We are pleased by your interest in our website. Protecting your privacy is very important to us. In the following, we provide detailed information on how we treat your data.

A. Data controller in charge of the data processing

The data controller in charge of the processing of personal data associated with this Internet service for the purposes of the General Data Protection Regulation (GDPR) is:

NOMOS Glashütte/SA Roland Schwertner KG
Ferdinand-Adolph-Lange-Platz 2
01768 Glashütte
Tel. +49 35053 404 0
Fax +49 35053 404 965
Web: nomos-glashuette.com
E-Mail: service(at)nomos-store.com

Our company’s Data Protection Officer is:
Lars Pöhlmann
datenschutz(at)glashuette.com

We have prepared this Data Protection Statement to inform you about the scope of processing your personal data (hereinafter "data").

B. Data processing

The operation of our Internet website entails the processing of data. The processing of the data also includes their disclosure by way of transmission.

Data transmissions to the USA are covered under an adequacy decision from the EU commission, also known as the EU-US Privacy Shield. The commission has confirmed that the guarantees for the transmission of data to the USA under the EU-US Privacy Shield conforms with EU data protection standards. To the extent we transmit data to the USA, we have indicated the participation of our respective service providers in the EU-US Privacy Shield.

The data, purposes of processing the data, legal bases, recipients and transmissions third countries concerned in each individual case are set out in the following table:

a) Log file
We store certain information concerning your visit to our website in a log file. The following data will be processed: Name of the website accessed, date and time of the access, transmitted data volume, type of browser and version, your operating system, referrer URL (the previously visited website), your IP address and the provider making the request. This data is required to ensure the security of our website.

We will process this data on the basis of our legitimate interest pursuant to Article 6 para. 1f GDPR. The log file will be deleted after seven days, unless it is required to investigate or establish specific infringements that have become known within the retention period.

b) Hosting
All data processed in relation to the operation of this website that concern the area of hosting will be stored. This is necessary to operate the website. We will process this data on the basis of our legitimate interest pursuant to Article 6 para. 1f GDPR. The provision of our Internet service entails the use of web hosting service providers, to whom we will transmit the data specified above.

c) Making contact
If you contact us, we will process your data ( name, contact details, if provided by you) and your message to us exclusively for the purpose of handling and processing your inquiry. We will process this data to handle your inquiry on the basis of Article 6 para. 1b GDPR or Article 6 para. 1f GDPR.

d) Newsletter
We offer you the option of subscribing to a newsletter, which will regularly inform you about our company and our services. When you subscribe to the newsletter, we will process the data entered by you (email headers and any other data provided voluntarily).

The newsletter will be sent to you on the basis of your declaration of consent pursuant to Article 6 para. 1A GDPR and only after you have completed your subscription.

The newsletter subscription uses the so-called double opt-out procedure. After you have subscribed to the newsletter, we will send you an email asking you to confirm your subscription. This serves the purpose of preventing abuse. We will save your subscription data in a log file order to demonstrate our compliance with the legal requirements. This means that we will store the date and time of your subscription, the date of time of you confirming your subscription, as well as your IP address.

e) Customer account
If you open a customer account, you consent to having your basic data be saved, such as name, address, email address, bank account information, and your user data (username, password). As a result, you have the option of placing orders with us using your email address or your customer number and your personal password.

Your data is processed by us on the basis of your consent in compliance with article 6, para. 1 a) of the GDPR.

f) Processing of purchases
We will process your order data for the purpose of performing the purchase contract. The data is processed on the basis of Art. 6 para. 1b GDPR.
We will disclose your address details to the company contracted by us for delivery. To the extent necessary for us to perform the contract, we will further disclose your email address or telephone number for the purpose of coordinating a delivery date to the company contracted for the delivery.

If you choose Splitit as the payment method, you will be redirected to the website of the provider (Splitit, 27 East 28th St., New York, NY 10016, USA), where you can enter your details. This information will then be forwarded to us. You can find more information about Splitit's data protection policy at: https://www.splitit.com/legals/splitit-privacy-cookies-policy/english/.

Payment for purchases on account, by credit card (Master Card or Visa),Splitit (payment in installments by credit card), PayPal or Klarna "Sofort" is processed by our external payment processor Heidelpay GmbH, Vangerowstraße 18, 69115 Heidelberg ("Heidelpay"). The data required for processing the payment (first and last name, street, house number, postcode, city, telephone number and the specified payment data), as well as information in connection with the order, will be passed on to Heidelpay.
For further information on the service provider's data protection policy, please refer to Heidelpay's data protection declaration at: https://www.heidelpay.com/en, https://www.heidelpay.com/en/privacy-statement.

g) Userlike chat
We use a Userlike chat feature on our website from the company Userlike UG, Deisterweg 7, 51109 Cologne ("Userlike"), to allow you to contact us by live chat. Userlike is integrated into our website using Javascript. Userlike uses cookies. You can find details of the cookies used in your browser's cookie settings. The following data is collected when using Userlike: Content of the chat, date and time, browser type/version, operating system, the URL of previously visited websites, and the amount of data sent. When using this service, the chat and your data will be uploaded to the servers of AWS Cloudfront (the content delivery network of Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, USA). The processing of this data takes place because of our prevailing interest in optimizing the marketing of our website in line with Article 6(1)(f) of the GDPR.

