Rollei GmbH & Co. KG
In de Tarpen 42
22848 Norderstedt / Germany
Tel: +49 (40) 797 557 10
Fax: +49 (40) 797 557 160
§ 1 General Information
Your personal data (f. ex. title, name, address, e-mail address, telephone number, bank details, credit card number) are processed by us only in accordance with the provisions of the German Data Protection Act and the data protection law of the European Union (EU). The following provisions inform you about the type, extent and purpose of the collection, processing and use of personal data. Our privacy statement relates only to our websites. If you are forwarded to other websites by links on our websites, please familiarise yourself in those websites with the respective handling of your data. Your personal data (f. ex. title, name, address, e-mail address, telephone number, bank details, credit card number) are processed by us only in accordance with the provisions of the German Data Protection Act and the data protection law of the European Union (EU). The following provisions inform you about the type, extent and purpose of the collection, processing and use of personal data. Our privacy statement relates only to our websites. If you are forwarded to other websites by links on our websites, please familiarise yourself in those websites with the respective handling of your data.
§ 2 Web Analysis with Google Analytics
(1) Purpose of processing
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. ("Google"). Google Analytics uses so-called “cookies”, these are text files stored on your computer, and which enable an analysis on how you use the website. The information generated by the cookie about your usage of this website is normally sent to one of Google's servers in the USA and stored there. If the IP anonymisation has been activated on this website, your IP address will, however, first be shortened by Google within the Member States of the European Union or in other countries that are contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and be shortened there. On behalf of the operator of this website, Google will use this information to analyse your usage of the website, compile reports about website activity and provide other services to the website operator relating to website usage and Internet usage.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 f) GDPR.
(3) Legitimate interest
Our legitimate interest is the statistical analysis of the user behaviour for optimisation and marketing purposes. To protect your interest regarding data protection, this website uses Google Analytics with the extension “anonymizelp()”, so that IP addresses are only processed further in abbreviated form to prevent them being directly linked to a particular individual.
(4) Categories of recipients
Google, partner companies
(5) Transmission to a third country
Google LLC, with its registered office in the USA, is certified for the US-European Data Protection Convention “Privacy Shield”, which ensures compliance of the data protection standard that applies in the EU.
(6) Period of storage
(7) Right of objection
You can prevent cookies from being stored by changing the relevant settings in your browser software; however, please note that in this case you may not be able to take full advantage of all the functions of this website. In addition, you can prevent the collection of the data generated by the cookie and relating to their usage of the website (including your IP address) by Google and the processing of this data by Google, if you download and install the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
You can also prevent the capture by setting an opt-out cookie. If you wish to prevent the future capture of your data during a visit of this website, please click here: Deactivate Google Analytics
§ 3 Information, Deletion, Blocking
You have the right at any time to obtain information about your stored personal data, their origin and recipients and the purpose of the data processing, as well as a right to correction, blocking or deletion of this data, free of charge. To this, and for further information on personal data you can contact us at any time at the address provided in the imprint.
(1) Purpose of processing
Other cookies remain permanently and recognise your browser at the following visit. These cookies enable you to permanently store, for example, your passwords for a customer account.
(2) Legal basis
The legal basis for the processing is Art. 6 para. 1 a) GDPR.
Where appropriate, you have expressly provided the following consent:
Our website uses tracking cookies to enable us to better understand the use of the site by visitors and to optimise our website. By using this website, you agree to this.
(3) Period of storage
The cookies that are required for technical reasons are usually deleted when the browser is closed. Cookies, which are permanently stored have a life span that varies from a few minutes to several years.
(4) Right of revocation
If you do not wish that these cookies are stored, please deactivate the acceptance of these cookies in your internet browser. This can, however, result in a restriction of the functionality of our website.
You can revoke your consent to the permanent storage at any time by deleting the stored cookies via your browser.
