Privacy Policy

1. Introduction

The information in this document aims to give you, the “data subject”, an overview of how we process your personal data and your rights under data protection law. You can generally use our website without entering any personal data. However, if you wish to use special services by our company through our website, it may become necessary to process personal data. If personal data has to be processed but there is no legal basis to do so, we shall always obtain your consent.

Your personal data, such as your name, address or email address, is processed in accordance with the General data Protection Regulation (GDPR) and country-specific data protection regulations applicable to "OCULUS Optikgeräte GmbH” at all times. In this Privacy Policy, we aim to inform you about the scope and purpose of the personal data collected, used and processed by us.

We are responsible for processing the data (“controller”) and as such have implemented numerous technical and organisational measures to ensure the greatest possible protection of the personal data processed through the website. However, internet-based data transfer can generally have security gaps, meaning that we are unable to guarantee 100% protection. You are therefore welcome to transfer personal data to us through alternative channels, such as by telephone or post.

2. Controller

The controller within the meaning of the GDPR is:

OCULUS Optikgeräte GmbH
Münchholzhäuser Strasse 29, 35582 Wetzlar, Germany
Phone: 0049 (0)641 2005 0
Fax: 0049 (0)641 2005 412

Representatives of the controller: Rainer Kirchhübel, Rolf Christian Kirchhübel, Matthias Kirchhübel

3. Data protection officer

Contact details of the data protection officer:

Email: datenschutz@oculus.de

You can contact our data protection officer at any time with questions and suggestions regarding data protection.

4. Terminology

The Privacy Policy is based on terminology used in the General Data Protection Regulation (GDPR), which was released by the European legislative and regulatory authorities. We aim for our Privacy Policy to be easily readable and understandable by the general public as well as our customers and business partners. The terminology used in this document is therefore described below.

These are terms used in this Privacy Policy:

1. Personal data

Personal data comprises all information relating to identified or identifiable natural persons. A natural person is classed as identifiable if they can be directly or indirectly identified, particularly by linking them to an identifier such as name, ID number, location data, online ID or one or several special characteristics that express their physical, psychological, genetic, mental, financial, cultural or social identity.

2. Data subject

Any identified or identifiable natural person whose personal data is processed by the controller (our company) is a data subject.

3. Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

4. Restriction of processing

Restriction of processing means to earmark stored personal data with the aim of restricting its future processing.

5. Profiling

Profiling is any form of automatic processing of personal data for the purpose of using the personal data for assessing certain personal aspects relating to a natural person, particularly for analysing or predicting this natural person’s aspects regarding work performance, financial position, health, personal preferences, interests, reliability, conduct, habitual residence or change of location.

6. Pseudonymisation

Pseudonymisation is the processing of personal data in such manner that it can no longer be linked to a specific data subject without referring to additional information, if such additional information is stored separately and subject to technical and organisational measures which ensure that the personal data cannot be linked to an identified or identifiable natural person.

7. Processor

A processor is a natural person or legal entity, authority, facility or other instance that processes personal data by order of the controller.

8. Receiver

A receiver is a natural person or legal entity, authority, facility or other instance to whom personal data is disclosed, regardless of the receiver being a third party or not. However, authorities that may receive personal data as part of a certain investigation order under EU law or the laws of the member states are not classed as receivers.

9. Third party

A third party is a natural person or legal entity, authority, facility or other instance with the exception of the data subject, controller, processor and persons authorised directly by the controller or processor to process the personal data.

10. Consent

Consent is any expression of intention voluntarily issued by the data subject for a specific event in an informed and unequivocal manner in the form of a declaration or other unmistakable confirming action with which the data subject indicates that they agree to the processing of their personal data.

5. Legal basis of the processing

Our company uses Art. 6 (1) lit. a GDPR (in conjunction with Section 15 (3) of the German Teleservices Act (Telemediengestz – TMG)) as the legal basis for processing activities that require us to obtain consent for a specific processing purpose.

If the personal data has to be processed for the fulfilment of a contract to which you are a party, such as is the case for processing activities that are required for the delivery of goods or provision of other services or considerations, the processing is based on Art. 6 (1) lit. b GDPR. The same applies for processing activities required for the implementation of pre-contractual measures, such as in the event of enquiries about our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 (1) lit. c GDPR.

