1. NAME AND CONTACT DETAILS OF THE PERSON IN CHARGE OF DATA PROCESSING
This privacy statement applies to data processed by:
Telephone: +44 2034995895
You can reach the company’s data protection officer at the address above or by email to firstname.lastname@example.org
2. COLLECTING AND STORING PERSONAL DATA AND THE NATURE AND PURPOSE OF ITS USE
a) Visiting the website
On visiting our website at www.eyo-label.com, information is automatically sent to our website server via your chosen browser. This information is temporarily stored in a log file. The following information is collected and stored until it is automatically deleted, without any action required on your part:
- your computer’s IP address;
- the access time and date;
- the name and URL of the selected file;
- the website used to access our site (referrer URL);
- the browser used, along with your computer’s operating system and the name of your access provider, if applicable.
The specified data are processed for the following purposes:
- to ensure a smooth connection setup for the website;
- to ensure convenient use of our website;
- to evaluate system security and stability; and
- for other administrative purposes.
The legal basis for data processing is Article 6, paragraph 1, point (f) of the General Data Protection Regulation (GDPR). Our legitimate interest entitles us to collect data for the above-listed purposes. Under no circumstances do we use collected data to draw conclusions about you.
b) Signing up to our newsletter
If you have expressly provided consent in accordance with Article 6, paragraph 1, point (a) of the GDPR, we will use your email address to send you our newsletter on a regular basis. For receipt of the newsletter disclosure of an email address is sufficient.
Cancellation is possible at any time, e.g. via a link at the end of each newsletter. Alternatively, you may send your cancellation by email to email@example.com at we make use of an external provider in order to implement the service.
c) Comments and contributions in our blog / subscriptions
If you leave a comment or other contribution in our blog, we save your IP address in addition to the details you entered. This is for security purposes in case any comments or other contributions contain unlawful contents (e.g. insults, illegal political propaganda, etc.). In such a case we would pass on the IP address concerned to the authorities.
You can also subscribe to the contributions and comments in our blog. You then receive an email to confirm that you are the holder of the email address provided. You can unsubscribe at any time. The confirmation email contains further information on this. Alternatively, you can unsubscribe by email to firstname.lastname@example.org at any time.
The data you provided in the blog is processed in accordance with Article 6, paragraph 1, point (a) of the GDPR on the basis of your voluntary consent, and in the case of passing on to the authorities in accordance with Article 6, paragraph 1, point (c) or (f) of the GDPR. widersprechen (siehe auch Ziff. 12).
d) Online fitting
We offer you the possibility of comfortably trying on your glasses online by way of 2D or 3D fitting. To this end you may either upload your photograph or use your webcam.
The online glasses fitting is voluntary and the data are collected on the basis of our legitimate interest in being able to offer you the corresponding service, Art. 6 Para. 1 lit. f) GDPR. we make use of an external provider in order to implement the service.
We use the photographic/video material you supply solely in order to be able to offer you our service. Video material is deleted immediately, an uploaded photograph automatically after 14 days.
e) Order and payment details
To initiate, process and carry out your order, your details, as far as necessary, will be passed on to an assigned service provider, e.g. the shipping company.
Payment details will be encrypted and used exclusively for the respective transaction. Only the selected payment service provider will receive your data.
for credit card payments, Crédit Industriel et Commercial, Paris; for PayPal, PayPal (Europe), Luxemburg. In the case of bank transfer, there is no transmission of data to external payment service providers. The processing takes place exclusively via the respective service provider.
f) Processing of your data for advertising purposes
In addition to processing your data for the purpose of implementing the contracts concluded with us, we also use your data in order to exchange information with you concerning your orders, to communicate with you concerning certain products or marketing actions and to be able to recommend products or services that might be of interest to you.
Your data will only be used for our own marketing purposes if you have given us your prior consent to do this.
- On subscribing to our newsletter, your email address will be used for our own advertising purposes until you unsubscribe.
- You can withdraw your permission for Edel-Optics to use your email address to send you service and product information emails at any time without incurring any costs other than the transmission costs in accordance with the basic rates.
- If you no longer wish to receive service and product information emails, simply email us at email@example.com. We of course guarantee the security of your data in accordance with the German Data Protection Act. Once you have withdrawn your permission, your contact details will no longer be used for marketing purposes.