§ 5 Newsletter Data
(1) Purpose of processing
If you wish to receive the newsletter offered on the website, we require your e-mail address as well as information, which enables us to verify that the e-mail address provided to us is registered to you, and that you agree to receive the newsletter. We do not collect any other data. We use this data solely to send the requested information to you and we do not share the data with third parties.
You can, at any time, revoke the consent you have provided for the storage of the data, the e-mail address as well as their use for sending the newsletter, for example via the “deregister” link in the newsletter.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 a) GDPR.
(3) Categories of recipients
if appropriate, shipping agent for newsletter
(4) Period of storage
Your e-mail address is stored for the purpose of sending the newsletter, only for the duration of the subscription.
(5) Right of revocation
You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Via an unsubscribe link in the newsletter or via e-mail to email@example.com
Newsletter via MailChimp
We use MailChimp for the dispatch of our newsletter. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA. Your data (e-mail address, if appropriate, your name, IP address, date as well as time of your registration) that were stored when you registered for the newsletter, are transmitted to a server of The Rocket Science Group in the USA and stored there in compliance with the “EU-US Privacy Shield”.
Further information on data protection at MailChimp can be found at: mailchimp.com/legal/privacy/
Further information on the “EU-US Privacy Shield” can be found at: The Federal Commissioner for Data Protection and Freedom of Information ec.europa.eu/justice/data-protection/international-transfers/eu-us-privacy-shield/index_en.htm
You can cancel or revoke the future subscription to this newsletter and therefore the consent to the storage of your data at any time. Further details regarding this are contained in the confirmation e-mail as well as in each individual newsletter.
Our newsletters contain so-called tracking pixels (web bugs), with which we can see if and when an e-mail has been opened and which links in the e-mail have been followed by the personalised recipient.
This data is stored by us to enable us to optimally focus our newsletters on the requests and interest of our subscribers. Accordingly, the data collected this way are used to send personalised newsletters to the respective recipient.
We would request your consent relating to this as follows:
“I agree to the electronic storage of my data and user behaviour via newsletter tracking, to enable the transmission of an individualised newsletter to me. With the revocation of the consent to receive the newsletter, the consent to the above-mentioned tracking is also revoked.”
With the revocation of the consent to receive the newsletter, the consent to the above-mentioned tracking is also revoked.
§ 6 Use of script libraries (Google Webfonts)
To enable us to present contents correctly and graphically attractive in all browsers, this website uses script libraries and font libraries such as, f. ex. Google Webfonts (https://www.google.com/webfonts/). To avoid repeated loading, Google Webfonts are transferred to the cache of your browser. If the browser does not support Google Webfonts or prevents access to Google Webfonts, contents will be shown in a standard font.
The request for script libraries or font libraries automatically triggers a connection to the operator of the library. At the same time, it is theoretically possible - although currently unclear if and, potentially for what purposes - that operators of relevant libraries collect data.
The data protection guideline of the library operator Google can be found here: https://www.google.com/policies/privacy/
§ 7 Embedded YouTube videos
YouTube videos are embedded in some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit a page with the YouTube plugin, a connection is made with YouTube servers. At the same time it is disclosed to YouTube which sites you are visiting.
If a YouTube video is started, the operator sets cookies, which collect information about the user behaviour.
If the storage of cookies for the Google Ad program has been deactivated, such cookies are not to be expected even when watching YouTube videos. You Tube also files usage information that is not related to individuals in other cookies. If you wish to prevent this, you must block the storage of cookies in the browser.
Further information on privacy at “YouTube” can be found in the privacy statement of the provider at: https://www.google.de/intl/de/policies/privacy/
§ 8 Crashlytics
For our apps we use the app analytics service Crashlytics.
