Privacy notice

We appreciate your visit on our website and your interest in our offer.

We want you to feel comfortable and safe with regards to how we process your personal data. Data protection and transparency are very important to us. The Privacy Notice is meant to understand our privacy practices, including which personal data we collect, why we collect it, what we do with it and how we protect it, as well as knowing your individual rights. This information will enable you to always be in full control of your personal data.

1.  Controller

Controller legally responsible for data processing:

HumanOptics Holding AG
Spardorfer Straße 150
91054 Erlangen

1.  Categories of data, purpose and legal basis

It’s possible to visit our website without disclosing any personal data besides the technical data provided for the operation of the website itself. For transparency reasons, our privacy notice can be found on every page.

a)  Operation of the website

We use your personal data like your IP address and technical data of your device (e. g. service provider and operating system, etc.) as well as data concerning the use of our website, only to run and improve our website.

We never save this data beyond the fulfilling of its purpose or legal retention periods.

We need this data to run the website. If you object to processing, you won’t be able to use our online offer. We evaluate this kind of information in order to make using our website even more comfortable. We don’t connect this information to any other data we have collected previously. It’s only meant to improve the performance and attractiveness of our website and its content. Data collected when using our website will be deleted at the latest after 14 months. In some cases, we might be allowed to safe data in order to enforce or defend any legal claims.

Art. 6. 1 f GDPR is legal basis for processing data in order to take care of information and network security. According to this article processing of personal data is legal if necessary for the purpose of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights of the data subjects.

According to Art. 13. 2 e GDPR you are not obliged to provide us with your personal data when using our website. Nevertheless, it’s just not possible to run a website without this kind of data.

b)  Contact form

Using our contact form, you provide us with your personal data. This includes name, e-mail address, request. We will use this information only for your particular claims and requests and for providing you with information.

Legal basis is your consent according to Art. 6. 1 a in connection with Art. 7. GDPR. In order to protect your personal data, the transmission/transfer is coded by a common encryption method.

Any personal data will be deleted after we have answered your request or clarified your claim or after the legal retention period is expired.

c)  Online certification course for CUSTOMFLEX® ARTIFICIALIRIS

On our website, you can register for an online certification course for CUSTOMFLEX®ARTIFICIALIRIS. In order to execute the course, we create an account for you and collect the following personal data: Name, E-Mail-Address, Address. Further, you have to choose a password in order to log in with your E-Mail-Address and your password. Legal basis for processing is the performance of a contract as per Art. 6 (1) b GDPR. With your registration you enter into a contract with HumanOptics AG. Your personal data will be deleted after termination of the contract, provided there are no legal retention obligations.

We will use your E-Mail Address to send you the latest news or our customer newsletter from time to time. Legal basis is our legitimate interest as per Art. (1) f GDPR in conjunction with § 7 (3) UWG. You can object to your E-mail Address being used for that purpose at any time without costs arising by virtue thereof, other than transmission costs in accordance with the basic rates.

d)  Registration for HumanOptics information pool

On our website you can register for our HumanOptics information pool. Therefore, we collect the following personal data: Name, E-Mail-Address, Gender. We use those personal data only for the execution of your registration for the information pool. Legal basis for processing is the performance of a contract as per Art. 6 (1) b GDPR. With your registration you enter into a contract with HumanOptics AG. Your personal data will be deleted after termination of the contract, provided there are no legal retention obligations. We can also collect your address in order to send a little thank you for registering for our information pool. We will delete this data after we sent you the Give-away. Legal basis for processing is your consent (Art. 6 Para. 1 lit. a GDPR).

e)  Cookies

We use two types of cookies: session cookies and persistent cookies. Cookies are small text files that we place on your computer. Cookies cannot execute any commands, therefore they pose no security risk.

Session cookies store information during the visit to our website. They are not stored permanently on your computer since they disappear when the browser is closed. When you visit our website for the first time, we inform you about the use of cookies. We store your perusal in a cookie so that we don’t need to show you this information every time you visit our website.

