors log in to the administration area.
5. Fonts
The fonts used on this website are loaded locally from our own server. No connection is made to servers operated by Google or other third parties.
6. Contact form
If you send us an enquiry via the contact form, we process the information you provide (name, email address and your message, and optionally company, phone number and subject) in order to handle your enquiry and any follow-up questions. The data is stored in our website's database and sent to us by email. Your IP address is not stored.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or its initiation, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR) as well as your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.
To protect against spam, we only use technical measures that run on our own server (a check field invisible to humans and a security token). No data is transmitted to third parties for this purpose.
Your data remains with us until the purpose no longer applies, you request deletion or you withdraw your consent. Statutory retention periods, in particular for business correspondence under commercial and tax law, remain unaffected.
7. Enquiries by email, phone or fax
If you contact us by email, phone or fax, we process your enquiry including the personal data provided for the purpose of handling it (Art. 6(1)(b) or (f) GDPR). We do not pass on this data without your consent.
8. Map display with OpenStreetMap
On our contact page you can display a map from OpenStreetMap. The provider is the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The map is only loaded when you click “Load map”. Only then is your IP address transmitted to OpenStreetMap's servers. The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG), which you give by clicking. The European Commission has adopted an adequacy decision for the United Kingdom. Further information can be found in the privacy policy of the OpenStreetMap Foundation (opens in a new window).
9. Route planning via Google Maps
Under “Plan route” we link to the Google Maps route planner. This is a simple link: data is only transmitted when you click it and Google Maps opens in a new window. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google is responsible for the data processing there; the following applies: Google's privacy policy (opens in a new window).
10. Job applications
If you send us a job application, we process your data to carry out the application procedure (Art. 6(1)(b) GDPR in conjunction with Art. 88 GDPR and the rules on employee data protection). If an employment relationship is established, the data is stored for the purpose of the employment relationship. Otherwise, we delete your documents no later than six months after the procedure has ended, unless you have agreed to longer storage or legal reasons – such as obligations to provide evidence under the German General Equal Treatment Act – prevent this.
11. Disclosure of data to third parties
We only pass on your personal data to third parties if this is necessary to perform a contract, if there is a legal obligation or if you have given your consent. To process orders, we use in particular:
- Transport service providers – delivery address and contact person
- Software service providers – address data
- Packaging service providers – customer addresses
12. Your rights
You have the following rights with regard to your personal data:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
Right to object under Art. 21 GDPR
Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Data Protection Commissioner of Saxony-Anhalt (opens in a new window).
13. No automated decision-making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
14. Changes to this privacy policy
We will update this privacy policy whenever our website or the legal situation changes. The version published here applies.