Crashlytics is a crash reporting solution from the provider Crashlytics Inc. (Crashlytics Inc., 1 Kendall Square, Cambridge, MA 02139, USA, a business division of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Crashlytics collects information for troubleshooting purposes if an app crashes. Pseudonymous user data is included in this information. Crashlytics Inc. and parent company Google Inc. have undertaken to process such data only in accordance with the EU-US Privacy Shield principles regarding data protection. Data collected by Crashlytics is not passed on to Google Inc. You can refuse to allow data collection and storage for the app crash-reporting service at any time by disabling the sending of crash information in the app settings. More information can be found in the data protection statement of Crashlytics, Inc. for the Crashlytics service (https://fabric.io/terms)
§ 9 Rights of the person concerned
If your personal data is processed, you are a person concerned within the meaning of GDPR, and you have the following rights with respect to us:
1. Right to information
You can request confirmation from us as to whether we are processing personal data relating to you.
If we are processing such data, you can request the following information from us:
(1) the purposes of the processing of the personal data;
(2) the categories of personal data you are processing;
(3) the recipients or categories of recipients to which the personal data relating to you has been disclosed or is yet to be disclosed;
(4) the intended period of storage of the personal data related to you or, if it is not possible to provide specific details regarding this, the criteria for determining the period of storage;
(5) the existence of a right of correction or deletion of the personal data relating to you, or of limitation of processing by the Responsible Party, or of a right of objection against this processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) if the personal data are not collected from the Person concerned, all available information on the origins of the data;
(8) the existence of an automated decision making including profiling in accordance with Art. 22, para. 1 and 4 GDPR and, at least in these cases, meaningful information about the logic applied as well as the implications and envisaged effects of such processing on the Person concerned.
You have the right to request information on whether the personal data relating to you is transmitted to a third country or an international organisation. In this connection, you may request information about the appropriate guarantees in accordance with Art. 46 GDPR, in connection with the transmission.
2. Right to correction
You have a right to request that we correct and/or complete the processed personal data relating to you, provided that such data is incorrect or incomplete. We are obliged to carry out such correction immediately.
3. Right to limitation of processing
Subject to the following conditions, you may request that we restrict the processing of the personal data relating to you:
(1) if you are disputing the personal data relating to you for a period of time, which enables us to verify if the personal data is correct;
(2) if the processing is unlawful, and you object the deletion of the personal data and instead request the restriction of the use of the personal data;
(3) we no longer require the personal data for the purposes of processing, however, such data is required by yourself for the assertion, exercise or defence of legal claims, or
(4) you have objected to the processing in accordance with Ar. 21, para. 1 GDPR, and it has not yet been determined if our legitimate interests outweigh your interests.
If processing of the personal data relating to you has been restricted, then this data may only be processed, apart from its storage, with your permission or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of a significant public interest of the EU or a member state.
If processing has been restricted in accordance with the above-mentioned conditions, we will notify you before the restriction is lifted.
4. Right to deletion
a) Duty to delete
You can request that we immediately delete the personal data relating to you, and we have a duty to delete such data immediately, if one of the following reasons applies:
(1) The personal information relating to you is no longer required for the purposes for which it was collected or otherwise processed.
(2) You are revoking your consent, on which the processing in accordance with Art. 6, para. 1 a or Art. 9, para. 2 a GDPR was based, and there is no other legal basis for processing.
(3) You are objecting to the processing in accordance with Art. 21, para. 1 GDPR, and there are no prevailing legitimate reasons for the processing, or you are objecting to the processing in accordance with Art. 21, para. 2 GDPR.
(4) The personal data relating to you was processed unlawfully.
(5) The deletion of the personal data relating to you is required to fulfil a legal obligation of the pursuant to EU Law or of the Law of the member states which governs us.
(6) The personal data relating to you was collected in relation to services offered by the information society, in accordance with Art. 8, para. 1 GDPR.
b) Information disclosed to third parties
If we have published the personal data relating to you, and we have a duty to delete such data in accordance with Art. 17, para. 1 GDPR, we will, having regard to the technology available and the cost of implementation, take reasonable measures, including measures of a technical nature, to inform parties responsible for the data processing, who process the personal data, that you as a Person concerned have requested the deletion of all links to these personal data or of copies or replications of these personal data.
