Source: https://nz.leica-camera.com/Data-Protection
Timestamp: 2020-08-11 01:41:14
Document Index: 119051683

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 46', 'Art. 45', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 45', 'Art. 45', 'Art. 45', 'Art. 45', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 28', 'Art. 6', 'Art. 46', 'Art. 15', 'Art. 21', 'Art. 6', 'Art. 6', 'Art. 21', 'Art. 15', 'Art. 18', 'Art. 6', 'Art. 15', 'Art. 34']

Privacy Policy of the Leica Camera Group
During your use of the websites and online services of the Leica Camera Group, we will collect, process and use your personal data as described in more detail below. Because the protection of our users’ privacy is important to us, below we would like to inform you of what personal data we collect when you are using the websites and online services and for what purposes the data is used. The websites and online services of the Leica Camera Group may contain links to websites or online services of other providers to which this Privacy Policy does not apply.
1 Controller / Contact Details of the Data Protection Officer
The controller within the meaning of data protection law is Leica Camera AG, Am Leitz-Park 5, 35578 Wetzlar.
The data protection officer can be contacted at: data-protection@leica-camera.com
2 Collection and Further Processing of Your Personal Data
2.1 Automated Data Collection during General Use of the Websites
During the use of the websites, we collect and store certain data that your end device transmits automatically for technical reasons. This includes:
the IP address or device ID allocated to the respective end device, which we need in order to transmit the requested information (e.g. content, shopping basket, text, images and product information, as well as files provided for download, etc.)
the type of the respective end device
the URL of the previously visited website
the date and time at which the site was used
This data processing takes place for technical reasons, to facilitate your use of the websites, and in order to detect and track cases of misuse.
The data is processed on the basis of legal provisions that authorize data processing because this is necessary for the provision of the website to the user (Art. 6 para. 1(b) GDPR), or because we have a legitimate interest in ensuring the security and functionality of the service as well as its proper use without the affected data subjects having an overriding interest (Art. 6 para. 1(f) GDPR).
We store this information as long as is necessary for the purpose of detecting and tracking misuse. Furthermore, we delete or anonymize user data including IP addresses as soon as it is no longer required for the aforementioned purposes.
You can create an account in order to use additional functions of the websites and online services such as product registration.
In order to place orders in our Leica Camera online stores, you need to create an account or alternatively use the “Direct to PayPal” function (see 2.3.5).
2.2.1 Registering an Account
2.2.1.1 Mandatory Details
When creating the account, you must provide the following information:
When registering your account, you set your own personal password. You can change this password.
In order to log in to an existing account, the following data must be entered:
user ID (the email address given during registration)
We process this data in order to provide you with the functions of the account and to fulfill and process orders. It is also processed in order to prevent and detect fraud.
The data is processed on the basis of legal provisions that authorize data processing because this is necessary for the fulfillment and processing of orders or for the provision of functionalities from the account (Art. 6 para. 1(b) GDPR), or because we can assert a legitimate interest in preventing and detecting fraud without the affected data subjects having an overriding interest (Art. 6 para. 1(f) GDPR).
Where, as described above, we process your data for the purpose of providing your account, you are contractually obliged to provide us with the required mandatory details. Without this information, we are unable to provide you with an account.
Your data is generally erased once the purpose for which it was collected has been fulfilled. For the data described above, this is the case when you delete your account. Should the data be processed for the fulfillment and processing of orders, it is erased following the complete fulfillment of the contract or following the expiry of the statutory warranty obligations or contractual guarantee. Data that we process for the prevention and detection of fraud will be deleted once it is no longer required for this purpose. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.
2.2.1.2 Voluntary Disclosures
You can voluntarily enter further information, which is saved in your account. This comprises the following details:
interests (e.g. photography interests, preferred Leica Camera store, etc.)
We process this data in order to provide you with all functions of your account. In providing these functions, we also have a legitimate interest in data processing as per Art. 6 para. 1(f) GDPR.
You are not obliged to provide the voluntary disclosures described above. However, without this information, we are unable to provide you with all the functions of your account.
Your data is generally erased once the purpose for which it was collected has been fulfilled. For the data described above, this is the case when you delete your account. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.
2.2.2 Product Registration
2.2.2.1 Mandatory Details
After creating the account, Leica products can be registered. To do so, we collect:
the model designation and
We process this data in order to provide you with the functionality of product registration.
The data is processed on the basis of legal provisions that authorize data processing because this is necessary in order to provide you with this functionality (Art. 6 para. 1(b) GDPR).