Amazon Web Services is certified under:
https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active

You can find more information on data protection at Amazon and Userlike here: https://aws.amazon.com/en/compliance/data-privacy-faq, https://www.userlike.com/en/terms#privacy-policy

h) Cookies
We use cookies on our website. These are small text files which are stored on your device (PC, smartphone, tablet, etc.) and saved by your browser.

Purpose
We use cookies for the optimal technical function of our website, in particular for site navigation and offering the basic functions. We also use optional cookies which give us extra information, such as for analyzing data traffic and advertising purposes.

Length
Cookies remain on your device for different lengths of time:
Session cookies: These cookies are deleted from your device immediately after you close your browser.
Persistent cookies: These cookies remain on your device even after you close your browser and allow you to, for example, be recognized next time you visit the site.

Cookie provider
Cookies that are set directly by us are so-called first-party cookies. Third-party cookies, however, are set by third-party websites, such as in the presentation of content (advertising, images, tracking pixels, etc.).

Legal basis of data processing
The legal basis of data processing by means of a cookie is your consent in accordance with Article 6(1)(a) of the GDPR or our legitimate interests under Article 6(1)(f) of the GDPR for the optimization and functionality of our website.

Revocation and opposition
If data processing takes place on the basis of your consent, you can revoke your consent at any time with effect for the future. In the case of data processing based on our legitimate interest, you may object to further data processing with effect for the future (so-called "opt-out"). You can do this via the opt-out options in our cookie settings.

Our cookies
Further information on the specific cookies, their intended purpose, legal basis and lifespan can be found in our cookie settings.

i) Analysis / Marketing

aa) Google services
We use various services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereafter "Google") on our website. It is also possible that this will result in data transfers to Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. For these cases, Google LLC has submitted to the EU-US Privacy Shield:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information on data protection can be found at:
https://policies.google.com/privacy?hl=en&gl=en


1) Google Analytics
We use Google's tracking tool Google Analytics on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other website-related services, thereby improving usability.
When using Google Analytics, website visitors' interactions are primarily captured and systematically evaluated using cookies.
Details on the cookies used can be found in our cookie settings.
We use Google Analytics with the extension "anonymizeIp()". This will reduce IP addresses within the EU or EEA member states. If transmitted to Google's servers in the United States, only in exceptional cases will the full IP address be transmitted and shortened there. A direct personal identification is thus usually excluded. In particular, any association with the computer or device of the website visitor is no longer possible.
By using Google Analytics, the following data is processed:
• 3 bytes of the IP address of the system of the website visitor (anonymized IP address),
• the website visited,
• the website from which the user came to our website (referrer),
• the subpages that are accessed from the website
• the time spent on the website,
• the frequency of visits to the website.

Google has stated that it will never combine your IP address with other data from Google.
The legal basis for this data processing is your previously given consent, according to Article 6(1)(a) of the GDPR.
You can withdraw consent for data processing in the future by downloading the Google Analytics deactivation add-on for your browser, which can be found here: http://tools.google.com/dlpage/gaoptout?hl=en or by clicking the following opt-out link: Opt-Out

Please additionally note how data is used by Google in the Google Partner Network, as detailed here: http://www.google.com/intl/en/policies/privacy/partners/

2) Google Analytics with the additional function “demographic characteristics and interests”
In addition to the standard functions of Google Analytics, we also use the “demographic characteristics” function. This will cause a cookie to be placed on your user device when you visit certain webpages. These cookies serve the purpose of allowing us to analyse the referrer websites from which users access our website. This will entail the collection and analysis of data concerning your demographic characteristics (gender, age). The analysis of this data allows us to serve interest-specific display advertising. The data is processed on the basis of our prevailing interests in the optimised marketing of our online services pursuant to Article 6 paragraph 1 lit. f GDPR.

You may at any time object against the collection of data with prospective effect by objecting against the collection of data by Google Analytics as explained in point B.h) aa), or by deactivating the corresponding function in your Google account. Further information about data protection can be found at: https://policies.google.com/privacy?hl=en&gl=en

3) Google Optimize
In order to continue improving our online presence, we generate different test versions of our website. To test the different versions of the website and generate statistics for comparison, we use Google Optimize, a service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Optimize is a tool integrated into Google Analytics; therefore, the data processing specified in the section on Google Analytics also applies. In addition, Google Optimize also sets its own cookies. These collect information to differentiate the test groups of the different versions of the website. You can find details about the cookies used in our cookie settings.

This data processing is conducted on the basis of our legitimate interest in the user-friendly design of our website, according to Article 6(1)(a) of the GDPR.

