Data protection

A. Data controller in charge of the data processing

The data controller in charge of the processing of personal data associated with this Internet service for the purposes of the General Data Protection Regulation (GDPR) is:

NOMOS Glashütte/SA Roland Schwertner KG
Ferdinand-Adolph-Lange-Platz 2
01768 Glashütte
Tel. +49 35053 404 0
Web: nomos-glashuette.com
E-Mail: service(at)nomos-store.com

Our company’s Data Protection Officer is:
Ina Schulze
datenschutz(at)glashuette.com

We have prepared this Data Protection Statement to inform you about the scope of processing your personal data (hereinafter "data").

B. Data processing

I. General information

In the course of running our business and operating our website, we process data.
This also includes disclosing data by transmitting it to third parties and, if applicable, to countries outside the European Union (“EU”) and the European Economic Area (“EEA”). In so far as we transmit data to a location outside the EU or the EEA, we have marked this accordingly below.

The individual pieces of data concerned, the purposes of the processing, the legal bases and the recipients are detailed in the following list: 

a) Log file
We store certain information concerning your visit to our website in a log file. The following data will be processed: Name of the website accessed, date and time of the access, transmitted data volume, type of browser and version, your operating system, referrer URL (the previously visited website), your IP address and the provider making the request. This data is required to ensure the security of our website.

We will process this data on the basis of our legitimate interest pursuant to Article 6 para. 1f GDPR. The log file will be deleted after seven days, unless it is required to investigate or establish specific infringements that have become known within the retention period.

b) Hosting
All data processed in relation to the operation of this website that concern the area of hosting will be stored. This is necessary to operate the website. We will process this data on the basis of our legitimate interest pursuant to Article 6 para. 1f GDPR. The provision of our Internet service entails the use of web hosting service providers, to whom we will transmit the data specified above.

c) Making contact
If you contact us, we will process your data ( name, contact details, if provided by you) and your message to us exclusively for the purpose of handling and processing your inquiry. We will process this data to handle your inquiry on the basis of Article 6 para. 1b GDPR or Article 6 para. 1f GDPR.

d) Newsletter
We offer you the option of subscribing to a newsletter, which will regularly inform you about our company and our services. When you subscribe to the newsletter, we will process the data entered by you (email headers and any other data provided voluntarily).

The newsletter will be sent to you on the basis of your declaration of consent pursuant to Article 6 para. 1A GDPR and only after you have completed your subscription.

The newsletter subscription uses the so-called double opt-out procedure. After you have subscribed to the newsletter, we will send you an email asking you to confirm your subscription. This serves the purpose of preventing abuse. We will save your subscription data in a log file order to demonstrate our compliance with the legal requirements. This means that we will store the date and time of your subscription, the date of time of you confirming your subscription, as well as your IP address.

e) Customer account
If you open a customer account, you consent to having your basic data be saved, such as name, address, email address, bank account information, and your user data (username, password). As a result, you have the option of placing orders with us using your email address or your customer number and your personal password.

Your data is processed by us on the basis of your consent in compliance with article 6, para. 1 a) of the GDPR.

f) Processing of purchases
We will process your order data for the purpose of performing the purchase contract. The data is processed on the basis of Art. 6 para. 1b GDPR.
We will disclose your address details to the company contracted by us for delivery. To the extent necessary for us to perform the contract, we will further disclose your email address or telephone number for the purpose of coordinating a delivery date to the company contracted for the delivery.

If you choose Splitit as the payment method, you will be redirected to the website of the provider (Splitit, 5901 Peachtree Dunwoody Road, Suite C-480, Atlanta, GA 30328-7188, USA), where you can enter your details. This information will then be forwarded to us. You can find more information about Splitit's data protection policy at: https://www.splitit.com/legals/splitit-privacy-cookies-policy/english/.

Payment for purchases on account, by credit card (Master Card or Visa),Splitit (payment in installments by credit card), PayPal or Klarna "Sofort" is processed by our external payment processor Unzer E-Com GmbH, Vangerowstraße 18, 69115 Heidelberg ("Unzer"). The data required for processing the payment (first and last name, street, house number, postcode, city, telephone number and the specified payment data), as well as information in connection with the order, will be passed on to Unzer.
For further information on the service provider's data protection policy, please refer to Unzer's data protection declaration at: https://www.unzer.com/en, https://www.unzer.com/en/datenschutz.

g) Loyalty program
When you sign up for our loyalty program, we process your name, address data (postal address, e-mail address, optional telephone number), date, place of purchase and the base and factory number of the watch. We process the data for the purpose of fulfilling our services as part of the loyalty program, such as identifying lost or stolen watched that are sent to us. If you wish, you will also receive information about special offers and promotions. The legal basis for the processing of data as part of the loyalty program is your prior consent pursuant to Art. 6 (1) (a) GDPR.

h) Userlike chat
We use a Userlike chat feature on our website from the company Userlike UG, Deisterweg 7, 51109 Cologne ("Userlike"), to allow you to contact us by live chat. Userlike is integrated into our website using Javascript. Userlike uses cookies. You can find details of the cookies used in your browser's cookie settings. The following data is collected when using Userlike: Content of the chat, date and time, browser type/version, operating system, the URL of previously visited websites, and the amount of data sent. When using this service, the chat and your data will be uploaded to the servers of AWS Cloudfront (the content delivery network of Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, USA). The processing of this data takes place because of our prevailing interest in optimizing the marketing of our website in line with Article 6(1)(f) of the GDPR.