Where, as described above, we process your data for the purpose of product registration, you are contractually obliged to provide us with the required mandatory details. Without this information, we are unable to provide you this functionality.
2.2.2.2 Voluntary Disclosures
You can voluntarily provide us with the following additional details:
Non-Leica products can also be registered voluntarily; for this purpose, the brand of the registered product is collected.
We process this data in order to offer you a full overview of your camera and sport optics portfolio. In providing these enhanced functionalities, we also have a legitimate interest in data processing as per Art. 6 para. 1(f) GDPR.
You are not obliged to provide the voluntary disclosures described above. However, without this information, we are unable to offer you this overview.
2.3 Orders in the Online Store
In order to take your order in the online store, we need your
To this end, we use the information provided in your account in order to execute orders made by you. We need your email address in order to confirm receipt of your order and communicate with you for the purpose of executing the order. Furthermore, you receive confirmation of your order and shipping via your email address. We process the personal data specified in this subparagraph in order to fulfill our contractual obligations and to provide you with the respective product.
The data is processed on the basis of legal provisions that authorize data processing because this is necessary for the purpose of executing the order (Art. 6 para. 1(b) GDPR).
Where, as described above, we process your data for the purpose of executing your order, you are contractually obliged to provide us with the required mandatory details. Without this information, it is not possible for us to execute the order.
Your data is generally erased once the purpose for which it was collected has been fulfilled. Should the data be processed for the fulfillment and processing of orders, it is erased following the complete fulfillment of the contract or following the expiry of the statutory warranty obligations or contractual guarantee. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.
2.3.2 Forwarding of Data
In order to process payments and, if necessary, provide you with a refund, we use the services of our payment service provider Adyen B.V., Simon Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, Netherlands (“Adyen”). Adyen collects and processes your payment data in order to process the payment. For this purpose, we automatically forward the following required data to Adyen:
(The credit card data is encrypted upon collection by Adyen. We do not have access to this data at any time.)
Adyen may forward the data collected by Adyen to credit agencies. This is performed for the purpose of an identity and credit check. Adyen may also forward your data to third parties, should this be necessary in order to fulfill the contractual obligations. Adyen may also forward data if the data is to be processed on Adyen’s behalf.
The data is processed on the basis of legal provisions that authorize data processing because this is necessary for the purpose of executing the order and process the payment (Art. 6 para. 1(b) GDPR).
Where, as described above, we process your data for the purpose of payment processing, you are contractually obliged to provide us with the required mandatory details. Without this information, it is not possible for us to process the payment and thereby execute the order.
We erase data that we process in order to process the payment and thereby execute the order following the complete fulfillment of the contract or following the expiry of the statutory warranty obligations or contractual guarantee. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.
We also process your address data in order to dispatch the ordered items to you. To this end, we forward your address data to the respective logistics company.
The data is processed for the purpose of executing the order on the basis of legal provisions that authorize data processing because this is necessary for the purpose of executing this order (Art. 6 para. 1(b) GDPR).
Should the data be processed for the fulfillment and processing of orders, it is erased following the complete fulfillment of the contract or following the expiry of the statutory warranty obligations or contractual guarantee. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.
2.3.3 Forwarding of Data for Reservation and In-Store Collection
In order to allow you to reserve items and collect them in-store, we need your
and your reservation data:
your chosen store
This data is forwarded to your chosen store for the purpose of reservation and collection.
Where, as described above, we process your data for the purpose of reservation and collection, you are contractually obliged to provide us with the required mandatory details. Without this information, it is not possible for us to execute the order.
Your data is generally erased once the purpose for which it was collected has been fulfilled. Should the data be processed for the purpose of reservation and collection, it is erased following the complete fulfillment of the contract or following the expiry of the statutory warranty obligations or contractual guarantee. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.
2.3.4 Forwarding of Personal Data for Financing
If you have opted for purchase price financing, we will forward the following data
to our financing partner, CreditPlus Bank AG, Strahlenberger Straße 110-112, 63067 Offenbach, for the purposes of checking and processing your financing application. The data forwarded to CreditPlus Bank AG may be forwarded to credit agencies by CreditPlus Bank AG. This is performed for the purpose of an identity and credit check. CreditPlus Bank AG may also forward your data to third parties, should this be necessary in order to fulfill the contractual obligations. CreditPlus Bank AG can also forward data if the data is to be processed on its behalf. See the privacy policy of CreditPlus Bank AG for more information on the associated processing of your data by CreditPlus Bank AG (German language only): https://www.creditplus.de/service/datenschutzhinweise/.