- The legal basis for the aforementioned types of processing is in each case Art. 6 Para.
- 1 lit. f) GDPR.
- The processing of regular customers’ data for our own advertising purposes is to be regarded as a legitimate interest.
g) Deletion of data
Your data will be stored with us only as long as is required for optimal processing. Then the data will be deleted, unless there is a legal retention obligation. Exempt from deletion are data that we require for the processing of tasks still due, or for implementation of our rights and claims, as well as data that we are legally obliged to store. In this case, the data will be kept from further use.
3. DISCLOSING DATA
Your data will not be passed on to third parties in any other circumstances than those listed below. We will only pass your details on to third parties if:
- You have expressly consented to this in accordance with Article 6, paragraph 1, point (a) of the GDPR;
- Disclosing data according to Article 6, paragraph 1, point (f) of the GDPR is necessary for establishing, exercising or defending legal claims and there is no reason to believe that you have an overriding and legitimate interest in the non-disclosure of your data;
- There is a legal obligation to disclose data according to Article 6, paragraph 1, point (c) of the GDPR and this is permitted by law and required to handle contractual relationships in accordance with Article 6, paragraph 1, point (b) of the GDPR.
4. COOKIES AND WEB BEACONS
These cookies are automatically deleted after a set period of time. Data processed by cookies are required for the specified purposes to safeguard our and third parties’ legitimate interests according to Article 6, paragraph 1, point (f) of the GDPR.
Most browsers accept cookies automatically,
but you can configure your browser so that no cookies are stored on your computer or you are always notified before a new cookie is stored. Deactivating all cookies can prevent you from using all of our website’s features.
5. ANALYTIC TOOLS
For the purpose of shaping our websites in accordance with your needs, and of continuously optimising our websites we, on the basis of Art. 6 Para. 1 lit. f) GDPR, deploy the following tools. At the same time this also represents the legitimate interest we are pursuing hereby.
a) Google Analytics:
- browser type/version,
- operating system,
- referrer URL (the previously visited site),
- host name of the accessing computer (IP address), and
- time of the server request,
are transferred to a Google server in the USA and stored there. This information is used to evaluate website usage, compile reports on website activity and deliver services related to website and internet usage for market research and the needs-based design of this website. This information may also be passed on to third parties, provided that it is legally required or the third parties process these data on our behalf. Under no circumstances will your IP address be merged with other Google data. IP addresses will be anonymised to prevent them being identified (IP masking).
You can prevent cookies being installed via your browser settings, but please be aware that this may mean that you are not able to use all features of the website. You can also prevent data about your use of the website (including your IP address) being created by cookies and processed by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en-GB).
As an alternative to a browser add-on, particularly for browsers on mobile devices, you can also deactivate Google Analytics by clicking this link. This sets an opt-out cookie that prevents your data being captured when you visit this website in the future. The opt-out cookie will be stored on your device and only applies when using the browser concerned and only when visiting our website. If you delete cookies in your browser, you will have to set the opt-out cookie again.).
More information about data protection in relation to Google Analytics is available on its help site (https://support.google.com/analytics/answer/6004245?hl=en). .
b) Google Analytics Audience (GA Audience):
Furthermore, we use GA Audience, a service provided also by Google. With the help of this service, we can establish so-called “audience reports” which enable us to categorise the visitors of our website. The purpose of this is to show you advertisements that could be of interest to you, and so render our website more interesting to you. Depending on the category of the respective user and search behaviour, the user is shown advertising likely to be interesting for users of this category. The legal basis of this pursuit within the framework of our best interest in an optimal marketing of our offer is in keeping with Article 6, paragraph 1, point (f) of the General Data Protection Regulation (GDPR).
The data are in part evaluated across all devices. Google Audience obtains access to the cookies set in the context of the use of Google AdWords and Google Analytics. In the context of this use, data, in particular the user’s IP address and activities, can be transmitted to a server belonging to the company Google Inc. and be stored there. Google Inc. may transmit this information to third parties to the extent that this is prescribed by law or insofar as processing by a third party takes place.
