Table of Contents
3.1 Visiting our Websites and the Creation of Logfiles
3.3 E-Mail Marketing
3.4 Contacting us through Contact Form or E-Mail
3.5 Web Shop-Features/Functions regarding Ordering Products or Services
3.6 Location Service via Google
4.1 Right to withdraw the data protection declaration of consent (Article 7 para. 3 GDPR)
4.2 Right to information (Article 15 GDPR)
4.3 Right to correction (Article 16 GDPR)
4.4 Right to cancellation or “right to be forgotten” (Article 17 GDPR)
4.5 Right to limitation of processing (Article 18 GDPR)
4.6 Notification Obligation regarding Rectification or Erasure of Personal Data (Article 19 GDPR)
4.7 Right to data transferability (Article 20 GDPR)
4.8 Automated Decision in Individual Cases including Profiling (Article 22 GDPR)
4.9 Right to Object (Article 21 GDPR)
4.10 Right of Appeal to a Supervisory Authority (Article 77 GDPR)
Your privacy and the security of your personal data are very important to us. We therefore make the following Privacy Notice available to you to transparently provide you with information according to the EU General Data Protection Regulation (EU 2016/679) – GDPR:
- Who is processing your data
- Why the processing of your data is important for us
- What kind of data we process
- When we process your data and
- Your rights concerning the processing of your data
(in the following “Olympus”, “we”, “us”).
To contact our Group Data Protection Officer please send an e-mail to dataprotection(at)olympus-europa.com
Personal data is only collected and processed by us if this is necessary to provide a functional and conveniently operated website as well as to provide you with our contents and services.
We process your data only and insofar as this is permitted by national and European legal regulations. The legal grounds on which processing is carried out can be seen in the following explanations. We also explain to you why we process your data and in which situations/regarding which services.
Your data will be stored until the purpose of storage no longer applies. In some cases, European or national regulations, laws or other regulations or contracts to which we are subject prescribe a longer or shorter storage period. The data will then be deleted at the end of this period. Further details can be found in the following explanations.
Every time you visit our website, our system automatically collects data and information from your computer system. We collect the following data:
- IP address
- Browser type/version
- Operating system
- Date and time of access
This data is also stored in the log files of our system. IP addresses or other data that can be used to assign the data to your person are not stored.
The aforementioned data is not stored together with other personal data. It is necessary that our system temporarily stores the users’ IP address so that the website can be delivered to your computer. Your IP address must remain stored for the duration of the respective use of the website. The storage in log files therefore supports the functionality of the website. We also use this data to optimize our website and improve the security of our information technology systems. The data will not be used for marketing purposes in this context. The legal ground for the temporary storage of data and log files is Article 6 para. 1 lit. f GDPR.
The data is stored as long as it is necessary to achieve the purpose for its collection. If data is required for the functionality of the website, this data will be deleted after the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest.
If the aforementioned data is stored for a longer period, however, your IP address will be deleted or alienated in this case. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website.
On our websites we offer you the possibility to register for different services.
Registration to create a Profile (Sign Up)
To create a personal profile on our websites, you have to fill in certain data in an input mask. The inserted data are transmitted to us and stored by us. The data will not be passed on to third parties. The following data is collected necessarily during the registration process:
- “Im not a robot” – check
In the account settings and on certain websites you can also provide other voluntary profile information, such as:
- Street and Number
- Postal Code
- Phone Number
- Fax Number
- Additional Information can be clicked (“I want additional information about Olympus”, “upload a collection of my best pictures”, …)
- Generate QR-Code
As the registration is required for the performance of a contract to which you are a party, hence Article 6 para. 1 b) GDPR serves as a legal ground. We use your data to manage your product registrations and connect them with your account, if you choose to disclose this information to us.
Please note, that in case of a successful registration you can also log-in on other platform like the myOlympus-Community, hence you have to submit further data when you log-in the first time.
Your data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. This applies to data in connection with contracts if this is no longer necessary for the execution of the contract. We may be contractually or legally obliged to store data even after termination of the contract (e.g. for tax purposes).
You can cancel your registration at any time. You can change your saved data at any time by changing your settings on the profile-page. If the data is necessary for the fulfilment of a contract or for the execution of pre-contractual measures, an early deletion can only take place, however, if contractual or legal obligations permit such deletion.