The data is processed on the basis of legal provisions that authorize data processing because this is necessary for the purpose of executing the order in connection with the financing of the purchase price (Art. 6 para. 1(b) GDPR).
Where, as described above, we process your data for the purpose of executing your order, you are contractually obliged to provide us with the required mandatory details. Without this information, it is not possible for us to execute the order in connection with the financing of the purchase price.
Your data is generally erased once the purpose for which it was collected has been fulfilled. Should the data be processed for the fulfillment and processing of orders in connection with the financing of the purchase price, it is erased following the complete fulfillment of the contract or following the expiry of the statutory warranty obligations or contractual guarantee. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.
2.3.5 Forwarding and Collection of Personal Data when Using the “Direct to PayPal” Functionality
Alternatively to creating an account, you can use the “Direct to PayPal” functionality. The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. In such a case, you can place an order by logging into your existing PayPal account by clicking the button with the text “Direct to PayPal” when visiting our websites and confirming that PayPal may provide us with your data in order to process your order. We then use this data in order to execute your order as described above and process the payment via PayPal.
If you use the “Direct to PayPal” functionality, your data that is required for the forwarding to your PayPal account is automatically transmitted to PayPal. This comprises the following data:
reference to the PayPal account
The data transmitted to PayPal may be forwarded to credit agencies by PayPal. This is performed for the purpose of an identity and credit check. PayPal may also forward your data to third parties, should this be necessary in order to fulfill the contractual obligations. PayPal can also forward data if the data is to be processed on PayPal’s behalf. See the privacy policy of PayPal for more information on the associated processing of your data by PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_en.
If you have entered your PayPal account in our online shop, your email address assigned to the PayPal account can also be accessed via PayPal. PayPal will then transmit the following data to us in order to process the order:
The data is processed on the basis of legal provisions that authorize data processing because this is necessary for the purpose of executing the order and process the payment via the “Direct to PayPal” functionality (Art. 6 para. 1(b) GDPR).
Where, as described above, we process your data for the purposes of executing your order and processing the payment via the “Direct to PayPal” functionality, you are contractually obliged to provide us with this data. Without this information, it is not possible for us to execute the order via the “Direct to PayPal” functionality.
Your data is generally erased once the purpose for which it was collected has been fulfilled. Should the data be processed to execute the order and process the payment via the “Direct to PayPal” functionality, it is erased following the complete fulfillment of the contract or following the expiry of the statutory warranty obligations or contractual guarantee. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.
In addition, we process the data saved in your account in our customer database in order to optimize our sales activities. This is the data specified in 2.2.1 et seq.
The data is processed on the basis of legal provisions that authorize data processing because we can assert a legitimate economic interest in the optimization of our sales activities without the affected data subjects having an overriding interest (Art. 6 para. 1(f) GDPR).
The data is erased as soon as it is no longer required for the purpose of optimizing our sales activities.
2.5 Consent to Receiving Advertising Information and to Data Processing for Advertising Purposes
If you have given us your consent to the receipt of advertising information, we will use the information you have provided us with (including data that you may have saved in your account and that we may have received through your interactions with us) on the basis of your consent (Art. 6 para. 1(a) GDPR) to send you advertising information in accordance with your chosen preferences – via email, telephone, push notification via Leica Camera mobile apps and social media (Facebook, Instagram and YouTube).
The consent is deemed to be granted to the Leica Camera Group.
To enable us to adapt the communications to your interests and behavior and offer you an optimally personalized experience, we may analyze and combine more of your personal data. This can include the following data:
1. Data that you actively provided us with, e.g.:
a further email address
the data you have made provided us with via social networks
personal interests, e.g. photography, professional imaging, hunting, nature observation
2. Data that we obtain through your interactions with us:
Data on your interactions, such as purchases in Leica Camera stores (POS) and Leica Camera online shops, Customer Care inquiries, your use of the digital Leica Camera channels such as social media, websites, emails, Leica Camera apps and your use of networked Leica Camera products. This data can include the following:
information you have clicked on
Leica Camera apps you have used
your purchases (products)
your inquiries to Leica Camera Customer Care
The provision of this data is voluntary. However, without this data we are unable to provide you with the corresponding information.
We verify your consent using what is known as a double opt-in process: We send you an email requesting that you actively confirm your consent before we contact you with advertising information. We use the information on the confirmation to document your consent and, if necessary, verify it.