You can withdraw consent for data processing using Google Optimize in the future by downloading the Google Analytics deactivation add-on for your browser, which can be found here: http://tools.google.com/dlpage/gaoptout?hl=en
or by clicking the following opt-out link for Google Analytics: Opt-Out

4) Google AdSense
We use the Google AdSense service from Google on our website in order to evaluate information, such as visitor traffic. Google AdSense sets cookies and uses so-called web beacons (invisible graphics).
You can find details about the cookies used in our cookie settings.
Google AdSense sends information about the use, visit (including the IP address of the user), and the transfer of advertising formats on our website and the Google server.
Google can send this information to Google's business partners. However, Google has stated that it will not combine your IP address with the rest of your saved data.
The legal basis for this data processing is your previously given consent, according to Article 6(1)(a) of the GDPR.

Withdrawal of consent
You can withdraw your consent with effect for the future at any time by changing your settings at http://www.google.de/ads/preferences or by clicking the following opt-out link: Opt-Out. Alternatively, you can also withdraw consent via our http://www.google.com/intl/en/policies/privacy/partners.

Please additionally note how data is used by Google in the Google Partner Network, as detailed here: http://www.google.com/intl/en/policies/privacy/partners/

You can find further information about Google AdSense here: https://support.google.com/adsense/answer/140382?hl=en
Please additionally note how data is used by Google in the Google Partner Network, as detailed here:
http://www.google.com/intl/en/policies/privacy/partners/

bb) Contents
We use dynamic content from third parties to optimize the display and offering of our website. While visiting the website, a request will be sent to the server of the relevant content provider using an interface to the application program (API). This request will share specific log data (such as the user's IP address). The dynamic content will then be sent to our website and displayed there.

We use external content in connection with the following features:

Google Maps
We use maps from Google Maps, a service by Google, for the purpose of making the use of an interactive map available to you. The generation of the map will entail the transmission of data, including your IP address and location to Google servers in the USA and stored there. This data processing is based on our prevailing legitimate interest in the best possible marketing of our services pursuant to Art. 6 para. 1f GDPR.

Google’s certification can be reviewed at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further data protection information can be found at: https://policies.google.com/privacy?hl=en&gl=de

j) Verification against the EU sanctions list
We are under a statutory obligation to validate legal transactions against so-called compliance lists. These lists of names mainly serve the purpose of preventing money-laundering and to fight terrorism. The list used by us is the Compliance List published by the European Union (CFSP). This list was made available to us by: Creditpass GmbH, Mehlbeerenstr. 2, 82024 Taufkirchen b. München. We process your data on the basis of our statutory obligation pursuant to Art. 6 para. 1c GDPR.

k) Social media
Our website contains links to different social media platforms and other websites. Your visit to our website will not cause data to be transmitted to any social media or other websites. You will however be forwarded to the respective websites if you click on one of the external links on our website. These other websites may collect and process your data under their own terms and conditions of use, which you may review directly on the respective website. We recommend to review the data protection statements of the respective service or website and the above declaration of consent before making a decision to access or use any such website or service.

We have no control over the nature and extent of data processing conducted by operators of external websites you may access by clicking on a link on our website. Your respective rights and configuration options to protect your privacy are set out in the respective data protection statements (see above).

C. Duration of the retention period

We will only save your personal data for the period in time it is needed for the purpose it is being processed for or is required, or until you revoke your consent. If and when statutory retention periods must be observed, e.g. under commercial trade or tax law, it may be necessary to retain certain data for up to 10 years.

D. Your rights

a) Information
Upon request, you can receive information about the personal data that we have saved about you at any time free of charge.

b) Correction, deletion, setting limitations on processing (blocking) and objection
If you no longer agree with your personal data being saved or your information is not correct, we will arrange for your data to be deleted or blocked upon receiving appropriate notification thereof, or we will make the necessary corrections (provided this is possible under applicable laws). The same shall apply if we should only process your data in a more restrictive manner in the future.

c) Data transmissibility
You may request us to provide you with your data in a commonly used, structured and machine-readable format, which you may use to transfer the data to another data controller.

d) Right to lodge a complaint
You have the right to lodge a complaint with the relevant supervisory authority.

e) Right to revoke declarations of consent with effect on the future
You may revoke any previously granted declaration of consent at any time with effect on the future. Your revocation will be without prejudice to the lawfulness of the data processing that took place prior to your revocation.

f) Restrictions
The rights set out above do not apply to data that does not allow us to identify the data subject, i.e. data that was anonymised for analysis purposes. We may be able to provide you with information on your data, delete your data, restrict the processing of your data, correct your data or transfer your data to another company if you provide us with additional information that allows us to identify you.

g) Exercising your rights as a data subject
If you have any questions concerning the processing of your personal data, or if you would like information or request the correction, deletion or restriction of data, or if you would like to have the data transferred to another company, please send an email to datenschutz(a)glashuette.com