We are pleased by your interest in our website. Protecting your privacy is very important to us. In the following, we provide detailed information on how we treat your data.
A. Data controller in charge of the data processing
The data controller in charge of the processing of personal data associated with this Internet service for the purposes of the General Data Protection Regulation (GDPR) is:
NOMOS Glashütte/SA Roland Schwertner KG
Tel. +49 35053 404 0
Fax +49 35053 404 965
Our company’s Data Protection Officer is:
We have prepared this Data Protection Statement to inform you about the scope of processing your personal data (hereinafter "data").
B. Data processing
The operation of our Internet website entails the processing of data. The processing of the data also includes their disclosure by way of transmission.
The data, purposes of processing the data, legal bases, recipients and transmissions third countries concerned in each individual case are set out in the following table:
a) Log file
We store certain information concerning your visit to our website in a log file. The following data will be processed: Name of the website accessed, date and time of the access, transmitted data volume, type of browser and version, your operating system, referrer URL (the previously visited website), your IP address and the provider making the request. This data is required to ensure the security of our website.
We will process this data on the basis of our legitimate interest pursuant to Article 6 para. 1f GDPR. The log file will be deleted after seven days, unless it is required to investigate or establish specific infringements that have become known within the retention period.
All data processed in relation to the operation of this website that concern the area of hosting will be stored. This is necessary to operate the website. We will process this data on the basis of our legitimate interest pursuant to Article 6 para. 1f GDPR. The provision of our Internet service entails the use of web hosting service providers, to whom we will transmit the data specified above.
c) Making contact
If you contact us, we will process your data ( name, contact details, if provided by you) and your message to us exclusively for the purpose of handling and processing your inquiry. We will process this data to handle your inquiry on the basis of Article 6 para. 1b GDPR or Article 6 para. 1f GDPR.
We offer you the option of subscribing to a newsletter, which will regularly inform you about our company and our services. When you subscribe to the newsletter, we will process the data entered by you (email headers and any other data provided voluntarily).
The newsletter will be sent to you on the basis of your declaration of consent pursuant to Article 6 para. 1A GDPR and only after you have completed your subscription.
The newsletter subscription uses the so-called double opt-out procedure. After you have subscribed to the newsletter, we will send you an email asking you to confirm your subscription. This serves the purpose of preventing abuse. We will save your subscription data in a log file order to demonstrate our compliance with the legal requirements. This means that we will store the date and time of your subscription, the date of time of you confirming your subscription, as well as your IP address.
e) Customer account
If you open a customer account, you consent to having your basic data be saved, such as name, address, email address, bank account information, and your user data (username, password). As a result, you have the option of placing orders with us using your email address or your customer number and your personal password.
Your data is processed by us on the basis of your consent in compliance with article 6, para. 1 a) of the GDPR.
f) Processing of purchases
We will process your order data for the purpose of performing the purchase contract. The data is processed on the basis of Art. 6 para. 1b GDPR.
We will disclose your address details to the company contracted by us for delivery. To the extent necessary for us to perform the contract, we will further disclose your email address or telephone number for the purpose of coordinating a delivery date to the company contracted for the delivery.
If you choose Splitit as the payment method, you will be redirected to the website of the provider (Splitit, 27 East 28th St., New York, NY 10016, USA), where you can enter your details. This information will then be forwarded to us. You can find more information about Splitit's data protection policy at: https://www.splitit.com/legals/splitit-privacy-cookies-policy/english/.
Payment for purchases on account, by credit card (Master Card or Visa),Splitit (payment in installments by credit card), PayPal or Klarna "Sofort" is processed by our external payment processor Heidelpay GmbH, Vangerowstraße 18, 69115 Heidelberg ("Heidelpay"). The data required for processing the payment (first and last name, street, house number, postcode, city, telephone number and the specified payment data), as well as information in connection with the order, will be passed on to Heidelpay.
For further information on the service provider's data protection policy, please refer to Heidelpay's data protection declaration at: https://www.heidelpay.com/en, https://www.heidelpay.com/en/privacy-statement.
g) Userlike chat
You can find more information on data protection at Amazon and Userlike here: https://aws.amazon.com/en/compliance/data-privacy-faq, https://www.userlike.com/en/terms#privacy-policy
Cookies remain on your device for different lengths of time:
Session cookies: These cookies are deleted from your device immediately after you close your browser.
Persistent cookies: These cookies remain on your device even after you close your browser and allow you to, for example, be recognized next time you visit the site.