2.5.1 Newsletter Tracking
Newsletters and other advertising information that we provide you with via email in accordance with the areas of interest previously selected by you contain what are known as web beacons. Web beacons are pixel-sized files which are downloaded from the server of the sender when the email is opened. Technical information about you is initially collected together with this request, such as:
information on the system used
We also collect the following data about you:
location of retrieval, which we determine on the basis of your IP address
information on whether you have opened the email
information on which of the links in the email you have clicked on
This information will be used for statistical purposes in order to bring about a technical improvement in the services on the basis of the technical data or the target groups and their reading behavior. Although this information can be assigned to the individual recipients for technical reasons, the analyses are merely for the purposes of recognizing the reading behavior of our users and adapting our content accordingly, improving it or sending different content in accordance with the interests of our users.
The provision of this data is voluntary. However, without this data we are unable to adapt our content to you, improve it or send different content in line with your interests.
The legal basis for the processing of your data for the aforementioned purposes is the consent you have provided (Art. 6 para. 1(a) GDPR).
2.5.2 Forwarding of Your Data to Leica Camera Group Companies for Marketing Purposes
If it is necessary in order to fulfill the aforementioned purposes, the data specified above will be forwarded between the companies of the Leica Camera Group.
The legal basis for the transmitting of the data and its further processing by the companies of the Leica Camera Group is the consent you have provided (Art. 6 para. 1(a) GDPR).
Should we forward your data to companies of the Leica Camera Group or other recipients outside the European Union or the European Economic Area for the purposes specified in 2.3 and on the basis of your consent, it shall only be forwarded in harmony with the requirements of the GDPR:
Forwarding to recipients on the basis of an adequacy decision
The European Commission has decided that an adequate level of data protection exists in the following third countries (adequacy decision, Art. 45 GDPR). We transmit your data to the following countries for which an adequacy decision has been taken:
Leica Camera AG (Switzerland) – decision dated July 26, 2000
Leica Camera Japan Co., Ltd. (Japan) – decision dated January 23, 2019
Forwarding to recipients on the basis of standard contractual clauses
When defining the contractual relationships with companies of the Leica Camera Group in other third countries, we use the standard contractual clauses of the European Commission as per Art. 46 para. 2(c) GDPR. These are available at any time at https://eur-lex.europa.eu/legal-content/en/TXT/PDF/?uri=CELEX:32010D0087&from=en.
2.5.3 Right to Withdraw Consent
You can withdraw your consent with effect for the future, either in full or partially, at any time by sending an email to data-protection@leica-camera.com. The withdrawal of your consent does not affect the lawfulness of the processing performed on the basis of your consent prior to its withdrawal. Should you withdraw your consent, we will no longer use this data to send you advertising information.
You can also set your preferences in your account under your profile and thereby change the communication channels through which you wish to receive advertising information.
2.5.4 Forwarding of Your Data to Facebook, Instagram and YouTube for Marketing Purposes
In order for us to send you advertising information, we process your email address, country and language and, if necessary, forward them to the following companies on the basis of your consent:
The personal data of users of websites and online services of Leica Camera Group companies in the European Union, the European Economic Area and Switzerland is transmitted to Facebook Ireland Ltd. (“Facebook”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as the controller.
The personal data of users of websites and online services of Leica Camera Group companies outside the European Union, the European Economic Area and Switzerland is transmitted to Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA as the controller. Facebook Inc. is certified in accordance with the EU-US Privacy Shield. For the USA, the European Commission has decreed that the rules of the EU-US Privacy Shield represent an adequate level of data protection with its decision dated July 12, 2016 (adequacy decision, Art. 45 GDPR). Further information on the certification of Facebook can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
The personal data of users of websites and online services of Leica Camera Group companies in the European Union, the European Economic Area and Switzerland is transmitted to Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland as the controller.
The personal data of users of websites and online services of Leica Camera Group companies outside the European Union, the European Economic Area and Switzerland is transmitted to Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA (“Google LLC”) as the controller. Google LLC is certified in accordance with the EU-US Privacy Shield. For the USA, the European Commission has decreed that the rules of the EU-US Privacy Shield represent an adequate level of data protection with its decision dated July 12, 2016 (adequacy decision, Art. 45 GDPR). Further information on the certification of Google can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
2.5.4.1 Facebook Custom Audience
We also use the “Custom Audiences from File” process of the social network Facebook. During this process, data of the users of websites and online services belonging to the Leica Camera Group in the European Union, the European Economic Area and Switzerland is transmitted to Facebook Ireland Ltd. (“Facebook”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
In this case, your email addresses are uploaded by Facebook. The upload process is encrypted and serves the purpose of determining who should see our Facebook ads. In doing so, we wish to ensure that the ads are only shown to users who are interested in our advertising information. Information on the associated processing of your data by Facebook can be found in Facebook’s privacy policy.