In rare cases, the processing of personal data can become necessary to protect the vital interests of the data subject or another natural person. This would be the case, for instance, if a visitor were to be injured in our premises and their name, age, health insurance details or other vital information would therefore have to be forwarded to a physician, hospital or other third party. In this case, the processing would be based on Art. 6 (1) lit. d GDPR.

Ultimately, processing activities could be based on Art. 6 (1) lit. f GDPR. Processing activities that are not covered by any of the above legal bases and that are necessary to maintain the legitimate interest of our company or a third party, unless the data subject’s interests, basic rights and basic freedoms do not outweigh them, are based on this legal basis. We are permitted, in particular, to carry out such processing activities as they have been specifically mentioned by the European legislator, which was of the opinion that a legitimate interest could be assumed if you are a customer of our company (recital 47, sentence 2 GDPR).

6. Transfer of data to third parties

We do not transfer your personal data to third parties for any other purposes than those stated below.

We only transfer your person data to third parties if:

1. You have given your explicit consent for us to do so in accordance with Art. 6 (1) sentence 1 lit. a GDPR;
2. The transfer is permitted in accordance with Art. 6 (1) sentence 1 lit. f GDPR for maintaining our legitimate interests and there is no reason to assume that you have a protectable interest in the non-transfer of your data that outweighs ours;
3. There is a legal obligation to transfer the data in accordance with Art. 6 (1) sentence 1 lit. c GDPR; and
4. This is legally permitted and required for processing contractual relationships with you in accordance with Art. 6 (1) sentence 1 lit. b GDPR.

To protect your data and enable us to transfer data to third countries (outside the EU / EEA), if necessary, we concluded data processing agreements on the basis of the standard contractual clauses of the European Commission.

7. Technology

7.1 SSL/TLS encryption

This website uses SSL and/or TLS encryption to ensure the security of the data processing activities and to protect the transfer of confidential contents, such as orders, login data or contact requests that you send to us, the operator. You can recognise an encrypted connection by the address bar of your browser displaying "https://” instead of "http://" and by the lock symbol in your browser bar.

We use this technology to protect your transferred data.

7.2 Data collection when visiting the website

When using our website for information purposes only, in other words if you do not register or transfer any other information to us, we only collect the data that your browser sends to our server (in so-called “server logfiles”). Our website collects a number of general data and information every time a page is accessed by you or an automated system. This general data and information is stored in logfiles on the server. The following data could be collected:

1. Browser type and version used;
2. Operating system used by the accessing system;
3. Website from where an accessing system arrives on our website (so-called “referrer”);
4. Sub-pages that are accessed via an accessing system on our website;
5. Date and time of accessing the website;
6. Abbreviated internet protocol address (anonymised IP address);

7. Internet service provider of the accessing system.

When using this general data and information, we do not infer to your person. This information is required for

1. Correctly delivering the contents of our website;
2. Optimising the contents of our website and advertising related to them;
3. Ensuring the permanent functionality of our IT systems and website technology; and
4. Providing law enforcement agencies with information required for investigating and prosecuting potential cyber attacks.

We use this collected data and information for statistical purposes and with the aim to improve data protection and security in our company to ultimately ensure an optimal protection level for the personal data processed by us. The anonymous server logfile data is stored separately from all personal data provided by a data subject.

The legal basis for processing the data is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest arises from the data processing purposes stated above.

8. Cookies

8.1 General information on cookies

We use cookies on our website. These are small files which your browser automatically creates and stores on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.

Cookies store information relating to the specific end device used. However, this does not give us direct knowledge about your identity.

Cookies are used to create a more user-friendly website for you. We use session cookies to recognise that you have already accessed individual pages on our website. These cookies are automatically deleted once you leave our website.

We also use temporary cookies for optimising user-friendliness. They are stored on your end device for a specified period of time. When you revisit our website to use our services, it is automatically recognised that you previously visited us as well as your previous entries and settings so that you do not have to enter them again.

We also use cookies to record the use of our website for statistical purposes and for optimising our contents for you. These cookies enable us to automatically recognise that you previously visited us when you revisit our website. These cookies are automatically deleted after a defined period of time.

