Data protection


Data protection declaration / duty to provide information according to §5 TMG & Art. 13/14 GDPR

At HOYA Surgical Optics GmbH, we believe the protection of personal data involves far more than just complying with legislation. We are therefore happy that you are interested in how we handle personal data.
We always process personal data such as a person’s name, address, e-mail address, or phone number in accordance with applicable privacy law.
With this privacy notice, we would like to inform everyone about the nature, scope, and purpose of the personal data that we collect, use, and process. Furthermore, we would like to explain to the persons concerned the rights to which they are entitled.
HOYA Surgical Optics GmbH has implemented numerous technical and organizational measures to ensure that the personal data processed via this Web site is protected as comprehensively as possible.
Despite the care we take, Internet-based data transmission is vulnerable to security flaws and, consequently, absolute protection can never be guaranteed. For this reason, you of course have the option of transmitting your personal data by alternative means, for example, by telephone or post.


Name, Address, and Contact Details of the Entity Responsible

HOYA Surgical Optics GmbH
Mads Bjerre Andersen
De-Saint-Exupéry-Straße 10
60549 Frankfurt am Main
Germany

phone: +49 69 664 268 0
fax: +49 69 664 268 399
email: ifra-info@hoya.com
Internet: http://www.hoyaform.de/


Privacy Officer Contact Details
The Privacy Officer for the data controller is:

DDI - Deutsches Datenschutz Institut GmbH
www.deutsches-datenschutz-institut.de
You can contact our Privacy Officer by sending a letter to the attention of “Privacy Officer” at the address above or by sending an e-mail to: HSOE-data-protection@hoya.com

Purposes and Legal Grounds for Processing Data – When Visiting Our Web Site in General
Should you use our Web site purely for informational purposes, not register yourself, or convey information to us in some other way (e.g. by e-mail), we will only collect the data that your browser transfers to our server (“server log files”). This data is processed in accordance with GDPR art. 6(1)(f) on the basis of our legitimate interest in improving the stability and functionality of our Web site. This data is not used in any other way and in no way shared with third parties. However, we do reserve the right to analyze log files at a later date if there are reasons to suspect unlawful usage.

Purposes and Legal Grounds for Processing Data – Contact Form
When you contact us (e.g. using our contact form or by e-mail), we collect personal data. This data is stored and used exclusively for the purposes of answering your inquiry and for the associated technological administration. Our legitimate interest in responding to your inquiry forms the legal grounds for processing this data, in accordance with GDPR art. 6(1)(f). If you contact us for the purpose of entering into a contract, there are additional legal grounds for processing provided in GDPR art. 6(1)(b). Your data will be erased once your inquiry has been conclusively resolved. This is the case if it can be assumed that the relevant matter has been completely resolved and if there are no statutory retention periods barring us from erasing the data.

Purposes and Legal Grounds for Processing Data – Newsletter Function
Upon registering for our e-mail newsletter, we will regularly send you information about our company and our offers. The only information that is required for us to send the newsletter is your e-mail address. You may provide other data voluntarily so that we can address you by name. We use the double opt-in method to send out our newsletter. This means that we will only send you an e-mail newsletter if you have explicitly confirmed that you give your consent to us sending newsletters. We will then send you a confirmation e-mail asking you to confirm your desire to receive future newsletters by clicking on a corresponding a link.
By clicking on the confirmation link, you grant us permission to use your personal data in accordance with GDPR art. 6(1)(a). When you register for our newsletter, we save the IP address assigned by your Internet service provider (ISP) along with the date and time of registration so that we can trace any misuse of your e-mail address at a later point in time. The data that we collect when you register for the newsletter is used exclusively for promotional purposes in the form of our newsletter. You can unsubscribe from the newsletter at any time by using the link provided for this in every newsletter. When you unsubscribe, your e-mail address will be immediately deleted from our newsletter mailing list, provided that you have not given your explicit consent to us continuing to use your data or that we do not reserve the right to use the data beyond the given scope in a manner legally allowed and about which we inform you in this notice.

Recipients or Categories of Recipients
Your data is not forwarded anywhere else.

Transfer to Non-EU/EEA Country
Your data is not transferred to non-EU/EEA countries.

Notice About Profiling and Scoring
Profiling and scoring does not take place.

Deletion Dates
The controller processes and stores the data subject’s personal data only for the period of time required to achieve the purpose for which it is stored or only if the controller is required to store data on account of legislation or regulations that are passed by European Union legislators and regulators, or other legislators, and the controller is subject to this legislation or these regulations.
Should there no longer be any reason to store the data or if a retention period prescribed by a European Union directive or regulation or by other relevant law expires, the personal data will be restricted from processing or deleted as a matter of routine and in accordance with statutory regulations.

Notice of Right to Object When Consent Is Selected as Legal Grounds
You have the right at any time to withdraw any consent given to the processing of your data. If you withdraw your consent, we will immediately delete the data concerned, provided there are no other legal grounds to support further processing. If you withdraw your consent, it will not affect the legality of the processing operations conducted until the time of the withdrawal.

Rights of the Data Subject / Right to Complain to Data Protection Supervisory Authority
You can request information about the personal data concerning you that we have stored by writing to the above address. Moreover, in certain situations you can request to have your data rectified or erased.
You may additionally have the right to have the processing of your data restricted as well as the right to obtain the data you have provided in a structured, commonly used, and machine-readable format.
In addition, you have the right to complain to a supervisory authority for data protection. If you believe that the processing of your personal data violates the GDPR, GDPR art. 77 provides you the option of filing a complaint with the Privacy Officer named above or with a supervisory authority for data protection. The supervisory authority with jurisdiction over us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
phone: 0611/1408-0
fax 0611/1408-900 or -901
email: poststelle@datenschutz.hessen.de
Internet: https://www.datenschutz.hessen.de/
Imprint · Data protection