Privacy Policy
1. Controller
As the operator of this website (https://productguide.eschenbach-vision.com), Eschenbach Optik GmbH, Fürther Straße 252, 90429 Nürnberg, Germany is the controller in the sense of the EU General Data Protection Regulation (GDPR) who individually or jointly makes decisions on the purposes and means of the processing of personal data, hereafter referred to as "data".
2. Processing of Personal Data
According to the General Data Protection Regulation, personal data is any information concerning an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier (such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person).
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Use of our website does not require you to provide data. However, in certain cases, we will need your name, address and additional information to perform your requested services.
The same applies to, e.g., the sending of information material and ordered goods and to responses to individual inquiries. We will notify you when required. Furthermore, we only process data you provide to us voluntarily and data that is collected automatically when our website is visited (e.g., your IP address and the names of the pages you opened, your browser and operating system, time and date of access, search engines used or names of downloaded files).
If you request our services, usually only the data required for us to perform the service will be collected. Any additional data we may request may be provided voluntarily.
If you enter your personal information in the context of the use of apps yourself, you give us your consent in the context of your action, that we may collect, process and use your personal data in the app you use for our own business purposes. If your personal information is entered into the app by third parties as part of conversations with you, we will inform you about the collection, processing and use of your personal data, e.g. in the context of a customer discussion.
Data will only be processed to perform requested services and to safeguard our legitimate business interests (Art. 6 subsection 1 sentence 1 under b and f GDPR).
We transmit your personal data according to any legal or contractual obligations we might have. Due to licence agreements with third parties we may be contractually obliged to transmit data of the optician’s such as customer IDs, address data, item numbers, product descriptions, sales figures, discounts and customer complaints to the license partner. Examples for license partners are Marc O’Polo, MINI, etc.
3. Protection of Your Personal Data
Thank you for your interest in our company and our products and services. We want you to feel safe about your data when visiting our website. We take the protection of your data very seriously and strictly adhere to the General Data Protection Regulation and the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG] in its respectively valid form.
We implemented technical and organizational measures to ensure compliance with data protection regulations by both us and our commissioned external service providers. We require our employees and commissioned service providers to maintain confidentiality and adhere to the General Data Protection Regulation and the German Federal Data Protection Act in its respectively valid form.
As part of our obligation to provide information, we want this Privacy Policy to be as transparent as possible and will explain the purposes for processing your data and use of tracking/analysis tools, cookies and social media plugins hereafter.
4. Purposes for Processing Personal Data
We will process the data you provide in accordance with the principles of data economy and purpose limitation. The principle of purpose limitation states that data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is not considered to be incompatible with the initial purposes.
We only process your data to answer inquiries, handle your orders and provide access to certain information or offers to you. Maintaining customer relationships may also require us or a commissioned service provider to use this data to inform you about product offers or to conduct online surveys to fulfill the tasks and requirements set by our customers.
We will only process the data you provide online for the stated purposes. Your data will not be transferred to third parties without your express consent.
Data will only be collected or transmitted to authorized state institutions and officials in accordance with applicable laws or if we are required to do so due to a court order.
We respect that you may not wish to provide your data to support our customer relationship (especially not for direct marketing or market research purposes). We will not sell your data to third parties or otherwise market your data without your consent.
5. Data Collected Automatically When Visiting Our Website
When using our website, the following data may be processed for technical and organizational reasons:
- the IP address of your requesting Internet-enabled device
- the date and time of your access to the website
- the website / application from which the access was made (referrer URL)
- the browser type and version you are using
- the operating system of your internet-capable computer
- the name of your Internet service provider
- the subsites that are accessed via your accessing system on our website
- the files downloaded from our website (e.g. PDF or Word documents).
