Data Protection Information of SCHÖLLY FIBEROPTIC GMBH

SCHÖLLY FIBEROPTIC GMBH takes the protection of personal data very seriously. We would like you to know when we save what data and how we use it. We are subject to the provisions of the European General Data Protection Regulation (EU-GDPR) and the supplementary rules of the Federal Data Protection Act (BDSG). In order to assure that the regulations concerning data protection are followed by ourselves and our external service providers, we have taken appropriate technical and organizational measures.

This data protection information is valid for our online offers. These include websites, functions and contents, as well as external online presence, such as, for example, our appearances in social media. This general data protection information also serves to inform you about the further processing of your personal data and the fulfillment of our obligation to inform you.

The terms used in this data protection information, such as, for example, person responsible or personal data are used in accordance with the definitions of the EU-GDPR. For reasons of readability and thus in keeping with the sense of an understandable transfer of information, we will not, as a rule, name the individual articles and sections.

Person responsible

The person responsible in line with the EU-GDPR and other national data protection laws of the member states, as well as any other legal data protection regulations is the

SCHÖLLY FIBEROPTIC GMBH
Robert-Bosch-Straße 1-3
79211 Denzlingen
Deutschland
Tel.: +49 7666 9080
E-Mail: info@schoelly.de
Website: www.schoelly.de

Data Protection Officer

The person responsible has appointed a data protection officer, whose contact information is

Michael Kranzer
Bechtle GmbH IT-Systemhaus Freiburg
Leinenweberstraße 1
79106 Freiburg
Deutschland
Tel.: +49 761 8832 225
E-Mail: michael.kranzer@bechtle.com

If you have any questions, suggestions or comments regarding the topic of data protection and the enforcement of your rights listed below, please get in touch with our data protection officer:

General Information on Data Processing

Scope of the processing of personal data

We process your personal data only when required for the preparation of a functional internet presence, and our contents and services. The processing of your personal data is regularly carried out only with your approval.

An exception can be made in such cases in which obtaining previous approval is not possible for actual reasons and the processing of data is possible by means of legal regulations.

Legal basis for the processing of personal data

Within the framework of the data protection regulations, the processing of personal data is fundamentally not permitted, unless a legal approving reason is given. We are obliged to inform you about the legal basis for the processing of data.

Insofar as we have obtained your consent for processing personal data, this serves as the legal basis.

In regard to the processing of personal data that is necessary for fulfillment of a contract, whose contracting party you are, the contract fulfillment serves as the legal basis. This is also valid for the processing procedures which are necessary for carrying out preliminary contract measures.

Insofar as a processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, this serves as the legal basis.

In the case that vital interests of the person affected or of another natural person make the processing of personal data necessary, this serves as the legal basis.

If the processing is necessary to safeguard a justified interest of our company or of a third party and if these interests outweigh your basic rights and basic freedoms, this serves as the legal basis for the processing.

Children

In general, our offer concerns adults. Persons under 16 years may not submit personal data to us without the permission of a parent or legal guardian.

Deletion of data and storage period

As soon as the purpose for data storage is passed, we delete or block your personal data. Beyond this time period, data may be stored, if this is required by legal regulations to which we are subject. This concerns, for example, data that must be stored for trade and taxation purposes, such as delivery notes or billing data.

A block or deletion of your data takes place when a storage period prescribed by these regulations has lapsed, unless there is a necessity for further storage of the data for a contract settlement or the fulfillment of a contract.

Forwarding personal data to a third party

As a matter of principle, we pass on no personal data to third parties without your explicit consent. However, if, within the framework of processing, we reveal your data, forward it or allow access to your data to a third party, this is done only on the basis of one of the legal bases described above.

We do forward data, for example, to payment service providers or suppliers, if this is required for the fulfillment of a contract. If we are obliged by law or by court order, we must forward your data to the respective office authorized to receive the information.

In part, we use carefully selected external service providers for the processing of your data. If within the framework of a so-called order processing, data is passed on to service providers, this is done on the basis of the guidelines of the EU-GDPR. Our order processors are carefully selected, bound to our instructions and are audited at regular intervals. We hire only those order processors who can offer sufficient guarantee that appropriate technical and organizational measures are taken that the processing is done in line with the requirements of the EU-GDPR and BDSG and safeguards the protection of your rights.

Transmission of data to third countries

The EU-GDPR safeguards a constantly high level of data protection within the European Union. When selecting our service providers and cooperation partners, we therefore look for European partners whenever possible, if your personal data is to be processed. Only in exceptional cases will we have your personal data processed outside of the European Union, within the framework of using the services of a third country.