8.2 Legal basis for the use of cookies

The data processed by cookies, which is required for the proper functioning of the website, is required for maintaining our legitimate interests and those of third parties in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

For all other cookies, you give your consent within the meaning of Art. 6 (1) lit. a GDPR through our opt-in cookie banner.

9. Contents of our website

9.1 Contact requests / contact form

Personal data is collected when you contact us (e.g. via contact form or email). The respective contact form shows which data is collected. This data is collected and used exclusively for the purpose of responding to your enquiry and/or for the contacting process and the related technical administration. The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Art. 6 (1) lit. f GDPR. If you make contact to conclude a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data is deleted once your enquiry has been completed. This is the case once the circumstances give reason to assume that the matter has been clarified in full and final and that therefore there are no mandatory retention periods that prevent the deletion of the data.

10. Sending our newsletter

10.1 Sending our newsletter to existing customers

If you have provided us with your email address when purchasing goods and/or services, we reserve the right to email you regular offers of goods and/or services from our portfolio that are similar to those you have already purchased. We do not have to obtain separate consent from you to do so in accordance with Section 7 (3) of the Unfair Competition Act (Gesetz gegen den unlauteren Wettbewerb – UWG). The data is therefore processed exclusively on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 (1) lit. f GDPR. We do not send these emails if you have objected to the use of your email address for this purpose at the beginning. You have the right to object to the use of your email address for the above advertising purposes at any time with effect for the future by notifying the controller stated at the beginning. You only pay the transmission costs for such notification in accordance with the basic tariffs. Once we receive your objection, we immediately cease the use of your email address for advertising purposes.

10.2 Advertising newsletter

You can subscribe to our company’s newsletter on our website. The exact personal data that is transferred to us when subscribing to the newsletter is apparent from the input mask used for this purpose.

We regularly inform our customers and business partners about our offers in a newsletter. You can only receive our company’s newsletter if

1. You have a valid email address; and
2. You have subscribed to the newsletter.

For legal reasons, we use the double opt-in method and send you a confirmation email to the email address provided by you when first subscribing to the newsletter. This confirmation email checks if you, as the owner of the email address, have authorised the receipt of the newsletter.

When subscribing to the newsletter, we also store the IP address issued by your internet service provider (ISP) for the IT system used by you during the subscription process as well as the date and time of your subscription. This data has to be collected to trace the (potential) misuse of your email address at a later date and therefore serves as our legal protection.

The personal data collected when subscribing to the newsletter is used exclusively for sending our newsletter. Newsletter subscribers can also be informed per email if this is required for operating the newsletter service or related subscription process, such as in the event of changes to the newsletter offer or technical features. The personal data collected as part of the newsletter service is not transferred to third parties. You can cancel your newsletter subscription at any time. You can withdraw the consent you have given us for the storage of your personal data for the purpose of sending the newsletter at any time. Each newsletter has a corresponding link where you can withdraw your consent. You can also unsubscribe from the newsletter directly on our website or notify us of your request in any other manner.

The legal basis for processing data for the purpose of sending the newsletter is Art. 6 (1) lit. a GDPR.

11. Our activities in social networks

We maintain our own pages in social networks to communicate with you about our services. When you visit one of our social media pages, we are joint controller within the meaning of Art. 26 GDPR together with the provider of the respective social media platform regarding the processing activities relating to personal data triggered by your visit.

We are not the original provider of these pages, but merely use them within the scope offered to us by the respective provider.

As a precaution, we therefore point out that your data may possibly also be processed outside the European Union and/or European Economic Area. Using our social media pages can therefore incur data protection risks for you as the maintenance of your rights, i.e. information, erasure, objection, etc. could be more difficult and data is often processed in social networks for advertising purposes or for analysing user behaviour by the provider without us having any influence over these activities. When the user sets up user profiles, cookies are often used and/or the user behaviour is allocated directly to your own member profile in the social network (if you are logged in).

The described personal data processing activities are carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider to communicate with you in a contemporary manner and/or inform you about our services. If you, as the user, have to give your consent to the respective provider for the processing of data, the legal basis relates to Art. 6 (1) lit. a GDPR in conjunction with Art. 7 GDPR.