With your consent you can subscribe to e-mail marketing and newsletters on our websites, with which we inform you about our current interesting offers. The goods and services advertised are listed in the table below. In addition, you agree to receive promotional e-mails from the following Olympus Group Entities for certain goods and services.
In general, we use the so-called double-opt-in procedure if you want to register for our newsletter. This means that after your registration we will send you an e-mail to your provided e-mail address, in which we ask you to confirm that you indeed wish to receive the newsletter. If you do not confirm your registration within 1 week, you will not be added to the mailing list software Campaign Monitor. In addition, we store your IP address and date of registration and confirmation. The purpose of this procedure is to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
Only your e-mail address is obligatory for receiving the newsletter. The entry of further, separately marked data is voluntary and will be used to address you personally, After your confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal ground for processing data in this regard is Article 6 para. 1 lit. a GDPR. Furthermore, processing your data is required for pre-contractual obligations, hence Article 6 para. 1 b) and f) GDPR serve as an additional legal basis because the processing of your data is necessary to provide you with the newsletter.
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in each newsletter e-mail, by sending an e-mail to admin[at]olympus-imagespace.co.uk, or by sending a message to the contact details given in the imprint.
The information is stored as long as you stay subscribed to the newsletter. After an unsubscription, we store the data purely statistically and anonymously. Please note, that your withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
If you contact us through our contact form or by sending an e-mail, the personal data transmitted with your e-mail and the data you filled in the contact form will be stored.
Regarding the contact form we process the following data:
- Topic/reason for contact
- E-mail address
- As soon as your message is sent, the following data will also be stored:
- Email address
For this processing of data, we ask for your consent before sending the message and refer to this privacy terms by implementing a hyperlink.
The legal basis for data processing in this respect is Art. 6 para. 1 lit a GDPR. The processing of other data (e.g. connection data) during the sending process should prevent misuse of the contact form and guarantee the security of our information technology systems. The legal basis in this respect is Art. 6 para. 1 lit. f GDPR. Regarding the processing of your data through sending us an email the legal basis is also Article 6 para. 1 lit. f GDPR, as we have a legitimate interest to process these data. We process personal data from emails as well as from the contact form exclusively for the treatment of the establishment of contact. The data will not be passed on to third parties in this respect. The data is used exclusively for correspondence. If the establishment of contact is in connection with the conclusion of a contract, Article 6 para. 1 lit. b GDPR is additionally the legal ground for the processing.
We delete your data as soon as it is no longer necessary to achieve the purpose for which it was collected. This case occurs, if the respective correspondence with you is terminated. Correspondence is terminated when it is obvious that the questions/reasons for sending the message have been finally clarified. Personal data additionally collected during the sending process will be deleted after a period of seven days at the latest.
You can revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In this case, however, we will not response to your message.
We collect your personal data for our web shop if you order one of our products in the online shop or register a product. This data includes:
- Postal address
- Telephone number
- Email address
- Depending on your payment type, credit card data
- Other personal data you give us voluntarily
Your personal data will be used by us and our service partners (postal and parcel services), as far as this is necessary for the establishment, execution or termination of an agreement with you or for the use of a service provided by us. It is especially needed for:
- Website management
- Improving our website as per usage habits
- Enabling the use of particular services on our website
- Handling your orders
- Correspondence in connection with your orders
- Sending invoices and handling the payment process
- Answer your questions
This processing of your data is based on Article 6 para. 1 lit. b GDPR as it is necessary for us to process your data for execute our contractual obligations (delivery of the product). Regarding the improvement of our website and the use of particular services on our website the processing of your data is based on Article 6 para. 1 lit. f GDPR as we have a legitimate interest in improving our services for the future. The transmission of your data to the service providers mentioned above is also based on Article 6 para. 1 lit. f GDPR as they offer payment methods which makes it easier for you to pay the products.
We delete your data as soon as it is no longer necessary to achieve the purpose for which it was collected. As the data is necessary for the fulfilment of the contract, we basically store your data until the end of the contract. However, we reserve the right to store the data as long as it may be necessary to handle any possible warranty claims. Furthermore, we may be contractually or legally obliged to store data even after termination of the contract (e. g. for tax purposes). Which storage periods apply here must be determined individually for the respective contracts and contractual parties.
