Privacy Policy

1. An overview of data protection

General information

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory laws and regulations such as the Chinese Personal Information Protection Law (the “PIPL”), Data Security Law and European General Data Protection Regulation (the “GDPR”) and this Privacy Policy.

Whenever you use this website, a variety of personal information will be collected. Personal data or personal information refers to all kinds of information related to identified or identifiable natural persons recorded by electronic or other means, excluding the information processed anonymously. This Privacy Policy explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected. We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.

Information about the responsible party (referred to as the “processor” in the PIPL and the “controller” in the GDPR)

The data processing controller on this website is:

Name: Drees & Sommer Engineering Consulting (Shanghai) Co., Ltd.                                                                                                                   Address: Unit 9406, Building 9, No. 25 Jianguo Middle Road, Huangpu District, Shanghai, China                                                                    Telephone: 86 21 6136 9165                                                                                                                                                                                         Email: info.shanghai(at)dreso.com

The processor refers to an organization or individual that independently determines the purpose and method of the processing in the processing of personal information.

How do we collect your data?

We collect your data based on your consent, including:

The data as a result of your sharing with us. This may, for instance be information you enter into our contact form.

Our IT systems automatically record other data when you visit our website. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed). This information is recorded automatically when you access our website. This type of data is necessary for the operation of our website.

For more information, please refer to below part under Art. 4 "RECORDING OF DATA ON OUR WEBSITE".

Please note that in some cases we do not need your consent to collect and process your personal data. These cases include:

• it is necessary for the conclusion or performance of a contract to which you are one party;
• it is necessary for the performance of statutory duties or statutory obligations;
• it is necessary for the response to a public health emergency or for the protection of the life, health and property safety of a natural person in an emergency;
• such acts as news reporting and supervision by public opinions are carried out for the public interest, and the processing of personal information is within a reasonable scope;
• it is necessary to process the personal information disclosed by you or other personal information that has been legally disclosed within a reasonable scope in accordance with the provisions; and
• other circumstances prescribed by laws and administrative regulations.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyse your user patterns. For more information, please refer to the below part under Art. 4 "RECORDING OF DATA ON OUR WEBSITE".

When we wish to use your personal data for other purposes not expressly stated in our policy, we will ask for your prior consent.

How do we entrust the processing, share, transfer and publicly disclose your personal data?

1. Entrustment of processing

For the purpose of providing services to you, we may entrust third-party service providers to process your data. These service providers will process personal information strictly for our entrusted purposes and in accordance with and relevant entrusted processing agreements. We will sign strict confidential agreements with the companies, organizations and individuals to whom we entrust the processing of personal information, which require them to process the personal information in accordance with our requirements, this Protection Policy and other relevant confidentiality and security measures.

2. Sharing

We share your personal data with our group Drees & Sommer SE for business purposes. For more information regarding Drees & Sommer SE, please refer to “How we store your data and for how long”. In addition to this, we will not share your personal information with any company, organization or individual other than our company unless we have obtained your separate consent.

3. Transfer

In the case of merger, division, dissolution or declaration of bankruptcy, etc., these may involve the transfer of your personal data. In such a case, we will inform you of the name and contact information of company and organization that receive your personal data and require the company and organization to continue to be bound by this Policy. If the company or organization wishes to use the personal information for other purposes than described in this Policy, we will require the company or organization to obtain your consent again before processing your personal data.

4. Public Disclosure

We will not disclose your personal information publicly, except with your separate consent or when required by law, legal process, litigation or government authorities.

How do we store your data and for how long?

For business purposes, personal data we collect and generate in the People's Republic of China will be stored on Drees & Sommer SE's servers in Germany. This means that your personal data will be transferred to or accessed from the foreign jurisdiction. We will ensure that your personal information is adequately and equally protected in Germany as in the People's Republic of China. Hereby, we specifically ask for your separate consent.

The information of Drees & Sommer SE is as follows:

Name: Drees & Sommer SE                                                                                                                                                                                  Address: Obere Waldplätze 13 70569 Stuttgart, Germany                                                                                                                                          Telephone: +49 711 1317-0                                                                                                                                                                                         Email: info(at)dreso.com                                                                                                                                                                                                    Purpose of processing: Entrusted with the storage of the information we collect through this website                                                                         Processing method: Data storage                                                                                                                                                                                  Type of information: All information collected on this page

If you want to exercise any of your rights, you can send an email to Drees & Sommer SE at info(at)dreso.com.

In generally, we will only retain your personal data for the shortest time necessary to achieve the purpose, unless otherwise stipulated by laws and regulations or otherwise authorized by you. When the storage period expires, we will delete or anonymize your personal data.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are consulted, copied, supplemented, rectified, or eradicated. Please do not hesitate to contact us at any time under the address disclosed in section “General information” on this website if you have questions about this or any other data protection related issues. You also have the right to log a complaint with the competent supervising agency.