As we do not have access to the provider's databases, we point out that you should ideally assert your rights (e.g. to information, correction, erasure, etc.) directly against the respective provider. We have listed further information on the processing of your data in social networks and the option to assert your right to object and/or withdraw (so-called opt-out) for the provider of each social network used by us:

11.1 Facebook

(Joint) controller of data processing in Europe:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy policy:

https://www.facebook.com/about/privacy

Opt-out and advertising settings:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

https://de-de.facebook.com/about/privacy/

11.2 Instagram

(Joint) controller of data processing in Germany:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy policy:

http://instagram.com/legal/privacy/

Opt-out and advertising settings:

https://www.instagram.com/accounts/privacy_and_security/

11.3 LinkedIn

(Joint) controller of data processing in Europe:

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy policy:

https://www.linkedin.com/legal/privacy-policy

Opt-out and advertising settings:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

11.4 Twitter

(Joint) controller of data processing in Europe:

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

Privacy policy:

https://twitter.com/de/privacy

Information about your data:

https://twitter.com/settings/your_twitter_data

Opt-out and advertising settings:

https://twitter.com/personalization

11.5 YouTube

(Joint) controller of data processing in Europe:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Privacy policy:

https://policies.google.com/privacy

Opt-out and advertising settings:

https://adssettings.google.com/authenticated

11.6 XING

(Joint) controller of data processing in Germany:

XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany

Privacy policy:

https://privacy.xing.com/de/datenschutzerklaerung

Requests for information from XING members:

https://www.xing.com/settings/privacy/data/disclosure

12. Web analysis

12.1 Google Analytics

We use Google Analytics, a web analysis service by Google Ireland Limited (https://www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as "Google") on our websites. Pseudonymised user profiles are created and cookies used (see “Cookies” section) in his context. The information on your use of this website created by the cookie, such as

1. Browser type and version;
2. Operating system;
3. Referrer URL (previously visited website);
4. Hostname of the accessing computer (IP address);
5. Time of server query;

is transferred to a Google server in the USA where it is stored. The information is used for analysing the website use to compile website activity reports and provide additional services related to the use of the website and internet for market research purposes and the user-friendly design of this website. This information may also be transferred to third parties if we are obliged by law to do so or if third parties process this data by our order. Your IP address is never combined with other Google data. IP addresses are anonymised, making any allocation impossible (IP masking).

You can adjust your browser settings to block the installation of cookies. However, please note that in this case you may be unable to fully use all of the functions on the website.

These processing activities are performed exclusively if you give your explicit consent in accordance with Art. 6 (1) lit. a GDPR.

You can also prevent the data referring to your use of the website that has been collected by the cookie (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

Alternatively to the browser-add on, particularly for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking on the following link: Deactivate Google Analytics. An opt-out cookie is installed which prevents the future collection of your data when visiting this website. The opt-out cookie is only active in this browser and for our website and is stored on your device. If you delete the cookies in your browser, you have to re-install it.

For further information on data protection in connection with Google Analytics go to Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

12.2 Google Analytics Remarketing

We have integrated services by Google Remarketing on this website. Google Remarketing is a function of Google AdWords, which enables a company to display advertising for internet users who have previously visited the company’s website. By integrating Google Remarketing, a company can therefore create user-related advertising and display adverts that match the interests of the user.

Google Remarketing is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Remarketing is to display adverts that are of interest to the user. Google Remarketing enables us to display adverts through the Google advertising network or on other websites that meet the individual requirements and interests of internet users.

Google Remarketing installs a cookie on the IT system of the data subject. By installing the cookie, Google is able to recognise the visitors to our website when they subsequently access websites that are also members of the Google advertising network. Every time a website is accessed in which Google Remarketing services are integrated, your browser automatically identifies itself with Google. As part of this technical process, Google obtains knowledge about personal data, such as your IP address or surfing behaviour. Google uses this information for displaying adverts that meet your interests, amongst other things.

Personal information, such as the websites visited by you, are stored by this cookie. Every time you visit our websites, personal data, including your IP address, is therefore transferred to Google in the USA. Google stores this personal data in the USA. Google may transfer this personal data to third parties as part of the technical process.

You can block the installation of cookies by our website at any time by adjusting your browser settings accordingly, as described above, and thus permanently object to the installation of cookies. Such browser setting would also block Google from installing a cookie on your IT system. You can also delete a cookie previously installed by Google Analytics at any time through your browser or other software programmes.

