I.     General/basic information

The following data protection declaration explains how LEXXOO International GmbH (hereinafter referred to as LEXXOO) processes personal data..

a.   Name and address of the data controller

The controller according to the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

LEXXOO International GmbH
Fürther Str. 228
90429 Nürnberg

Telephone +49 (0) 911 – 92 96 78-0
Fax +49 (0) 911 – 92 96 78 10

E-Mail: info@lexxoo.de

b. Data Protection Officer

If you have any questions or remarks about our privacy policy, please contact us:

You can reach our data protection officer at datenschutz@lexxoo or via our postal address with the addition “data protection officer”.

 

II. Processing of personal data when visiting our website

On our website, you will find information about our products. When you visit our website, we process personal data about you..

a. Protocol data

In principle, you can use our website without telling us who you are. If you do not register or otherwise provide us with information, we only collect the personal data (web server log file) that your browser sends to our server.

•       IP address

•       date and time of the request

•       time zone difference to Greenwich Mean Time (GMT)

•       content of the request (specific page)

•       status of the access/HTTP status code

•       amount of data transferred in each case

•       website from which the request came from

•       browser

•       operating system and its interface

•       language and version of the browser software.

The web server log file is stored for 7 days.

The processing of the personal data mentioned above is in our legitimate interest (Article 6 (1) (f) GDPR). Our legitimate interest is the secure provision of the website. Due to these compelling reasons worthy of protection, an objection to the processing is excluded.

b. Cookies

a.     What are cookies?

Our website uses so-called cookie technology. A cookie is a piece of information that is sent from our web server to your computer. This information is stored as a text file on your computer.

Information collected by cookies and similar technologies may include the date and time of your visit and how you use a particular website or mobile application. This is stored until you close all browser windows.

b.    Why do we use cookies?

There are cookies that we use to provide you with our website technically and to ensure system security. We may also use cookies in accordance with Section 25 TTDSG, provided that the sole purpose of the storage or access is to carry out the transmission of a message via a public telecommunications network or is necessary to provide the explicitly requested tele-media service. Data processing through technically necessary cookies is based on our legitimate interest in the technical functionality and security of our website (Article 6 (1) (f) GDPR). Because of these compelling legitimate grounds, an objection to the processing is excluded.

For cookies that do not meet these requirements, we need your consent (Article 6 (1) (a) GDPR), which we obtain via our cookie banner. These include cookies that analyze your user behavior in order to be able to improve our website and display advertising to you in a more targeted manner. You can block the use of cookies in your browser settings at any time. You can still visit our website even if you block cookies; however, you may then not be able to use all the functions of our website.

 

In addition, you can revoke the consent you have given at any time with effect for the future. To implement the right of revocation, please use the fingerprint icon  , which you will find displayed at the bottom left of the website.

c. Google Analytics

a.    We use Google Analytics, a tracking tool of the American company Google Inc. on our website. For companies in the EU or EEA, Google Ireland Limited (Gordon House, Barrow Street Dublin 4. Ireland Tel: +353 1 543 1000. Fax: +353 1 686 5660) is responsible for processing personal data.

b.    Google Analytics is a tracking tool that analyzes the traffic of our website. When you visit our website, Google Analytics records the actions you take on our website. As soon as you leave our website, this data is sent to Google’s servers and stored there.

c.    Google processes the data, and we receive reports about your user behavior. The following reports are generated:

1. Target group reports: Target group reports allow us to get to know the groups of users.

2. Ads reports: Are used to analyze and improve our online advertising.

3. Acquisition reports: Acquisition reports give us helpful information about the possibility of acquiring new customers.

4. Behavioral reports: We receive information about your behavior on our website via this report.

4. Conversion reports: The conversation report shows us whether you have a longer-term interest in our company by a visit to our site, e.g., by a subscription to our newsletter or an interest in buying our products.