We do not use third-party cookies and no tracking cookies.

Legal basis for the use of cookies is Art. 6. 1 f GDPR. According to this article processing of personal data is legal if necessary for the purpose of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights of the data subjects. The controller has a legitimate interest in operating the website.

You can define the handling of cookies by yourself in your browser, you can completely refuse cookies, or you can set your browser to regularly delete cookies. You can find sufficient information concerning this matter on the Internet.

f) Visitor’s book

When you enter one of our sites as a visitor, we collect the following personal data: Name, company, length of visit, visited person. Legal basis is our legitimate interest (Art. 6 1 f) GDPR). It is our legitimate interest in case of a(n) (security)-incident to be able to retrace which persons have been at our premises at what times.

Those data won’t be linked with other data stored in our system and will be deleted after 6 months.

2.  Recipients of the data

a)  Google Ireland Limited

This website uses Google Analytics, a web analysis service of the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and which allow an analysis of the use of the website by you. More information about how Google uses this data can be found here:

https://policies.google.com/privacy/partners?hl=de.

Google Analytics will be used subject to your consent. Legal basis is Art. 6. 1 a GDPR.

For the safe use of the contact form we use the service reCaptcha by Google Ireland ltd. (Google). The query is used to distinguish whether the input was done by a human or abusively by automated processing. The query includes sending the IP address and other data that might be needed by Google for the service reCaptcha to Google. For this purpose, your input will be transferred to Google for further use. By using reCaptcha you give your consent that we may transfer your data to Google for this purpose.

Google will use that information for evaluating your use of the service on behalf of the website operator. The IP address transferred by your browser within the scope of reCaptcha will not be linked with any other data of Google. The processing of your data takes place within the Privacy Shield. The data protection provisions of the company Google shall apply for these data.

Further information concerning the data privacy policy of Google can be found here:

https://www.google.com/intl/de/policies/privacy/.

b)  Further recipients

Your data will not be disclosed to any other third parties, except if there is a legal obligation to transfer the data. Art. 6. 1 c GDPR in connection with the respective instructions or the legal obligation we are subject to in the individual case, is the legal basis for processing data. Categories of recipients of the data are public authorities in case of a legal obligation and processors that process the data collected online on our behalf. Processors involved are hosting providers of the website.

3.  Your rights with regards to your personal data

According to GDPR you have the following rights with regards to processing your personal data. You can find details concerning your rights in the articles 15 to 21 GDPR as well as in the paragraphs 32 to 37 Federal Data Protection Act (“BDSG”). You may assert these rights directly with the controller named in this privacy notice. Therefore, informal contact is sufficient. You may send an email or a letter.

You may contact us to get confirmation as to whether or not we are processing your personal data, the categories of the data, the legal basis, the processing purposes and any further important information with regards to data protection. You might even ask for a copy.
You may ask to rectify or to compete your data.
You may ask us or other controllers (in case your personal data has been transferred or made public) to erase your personal data.
You may ask for a restriction of your personal data.
You have the right to object at any time to our processing your personal data. Please consider no. 1 a) of this privacy notice to see where objection is actually possible.
You have the right to withdraw your consent at any time by contacting the controller informally. Withdrawal of consent does not affect the lawfulness of processing based on consent before your withdrawal.
You have the right to receive the personal data from us in a structured, commonly used and machine-readable format and to independently transmit that data to a third party.
You have the right to lodge a complaint with a supervisory authority if you find our processing of your personal data to be inconsistent with applicable data protection law. A list of Federal Data Protection Commissioner and contact data can be found here:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

In case of any further questions and doubts please feel free to contact our officer for data protection:

David Gabel – Email: david.gabel(at)dsgvo-support.de

General information concerning data protection and the processing of your personal data can be found here:
https://www.dsgvo-support.de