Privacy Policy.

Identity of the Data Controller

The data controller for personal data collected through this website is:

Categories of Personal Data

We collect only the personal data that you voluntarily provide to us, specifically through the contact form on this website. The categories of data collected include:

• Name: as provided in the contact form "Name" field.
• Email address: as provided in the contact form "Email Address" field.
• Enquiry content: the message text and selected enquiry type from the contact form.
• Technical data: standard server log data including IP address, browser type, and page access times, collected automatically when you visit the website.

We do not collect sensitive personal data, financial data, or data relating to minors. We do not create profiles from the data we collect.

How and Why We Use Your Data

Personal data submitted via the contact form is processed on the basis of Article 6(1)(b) GDPR (performance of a contract or pre-contractual steps at your request) or Article 6(1)(f) GDPR (our legitimate interest in responding to correspondence directed to us).

Technical server log data is processed on the basis of Article 6(1)(f) GDPR (legitimate interest in maintaining the security and performance of the website).

The purposes for which we process personal data are:

• Responding to enquiries submitted via the contact form
• Maintaining records of correspondence for operational purposes
• Ensuring website security and detecting abusive access
• Complying with applicable legal obligations

We do not use personal data for automated decision-making or profiling. We do not use contact form data for direct marketing without explicit consent.

Retention Periods and Storage Location

Contact form enquiries and associated correspondence are retained for a period of three years from the date of the last exchange, after which they are deleted from our systems. Server log data is retained for a period of twelve months.

Personal data is stored on servers located within the European Economic Area. We do not transfer personal data to countries outside the EEA without appropriate safeguards in place under GDPR Chapter V.

Where we use third-party processors (for example, web hosting providers), we ensure that appropriate data processing agreements are in place and that such processors provide sufficient guarantees of GDPR compliance.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data held by Dralven:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days of receiving your request.

Cookie Usage

This website uses cookies. For full details of the cookies used on this site, their categories, purposes, and your options for managing consent, please refer to our Cookie Policy.

Cookie consent is collected via the cookie banner displayed on your first visit. You may change your cookie preferences at any time using the Cookie Settings link in the footer of every page.