2.5.4.3 Right to Withdraw Consent
2.5.5 Erasure of Your Data
If you withdraw your consent, we generally erase your data within 72 hours, provided that there is no other legal basis for its further processing. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.
You can use our websites to send us general contact queries or specific service requests. In doing so, your email address is forwarded to us. You can decide which additional data you wish to make available to us within the scope of the contact (i.e. in the content of the message).
We will process this data in order to answer your query. The data is processed on the basis of legal provisions that authorize data processing because this is necessary in order to process your queries (Art. 6 para. 1(b) GDPR).
You are not obliged to provide the voluntary disclosures described above. However, without this information, we are unable to answer your contact or service query.
After answering your query, we will delete your query after three years at the end of the respective calendar year.
We use cookies to enhance the functionality of the website (necessary cookies), to analyze your usage of the website (analytical cookies) and to show you advertisements tailored to your interests inside and outside the Leica Camera website (social media and marketing cookies).
Session cookies are small information units containing a randomly generated identification number, which is known as the session ID. Using session IDs enables us to make information such as login data and shopping basket contents available upon the next visit as a personal setting, which also, for example, allows a login session to be continued. A session cookie also contains information on its origin and the retention period. These cookies cannot save any other data. When you log out of your customer account, the used session cookies are deleted.
Persistent cookies store information which may contain personal data from your browser. This can include the following: your anonymized IP address, your device type, the domain, browser type, language, operating system, country, time zone, previously visited websites or information about your interaction with our websites such as click behavior, purchases and preferences. The persistent cookies used on our website are subject to the additional rules described under 2.8 and 2.9.
The data from necessary cookies is processed on the basis of legal provisions that authorize data processing because this is necessary for the comprehensive and proper provision of the website and the functionalities offered therein (Art. 6 para. 1(b) GDPR).
We use analytical cookies in order to gain a better understanding of your usage behavior of our website. This helps us to continuously improve the quality of our website. We use social media and marketing cookies in order to show you advertising tailored to your interests on our website and on the websites of third parties. Your data is collected and processed on the basis of your consent as per Art. 6 para. 1(a) GDPR.
You can withdraw your consent for the use of analytical, social media and marketing cookies and the associated processing of your data for the purposes described in 2.8 and 2.9 with effect for the future at any time by making the corresponding changes to your cookie settings here. The withdrawal of your consent does not affect the lawfulness of the processing performed on the basis of your consent prior to its withdrawal.
You can also view our website without cookies. Most websites accept cookies automatically. You can prevent cookies being saved on your computer by choosing not to accept cookies in your browser settings. To find out how this works, please refer to the help function of your browser. You can delete cookies that have been set on your end device at any time. However, if you do not accept cookies, the functionality of our offerings may be restricted.
2.8.1 Usage Profiles
When you are using our website, we create usage profiles using cookies for the purposes of advertising, market research or the needs-based design of the website. In doing so, only usage data based on pseudonyms is used. In particular, this data consists of characteristics for identifying the users (pseudonym) and information on the beginning, end and scope of the use of our website.
Your data is collected and processed on the basis of your consent as per Art. 6 para. 1(a) GDPR. You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings here.
We use Google Analytics, a web analysis service.
If you are a user of websites and online services of Leica Camera Group companies in the European Union, the European Economic Area and Switzerland, the operator of the service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
If you are a user of websites and online services of Leica Camera Group companies outside the European Union, the European Economic Area and Switzerland, the operator and controller of this service is Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA (“Google LLC”). Google LLC is certified in accordance with the EU-US Privacy Shield. For the USA, the European Commission has decreed that the rules of the EU-US Privacy Shield represent an adequate level of data protection with its decision dated July 12, 2016 (adequacy decision, Art. 45 GDPR). Further information on the certification of Google can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Google Analytics uses “cookies,” text files which are saved on your end device and enable your use of the website to be analyzed. The information on your use of the website (including your shortened IP address) generated by the cookie is transmitted to a Google server in the USA and stored there. During this process, data of the users of websites and online services belonging to the Leica Camera Groupp in the European Union, the European Economic Area and Switzerland can also be transmitted to Google LLC. This data transmission takes place on the basis of a corresponding EU-US Privacy Shield certification of Google LLC, which can be viewed at the following address: https://www.privacyshield.gov/participant? id=a2zt000000001L5AAI&status=Active. For the USA, the European Commission has decreed that the rules of the EU-US Privacy Shield represent an adequate level of data protection with its decision dated July 12, 2016 (adequacy decision, Art. 45 GDPR).