6. Cookies
When visiting our web pages, different information can be stored on your computer in the form of a cookie. Cookies are small text files which are sent by a web server to your browser and saved on the hard drive of your computer. Some cookies are deleted after the end of the browser session; i.e. after you close your browser (known as session cookies). Other cookies remain on your end device and enable the recognition of your browser the next time you visit (known as persistent cookies). Persistent cookies are deleted automatically after a predefined time, which can vary depending on the cookie.
When you open our web page, cookies that are technically required (session cookies) are saved on the hard drive of your computer. Cookies that are necessary to ensure technically correct and optimized provision of our services (technically necessary cookies) are saved based on our justified interest, as per point (f) of Article 6(1) of the GDPR. In doing so, the name of the pages you have visited, the browser and operating system you use, the date and time of access, the search engines used, as well as the names of downloaded files and the IP address can potentially be processed. This is necessary for the operation, presentation and security-relevant functionality of the web page. If you do not wish us to recognize your computer again, you can prevent the saving of cookies on your hard drive by selecting the setting "Do not accept cookies" in your browser settings. To find out how this works in detail, please refer to your browser manual. Please note, however, that this can lead to impairment of the functionality on our web page.
Furthermore, cookies can be used for analysis, marketing, and statistical purposes and to register your preferences (technically non-essential cookies).Technically non-essential cookies are set only if you grant consent (on the legal basis of point (a) of Article 6(1) of the GDPR).
In the cookie statement from Cookiebot listed as follows you can view and adapt your cookie settings at any time, and revoke any consent you have granted thus far.
More information on the cookies used can be found below the Cookiebot statement.
Cookiebot statement:
7. Cookiebot
Our web pages use the cookie consent technology of Cookiebot to obtain your consent to save certain cookies in your browser and to document these in a way that conforms to privacy protection. Cookiebot is a product of Cybot A/S, Havnegade 39, 1058 Copenhagen. When you start our web pages, a Cookiebot cookie is saved in your browser in which the consents you grant or the revocation of these consents are saved. This data is not passed on to the providers of Cookiebot.
If you delete the cookies in your browser, your consent to cookies will again be requested when you visit the web page or load it again.
Cookiebot consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is point (c) of Article 6(1) of the GDPR.
The registered data is saved until you request us to delete it or you delete the Cookiebot cookie yourself, or until the purpose of saving the data becomes inapplicable. Mandatory legal retention periods remain unaffected.
More information on data processing by Cookiebot can be found at https://www.cookiebot.com/de/privacy-policy/.
8. Google Analytics
We use the Google Analytics service on our website, provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data may also be transferred to the USA. With regard to the transfer of personal data to the USA, an adequacy decision exists under the EU-US Data Privacy Framework issued by the EU Commission pursuant to Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, meaning that the usual level of protection under the GDPR applies to such data transfers.
The legal basis for processing personal data is your consent pursuant to Art. 6 (1) lit. a GDPR and, where applicable, Art. 9 (2) lit. a GDPR, which you provided on our website.
Google Analytics is a web tracking tool that analyzes the behavior of website visitors and their interactions with our website, providing us with evaluations and forecasts regarding the content and products on our website and their popularity (so‑called tracking). We have integrated Google Analytics so that the service can compile an analysis of user browsing behavior.
For this purpose, Google collects page interactions of visitors with our website and any existing information obtained from reading cookies or other storage technologies, and prepares this data statistically for us. Google Analytics uses data processing technologies that enable the tracking of individual website visitors and their interactions with other Google services, such as the advertising network Google Ads.
Data from other Google services is also used to fill data gaps through machine learning technologies, modeled statistics, and forecasting functions, and to create extensive statistics about the content of our website. If Google Analytics is active on our website, the data collected by Google Analytics is transmitted to servers of Google Ireland Limited. As part of data processing on behalf of the controller, personal data may also be transferred to servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. We use Google Analytics to continuously optimize and improve the availability of our online services. This constitutes what is known as reach measurement.
For the purpose of processing, the service and/or we collect the following data: data on visitor interactions with the content of the website, data on the handling of services displayed on our website, data from external Google services if they interact with our website (e.g., advertising data or behavioral data related to advertising), data on approximate geographic origin, the browser used, operating system, and additional information about the device used.