We only allow the processing of your data in a third country if the special conditions of the EU-GDPR are filled. This means that the processing of your data can take place only on the basis of special guarantees. Among these guarantees are a level of data protection set and officially recognized as corresponding to the EU level, adherence to special officially accepted contractual obligations (the so-called standard contractual clauses ) or other agreements between the EU and third countries (such as, for example, the Privacy Shield, an accord between the EU and the USA).

Existence of an automated decision making

We do not use automated decision making or profiling.

Rights of the persons affected

When your personal data is processed, you become the person affected in line with the EU-GDPR. You have the following rights.

Please address our information protection officer for making use of these rights.

Right of withdrawal of consent

As far as the processing of your personal data followed consent given by you, you have the right to withdraw this consent at any time. The legality of the processing so far is not affected by the withdrawal of consent.

Right to information

You have the right to ask us for confirmation as to whether we are processing personal data that affect you. If this is the case, you can demand information about the following:

• The purpose(s) of the processing;
• the categories of personal data that are being processed;
• the recipient or categories of recipients to whom the personal data has been revealed or will be revealed;
• the planned time period for which the data will be stored, or, if concrete details about this are possible, criteria for setting a storage duration;
• the existence of a right to correction or deletion for personal data affecting you, a right to limiting the processing by us or a right to object to this processing;
• the existence of a right to file a complaint with a regulatory authority;
• if the personal data has not been collected from you, all available information about the source(s) of the data;
• the existence of an automated decision maker including profiling and – at least in these cases – meaningful information about the logic involved, as well as the implications and the impact of such processing for you.

You have the right to demand information as to whether your personal data has been transferred to a third country or to an international organization. In this context you can also demand to be informed about the appropriate guarantees in connection with the data transfer.

Within a month of receipt of your request for information, we will provide you with a copy of the personal data which is the subject of the processing. If you make the request in electronic form, we will send you the information in a conventional electronic format, if you have specified nothing else.

Right to correction

You have the right to demand from us an immediate correction of your personal data, if this is incorrect. Under consideration of the purposes of the processing, you have the right to demand the completion of incomplete personal data.

Right to deletion (“Right to be forgotten”)

You have the right to demand from us the prompt deletion of your personal data and we are obliged to delete the personal data immediately, if one of the following reasons is apparent:

• The personal data is no longer necessary for the purposes for which it was processed.
• You withdraw your consent on which the processing was based and no other legal basis for processing is present.
• You make an objection to the processing and there are no urgent justified reasons for the processing, or you enter an objection to the processing.
• The personal data was processed with irregularities.
• The deletion of the personal data is necessary to fulfill a legal obligation according to Union law or the law of a member state.
• The personal data was collected in reference to offered services of the information society.
• If we have made public your personal data and if we are required to delete it, we will take measures appropriate to considerations of available technology and implementation costs, of a technical kind as well, to inform the person responsible for the processing of your personal data that you have demanded the deletion by them of all links to this personal data or from copies or replicates of this personal data.

The right to deletion (“Right to be forgotten”) is not present, if the processing is necessary:

• for exercising the right to free expression of opinion and information;
• for fulfilling a legal obligation to which we are subject, or for completing a task that serves the public interest or in exercising a public authority that was assigned to us;
• for reasons of public interest concerning public health;
• for archiving purposes that lie in the public interest, scientific or historic research purposes or for statistical purposes, if the right to deletion makes realizing the goals of the processing impossible or seriously compromises it or
• for the assertion, exercising or defense of legal claims.

Right to limit processing

• You have the right to demand us to limit the processing of your personal data if one of the following conditions is present:
• You dispute the accuracy of the personal data concerned for a time period that allows us to check the accuracy of the personal data;
• the processing is unlawful and you demand a limit of use of the personal data instead of deletion;
• we no longer need the personal data for the purposes of processing; you, however need it for the assertion, exercising or defense of legal claims, or
• you have filed an objection to the processing, as long as it cannot be determined if our justified reasons outweigh yours.
• If the processing has been limited in accordance with the conditions named above, this personal data will be processed – except for your storage – only with your consent or for the assertion, exercising or defense of legal claims or for the protection of the rights of another natural or juridical person or for reasons of an important public interest of the Union or a member state.

If the limitation of processing in accordance with the conditions named above has been limited, we will inform you before the limit is nullified.

Right to data portability

You have the right to receive the personal data which you have given us in a structured, conventional machine-readable format and you have the right to transfer this data to another person responsible, with no hindrance by us, if the processing is based on consent or a contract and takes place with the help of an automated process.

In exercising the right to data portability, you can have us directly transfer the personal data to another person responsible, if this is technically feasible. Exercising the right to data portability leaves the right to deletion (“right to be forgotten”) unaffected. This right is not valid for processing which is necessary for the execution of a task assigned by us, that lies in the public interest or that occurs in execution of public authority.