You can prevent the collection and passing on of personal data (especially your IP address) and the processing of this data, by deactivation the execution of Java script in your browser or installing a tool like ‘NoScript’. In addition, you can prevent the collection of the data produced by the Google cookie and relating to your use of the website (including your IP address) and the processing of this data by Google, by downloading and installing the browser plugin available under the following link (https://tools.google.com/dlpage/gaoptout?hl=en). You can obtain further information about data protection by the use of GA Audience by using the following link:
6. ADVERTISING AND MARKETING TOOLS
a) DoubleClick by Google:
b) Facebook Pixel and Facebook Custom Audience:
Our website uses the services Facebook Pixel and Facebook Custom Audience. These are products by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Facebook“)). With these services, transactions on our website, such as the duration of a page visit, the placing of products in the shopping cart, or purchases, are documented. The respective data is stored on your computer using cookies.
The stored data is initially used to analyse visitors’ search and purchase behaviour on the website (tracking). Based on the retrieved information the stored cookies are also used to recognise visitors of our website when they visit websites belonging to the Facebook advertising network. Using these services then enables us to show the user on the “partner website” (e.g. Facebook, Instagram or other Audience network websites) interest-related ads and so make it more attractive to the user (retargeting).
You have the option of deactivating the retrieval of data for the purposes described above. Then a permanent cookie will be set that prevents the data retrieval as long as you do not specifically delete this cookie. You can repeat the objection at any time.
7. SOCIAL MEDIA
We use plugins of the social networks Facebook, Twitter and Google+ on our website in accordance with Article 6, paragraph 1, point (f) of the GDPR, with the purpose of making our company known to a wider audience. The commercial purpose of this is deemed a legitimate interest in the context of GDPR. The responsibility for data protection compliance lies with each respective provider. The integration of these plugins is realised via the so-called two-click method in order to protect the visitors of your website in the best possible way.
On our website we employ social media plugins by Facebook to personalise its usage. For this we use the buttons “LIKE” and “SHARE”. This is a service by Facebook. When you open a page of our web appearance that contains such a plugin, your browser enables a direct connection to the Facebook server. Facebook transmits the content of the plugin directly to your browser and integrates it on the website.
With the integration of the plugins Facebook receives the information that your browser has opened the respective page of our website, even if you don’t have a Facebook account or are not currently logged in at Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
When you are logged in at Facebook, Facebook can directly associate our website with your Facebook account. When you interact with the plugins, for example by clicking the “LIKE” or “SHARE” button, the respective information is also transmitted directly to the Facebook server and stored there. The information is also published on Facebook and displayed in your friends’ newsfeed.
Facebook can use this information for the purposes of advertising, market research, and the customisation of Facebook pages. For this, Facebook profiles about usage, interests and relationships are developed, e.g. in order to evaluate our website regarding the ads that you see, to inform other Facebook users about your activities on our website and to provide further services connected to the use of Facebook.
If you do not want that Facebook connects the collected data about our website with your Facebook account, you need to log out of your Facebook account before you visit our website.
On our website we also employ social media plugins by Instagram, operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (hereinafter „Instagram“). The plugins are marked with an Instagram logo, e.g. an “Instagram camera“.
When you open a page of our web appearance that contains such a plugin, your browser enables a direct connection to the Instagram server. Instagram transmits the content of the plugin directly to your browser and integrates it on the website. With this integration, Instagram receives the information that your browser has opened the respective page of our website, even if you don’t have an Instagram account or are not currently logged in at Instagram.
This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. When you are logged in at Instagram, Instagram can directly associate our website with your Instagram account. When you interact with the plugins, for example by clicking the “Instagram“ button, this information is also transmitted directly to the Instagram server and stored there. The information is also published on your Instagram account and shown to your contacts.
If you do not want that Instagram connects the collected data about our website with your Instagram account, you need to log out of Instagram before you visit our website.
8. USE OF ADDTOANY
On our website we employ the sharing service AddToAny. AddToAny offers you the opportunity to share contents in social media networks. To make this possible, AddToAny stores cookies in your browser (see section 4). Data will only be retrieved if you yourself request the service. The data retrieved by AddToAny are stored on a server in the USA. We don’t receive any personalised data resulting from the use of the share button. If you do not agree with the processing of your data by AddToAny, please use this link to opt out: http://optout.networkadvertising.org/?c=1#!/. .