Google Analytics stores the data relevant for providing web tracking for as long as necessary to fulfill the booked web service. Data collection and storage are carried out in an anonymized manner. If individual interactions by website visitors make it possible to subsequently establish a personal reference to specific actions, we will delete the collected data once the purpose has been fulfilled. The data will be deleted at the latest when it is no longer subject to statutory retention obligations. As a rule, we will delete this data no later than 12 months. You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You may withdraw your consent at any time. Further information on withdrawing your consent can be found either within the consent mechanism itself or at the end of this privacy policy.
Further information on how the transferred data is handled can be found in the provider’s privacy policy at https://policies.google.com/privacy.
The provider also offers an opt‑out option at https://tools.google.com/dlpage/gaoptout?hl=en.
9. Use of Google DoubleClick Cookies
Our website uses cookies of Google DoubleClick, an analysis service of Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. DoubleClick uses cookies to optimize advertisements to display relevant advertisements to users, improve advertising campaign reports and to prevent users from repeatedly being displayed the same advertisements.
DoubleClick cookies are used to assess use of this website. For this, reports are prepared about your activities on our website to allow us to adjust our Internet offer to your needs. DoubleClick cookies do not contain personal data, but may occasionally include additional anonymized identifiers to identify campaigns with which the user previously came into contact. This prevents web activities from being assigned to a specific person. DoubleClick cookies used a pseudonymous identification number assigned to your browser to review advertisement clicks and displays. This enables Google and its partner pages to display advertisements based on previous visits to our website or to other websites. Google will transmit the information generated by DoubleClick cookies to servers in the US where it will be saved. By using our website, you agree to the use of the above-stated data and its described processing by Google.
You may refuse this tracking web-analysis or disable DoubleClick cookies at any time. However, we would like to point out that in this case you may not be able to use all the functions of our websites. You may also prevent the collection of the data by Google generated by cookies and related to your use of the Sites and the processing of such data by Google by downloading and installing the browser plug-in available under the DoubleClick Deactivation Extension link. Alternatively, you can disable the Doubleclick cookies with this opt-out.
10. Use of Google Tag Manager
Our website uses Google Tag Manager of Google LLC ("Google"). Google Tag Manager is a solution that provides a surface for marketers to manage website tags. Google Tag Manager is a cookie-free domain that does not collect personal data. Although Google Tag Manager activates other tags which may collect data, Google Tag Manager does not access this data. In case of deactivation on the domain or cookie level, the deactivation will remain in place for all tracking tags implemented through Google Tag Manager.
You can find detailed information about the Google Tag Manager at the following link: www.google.com/tagmanager/use-policy.html
11. Use of Google Remarketing
This website uses the remarketing function of Google LLC ("Google"). This function allows us to display interest-based advertisements to visitors of our website. The visitor's browser will install cookies, i.e., text files saved on a computer that enable us to recognize visitors when they open websites that are part of the Google Network. On these pages, advertisements may be displayed that refer to contents that the visitor opened previously on other websites that use Google's remarketing function. According to its own statements, Google does not collect personal data thereby. Nonetheless, Google remarketing may be disabled through the following settings: http://www.google.com/settings/ads.
12. Use of Google AdWords
Our website uses Google Conversion Tracking. If you reach our website through an advertisement displayed by Google, Google Adwords will save a cookie on your computer. This cookie will be used for conversion tracking when a user clicks on an advertisement displayed by Google. These cookies will be valid for 30 days and are not used to identify you personally. If the user visits certain pages of our website before the cookie expires, this will allow both Google and us to see that the user clicked on the advertisement and was forwarded to this page. Each Adwords customer is assigned a different cookie. Cookies therefore cannot be traced through the websites of Adwords customers. The information obtained through the conversion cookie is used to prepare conversion statistics for Adwords customers who choose conversion tracking. Adwords customers will learn the total number of users who clicked on their advertisements and were forwarded to a page with a conversion tracking tag. However, they will not receive any information through which users could be personally identified.