You can find more information on data protection at Amazon and Userlike here: https://aws.amazon.com/en/compliance/data-privacy-faq, https://www.userlike.com/en/terms#privacy-policy

i) Cookies
We use cookies on our website. Cookies are small text files that are deposited on your respective device (PC, smartphone, tablet, etc.) and stored by your browser. You can infer information about the specific cookies used by us, their provider and the purposes of use from our cookie settings. That is where you grant your consent to the respective services and can revoke it or subsequently adjust your settings.

The legal basis for the data processing is your consent pursuant to Art. 6(1)(a) GDPR.

j) Our consent banner 
In order to document your choice with reference to particular types of data processing, and fulfill our data privacy obligations, we deploy a consent banner. When you access our website, your cookie preferences will be queried via a banner. We then deploy a cookie, in which data on any consents granted or revoked is stored. The data is processed in order to fulfill our legal obligations under Art. 6(1)(c) GDPR.

k) Analysis / Marketing

aa) Google services
We use various services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereafter "Google") on our website. It is also possible that this will result in data transfers to Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

An adequacy decision of the EU Commission in the “EU/U.S. Data Privacy Framework” exists for data transmitted to the USA. Google is certified at the US Department of Commerce at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

1) Google Analytics
We use Google's tracking tool Google Analytics on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other website-related services, thereby improving usability.
When using Google Analytics, website visitors' interactions are primarily captured and systematically evaluated using cookies.
Details on the cookies used can be found in our cookie settings.
We use Google Analytics with the extension "anonymizeIp()". This will reduce IP addresses within the EU or EEA member states. If transmitted to Google's servers in the United States, only in exceptional cases will the full IP address be transmitted and shortened there. A direct personal identification is thus usually excluded. In particular, any association with the computer or device of the website visitor is no longer possible.
By using Google Analytics, the following data is processed:
• 3 bytes of the IP address of the system of the website visitor (anonymized IP address),
• the website visited,
• the website from which the user came to our website (referrer),
• the subpages that are accessed from the website
• the time spent on the website,
• the frequency of visits to the website.

Google has stated that it will never combine your IP address with other data from Google.
The legal basis for this data processing is your previously given consent, according to Article 6(1)(a) of the GDPR.

You may revoke your consent at any time, with effect for the future, by adjusting your preferences in our consent banner.

2) Google Analytics with the additional function “demographic characteristics and interests”
In addition to the standard functions of Google Analytics, we also use the “demographic characteristics” function. This will cause a cookie to be placed on your user device when you visit certain webpages. These cookies serve the purpose of allowing us to analyse the referrer websites from which users access our website. This will entail the collection and analysis of data concerning your demographic characteristics (gender, age). The analysis of this data allows us to serve interest-specific display advertising. The data is processed on the basis of our prevailing interests in the optimised marketing of our online services pursuant to Article 6 paragraph 1 lit. f GDPR.

You may at any time object against the collection of data with prospective effect by objecting against the collection of data by Google Analytics as explained in point B. i) aa), or by deactivating the corresponding function in your Google account. Further information about data protection can be found at: https://policies.google.com/privacy?hl=en&gl=en

3) Remarketing using Google Ads
Our website uses Google Ads, an online-advertizing program from Google that operates on the basis of so-called conversion tracking. When you click on an advertisement placed by Google, a cookie is stored on your computer. This cookie expires after 30 days and is not used to identify the user personally. In the event you visit certain pages on our website prior to expiration of the cookie, Google and we can see that you clicked on the advertizement and were directed to our website.
The data collected by virtue of the conversion-cookie are used to produce statistics for advertizing clients that have decided to use conversion tracking.
The legal basis for this processing of data is your prior consent pusuant to Art. 6 Para. 1 (a) GDPR.
In addition, we use, in connection with Google Ads, so-called tracking cookies from Google for remarketing purposes. While you browse our website, permanent cookies store information about which of our products you have looked at and which advertizements and third-party websites have led you to our website. If you later visit the website of one of our partners, we can place personalized advertizements for you based on the products you have looked at in the past.
We process the data so obtained on the basis of your consent pursuant to Art. 6 Para. 1 (a) GDPR. The information collected via the cookie concerning your use of our website (including your IP address) is transmitted to a Google server in the USA and stored there.