Right of objection

You have the right, for reasons arising from your special situation, to file at any time an objection to the processing of your personal data for reasons of a balancing of interests. This is also valid for any profiling based on these rules. We will then no longer process the personal data unless we can verify compelling reasons for processing that are worthy of protection, which outweigh your interests, rights and freedoms or the processing serves the assertion, exercising or defense of legal claims.

If personal data is processed for the purpose of direct advertising, you have the right to file at any time an objection to the processing of your personal data for the purposes of such advertising; this is also valid for profiling, if it is connected to such direct advertising. If you object to the processing for the purpose of direct advertising, the personal data will no longer be processed for this purpose.

In connection with the use of services of the information society, you can exercise your right of objection by means of automated processes with which technical specifications are used.

Automated decisions in individual cases including profiling

You have the right to not be subject to a decision based only on an automated processing – including profiling – that displays a legal effect to you or in a similar way badly compromises you. This is not valid if the decision:

• is necessary for the conclusion or fulfillment of a contract between you and us,
• is permitted by legal regulations of the Union or the member states to which we are subject and these legal regulations contain appropriate measures for safeguarding your rights and freedoms as well as your justifiable interests, or
• is made with your expressed consent.

We take appropriate measures to safeguard your rights and freedoms and your justifiable interests, which also include at least the right to obtain the intervention of a person on the part of person responsible, to a statement of your own viewpoint and to a challenge to the decision.

Right to file a complaint to a regulatory authority

You have the right to file a complaint to a regulatory authority without a further administrative legal or other court remedy, especially in the member state of your habitation, your workplace or the location of the alleged infringement, if you are of the opinion that the processing of your personal data violates the EU-GDPR.

Using our online offers

Fundamentally, you can use our online offers without revealing your identity. In this section we explain to you when and in what connection we process data during the use of our online offers, what offers we have implemented from service providers and cooperation partners, how these function and what happens to your data.

Data collection during a visit to our website

If you use our websites only for the purpose of gathering information; that is, you neither register for an offer, conclude a contract with us nor reveal any other information to us, we collect only that personal data which your browser transfers to our server.

During every visit to our websites, we collect the following data, which is technically necessary for us to be able to show you our websites and to guarantee stability and security:

• IP address of the visitor
• date and time of the inquiry
• content of the request (the concrete page)
• access status / http status code
• respective data amount transmitted
• website from which the request came
• operating system of the visitor
• language and version of the browser software.

This data is stored temporarily in our logfiles for a maximum of seven days A storage in a time period beyond that is possible, however, in this case the IP address is shortened or distorted, so that it is no longer possible to allocate the client who has made the inquiry. There is no storage of the logfiles, nor of other personal data that affects you. The legal basis for these processing procedures is our justified interest.

Because the collection of data for showing the websites and the storage of the data in Logfiles is absolutely necessary for the operation of our websites and the maintenance of IT security, you have no possibility of objection.

Use of cookies

General information on the use of cookies

In addition to the previously named data, cookies are also saved at your terminal device upon use of our websites for visits to an internet site. Cookies are small text packages that can be sent from a website to the browser and saved by it and sent back again. Various details can be stored in cookies, which can all be read out by the site that has placed the cookie. As a rule, they contain a characteristic string (ID) that enables a definite identification of the browser when the website is opened or a page is turned. Their main purpose is to make our online offers altogether more user-friendly and more effective. The data collected in cookies about the users are pseudonymized by technical measures, whereby an allocation of the data to the user making the call is, as a rule, no longer possible. If an identifiability is present, such as with a login cookie whose session ID is necessarily connected with the account of the user, we will direct you at that point to the appropriate location.

We use different kinds of cookies:

• The so-called “session cookies” are cookies that are deleted after you leave our online offer and close the browser. Language settings, for example, and the content of shopping baskets are saved in such cookies.
• “Permanent cookies” remain stored even after closing the browser. In this way, the login status or entered search terms, for example, can be stored. We use such cookies for, among other uses, range measurement or marketing purposes. Permanent cookies are automatically deleted after a set time period, which can differ according to the cookie. You, however, can delete these cookies with the help of your browser at any time.

In addition to so-called “first-party cookies,” which are used by us for the person responsible for data processing, “third-party cookies” are also in use, which are offered by other providers.

• As person responsible, we make use of so-called “first-party cookies”: The legal basis for the processing of your personal data is that of our justified interest.
• External service providers, who, for example, carry out web-tracking or range measurement, can also set cookies. The legal basis for the processing of your personal data is your consent.