You can further object to Google's interest-based advertising. To do so, you need to call up www.google.de/settings/ads and adjust the setting accordingly through the browser you are using.

These processing activities are performed exclusively if you give your explicit consent in accordance with Art. 6 (1) lit. a GDPR.

For further information and Google's applicable privacy policy, go to https://www.google.de/intl/de/policies/privacy/.

13. Plugins and other services

13.1 Adobe Typekit

We use Adobe Typekit for the visual design of our website. Typekit is a service by Adobe Systems Software Ireland Ltd. which gives us access to a font library. To integrate the fonts used by us, your browser has to connect to an Adobe server in the USA and download the font required for our website. This informs Adobe that our website was accessed from your IP address. For further information on Adobe Typekit, read Adobe’s privacy policy at www.adobe.com/privacy/typekit.html

These processing activities are performed exclusively if you give your explicit consent in accordance with Art. 6 (1) lit. a GDPR.

13.2 Google Maps

We use Google Maps (API) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website. Google Maps is an online service for displaying interactive maps that visually display geographical information. You can use this service for seeing our location or finding out how to get to us.

Information on your use of our website (such as your IP address) is already transferred to and stored on Google servers in the USA when you access sub-pages containing Google Maps. This happens whether you have a Google account through which you have logged in or not. If you are logged into Google, your data is allocated directly to your account. If you wish to prevent the allocation to your Google profile, you have to log out of your Google user account. Google stores your data (even if you have not logged in) as a user profile and analyses it. You have the right to object to the creation of this user profile. However, to exercise this right, you have to contact Google.

If you object to the future transfer of your data to Google as part of the use of Google Maps, you can also fully deactivate the Google Maps online service by blocking the use of JavaScript in your browser. Google Maps, and therefore also the map displayed on this website, can no longer be used in this case.

These processing activities are performed exclusively if you give your explicit consent in accordance with Art. 6 (1) lit. a GDPR.

You can read Google’s terms and conditions of use at https://www.google.de/intl/de/policies/terms/regional.html and the additional terms and conditions of use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html

For comprehensive information on data protection in connection with the use of Google Maps, go to Google’s website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/

13.3 Google reCAPTCHA

We also use the reCAPTCHA function by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), on this website. This function primarily serves to distinguish entries made by natural persons from misuse by machines and automated processes. The service also transfers the IP address and other data that may be required by Google for the provision of its reCAPTCHA service.

These processing activities are performed exclusively if you give your explicit consent in accordance with Art. 6 (1) lit. a GDPR.

For further information on Google reCAPTCHA and Google's privacy policy, go to https://www.google.com/intl/de/policies/privacy/

13.4 Google Tag Manager

This website uses Google Tag Manager, a cookie-less domain that does not collect any personal data.

This tool enables us to implement website tags (i.e. key words that are integrated in HTML elements) and manage them through its interface. By using Google Tag Manager, we can automatically trace which button, link or personalised image you have actively clicked on to determine which contents of our website are of particular interest to you.

The tool also triggers other tags that, in turn, may collect data. Google Tag Manager does not access this data. Any deactivation you have set for domains or cookies remains in effect for all tracking tags that are implemented with Google Tag Manager.

These processing activities are performed exclusively if you give your explicit consent in accordance with Art. 6 (1) lit. a GDPR.

13.5 Google WebFonts

Our website uses web fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for a standardised display of fonts. When accessing a page, your browser downloads the required web fonts into your browser cache to correctly display texts and fonts.

Your browser has to connect to the Google servers for this purpose. This informs Google that our website was accessed from your IP address. We use Google Web Fonts to create a standardised and pleasant design for our website.

These processing activities are performed exclusively if you give your explicit consent in accordance with Art. 6 (1) lit. a GDPR.

For further information on Google Web Fonts, go to https://developers.google.com/fonts/faq and Google's privacy policy at https://www.google.com/policies/privacy/

13.6 YouTube (videos)

We have integrated YouTube components on this website. YouTube is an online video portal that enables video publishers to upload video clips free of charge and other users to also watch, rate and comment on these clips for free. YouTube permits the publication of all types of videos and full movies and TV programmes as well as music videos, trailers or videos created by users themselves can be accessed through this online portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When accessing any page of this website, which is operated by us and contains a YouTube component (YouTube video), the respective YouTube component automatically triggers the browser on your IT system to download a display of the corresponding YouTube component from YouTube. For further information on YouTube, go to https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google obtain knowledge of the specific page on our website you have visited.