Google will use this information to analyze your use of the website, to compile reports on website activities for the operators of the website, and to provide further services in connection with the use of our website and of the internet. Google may also pass this information on to third parties if this is required by law or when third parties process this data on behalf of Google.
For more information on how Google uses your data, see Google’s Privacy Policy: https://www.google.com/policies/privacy/.
2.9.1. Facebook Pixel
This website uses the remarketing function “Facebook Pixel” (Website Custom Audience Pixel) of Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (“Facebook”). The purpose of this function is to present interest-related advertising (“Facebook ads”) to visitors to this website during their visits to the Facebook social network. The Facebook Pixel by Facebook has been added to this website for this purpose. Through this pixel, an ID number will be assigned to your end device when visiting this website and forwarded to Facebook. When you subsequently visit Facebook, Facebook can recognize your end device on the basis of the issued ID and thereby show targeted advertising. If you are logged in to your Facebook user account during your visit to our website, Facebook can receive the information that you have visited our website and can assign this information to your personal Facebook user account. Further information on the collection and use of data by Facebook as well as your rights in this connection and options for protecting your privacy can be found in the Facebook Privacy Policy at https://www.facebook.com/about/privacy/.
The data is processed by Facebook in the USA. Facebook Inc. is certified in accordance with the EU-US Privacy Shield. For the USA, the European Commission has decreed that the rules of the EU-US Privacy Shield represent an adequate level of data protection with its decision dated July 12, 2016 (adequacy decision, Art. 45 GDPR). Further information on the certification of Facebook can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
2.9.2. Google Advertising Cookies
This website uses the Remarketing Tag from Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA (“Google LLC”). The purpose of this function is to present interest-related advertising to visitors to this website during their visits to the Google search engine, YouTube and websites from third-party providers (content delivery network members). The Google LLC Remarketing Tag has been added to this website for this purpose. Through this Remarketing Tag, an ID number will be assigned to your end device when visiting this website and forwarded to Google. When you subsequently visit Google, YouTube or a website from third parties belonging to the content delivery network, Google LLC can recognize your end device on the basis of the issued ID and thereby show targeted advertising. Further information on the collection and use of data by Google as well as your rights in this connection and possibilities for protecting your privacy can be found in the Google LLC Privacy Policy at https://www.google.com/policies/privacy/.
Google LLC is certified in accordance with the EU-US Privacy Shield. This can be viewed at the following address: https://www.privacyshield.gov/participant? id=a2zt000000001L5AAI&status=Active. For the USA, the European Commission has decreed that the rules of the EU-US Privacy Shield represent an adequate level of data protection with its decision dated July 12, 2016 (adequacy decision, Art. 45 GDPR).
2.9.3. LinkedIn Insight Tag
This website uses the “Insight Tag” function by LinkedIn Ireland Unlimited, Wilton Plaza, Wilton Pl, Dublin, 2, Ireland (“LinkedIn”). The Insight Tag is a small JavaScript code section that is added to this website in order to enable detailed reports on advertising campaigns and obtain valuable information about you as a visitor to this website. We use the Insight Tag in order to track conversions, retarget website visitors and gain further information about you as a LinkedIn member when you view one of our ads. The Insight Tag enables LinkedIn to collect data such as the URL, referrer URL, IP address, device and browser properties, time stamp and page views during a visit to this website. LinkedIn encrypts this data, anonymizes it within seven days and deletes the anonymized data within 90 days. LinkedIn does not share any personal data with us, but rather only offers summarized reports on the target group for the websites and the performance of ads. With the Insight Tag, LinkedIn also offers us the possibility of retargeting so that we can use the collected data to display targeted ads outside this website without you being identified.
2.9.4. Google Ads and Conversion Tracking
This website uses the online advertising program “Google Ads,” and in this connection conversion tracking (visitor action evaluation).
If you are a user of the websites and online services of Leica Camera Group companies outside the European Union, the European Economic Area and Switzerland, the operator and controller of this service is Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA (“Google LLC”). Google LLC is certified in accordance with the EU-US Privacy Shield. For the USA, the European Commission has decreed that the rules of the EU-US Privacy Shield represent an adequate level of data protection with its decision dated July 12, 2016 (adequacy decision, Art. 45 GDPR). Further information on the certification of Google can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
When you click on an ad placed by Google, a conversion tracking cookie is saved on your computer. These cookies have a limited validity period, contain no personal data and are thus not used for personal identification purposes. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and have been forwarded to this page. Every Ads customer receives a different cookie. It is therefore not possible to track cookies via the websites of Ads customers.