Cookies that are set directly by us are so-called first-party cookies. Third-party cookies, however, are set by third-party websites, such as in the presentation of content (advertising, images, tracking pixels, etc.).
Legal basis of data processing
The legal basis of data processing by means of a cookie is your consent in accordance with Article 6(1)(a) of the GDPR or our legitimate interests under Article 6(1)(f) of the GDPR for the optimization and functionality of our website.
Revocation and opposition
If data processing takes place on the basis of your consent, you can revoke your consent at any time with effect for the future. In the case of data processing based on our legitimate interest, you may object to further data processing with effect for the future (so-called "opt-out"). You can do this via the opt-out options in our cookie settings.
Further information on the specific cookies, their intended purpose, legal basis and lifespan can be found in our cookie settings.
i) Analysis / Marketing
aa) Google services
We use various services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereafter "Google") on our website. It is also possible that this will result in data transfers to Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Further information on data protection can be found at:
1) Google Analytics
We use Google's tracking tool Google Analytics on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other website-related services, thereby improving usability.
When using Google Analytics, website visitors' interactions are primarily captured and systematically evaluated using cookies.
Details on the cookies used can be found in our cookie settings.
We use Google Analytics with the extension "anonymizeIp()". This will reduce IP addresses within the EU or EEA member states. If transmitted to Google's servers in the United States, only in exceptional cases will the full IP address be transmitted and shortened there. A direct personal identification is thus usually excluded. In particular, any association with the computer or device of the website visitor is no longer possible.
By using Google Analytics, the following data is processed:
• 3 bytes of the IP address of the system of the website visitor (anonymized IP address),
• the website visited,
• the website from which the user came to our website (referrer),
• the subpages that are accessed from the website
• the time spent on the website,
• the frequency of visits to the website.
Google has stated that it will never combine your IP address with other data from Google.
The legal basis for this data processing is your previously given consent, according to Article 6(1)(a) of the GDPR.
You can withdraw consent for data processing in the future by downloading the Google Analytics deactivation add-on for your browser, which can be found here: http://tools.google.com/dlpage/gaoptout?hl=en or by clicking the following opt-out link: Opt-Out
Please additionally note how data is used by Google in the Google Partner Network, as detailed here: http://www.google.com/intl/en/policies/privacy/partners/
2) Google Analytics with the additional function “demographic characteristics and interests”
In addition to the standard functions of Google Analytics, we also use the “demographic characteristics” function. This will cause a cookie to be placed on your user device when you visit certain webpages. These cookies serve the purpose of allowing us to analyse the referrer websites from which users access our website. This will entail the collection and analysis of data concerning your demographic characteristics (gender, age). The analysis of this data allows us to serve interest-specific display advertising. The data is processed on the basis of our prevailing interests in the optimised marketing of our online services pursuant to Article 6 paragraph 1 lit. f GDPR.
You may at any time object against the collection of data with prospective effect by objecting against the collection of data by Google Analytics as explained in point B. i) aa), or by deactivating the corresponding function in your Google account. Further information about data protection can be found at: https://policies.google.com/privacy?hl=en&gl=en
3) Google Optimize
In order to continue improving our online presence, we generate different test versions of our website. To test the different versions of the website and generate statistics for comparison, we use Google Optimize, a service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Optimize is a tool integrated into Google Analytics; therefore, the data processing specified in the section on Google Analytics also applies. In addition, Google Optimize also sets its own cookies. These collect information to differentiate the test groups of the different versions of the website. You can find details about the cookies used in our cookie settings.
This data processing is conducted on the basis of our legitimate interest in the user-friendly design of our website, according to Article 6(1)(a) of the GDPR.
You can withdraw consent for data processing using Google Optimize in the future by downloading the Google Analytics deactivation add-on for your browser, which can be found here: http://tools.google.com/dlpage/gaoptout?hl=en
or by clicking the following opt-out link for Google Analytics: Opt-Out
4) Remarketing using Google Ads
Our website uses Google Ads, an online-advertizing program from Google that operates on the basis of so-called conversion tracking. When you click on an advertisement placed by Google, a cookie is stored on your computer. This cookie expires after 30 days and is not used to identify the user personally. In the event you visit certain pages on our website prior to expiration of the cookie, Google and we can see that you clicked on the advertizement and were directed to our website.
The data collected by virtue of the conversion-cookie are used to produce statistics for advertizing clients that have decided to use conversion tracking.