Moreover, under certain circumstances, you have the right to demand the restriction of the processing of your personal data. For details, please consult the “Right to demand processing restrictions.”

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analysed when your visit our website. Such analyses are performed primarily with cookies and with what we refer to as analysis programmes. As a rule, the analyses of your browsing patterns are conducted anonymously, i.e. the browsing patterns cannot be traced back to you. You have the option to object to such analyses or you can prevent their performance by not using certain tools. For detailed information about this, please consult our “ANALYSIS TOOLS AND ADVERTISING” and “PLUG-INS AND TOOLS” below.

You do have the option to object to such analyses. We will brief you on the objection options in this Policy.

2. Your Rights

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via . This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the processing of data

In the event that data are processed on the basis of Art. 6 Sect. 1 lit. e or f GDPR, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this Privacy Policy. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements (objection pursuant to Art. 21 Sect. 1 GDPR).

If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21 Sect. 2 GDPR).

In the event that data are processed on the basis of PIPL, you have the right to object to the processing of your personal data at any time unless otherwise stipulated by laws and administrative regulations.

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

In the event of violations of the PIPL, data subjects are entitled to log a complaint or report to the authorities performing duties of personal information protection.

Right to data portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line. If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Information Rights about consultation, copy, supplementary, and rectification of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand to consult or copy your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data supplemented or rectified. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address provided in section “General information.”

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address provided in section “General information.” The right to demand restriction of processing applies in the following cases on condition that the processing is governed by GDPR:

• In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
• If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.

• If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
• If you are entitled and have raised an objection pursuant to Art. 21 Sect. 1 GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

In the case of the processing under PIPL, you have the right to restrict the processing of your personal data at any time unless otherwise stipulated by laws and administrative regulations.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent; or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU in accordance with GDPR; or to process in accordance with the circumstances specified in Art. 13.1.2 to 13.1.7 PIPL.

Right to demand eradication

You have the right to demand the eradication of your personal data in the following cases. To do so, you may contact us at any time at the address provided in section “General information.”

• the purpose of handling has been achieved, it is impossible to achieve such purpose, or it is no longer necessary to achieve such purpose;
• we cease to provide services for you, or the storage period has expired;
• you withdraw your consent;
• we collect and use your personal information without your consent; or
• we violate the agreement with you to process your personal information.

How to exercise your rights?

If you want to exercise any of your rights mentioned above, you may contact us at any time at the address provided in section “General information.” We will reply to your request generally within 30 days.

If we refuse your request to exercise your rights without proper reasons, you may file a lawsuit in the People's Court where we operate according to law.

3. Data protection officer

We have appointed a data protection officer for our company.

Email: info.shanghai@dreso.com

4. Recording of data on our website

Cookies

In some instances, our website and its pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. The purpose of cookies is to make our website more user friendly, effective and more secure.

Cookies are small text files that are placed on your computer and stored by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your leave our site. Other cookies will remain archived on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our website.

You can adjust the settings of your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functions of this website may be limited.

The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimised provision of the operator’s services. If other cookies (e.g. cookies for the analysis of your browsing patterns) should be stored, they are addressed separately in this Privacy Policy.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

• The type and version of browser used
• The used operating system
• Referrer URL
• The hostname of the accessing computer
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.

This data is recorded for technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by the respective local office in order to handle your inquiry and in the event that further questions appear. This information will not be disclosed without your consent.

Hence, the processing of the data entered into the contact form occurs exclusively based on your consent (Art. 13.1.1 PIPL and Art. 6 Sect. 1 lit. a GDPR). You have the right to revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.

5. Analysis tools and advertising

In order to ensure the stable operation and function realization of this website, we may access SDKs or other similar applications (such as embedded codes, plug-ins, etc.) provided by third-party service providers, so as to provide you with better service and experience. Some third-party SDKs or other similar applications that we access may involve the collection of your personal information to provide you with corresponding services. If you use such services provided by third parties in our services, you agree that your information will be collected and processed directly by them.

The services enclosed in this article and Art. 6 are operated by the relevant third parties, over which we have no control. Your use of the services of such third parties (including any information you provide to such third parties) is subject to the third party's own terms of service and privacy policy (not this Policy), and you need to read their terms carefully. This Policy applies only to the personal information we collect and does not apply to any third-party services or third-party information usage rules. If you find that these third-party services are at risk, it is recommended that you terminate the relevant operations to protect your legitimate rights and interests and contact us in time.

Matomo Analytics

This website uses functions of the web analysis service Matomo Analytics. The provider of this service is Innocraft, located in 150 Willis St, 6011 Wellington, New Zealand.

Matomo Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a server in the, where it is stored.

The storage of Matomo Analytics cookies and the utilization of this analysis tool are based on Art.13.1.1 PIPL and Art. 6 Sect. 1 lit. f GDPR. The operator of this website used the tool for analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities.