9. STORE EVALUATION SYSTEMS
a) Integration of the Trusted Shops Trust Badge
The Trusted Shops Trust Badge is integrated on this website to display our Trusted Shops seal of approval and the possibly collected evaluations, as well as to offer Trusted Shops products to buyers after an order is placed. This serves to safeguard our legitimate interest in accordance with Art. 6 para. 1 lit. f) within GDPR for optimal marketing of our offer within the scope of a balancing of interests. The trust badge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the trust badge is activated, the server automatically stores a so-called server log-file, which contains, for example, your IP address, date and time of retrieval, amount of data transmitted and the requesting provider (access data) that contains and documents the call. This access data will not be evaluated, and it will be automatically overwritten within seven days after the end of your page visit. Other personal data (order number, hashed email address, sum, currency, payment method) will only be transferred to Trusted Shops if you decided to use Trusted Shops products after completing an order or if you have already registered. In this case, the contractual agreement between you and Trusted Shops applies.
b) Integration of Trustpilot
We also provide the option to rate us using the evaluation service www.trustpilot.com. Here, the following conditions and privacy terms by Trustpilot apply:
To evaluate us, you need to register. Should you decide to do this, your evaluation will be published with us as well as on the websites of Trustpilot and their partners. For the purpose of use by Trustpilot, we pass on your email address, your first name and surname, and your order number we have generated to Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen, Denmark (firstname.lastname@example.org). Commissioned by us, Trustpilot will send you invitations for evaluations by email. The data processing is based on Article 6, paragraph 1, point (f) of the General Data Protection Regulation (GDPR) and the rightful interest to receive user assessments to create a trustful basis for the use of our website. You have the right to object to the processing of your data in the framework of the assessment system by Trustpilot at any time (see section 12 below).
10. GOOGLE MAPS
For further instructions of how to manage your own data in relation to Google products please refer to: https://support.google.com/accounts/answer/3024190.
11. USER RIGHTS
You have the right:
- To request access to the personal data processed by us, pursuant to Article 15 GDPR. In particular, you may request the following information: the purposes of the processing, the categories of personal data concerned, the categories of recipient to whom your personal data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the controller rectification or erasure or restriction of processing or to object, the right to lodge a complaint, the source of your data where the personal data are not collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about relevant details;
- To obtain without undue delay the rectification of inaccurate personal data held by us or to have incomplete personal data completed, pursuant to Article 16 GDPR;
- To obtain the erasure of the personal data held by us to the extent that processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims, pursuant to Article 17 GDPR;
- To obtain restriction of processing of your personal data where you contest the accuracy of the data or where the processing is unlawful, and you oppose the erasure or where we no longer need the data, pursuant to Article 18 GDPR. Or where you need the data for the establishment, exercise or defence of legal claims or you have objected to processing, pursuant to Article 21 GDPR;
- To receive the personal data you have provided us with in a structured, commonly used and machine-readable format or to obtain transmission of those data to another controller, pursuant to Article 20 GDPR;
- To withdraw your consent at any time, pursuant to Article 7(3) GDPR; this means that we may not continue to process the data for which consent had been given;
- To lodge a complaint with a supervisory authority, pursuant to Article 77 GDPR; you can normally contact the supervisory authority in your habitual residence, place of work or our company`s location.
12. RIGHT OF OBJECTION
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sent. 1 letter f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 of the GDPR, provided that the reasons for the objection relate to your particular situation or that the objection is aimed at direct advertising. In the latter case, you have a general right to object, with which we will comply whether or not you base your objection on any particular situation. To exercise your right of revocation or right of objection, it is sufficient to send an email to email@example.com. .
13. DATA SECURITY
During your visit to our website we will employ the widely used SSL method (secure socket layer) in combination with the highest encryption level supported by your browser. As a general rule, 256-bit encryption will be used. If your browser does not support 256-bit encryption, we will use 128 bit v3 technology instead. To check whether any particular page of our website is transmitted in encrypted form, look for the closed key or lock symbol in the lower status bar of your browser. In addition, we have implemented appropriate technical and organizational safeguards to protect your data from accidental or intentional manipulation, partial or complete loss or destruction, and unauthorized access by third parties. Our safeguards are continuously updated as technology evolves.
> - >