You can also prevent participating in this tracking process by disabling the required cookies—e.g., by disabling third-party cookies in your browser settings. You can also disable conversion tracking cookies by setting your browser to block cookies from the domain "www.googleadservices.com."
Please note that you may not delete opt-out cookies if you do not want measured data to be recorded. If you delete all cookies from your browser, the respective opt-out cookie must be re-installed.
13. Product Guide
At http://productguide.eschenbach-vision.com/, we operate a virtual Product Guide for our customers. With this Product Guide, you can quickly and easily find suitable products for your visual needs from our extensive product range.
A meaningful recommendation requires the entry of your visual acuity values or the determination of these values through a virtual vision test.
a) Processing of health data within the vision test
On this subdomain, we offer you the opportunity to perform a short vision test.
During this process, visual acuity values, your contrast sensitivity, and other data are determined. According to Art. 9 GDPR, this data is considered a special category of personal data (health data).
Within the scope of our Product Guide, it is not possible for us to draw conclusions about the identity of the user.
b) Purpose of processing
The collected values are used solely to provide you with a specific product recommendation tailored to your personal visual requirements. The result of the vision test is presented to you at the end of the test in the form of a traffic light system (green = good, orange = adequate, red = limited).
c) Storage period and deletion
The collected visual acuity values are not stored permanently. They are automatically and completely deleted as soon as you close your browser or end the session. No further storage of the collected data takes place.
d) Cookies
The product recommendations resulting from the vision test that you add to your favorites list are stored on your device using a cookie, so that you can retrieve these recommendations during a later visit.
The storage period of this cookie is 30 days. After that, the cookie is automatically deleted.
You can prevent or delete the storage at any time via your browser settings.
e) Legal basis
The processing of health data is carried out on the basis of your explicit consent (Art. 9 (2) lit. a GDPR).
The storage of product recommendations using cookies is based on Art. 6 (1) lit. a GDPR (consent) and Art. 6 (1) lit. f GDPR (legitimate interest in a user-friendly presentation of our product recommendations).
It should generally be noted that the results of the Product Guide serve as an initial orientation and do not replace a professional examination. If you have questions about the results or notice any irregularities, we recommend further evaluation by an optician or ophthalmologist.
14. Children and Young People
Our website is aimed exclusively at potential applicants/customers, business partners and media representatives.
Persons under 16 years of age should not transmit data to us without the permission of a parent or guardian. We do not request data from children or youths who have not yet completed their sixteenth year of life. We do not collect such data or provide such data to third parties.
15. Security
We implemented technical and operational protective measures in accordance with the applicable legal regulations to protect your data from, loss, destruction, manipulation and unauthorized access. Our security measures are reviewed regularly and adjusted to technological advances. All our employees and all persons participating in data processing are required to adhere to the General Data Protection Regulation, the German Federal Data Processing Act in its respectively valid form and other laws relevant for data protection and must treat data confidentially.
Furthermore, we conclude according agreements with any external service providers we commission.
Our security measures are regularly reviewed and adjusted in accordance with technological advances.
16. Changes to Our Privacy Policy
We reserve the right to make changes to our security and data protection measures if required due to technical developments. In such cases, we will also adjust our Privacy Policy. Therefore, please note the respectively current version of our Privacy Policy.
17. Consent
Should the processing of your data require your consent, we will obtain it from you and use your data for the stated purposes for which we requested your consent. Your consent will be documented digitally.
You may revoke your consent at any time with future effect. To do so, please write us at Eschenbach Optik GmbH, Fürther Straße 252, 90429 Nürnberg, Germany or email us at datenschutz@eschenbach-optik.com.