Revocation of your consent
You can revoke your consent with future effect at any time by modifying your preferences under http://www.google.de/ads/preferences or by clicking on the following opt-out link: Opt-Out. In the alternative, you can revoke your consent via the cookie settings on our website or by using the deactivation add-on for browsers from Google at: https://support.google.com/ads/answer/7395996?hl=en.
Please take note, in addition, of the information concerning the use of data by Google within the Google partner network, which you can review at: https://policies.google.com/technologies/partner-sites?hl=en and
https://business.safety.google/privacy/

bb) Microsoft Ads and Microsoft Remarketing
We use the analysis and remarketing service "Microsoft Ads" of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft stores a cookie on your computer if you have reached our website via a Microsoft Microsoft ad. This makes it possible to track the fact that you clicked on the ad and were redirected to our website. This then allows specific product recommendations and interest-based advertising to be displayed to you on the pages of Microsoft and other "Microsoft Ads" customers. The information collected using the conversion cookie is also used to generate conversion statistics. The cookie does not store any personally identifiable information.

Art. 6 para. 1a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of data in accordance with your consent.

You can revoke your consent for data processing by Microsoft Ads for the purposes of our web domain at any time with future effect by adjusting your preferences in our cookie settings.

The data may be transferred to Microsoft servers in the USA. There is no EU Commission adequacy decision for data transfers to the USA. Microsoft ensures an adequate level of data protection via the EU standard contractual clauses. A copy of Microsoft's standard contractual clauses can be found in the Microsoft Terms of Use for Online Services ("MicrosoftOnlineServicesTerms"), the current version of which can be accessed in your language at the following link: https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31.

cc) Website analysis with Matomo
We use cookies from the open source web analytics software Matomo on our website, in the version hosted by ourselves. When you visit our site, information about your use of the website (including IP address) is stored by us in cookies. We use the information to evaluate your use of our website, to compile internal reports on website activity, and to provide other services related to website and internet use.

The legal basis for this data processing is your consent according to Art. 6, § 1.a EU-GDPR.

dd) Contents
We use dynamic content from third parties to optimize the display and offering of our website. While visiting the website, a request will be sent to the server of the relevant content provider using an interface to the application program (API). This request will share specific log data (such as the user's IP address). The dynamic content will then be sent to our website and displayed there.

We use external content in connection with the following features:

Google Maps
We use maps from Google Maps, a service by Google, for the purpose of making the use of an interactive map available to you. The generation of the map will entail the transmission of data, including your IP address and location to Google servers in the USA and stored there. This data processing is based on our prevailing legitimate interest in the best possible marketing of our services pursuant to Art. 6 para. 1f GDPR.

Further data protection information can be found at: https://policies.google.com/privacy?hl=en&gl=de

l) Verification against the EU sanctions list
We are under a statutory obligation to validate legal transactions against so-called compliance lists. These lists of names mainly serve the purpose of preventing money-laundering and to fight terrorism. The list used by us is the Compliance List published by the European Union (CFSP). This list was made available to us by: Creditpass GmbH, Mehlbeerenstr. 2, 82024 Taufkirchen b. München. We process your data on the basis of our statutory obligation pursuant to Art. 6 para. 1c GDPR.

m) Social media
Our website contains links to different social media platforms and other websites. Your visit to our website will not cause data to be transmitted to any social media or other websites. You will however be forwarded to the respective websites if you click on one of the external links on our website. These other websites may collect and process your data under their own terms and conditions of use, which you may review directly on the respective website. We recommend to review the data protection statements of the respective service or website and the above declaration of consent before making a decision to access or use any such website or service.

We have no control over the nature and extent of data processing conducted by operators of external websites you may access by clicking on a link on our website. Your respective rights and configuration options to protect your privacy are set out in the respective data protection statements (see above).

C. Duration of the retention period

We will only save your personal data for the period in time it is needed for the purpose it is being processed for or is required, or until you revoke your consent. If and when statutory retention periods must be observed, e.g. under commercial trade or tax law, it may be necessary to retain certain data for up to 10 years.

D. Your rights

a) Information
Upon request, you can receive information about the personal data that we have saved about you at any time free of charge.

b) Correction, deletion, setting limitations on processing (blocking) and objection
If you no longer agree with your personal data being saved or your information is not correct, we will arrange for your data to be deleted or blocked upon receiving appropriate notification thereof, or we will make the necessary corrections (provided this is possible under applicable laws). The same shall apply if we should only process your data in a more restrictive manner in the future.

c) Data transmissibility
You may request us to provide you with your data in a commonly used, structured and machine-readable format, which you may use to transfer the data to another data controller.

d) Right to lodge a complaint
You have the right to lodge a complaint with the relevant supervisory authority.

e) Right to revoke declarations of consent with effect on the future
You may revoke any previously granted declaration of consent at any time with effect on the future. Your revocation will be without prejudice to the lawfulness of the data processing that took place prior to your revocation.

f) Restrictions
The rights set out above do not apply to data that does not allow us to identify the data subject, i.e. data that was anonymised for analysis purposes. We may be able to provide you with information on your data, delete your data, restrict the processing of your data, correct your data or transfer your data to another company if you provide us with additional information that allows us to identify you.

g) Exercising your rights as a data subject
If you have any questions concerning the processing of your personal data, or if you would like information or request the correction, deletion or restriction of data, or if you would like to have the data transferred to another company, please send an email to datenschutz(a)glashuette.com