The legal basis for this processing of data is your prior consent pusuant to Art. 6 Para. 1 (a) GDPR.
In addition, we use, in connection with Google Ads, so-called tracking cookies from Google for remarketing purposes. While you browse our website, permanent cookies store information about which of our products you have looked at and which advertizements and third-party websites have led you to our website. If you later visit the website of one of our partners, we can place personalized advertizements for you based on the products you have looked at in the past.
We process the data so obtained on the basis of your consent pursuant to Art. 6 Para. 1 (a) GDPR. The information collected via the cookie concerning your use of our website (including your IP address) is transmitted to a Google server in the USA and stored there.
Revocation of your consent
You can revoke your consent with future effect at any time by modifying your preferences under http://www.google.de/ads/preferences or by clicking on the following opt-out link: Opt-Out. In the alternative, you can revoke your consent via the cookie settings on our website or by using the deactivation add-on for browsers from Google at: https://support.google.com/ads/answer/7395996?hl=en.
Please take note, in addition, of the information concerning the use of data by Google within the Google partner network, which you can review at: https://policies.google.com/technologies/partner-sites?hl=en
We use dynamic content from third parties to optimize the display and offering of our website. While visiting the website, a request will be sent to the server of the relevant content provider using an interface to the application program (API). This request will share specific log data (such as the user's IP address). The dynamic content will then be sent to our website and displayed there.
We use external content in connection with the following features:
We use maps from Google Maps, a service by Google, for the purpose of making the use of an interactive map available to you. The generation of the map will entail the transmission of data, including your IP address and location to Google servers in the USA and stored there. This data processing is based on our prevailing legitimate interest in the best possible marketing of our services pursuant to Art. 6 para. 1f GDPR.
Further data protection information can be found at: https://policies.google.com/privacy?hl=en&gl=de
j) Verification against the EU sanctions list
We are under a statutory obligation to validate legal transactions against so-called compliance lists. These lists of names mainly serve the purpose of preventing money-laundering and to fight terrorism. The list used by us is the Compliance List published by the European Union (CFSP). This list was made available to us by: Creditpass GmbH, Mehlbeerenstr. 2, 82024 Taufkirchen b. München. We process your data on the basis of our statutory obligation pursuant to Art. 6 para. 1c GDPR.
k) Social media
Our website contains links to different social media platforms and other websites. Your visit to our website will not cause data to be transmitted to any social media or other websites. You will however be forwarded to the respective websites if you click on one of the external links on our website. These other websites may collect and process your data under their own terms and conditions of use, which you may review directly on the respective website. We recommend to review the data protection statements of the respective service or website and the above declaration of consent before making a decision to access or use any such website or service.
We have no control over the nature and extent of data processing conducted by operators of external websites you may access by clicking on a link on our website. Your respective rights and configuration options to protect your privacy are set out in the respective data protection statements (see above).
C. Duration of the retention period
We will only save your personal data for the period in time it is needed for the purpose it is being processed for or is required, or until you revoke your consent. If and when statutory retention periods must be observed, e.g. under commercial trade or tax law, it may be necessary to retain certain data for up to 10 years.
D. Your rights
Upon request, you can receive information about the personal data that we have saved about you at any time free of charge.
b) Correction, deletion, setting limitations on processing (blocking) and objection
If you no longer agree with your personal data being saved or your information is not correct, we will arrange for your data to be deleted or blocked upon receiving appropriate notification thereof, or we will make the necessary corrections (provided this is possible under applicable laws). The same shall apply if we should only process your data in a more restrictive manner in the future.
c) Data transmissibility
You may request us to provide you with your data in a commonly used, structured and machine-readable format, which you may use to transfer the data to another data controller.
d) Right to lodge a complaint
You have the right to lodge a complaint with the relevant supervisory authority.
e) Right to revoke declarations of consent with effect on the future
You may revoke any previously granted declaration of consent at any time with effect on the future. Your revocation will be without prejudice to the lawfulness of the data processing that took place prior to your revocation.
The rights set out above do not apply to data that does not allow us to identify the data subject, i.e. data that was anonymised for analysis purposes. We may be able to provide you with information on your data, delete your data, restrict the processing of your data, correct your data or transfer your data to another company if you provide us with additional information that allows us to identify you.
g) Exercising your rights as a data subject
If you have any questions concerning the processing of your personal data, or if you would like information or request the correction, deletion or restriction of data, or if you would like to have the data transferred to another company, please send an email to datenschutz(a)glashuette.com