Privacy policy DURAL GmbH, Art. 13 GDPR

Welcome to our website. In the following statements, we would like to inform you about our handling of your data in accordance with Art. Art. 13 of the General Data Protection Regulation (GDPR). Responsible persons DURAL GmbH Südring 11 56412 Ruppach-Goldhausen E-mail: info@dural.de Data protection officer Our company data protection officer will also be happy to provide you with information or suggestions regarding our handling of your data:

Sebastian Maiworm DURAL GmbH Südring 11 56412 Ruppach-Goldhausen

Phone: +49 (0)2602 9261 -0 E-mail: info@dural.de

If you wish to assert your rights, please contact us by e-mail at info@dural.de. Collection of your personal data when you visit our website (usage data) If you visit our website for information purposes only, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the data that is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 (I) 1 f GDPR): – IP address (anonymized, shortened by the last three digits) – Operating system and its interface – Website from which the request originates – Browse, language and version of the browser software. – Date and time of the request, time zone difference to (GMT) – Content of the request (specific page or file name) – Access status/HTTP status code – Amount of data transferred in each case Data security File name) – Access status/HTTP status code – Amount of data transferred in each case Data security We take both technical and organizational measures to protect your data from unauthorized access as comprehensively as possible: We use an encryption procedure on our pages for this purpose. Your data is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. Data recipients We transmit all our data, including yours, for secure processing as part of order processing in accordance with Art. 6 para. 1 lit. f GDPR. Art. 28 GDPR to our service provider, which has decades of experience and supports us in the operation of our websites (hosting) and the associated processes. Our service provider is strictly bound by our instructions and contractually obligated accordingly. Your rights as a user with us When processing your personal data, you as a website user have certain rights under the GDPR: Right of access (Art. 15 GDPR), i.e. the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR. Right to rectification and erasure (Art. 16 and 17 GDPR), i.e. the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where applicable, to have incomplete personal data completed. You also have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued. Right to restriction of processing (Art. 18 GDPR), i.e. the right to demand the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection to the processing, for the duration of any examination. Right to data portability (Art. 20 GDPR), i.e. the right, in certain cases listed in detail in Art. 20 GDPR, to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of this data to a third party. Right to object (Art. 21 GDPR), i.e. the right to object, on grounds relating to your particular situation, at any time to processing of your data which is based on Art. 6 (1) GDPR. I f (data processing to safeguard legitimate interests). We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), i.e. the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection regulations. The right to lodge a complaint can be asserted in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. Contact / inquiry form You can contact us via a web form, we then need your title, your name and your e-mail address. You can provide further information voluntarily. The legal basis for processing is Art. 6 para. I f GDPR. Your data will only be processed to answer your request and deleted after storage is no longer necessary, or processed to a limited extent if there are legal obligations to retain data. Your data will not be passed on to third parties. You can check the data we have stored about you, have it deleted or revoke your consent to its use. Please contact the address above. Application form We process the personal data you provide us with in accordance with the applicable data protection regulations on the basis of Section 26 BDSG. We process the data you provide to us as part of your online application solely for the purpose of selecting applicants. Data processing for other purposes does not take place. You yourself determine the scope of the data that you transmit to us as part of your online application. Online applications are transmitted electronically to our HR department, where they are processed as quickly as possible. The transmission is encrypted. Your details will be treated confidentially in our company. If your application is unsuccessful, your documents will be deleted in accordance with the statutory deadlines. You can indicate on your application that you would like us to consider you for other or future vacancies. We then process your data on the basis of Art. 6 para. I a GDPR. E-mail newsletter with registration If you subscribe to our newsletter, we will use the data required for this or separately provided by you to send you our e-mail newsletter on a regular basis based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. 1 p. 1 lit. a GDPR to be sent. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 p. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration. We would like to point out that we evaluate your user behavior when sending the newsletter. For this purpose, we also analyze your interaction with our newsletter by measuring, storing and evaluating opening rates and click rates for the purpose of designing future newsletter campaigns (“newsletter tracking”). For this analysis, the emails sent contain single-pixel technologies (e.g. so-called web beacons, tracking pixels) that are stored on our website. For the evaluations, we link the following “newsletter data” in particular