If the data subject is logged in to YouTube at the same time, YouTube recognises which specific page on our website you are visiting as soon as you access it. YouTube and Google collect this information and allocate it to your YouTube account.

The YouTube component always provides YouTube and Google with information about your visit to our website if you are logged into YouTube at the time you access our website, regardless of you clicking on a YouTube video or not. If you do not wish for this information to be transferred to YouTube and Google, you can prevent this by logging out of YouTube before accessing our website.

These processing activities are performed exclusively if you give your explicit consent in accordance with Art. 6 (1) lit. a GDPR.

YouTube’s privacy policy, which is available at https://www.google.de/intl/de/policies/privacy/, explains how YouTube and Google collect, process and use personal data.

14. Your rights as a data subject

14.1 Right to confirmation

You have the right to request confirmation from us that we process your personal data.

14.2 Right to information in accordance with Art. 15 GDPR

You have the right to receive free-of-charge information from us regarding your personal data stored by us as well as a copy of this data in accordance with the legal provisions.

14.3 Right to correction in accordance with Art. 16 GDPR

You have the right to request the correction of incorrect personal data relating to you. You further have the right to request the completion of incomplete personal data, taking into consideration the purpose of the processing activities.

14.4 Right to erasure in accordance with Art. 17 GDPR

You have the right to request that we erase your personal data immediately if one of the legal reasons applies and the processing and/or storage is unnecessary.

14.5 Right to restrict processing in accordance with Art. 18 GDPR

You have the right to request for us to restrict the processing if one of the legal requirements to do so prevails.

14.6 Right to data portability in accordance with Art. 20 GDPR

You have the right to receive your personal data that you provided to us in a structured, standard and machine-readable format. You further have the right to transfer this data to another controller to whom this personal data has been provided without us preventing you from doing so if the processing is based on your consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or a contract in accordance with Art. 6 (1) lit. b GDPR and the data is processed using automated processes, if the processing is not required for the performance of a task that is in the interest of the general public or it is not performed due to a public authority exercising its power, which has been transferred to us.

When exercising your right to data portability in accordance with Art. 20 (1) GDPR, you further have the right to request that the personal data is transferred directly from one controller to another controller, insofar as this is technically possible, and if this does not restrict the rights and freedoms of other persons.

14.7 Right to object in accordance with Art. 21 GDPR

You have the right to object to the processing of your personal data, which is based on Art. 6 (1) lit. e (data processing in the interest of the general public) or f (data processing based on the assessment of interests) GDPR, at any time for reasons arising from your specific situation.

This also applies to profiling within the meaning of Art. 4 no. 4 GDPR based on these provisions.

If you object, we will no longer process your personal data, unless we can prove compelling and justified reasons for such processing that outweigh your interests, rights and freedoms, or the processing serves to assert, enforce or defend legal claims.

In individual cases, we process personal data for direct advertising purposes. You can object at any time to the processing of your personal data for the purpose of such advertising. This also applies to any profiling linked to such direct advertising. If you object to us regarding the processing of your personal data for direct advertising purposes, we will no longer process it for these purposes.

You further have the right to object to our processing of your personal data for scientific or historic research or statistical purposes in accordance with Art. 89 (1) GDPR for reasons arising from your specific situation, unless such processing is required for fulfilling a task that is in the interest of the general public.

You may exercise your right to object in connection with the use of services provided by the information company by applying automated processes that use technical specifications, regardless of Directive 2002/58/EC.

14.8 Withdrawal of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

14.9 Complaining to a supervisory authority

You have the right to complain to a supervisory authority responsible for data protection regarding our processing of personal data.

15. Personal data storage period

The period for which personal data is stored depends on the respective statutory retention period. Once the retention period has expired, the corresponding data is routinely deleted, unless it is still required for the fulfilment or negotiation of a contract.

16. Updates and amendments to the Privacy Policy

This Privacy Policy in the version of September 2021 is currently valid.

The development of our website and contents or changes in statutory or official stipulations may make it necessary to amend this Privacy Policy. You can download and print the latest Privacy Policy on the website at "https://www.oculus.de/de/datenschutz/".