You can find more information under the following links of privacy policy of Matomo https://matomo.org/privacy-policy/.

IP anonymization

On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Matomo within the People’s Republic of China prior to its transmission to the Zealand. The full IP address will be transmitted to one of Matomo’s servers in the New Zealand and abbreviated there only in exceptional cases. On behalf of the operator of this website, Matomo shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Matomo Analytics from your browser shall not be merged with other data in Matomo’s possession.

Objection to the recording of data

You have the option to prevent the recording of your data by Matomo Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website.

For more information about the handling of user data by Matomo Analytics, please consult Matomo’s Privacy Policy at https://matomo.org/privacy-policy/.

6. Plug-ins and Tools

Liepin

On this website, we use Liepin for recruitment. The service provider is Tongdao Elite (Tianjin) Information Technology Co., Ltd., located on the 24th Floor of Baozheng Building, No. 637 Jinchang Road, Tianjin Pilot Free Trade Zone (Central Business District), China.

When you visit the specific information of job vacancies on our website, the webpage will automatically transfer to the official website of Liepin.

Liepin's Personal Protection Policy can be read under the following link:

https://wow.liepin.com/t1005001/0996fc1c.html

Adobe Typekit Web Fonts

In order to ensure the uniform depiction of certain fonts, our website uses fonts called Adobe Typekit Web Fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

When you access pages of our website, your browser will automatically load the required fonts directly from the Adobe site to be able to display them correctly on your device. As a result, your browser will establish a connection with Adobe’s servers in the United States. Hence, Adobe learns that your IP address was used to access our website. According to the information provided by Adobe, no cookies will be stored in conjunction with the provision of the fonts.

Adobe is in possession of a certification in accordance with the EU-US Privacy Shield. The Privacy Shield is a compact ratified between the United States of America and the European Union, aiming to warrant compliance with European Data Protection Standards. For more information, please follow this link: https://www.adobe.com/de/privacy/eudatatransfers.html. The use of Adobe Typekit Web Fonts is necessary to ensure the uniform presentation of fonts on our website. The use of this service is based on Art. 13.1.1 PIPL and Art. 6 Sect. 1 lit. f GDPR.

For more information about Adobe Typekit Web Fonts, please read the policies under: https://www.adobe.com/de/privacy/policies/typekit.html.Adobe’s Data Privacy Declaration may be reviewed under: https://www.adobe.com/de/privacy/policy.html.

Drees & Sommer E-Recruiting Tool

Many thanks for your interest in employment with the Drees & Sommer Group (hereinafter ‘Drees & Sommer’) which includes all companies affiliated with Drees & Sommer SE pursuant to Sections 15 et seq. of the German Stock Corporation Act (Aktiengesetz, AktG), regardless of which state law applies to the legal entity in question.

The Human Resources (HR) department of Drees & Sommer is responsible for the applicant management system. HR is centrally organized and is part of Drees & Sommer SE.

Drees & Sommer SE
Human Resources Department
Obere Waldplätze 13
70569 Stuttgart, Germany

By accepting our privacy statement, you give Drees & Sommer the right to process, use and store your personal data to handle your application for a position as well as in the recruitment and appointment processes. Drees & Sommer will only use and process the personal data you provide to us on our applications portal to process your application and fill positions. All procedures for which your personal data is used and processed at Drees & Sommer are carried out in accordance with the applicable data protection legislation. Positions at Drees & Sommer are filled by our staff in the HR department along with the management of the Drees & Sommer company concerned. Unsolicitated applications are processed centrally by HR and forwarded to the relevant Drees & Sommer company/companies depending on your profile.

In our online application form, we ask for your consent for your data to be taken into consideration for other positions at Drees & Sommer. If you place a check mark under the heading ‘Release of Data’ beside the statement: ‘I give my consent to my application also being forwarded to other companies in the Drees & Sommer Group (...)’, then we will forward your data to the heads of other entities within Drees & Sommer that we feel may be interested in your profile. If you do not wish your data to be forwarded, please place a check mark beside the statement: ‘I only want my application to be taken into consideration for this position only.’ You can also withdraw your consent at any time in your applicant profile or by emailing personal(at)dreso.com. Your personal data will be transferred to our HR master data and payroll accounting system if you are appointed to a position with us. We use the secure sockets layer (SSL) encryption process to protect your data. Your data will be deleted six months after the completion of the recruitment process, at the latest. Of course, you are also entitled to have your data deleted from our database at any time. Simply send us an email at personal(at)dreso.com to request this.

Notice to third Party agencies and head hunters
Please note that Drees & Sommer Group and it’s affiliates does not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed Recruitment Fee Agreement, Drees & Sommer Group will not consider or agree to payment of any referral compensation or recruiter fee. In the event a recruiter or agency submits a resume or candidate without a previously signed agreement, Drees & Sommer Group explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Drees & Sommer Group.