The right to deletion does not exist where the processing is required
(1) for the exercise of the right to freedom of expression and information;
(2) to fulfil a legal obligation which requires the processing in accordance with the EU Law or the member states which governs us, or the performance of a task carried out in the public interest or in the exercise of official authority assigned to us;
(3) for reasons of public interests in the area of public health in accordance with Art. 9, para. 2 h and i as well as Art. 9, para. 3 GDPR;
(4) for the purposes of archiving that is in the public interest, scientific or historical research or for statistical purposes in accordance with Art. 89, para. 1 GDPR, where it is anticipated that the right mentioned under section a) renders the realisation of the objectives of this processing impossible or has a significant adverse effect, or
(5) for the assertion, exercise or defence of legal claims.
5. Right to correction
If you have asserted the right to correction, deletion or restriction of procession against us, we have a duty to notify all recipients to which the personal data relating to you has been disclosed, of this correction or deletion of the data or restriction of processing, unless this is proven to be impossible or subject to disproportionate expenses.
You have a right to request that we inform you about these recipients.
6. Right to data portability
You have the right to receive the personal data that you have provided us in a structured, common and machine-readable format; and you have the right to transfer this data to another person without hindrance from us, provided the processing is based on your consent or a contract and processing is done by us using automated procedures. You also have the right to transmit such data to another responsible party without any obstacles, provided that
(1) the processing is based on consent in accordance with Art. 6, para. 1 a GDPR or Art. 9, para 2 a GDPR or on a contract in accordance with Art. 6, para. 1 b GDPR and
(2) the processing is carried out by means of automated procedures.
When exercising this right, you also have the right to request that the personal data relating to you is transmitted directly by us to another Responsible party, insofar as this is technically feasible. The freedoms and rights of other persons must not be adversely affected by this.
The right to data portability does not apply to the processing of personal data required for the performance of a task carried out in the public interest or in the exercise of official authority assigned us.
7. Right of Objection
You have the right, at any time, to object to the processing of the personal data concerning you pursuant to Article 6, para. 1 e or f GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions.
We will then no longer process the personal data relating to you, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.
If the personal data relating to you is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
If you object to the processing for purposes of direct advertising, the personal data related to you will no longer be processed for these purposes.
Regardless of Directive 2002/58/EU, you have the option, in the context of the use of information society services, to exercise your right to object through automated procedures that use technical specifications.
8. Right to revoke the consent under data protection law
You have the right to revoke your consent under data protection law at any time. The revocation of your consent does not affect the legality of the processing that was carried out on the basis of the consent prior to the revocation.
9. Automated decisions in Individual Cases including Profiling
You have the right not to be subjected to a decision that is exclusively based on automated processing, including profiling, where such decision has a legal effect or a similar significant adverse effect on you. This does not apply if the decision
(1) is required for the conclusion or performance of a contract between you and us,
(2) is permissible based on the legal provisions of the EU or the member states which governs us, and these legal provisions contain reasonable measures to safeguard the rights and freedoms as well as your legitimate interests, or
(3) is made with your express consent.
However, such decisions must not be based on special categories of personal data in accordance with Art. 9, para. 1 GDPR, if Art. 9, para. 2 a or g does not apply and reasonable measures to protect the rights and freedoms as well as your legitimate interests have been taken.
With regard to the cases mentioned in (1) and (3), we are taking reasonable measures to safeguard the rights and freedoms as well as your legitimate interests.
10. Right of Appeal to a Supervisory Authority
In addition, regardless of another administrative or judicial remedy, you have the right to submit an appeal to a supervisory authority, in particular in the member state of your place of stay, your workplace or the place of the suspected breach, if you are of the opinion that the processing of the personal data relating to you is in breach of GDPR.
The supervisory authority, to which the appeal has been submitted, informs the appellant of the status and the outcomes of the appeal, including the option of a judicial remedy in accordance with Art. 78 GDPR.
Contact Data Privacy Officer
Solicitor and Specialist in Information Technology Law
Florian König M.L.E.