1. Name and Contact Details of Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is Ernst Leitz Wetzlar GmbH, Am Leitz-Park 2, 35578 Wetzlar, Germany, phone: +49 (0)6441 20311 900, e-mail: [email protected].
2. Provision of the Website and Creation of Log Files
Description and scope of data processing: Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:
- browser typ and version,
- the operating system used,
- website from which you visit us (referrer URL),
- website, you are visiting,
- date and time of your access,
- your Internet Protocol (IP) address.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website.
Legal basis for data processing: The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose the IP address of the user must remain stored for the duration of the session. The purpose of storage in log files is to ensure the functionality and stability of the website. In addition, the data helps us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
Period of storage: The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is terminated.
3. E-Mail Contact, Contact Form, Request Service Form and Product Registration
Description and scope of data processing: For all requests you can contact us by e-mail at [email protected] (English) or [email protected] (German). In this case, the personal data transmitted with the e-mail, the content as well as the date and time of your e-mail will be stored.
There is also a general contact form on our website which you can use for all your requests. If you fill out the contact form, the data entered will be transmitted to us and stored by us. This data is as follows:
- your name
- your companies name
- your country
- your e-mail address
- your phone number
- selected product category
- content of your message.
You may use the form “Request Service” form for service support requests. If you fill out the request form, the data entered will be transmitted to us and stored by us. This data is as follows:
- your name
- your companies name
- your address
- your e-mail address
- your phone number
- your VAT Number
- selected type of problem
- selected type of product (incl. focal length and serial number)
- content of your message
- uploaded pictures
There is also a form on our website where you can register your product. If you fill out the product registration form, the data entered will be transmitted to us and stored by us. This data is as follows:
- your name
- your companies name
- your address
- your e-mail address
- your phone number
- place and date of purchase of your product(s)
- selected type of product(s) (incl. focal length and serial number)
At the time your message is sent, the following statistical data is also stored:
- your IP address
- date and time of your contact request.
Legal basis for data processing: The legal basis for the processing of data transmitted in the course of sending an e-mail or submitting the Contact Form, Request Service Form and Product Registration is your consent, Art. 6 para. 1 lit. a GDPR. The legal basis for any statistical evaluations carried out is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The processing of the data from the e-mail and submitted forms serves us solely for the treatment of the contact inquiry or the service request or the product registration, and in relation to the statistical data stored within the scope of the sending process to prevent misuse and the security of our IT systems. The data will not be passed on to third parties.
Period of storage: The data will be deleted as soon as storage is no longer necessary to achieve the purpose for which it was collected. For the personal data sent by the contact form or e-mail, this is the case when the conversation with the user has ended, unless contractual or legal obligations prevent deletion. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified. We delete your data after three years. The period begins at the end of the year in which we have processed your request.
The data submitted in the course of your service request will be stored for the duration of the contractual relationship and at least for the duration of two further years from completion of the service works for the assertion of any warranty rights. If after that time a request for the deletion of data is still contrary to tax or commercial data retention obligations, your data will be made anonymous.
The data submitted in the course of your product registration will be stored for the duration of the common life cycle of your product which is at least 10 years. After that 10 years period we will contact you and request your confirmation that your product registration is still valid and should be maintained. If we do not receive your confirmation your data will be deleted.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
It is also possible to use our website without cookies. You can disable cookies in your Internet browser, restrict them to certain websites or set your Internet browser to notify you before a cookie is stored. You can delete the cookies from your computer’s hard drive at any time using the data protection functions of your Internet browser. In this case, the functions and the user-friendliness of the offer could be limited.
By clicking this button, you can check what cookies we use and also adjust your preferences:
Browsers allow you to block and delete cookies. The following links show you how to adjust the settings in the following common browsers:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Blocking cookies may impair the functionality of this website.
4.1 Google Analytics with IP Anonymization
The website will then use Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. It is possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus analyze a user’s activities across devices. The information generated by the cookies, such as time, place and frequency of your visit to the website, including your IP address, is transmitted to Google in the USA and stored there.
If you visit our site via a mobile device (smartphone or tablet), you must instead click this Link Privacy Preferences to prevent tracking by Google Analytics within this website in the future. This is also possible as an alternative to the browser add-on mentioned above. By clicking the link, an opt-out cookie is set in your browser that is only valid for this browser and this domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted, so you will have to click the link again.
4.2 Google Tag Manager
We use the Google Tag Manager on our website. This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags that may collect data. However, the Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will remain valid for all tracking tags implemented with Google Tag Manager.
4.3 Google Audiences
We also use Google Audiences (“GA Audiences”), another web analytics service from Google. This service collects and stores data from which pseudonymised user profiles are created. This technology allows users who have visited our web pages to see targeted advertising from us on other external pages of the Google Partner Network.
4.4 Double Click
The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have called the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
Legal basis for data processing: If personal data are processed using technically necessary cookies, the legal basis is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The purpose of using technically necessary cookies is to simplify the use of websites for users.
The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer. For these purposes, our legitimate interest lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
The data collected within the framework of Google Analytics is automatically deleted after 26 months. The deletion of data whose retention period has been reached is carried out automatically once a month by means of a corresponding setting on Google.
5. Integration of Google Maps
Our website also uses Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.
Description and scope of processing: By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under “Provision of the website and creation of log files” are transmitted. This is regardless of whether Google provides a user account that you are logged in from or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-oriented design of its website. Such an evaluation takes place in particular (also for user who are not logged in) for the provision of needs-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Legal basis for processing: The legal basis for the processing of personal data is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The integration of Google Maps serves only to help you to find the nearest dealer who sells our products. The use of the comfortable Store Locater is only possible with the integration of Google Maps and the corresponding data processing. For this purpose, our legitimate interest also lies in the processing of personal data.
6. Rights of the Data Subject
If your personal data are processed, you are affected within the meaning of the GDPR and you have the following rights vis-à-vis the Controller:
Right of access: Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us; in particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the source of your data, if not obtained from you, and the existence of automated decision-making, including profiling and, if applicable, require meaningful information on their details.
Right to rectification: In accordance with Art. 16 GDPR you have the right to demand immediately the rectification of incorrect or the completion of incomplete personal data stored by us.
Right of erasure: In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
Right of restriction: According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection to the processing in accordance with Art. 21 GDPR.
Right to data portability: In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transfer to another person responsible.
Right of appeal: Under Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our place of business. In the present case, the competent supervisory authority is: The Hessian Data Protection Officer (Der Hessische Datenschutzbeauftragte), P.O. Box (Postfach) 3163, 65021 Wiesbaden, Germany, phone: +49 (0)611 1408-0, fax: +49 (0)611 1408-900, e-mail: [email protected].
Right to object: According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation. This also applies to profiling based on these provisions.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising.
Right of withdrawal: You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
7. Data Security
We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar or the address line of your browser.
We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
November 29th, 2018