6. Real-time reports: These reports show us what is happening on the website.

d.    We use Google Analytics to provide you with the best possible service. The statistics and data we collect with Google Analytics help us to constantly optimize our site and make it more interesting for visitors. In addition, we can also design our advertising and marketing measures more individually and cost-effectively.

e.    Google Analytics stores a random ID that is uniquely assigned to you via the cookie. In this way, Google Analytics can always assign you and your behavior on the website to a user ID and evaluate your user profile pseudonymously.

f.    The following data is collected by Google Analytics:

a.    Heatmaps: Google creates so-called heatmaps, which can be used to identify what exactly you click on.

b.    Session duration: The time you spend on our website. If you have been inactive for 20 minutes, the session ends automatically.

c.    Bounce rate: If you are only on the website for a short time and then leave it again.

d.    IP address: The IP address is shortened so that it can no longer be uniquely assigned.

e.    Location: It is possible to determine your approximate location via the IP address.

f.    Technical information: e.g., browser type, your internet provider or your screen resolution.

g.    Source of origin: How you came to the website.

g.    Storage period and location

a.    Google has servers located all over the world. Most servers are located in third countries. Consequently, your data is also stored on servers in third countries. Here, you can read exactly where the data centers are located: https://www.google.com/about/datacenters/locations/?hl=de

b.    Your data is distributed on different physical data carriers. This has the advantage that the data can be retrieved more quickly and is better protected against manipulation.

c.    The storage of the data depends on the properties used.

d.    We use the Google Analytics 4 property. The retention period of your user data is thus set to 14 months. Results data can be retained between 2 months and 14 months.

h.    Prevent storage

Under the European Union’s General Data Protection Regulation, you have the right not to give consent or to withdraw your consent. You can prevent Google Analytics from processing your data by using the browser add-on to deactivate Google Analytics JavaScript. You can download and install the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de . Please note that this add-on only deactivates the collection of data for Google Analytics.

i.    Legal basis

The use of Google Analytics requires your consent (Art. 6 (1) (a) GDPR), which we have obtained with our cookie pop-up. You can revoke your consent, which includes the transmission to Google and thus to third countries, at any time via our cookie banner. You can call up the cookie banner again at any time by clicking on the following icon

d. Consent Manager

a.    Use of the Consent Management System to manage and document consents and settings for data collection and cookies.

b.    As a user, you can decide for yourself about the use of cookie-based services/technologies and the data collection by them on our portal and adjust or revoke them at any time with effect for the future. This is possible via an information and consent banner that is displayed on first visits and when services are changed, as well as via the cookie settings, which can be accessed at any time via a link at the bottom of every page. As part of a GDPR-compliant procedure, we only use services requiring consent after you have given your prior consent. You can also use our website without this consent.

c.    For the provision of this setting and consent function according to the GDPR and to inform you about the use of cookie-based technologies, we use a so-called Consent Management System from the company U Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics). In addition, this system is used to document your decisions for your browser, with which we comply with the data protection requirements of the accountability obligation.

d.    Usercentrics uses cookies and collects the date and time of the visit, browser, and device information, the anonymized IP address as well as opt-in and opt-out data exclusively to store your consent and to comply with legal obligations based on the legal basis Section 25 (2) No. 2 TTDSG in conjunction with Article 6 (1) (c) GDPR. The data processing takes place within the European Union. Further information on the data protection provisions of the data processor can be found at https://www.cookiebot.com/de/privacy-policy/ .

e.    As a user, you have other, alternatives such as browser extensions, settings, adblockers or opt-out links of individual tools to prevent the setting of cookies or the collection of data by mentioned services. We would like to point out that these ways are not equivalent to the use of a consent management system. Browser extensions, settings and adblockers can prevent cookies and, where applicable, data collection by services. However, you cannot decide for yourself in all cases what you want to allow or prevent. In so doing, it is possible that your decisions made via the Consent Management System are overridden or even the necessary use of the Consent Management System is prevented. In addition, extensions and adblockers can cause unexpected problems with the basic functions of the portal. Many marketing services provide their own opt-out options via opt-out links or cookies. We list these in the privacy policy, if available. The opt-out often applies to the basic portal-independent use of the service, but only takes place subsequently and on a page of the provider, independently of the consent management of our portal. So-called opt-out cookies are often set, which in turn can be canceled by the cookie settings of your browser or by deleting cookies.