The information collected using the conversion cookie is used to compile conversion statistics. In these statistics we can see the total number of users who clicked on one of our ads and were forwarded to a page with a conversion tracking tag. However, we receive no information which allows users to be identified personally. The information generated by the cookie is transmitted to a Google server in the USA and stored there. This also applies to data of the users of websites and online services belonging to the Leica Camera Group in the European Union, the European Economic Area and Switzerland. This data can also be passed on to Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA (“Google LLC”). This data transmission takes place on the basis of a corresponding EU-US Privacy Shield certification of Google LLC, which can be viewed at the following address: https://www.privacyshield.gov/participant? id=a2zt000000001L5AAI&status=Active. For the USA, the European Commission has decreed that the rules of the EU-US Privacy Shield represent an adequate level of data protection with its decision dated July 12, 2016 (adequacy decision, Art. 45 GDPR).
Further information and the Google Privacy Policy can be found at: https://www.google.de/policies/privacy/.
2.10 Embedded Videos on Our Website
We embed videos from third-party providers on our website (“embedded videos”). When you click on an embedded video on our website, a connection to the servers of the third-party provider is established, within the scope of which we transfer your IP address to the respective third-party provider. This is a technical requirement in order to enable you to call up the selected video.
The transfer takes place on the legal basis of our legitimate interest in a needs-based design of our website and in enabling the provision of the embedded videos requested by you, as well as on the condition that your legitimate interests do not override this (Art. 6 para. 1(f) GDPR).
Third-party providers can also use cookies or similar technologies (e.g. pixel tags) for marketing purposes. Using these technologies, third-party providers can collect information on the websites you have visited, information on your browser or operating system, and further details on the use of our website and combine it with data from other sources. If you are logged in to your own account with the third-party provider, you also enable the third-party provider to assign your surfing behavior directly to your personal profile.
The legal basis for the processing is your consent as per Art. 6 para. 1(a) GDPR.
We use embedded videos from the following third-party providers:
Our website uses embedded videos from the site operated by Vimeo, Inc. (vimeo.com). The operator of the pages is Vimeo, Inc. 555 West 18th Street New York, New York 10011, USA (“Vimeo”). Vimeo (https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=Active) is certified in accordance with the EU-US Privacy Shield, for which an adequacy decision was taken by the European Commission on July 12, 2016; as such, an appropriate level of data protection exists. Further information on the handling of user data can be found in the Vimeo Privacy Policy (https://vimeo.com/privacy).
Our website also uses embedded videos from the website youtube.com.
For users habitually resident in the European Union, the European Economic Area or Switzerland, the operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
For users habitually resident outside the European Union, the European Economic Area or Switzerland, the operator and controller of the website is Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA (“Google LLC”). Google LLC is certified in accordance with the EU-US Privacy Shield. For the USA, the European Commission has decreed that the rules of the EU-US Privacy Shield represent an adequate level of data protection with its decision dated July 12, 2016 (adequacy decision, Art. 45 GDPR). Further information on the certification of Google can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Further information on the handling of user data can be found in YouTube’s privacy policy (https://policies.google.com/privacy?hl=en).
3 Other Forwarding of Data
Alongside the other cases mentioned in this Privacy Policy, your personal data can only be forwarded without your prior and express consent in the following cases:
We rely on contractually bound third-party companies and external service providers (“processors”) for the provision of services. In such cases, personal data is forwarded to these processors in order to enable further processing. We carefully select and regularly check these processors in order to ensure that your rights and freedoms are protected. The processors may only use the data for the purposes specified by us and are also contractually obligated by us to only handle the data in accordance with this Privacy Policy and the German data protection laws.
The processors we use fall into the following categories:
Data is forwarded to processors on the basis of Art. 28 para. 1 GDPR, alternatively on the basis of our legitimate interest in the economic and technical advantages associated with the use of specialized processors, as well as on the condition that your rights and interests relating to the protection of your personal data do not override this (Art. 6 para. 1(f) GDPR).
In the event that personal data is forwarded to a processor outside the EU or the European Economic Area and no adequacy decision of the European Commission is in place, we guarantee the proper processing of the data through measures such as those described in Art. 46 et seq. GDPR, i.e. by concluding the appropriate contracts or through certifications of the organization receiving the data; for further information, please contact the data protection officer.
3.2 Miscellaneous Forwarding of Data
If it is necessary in order to clarify unlawful or improper use of the service or for prosecution, personal data will be forwarded to the law enforcement authorities and, if necessary, to injured third parties. However, this only takes place if there are specific indications for unlawful or improper behavior. Data can also be forwarded for the purpose of implementing terms of use or other agreements. In this context, our legitimate interest in processing the data lies in ensuring the proper functioning of our website and the service and, if applicable, in executing, enforcing or defending legal claims.