18. Newsletter
If you have subscribed to our newsletter and have given your consent for us to send you interesting offers and information from Eschenbach Optik GmbH on a regular basis, you have given us express permission to use your e-mail address for advertising purposes. You will then be sent newsletters and information on the following themes: advertising, current offers, information on seminars, collection training and meetings via online tools.
We only require an e-mail address from you. We will not record any further data. We will use your e-mail address exclusively for the purpose of sending out the requested information and we will not pass it on to any third parties.
We will keep a record of the consent you have given us and are obliged to ensure that we can access details of the consent you have given at any time.
You may revoke your consent at any time with effect to the future. If you would like to revoke your consent, please write to Eschenbach Optik GmbH, Fürther Straße 252, 90429 Nürnberg, Germany, or send an e-mail to datenschutz@eschenbach-optik.com.
You can at any time also revoke the consent that you have given for your e-mail address to be stored and for it to be used to send you our newsletter by clicking on the "Unsubscribe from Newsletter" link in the newsletter.
19. Data Subject Rights
If we process your data, you are entitled the following extensive rights as a data subject:
a) Right to Information
Under Art. 15 of the General Data Protection Regulation, you have the right to information about the data processed by us.
You may especially obtain information about the purposes of the processing, the categories of personal data concerned, the categories of possible recipients and the envisaged period for which the personal data will be stored.
Please submit information requests to Eschenbach Optik GmbH, Fürther Straße 252, 90429 Nürnberg, Germany or by email to datenschutz@eschenbach-optik.com.
b) Right to Rectification
Under Art. 16 of the General Data Protection Regulation, you have the right to obtain rectification or completion of your data from us.
You may exercise this right by contacting the above-stated addresses.
c) Right to Erasure
Under Art. 17 of the General Data Protection Regulation, you have the right to obtain erasure of personal data concerning you if storage of the data is no longer required and if there is no other legal ground for its processing. You may also obtain erasure if you object to the processing and there are no overriding legitimate grounds for the processing and if your data was processed unlawfully or if the personal data must be erased for compliance with a legal obligation under EU or national law.
You may exercise this right by contacting the above-stated addresses.
d) Right to Restriction of Processing
Under Art. 18 of the General Data Protection Regulation, you have the right to obtain the restriction of processing if you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of your personal data; if the processing is unlawful, but you oppose the erasure of your personal data; the purposes for the processing cease to apply, but the data is required for the establishment, exercise or defense of legal claims or if you objected in accordance with Art. 21 of the General Data Protection Regulation and if whether the legitimate grounds of the controller outweigh your interests has not yet been determined.
You may exercise this right by contacting the above-stated addresses.
e) Right to Data Portability
Under Art. 20 of the General Data Protection Regulation, you have the right receive your personal data in a structured, commonly used and machine-readable format (data portability). In addition, under certain circumstances, you may also receive your data directly from a controller if technically possible.
You may exercise this right by contacting the above-stated addresses.
20. Right to Object
You have the right to object to use of your data for the above-stated purposes at any time (Art. 21 of the General Data Protection Regulation). This is possible for objections to direct marketing or on grounds relating to your particular personal situation. If you object to direct marketing, we will implement your general objection right without information about your particular personal situation.
To exercise your right to object, please write us at Eschenbach Optik GmbH, Fürther Straße 252, 90429 Nürnberg, Germany or email us at datenschutz@eschenbach-optik.com.
21. Questions, Suggestions, Complaints to the Internal / External Data Protection Officer
Should you have any questions about our Privacy Policy, data protection or the processing of your personal data, please contact our external data protection officer or our internal data protection team:
E-Mail: datenschutz@eschenbach-optik.com
Information requests, suggestions and complaints may also be submitted to the data protection officer.
22. Right to Submit a Complaint to a Supervisory Authority
Please also note that, irrespective of other administrative or legal remedies, you have the right to submit complaints to supervisory authorities, especially in the Member state of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of your personal data infringes on the General Data Protection Regulation.
A list of (non-public sector) supervisory authorities and their addresses is provided (in German) at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.