If you use the alternative ways mentioned above, documentation of your settings and decisions will not be possible for us.

e. Contact form

You have the option of contacting us via a contact form which you can submit to us via the website.

The personal data (surname, first name, e-mail address, telephone number (optional), company (optional) and title) that you provide to us via the contact form in connection with your inquiry will of course be treated confidentially. We use your data exclusively for the purpose of processing your inquiry.

The processing of your personal data is based on legitimate interest according to Article 6 (1) (f) GDPR. Our and, parallelly, your (legitimate) interest in this data processing results from the aim of answering your inquiries, solving any problems that may exist, and thus maintaining and promoting your satisfaction as a customer or user of our website. If your inquiry relates to an order or in connection with a contract, the processing is based on Article 6 (1) (b) GDPR.

 

III. Processing of personal data in the company

We process your personal data for the purpose of making general contact with our company or to apply for a job..

a. Contacting us by e-mail, telephone or mail

 

When you contact us by e-mail, telephone or mail, we only process the personal data you have provided.

For example, we process:

•       e-mail address

•       first name and surname

•       telephone number

•       mail address

in order to answer your questions.

The processing of this data is based on Article 6 (1) (b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in processing the inquiries addressed to us (Article 6 (1) (f) GDPR) or on your consent (Article 6 (1) (a) GDPR), if this has been requested by us.

The data you send to us via contact requests will be stored by us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g., after processing your request has been completed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

 

IV. Further legal information

a. Storage period

a.     WWe keep your personal data for the period of our business relationship with you. The business relationship exists in accordance with the basis of our contract for the manufacture of the glasses. According to legal requirements, we are obliged to keep the collected personal data (name, individual prescription, address, communication data such as e-mail address and invoice data such as account number) for 10 years.

b.     If you request us to delete the data, we will comply with this request by deleting the data that we do not need for legal retention.

b. Location of data processing (also outside EU)

a.     Lexxoo International GmbH also processes your data outside the EU.

b.     Due to the global nature of our business, we may transfer your personal data to other countries whose data protection laws may be less comprehensive than those in the EU. Access to your personal data will be limited to certain natural persons who need to know that data for the purposes described in this Privacy Policy.

c.     In order to secure your data in the so-called third countries, we conclude standard contractual clauses with our local partners and ensure that the local partners also act in accordance with the EU-wide data privacy guidelines and guarantee the deletion of the data. For more information, please contact datenschutz@lexxoo.de.

c. Transmission to third parties

a.     We only transfer your personal data to third parties that need your data to fulfill our tasks. For this purpose, it may be necessary for service providers to support us.

b.     Furthermore, it may be necessary to transfer your data to other units of our group companies. In doing so, we consider the data protection regulations. Your personal data may also be transferred to IT service providers, as well as authorities or other service providers.

c.     The recipients mentioned above might be in a country outside the EU. In this country, there may not be an adequate level of data protection compared to the level of data protection within the European Union. This means that the data protection laws in these countries to which we transfer your data may not have the same level of data protection as in Germany. In general, your data is transferred to third countries without an adequate level of data protection under the application of the so-called EU standard contractual clauses.

d. Links to other websites

Our offer contains links to external websites of third parties, on whose content we have no impact. Therefore, we cannot grant any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete indications of a legal violation. If we become aware of any infringements of the law, we will remove such links immediately.

e. Rights of the data subjects

You have the following rights regarding the personal data concerning you:

•       Right of access, according to Article 15 GDPR

•       Right to rectification, according to Article 16 GDPR

•       Right to erasure/”right to be forgotten”, according to Article 17 GDPR

•       Right to restriction of processing, according to Article 18 GDPR

•       Right to data portability, according to Article 20 GDPR

•       Right to object to processing, according to Article 21 GDPR

If you have given us your consent, you can revoke it at any time with effect in the future. To do so, please contact us or the data protection officer using the contact details above.

If you have the opinion that your personal data has been processed unlawfully, you can contact us or our data protection officer at any time using the contact details above, or you can lodge a complaint to one of the supervisory authorities responsible for data protection.