Furthermore, we are legally obliged to provide information to certain public bodies upon request. These bodies are law enforcement authorities, authorities that pursue offenses that entail fines, and the financial authorities.
During the development of our business it is possible that the structure of our company is altered through a change of legal structure, through the foundation of subsidiaries, business units or subdivisions, or is purchased or sold. For transactions of this nature, the customer information is passed on together with the part of the company that is to be transferred. Each time that personal data is forwarded to third parties to the extent described above, we will ensure that this takes place in accordance with this Privacy Policy and the relevant data protection laws.
4 Automated Individual Decision-Making
We do not use automated processing – including profiling – to reach decisions which have a legal effect on you or significantly affect you in a similar way.
When the respective prerequisites are in place, you have the following rights:
Right of Access: You have a right to request confirmation at any time as to whether we are processing personal data that concerns you. Furthermore, you have the right to access the personal data concerning you that is being processed by us in the scope described in Art. 15 GDPR.
Right to Rectification: You have a right to the rectification of inaccurate personal data concerning you.
Right to Erasure: You can also request the erasure of your personal data, e.g. when your data is no longer necessary for the purpose for which it was collected or otherwise processed.
Right to Restriction of Processing: Furthermore, you have the right to request the restriction of processing of your personal data; in such a case, the data is blocked from any processing. This right applies in particular when the accuracy of the personal data is disputed between you and us.
Right to Data Portability: If we process your personal data in order to fulfill a contract with you or on the basis of your consent, you also have the right to receive your personal data in a structured, commonly used and machine-readable format, if and to the extent to which you have provided us with the data.
In addition, in accordance with Art. 21 para. 1 GDPR, you can object to data processing on grounds relating to your particular situation. However, this only applies in cases in which we perform data processing in order to fulfill a legitimate interest of Leica Camera AG or a third party on the basis of Art. 6 para. 1(f) GDPR or processing on the basis of Art. 6 para. 1(e) GDPR (performing a task in the public interest or in the exercise of official authority). If you can present such a reason and we cannot assert a compelling, legitimate interest in the further processing, we will no longer process this data for the respective purpose.
According to Art. 21 para. 2 GDPR, you also have the right to object at any time to the processing of your data for the purposes of direct marketing, including profiling in connection with such marketing. Following the objection, we will no longer process your personal data for the purposes of direct marketing.
The other rights to object described in this Privacy Policy are unaffected by this.
Should you wish to access data concerning your person that is stored by Leica Camera AG, assert your other rights or if you have questions regarding data protection at our company, you can contact us either by mail (Leica Camera AG, Am Leitz-Park 5, 35578 Wetzlar) or by email at data-protection@leica-camera.com. After answering your query, we will delete your query after three years at the end of the respective calendar year.
Furthermore, you have the right to lodge a complaint with a supervisory authority at any time, in particular a supervisory authority in the member state of your place of residence, work or the place at which the suspected infringement took place if you are of the view that the processing of personal data concerning you is in violation of data protection law.
5.2 Data Processing When Exercising Your Rights
Lastly, we would like to point out that in the event that you exercise your rights as per Art. 15 to 22 GDPR, we will process the personal data provided by you for the purpose of implementing these rights and providing verification hereof. We will only process data stored for the purpose of preparing for and providing access for this purpose, as well as for the purpose of data protection monitoring, and will otherwise restrict processing in accordance with Art. 18 GDPR. This processing takes place on the legal basis of Art. 6 para. 1(c) GDPR in connection with Art. 15 to 22 GDPR and Art. 34 para. 2 of the German Federal Data Protection Act (BDSG).
Unless described otherwise in this Privacy Policy, we erase or anonymize your data as soon as it is no longer required for the purposes for which we collected or otherwise processed it as per the above. We generally save your personal data on the website and the associated services for the duration of the usage or contractual relationship plus a period of 30 days during which we keep backup copies following erasure. We also retain your data if we are obliged to do so for legal reasons or if the data is required for longer due to criminal proceedings or for the safeguarding, assertion or implementation of legal claims. Should it be necessary to store data for legal reasons, its processing will be blocked. The data will then no longer be available for further use.
We always keep this Privacy Policy up to date. Consequently, we reserve the right to amend it occasionally and to update changes in the processing of your data. We will inform you separately before any changes enter into force. The latest version of the Privacy Policy is always available at https://leica-camera.com/data-protection.