• the page from which the page was requested (so-called referrer URL),
• the date and time of the call,
• the description of the type of web browser used,
• the IP address of the requesting computer,
• the e-mail address,
• the date and time of registration and confirmation

and the single-pixel technologies with your e-mail address or your IP address and, if applicable, an individual ID. Links contained in the newsletter may also contain this ID. If you do not wish to participate in newsletter tracking, you can unsubscribe from the newsletter at any time as described above. The information will be stored for as long as you are subscribed to the newsletter. 5.2 Newsletter dispatch The newsletter and the newsletter tracking described above may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy. Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Canada. Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA. There is a decision of the European Commission on an adequate level of data protection for the USA as a basis for a third country transfer, insofar as the respective service provider is certified. Until certification by our service providers, data transmission will continue to be based on this basis: standard data protection clauses of the European Commission. Our service providers are located and/or use servers in these countries: India. There is no adequacy decision by the European Commission for this country/countries. Our cooperation with them is based on these guarantees: standard data protection clauses of the European Commission. Cookies General information In order to make visiting our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). Privacy protection for end devices When using our online offer, we use absolutely necessary technologies in order to be able to provide the expressly requested telemedia service. The storage of information in your end device or access to information that is already stored in your end device does not require consent in this respect. For functions that are not absolutely necessary, the storage of information in your end device or access to information that is already stored in your end device requires your consent. We would like to point out that if you do not give your consent, parts of the website may not be fully usable. Any consent you may have given will remain in place until you adjust or reset the respective settings in your end device. Any downstream data processing by cookies and other technologies We use technologies to fulfill the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy. You can find the cookie settings for your browser under the following links Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™ Insofar as you have consented to the use of the technologies pursuant to Art. 6 para. 1 p. 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy. Cookies and other technologies We use the following cookies and other third-party technologies on our website. Unless otherwise specified for the individual technologies, this is done on the basis of your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR. After the end of the purpose and the end of the use of the respective technology by us, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. You can find further information on your revocation options in the section “Cookies and other technologies”. Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Google services We use the following technologies of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google’s privacy policy. Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision. Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on standard data protection clauses of the European Commission. Google Analytics For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information as well as information on your use of our website), from which user profiles are created using pseudonyms. Cookies can be used for this purpose. If you visit our website from the EU, your IP address will be stored on a server located in the EU to derive location data and then immediately deleted before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of an agreement on order processing by Google. For the purpose of optimized marketing of our website, we have activated the data sharing settings for “Google products and services” . This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. The release of data to Google within the scope of these data release settings is based on an additional agreement between data controllers. We have no influence on the subsequent data processing by Google. For web analysis and advertising purposes, the extension function of Google Analytics enables the so-called DoubleClick cookie to recognize your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services relating to website activity and internet usage. Google reCAPTCHA For the purpose of protection against misuse of our web forms and against spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information and information about your use of our website) and analyzes your use of our website by means of a so-called JavaScript and cookies. In addition, other cookies stored in your browser by Google services are evaluated. Personal data is not read or saved from the input fields of the respective form. Google Tag Manager Google Tag Manager allows us to manage various codes and services on our website. When implementing the individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). Data processing is carried out on the basis of an agreement on order processing by Google. By using the Google Tag Manager, various services/technologies can be integrated. If you do not wish to use individual tracking services and have therefore deactivated them, the deactivation remains in place for all affected tracking tags that are integrated by the Google Tag Manager. Google Maps We have integrated Google Maps on our websites in the legitimate interest pursuant to Art. 6 para. I f GDPR, so that you can plan the route to our company locations. If you use the map, e.g. by clicking on our locations listed there, we do not collect any data from you. To our knowledge, the company Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 USA does not collect any personal data in the context of Google Maps. The processing of data by Google Inc. We have no influence. Please note the terms of use for Google Maps, available at https://www.google.com/intl/de_de/help/terms_maps.html. Facebook analytics As part of the Facebook Business Tools, statistics on visitor activity on our website are created from the data collected with the Facebook Pixel about your use of our website. Data processing is carried out on the basis of an agreement on order processing by Facebook (by Meta). Their analysis serves to optimize the presentation and marketing of our website. Facebook Ads (Ads Manager) We use Facebook Ads to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the exact implementation, in particular the decision on the placement of the ads with individual users. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR. The joint responsibility is limited to the collection of the data and its transmission to Meta Platforms Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this. We use Facebook Custom Audience to operate group-based advertising on Facebook (by Meta) on the basis of statistics on visitor activity on our website compiled via Facebook Pixel by determining the characteristics of the respective target group. Facebook (by Meta) acts as our processor in the context of the extended data matching that takes place to determine the respective target group (see above). Based on the pseudonymous cookie ID set by Facebook Pixel and the data collected about your usage behavior on our website, we operate personalized advertising via Facebook Pixel Remarketing. We use Facebook Pixel Conversions to measure your subsequent usage behavior for web analysis and event tracking if you have reached our website via a Facebook Ads ad. Data processing is carried out on the basis of an agreement on order processing by Facebook (by Meta).