Note:

A general objection to the use of cookies for advertising purposes can be explained for many services on the EU website https://www.youronlinechoices.com/de/ or the US website https://www.aboutads.info/choices/ . Further, you can change your browser configurations and e. g. refuse to accept “third-party cookies“ or refuse all cookies or you can activate the option „Do Not Track“ . However, you may then not have all the functions of our online offers available.

Information on special cookies

Google Analytics

If you have declared your consent, Google Analytics is used on this website. This is a web analysis service of Google Ireland Limited. With this system it is possible to allocate data, sessions and interactions with different devices to a pseudonym user ID and thus analyse the activities of a user across multiple devices.

Through the Zertifizierung of the EU-US Privacy Shield, Google guarantees that they also adhere to the data protection regulations of the EU when processing data in the USA.

Google Analytics uses cookies that enable you to analyze the use of the website. The information created by the cookie about the use of this website is, as a rule, transmitted to a Google server in the USA and stored there. In the case of activation of the IP anonymization on this website, your IP address will, however, be shortened by Google within the member states of the European Union or in other treaty states of the agreement about the European economic market. We point out that Google Analytics has been expanded by an IP anonymization on this website in order to guarantee an anonymous collection of IP addresses. The IP address transferred from your browser within the framework of Google Analytics will not be combined with other data by Google.

• frequency of page views
• number of users
• bounce rate (page is closed after one page view)
• length of session (average duration for all users)
• country of origin of view request
• use of website functions
• which page is most often selected
• what website the user is coming from
• Booking Conversion Rate (how many users of the website book an offer)
• what region the user is coming from
• device and category of device used to access our website

On our behalf, Google will use this information to evaluate your use of the website, in order to compile reports about the activities on our site and to provide further services connected to the use.

The legal basis for the use of Google Analytics is your voluntarily given consent.

You can find more information on conditions of use and data protection at Google here and here.

Recipient / categories of recipients

The recipient of the collected data is Google

Transmission to third countries

The personal data is transferred to the USA under the so-called. EU-US Privacy Shield, on the basis of an arrangement of the European Commission. You can view the corresponding certificate here.

Duration of data storage

The data sent by us and linked to cookies, user ID or advertising IDs is automatically deleted after 14 months. The deletion of data that has reached its storage time limit takes place automatically once a month.

In addition, you can prevent the recording of data created by cookies and the use of the data from your use of the website going to Google, and the processing of this data by Google. To do this, download and install the Browser add-on to deactivate Google Analytics for the browser you use.

A so-called opt-out cookie prevents the future collection of your data during a visit to this website. In order to prevent the collection across different devices, however, you will have to carry out the opt-out on all the devices you use. If you click here, the opt-out cookie can be set for the device you are using now.

Google Maps

We use Google Maps for representations of our locations. Google Maps is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereafter called Google). For showing the maps, processing of the IP address by Google is absolutely necessary.

By means of the Zertifizierung in accordance with the EU-US Privacy Shield, Google guarantees that the data protection regulations of the EU are adhered to also for the processing of data in the USA.

The cooperation with Google regarding data protection is carried out on the basis of an agreement on the common responsibility according to sec. 26 DSGVO which can be seen here.

By the way, when you use Google Maps, you immediately enter a user relationship to Google.

Further information on user conditions and data protection at Google can be found here.

Recipient / categories of recipients

The recipient of the collected data is Google

Transmission to third countries

The personal data is transferred to the USA under the so-called. EU-US Privacy Shield, on the basis of an arrangement of the European Commission. You can view the corresponding certificate here.

Duration of data storage

The data sent by us is automatically deleted after 14 months. The deletion of data that has reached its storage time limit takes place automatically once a month.

reCAPTCHA

For the protection of our online presence, we use the reCAPTCHA service of the Google Inc. (Google) company at the places where you can enter data. The search serves to distinguish between entries made by people and those made fraudulently by automated machine processing. The search includes sending the IP address to Google and, if necessary, any further data needed by Google for the service of reCAPTCHA. For this purpose, your entries will be transferred to Google and used there. However, your IP address will first be shortened by Google, within the member states of the European Union or in other treaty states of the agreement about the European economic market. Only in exceptional cases will the full IP address be passed on by a server of Google to the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transferred from your browser within the framework of reCaptcha will not be combined with other data by Google.

Inquiries sent to us

If you send us an inquiry – for example, by using the contact form – your personal data will be processed, in order to answer your contact inquiry:

• for handling the matters expressed in your contact form
• for handling your service requests
• for handling your return consignment
• for telephone and written (e-mail) further inquiries
• for information about products and services

Your data will not be used by us for automated decision-making or for profiling.

Changes

This data protection information is changed from time to time. The adjustments are made, for example, when technological developments, legal regulations or other influences cause changes that need updating.

Status: April 2020