You can revoke your consent to the processing of personal data at any time. If the data is necessary for the fulfilment of a contract or for the execution of pre-contractual measures, an early deletion can only take place, however, if contractual or legal obligations permit such deletion.
We will not disclose personal data to third parties without your consent except other Olympus Group and associated companies like the payment service provider (PayPal) and postal and parcel service providers. The personal data which is necessary for the transaction will be stored and used by us to the required extent for order processing and/or forwarded to service providers and for the purpose of data processing on our behalf. If goods are ordered to a country outside of Germany, data are passed on to postal and parcel services abroad as far as this is necessary for the appropriate dispatch. Regarding the services of PayPal please note the following:
For payment via PayPal, we pass on your payment data for processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). PayPal reserves the right to carry out a credit check. The result of the credit check with regard to the statistical likelihood of payment default is used by PayPal to take a decision on the willingness to provide the payment method. The creditworthiness information may contain likelihood values (so-called score values). If score values flow into the result of the credit check, they must be based on scientifically tenable mathemat-ical-statistical procedures. Such data as address information flow into calculating the score values.
This website uses the map service Google Maps. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing representation of our online offers and events and at an easy findability of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. You can find more information on the handling of user data in Google’s data protection declaration: https://policies.google.com/privacy.
We want to inform you about your rights concerning the processing of your personal data by us. If you have any questions concerning your rights or if you want to exercise one or several of your rights against us please send us an e-mail to datarights(at)olympus-europa.com.
In case that the processing of your data by us is based on your explicit consent, you have the right to withdraw this consent at any time. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawal. You will be informed about this right before you give your consent.
In accordance with Article 15 GDPR, you have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you have a right to information about these personal data and to the list of information according to Article 15 GDPR. When personal data is transferred to a third country or an international organization, you have the right to be informed about appropriate safeguards to ensure that the recipients are also in compliance with the provisions of the GDPR.
You can request us to correct any incorrect data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
You have the right to request the immediate deletion of your data if one of the following reasons applies:
- data is no longer necessary for the purposes for which they were collected or otherwise processed,
- you withdraw your consent on which the processing was based and there is no other legal basis for the processing,
- you oppose to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation and there are no overriding legitimate grounds for processing,
- you oppose to the processing for direct marketing in accordance with Article 21 para. 2 GDPR,
- the data have been processed unlawfully,
- the deletion of data is necessary to fulfil a legal obligation under European or German law,
- the data were collected in relation to an offer of information society services directly to a child provided in accordance with Article 8 para. 1 GDPR.
We will comply with the request for deletion, unless we are legally obliged or entitled to continue storing and processing your data. In particular, legal retention periods are considered as legal obligations. Furthermore, we are entitled to continued storage if we are unable to assert, exercise or defend legal claims without your data.
If we have made your data public and are obliged to delete it, we will take appropriate measures, taking into account the available technology and the implementation costs, to inform those responsible if you have also requested the deletion from them.
In accordance with Article 18 GDPR, we may only process data to a limited extent in the following cases:
- you dispute the accuracy of your data until we are able to verify its accuracy,
- the processing is unlawful and you refuse to delete your data and instead request that the use of personal data be restricted,
- we no longer need the data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
- you object to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation, as long as it is not yet clear whether the legitimate reasons for the processing by us outweigh your interests.
If processing has been restricted, we may only store this data. Any further processing in such case is only permissible with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. You can revoke your consent given in this connection at any time. You will be notified by us before the restriction is lifted.
We are obliged to inform all recipients to whom your data have been disclosed about a correction or deletion of your data or a restriction of the processing. This shall not apply if it is impossible or involves a disproportionate effort. We will inform you about these recipients if you have any questions in this regard.
You have the right to receive the data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to instruct us with the transmission of your data to a third party, provided that
- the processing of the data is based on your consent or on a contract and
- processing is carried out using automated methods.
You may request that we transfer your data directly to the third party if this is technically feasible.
However, this right must not impair the rights and freedoms of other persons, including our company. If this is the case, we are entitled to refuse the surrender or transfer of your data.
On our websites, your data is not subject of decisions made exclusively on the basis of automated processing (e.g. profiling). You have the right not to be subject to a decision based exclusively on automated processing – including profiling – if this has legal effect against you or significantly impairs it in a similar manner.
If we process your data on the basis of a legitimate interest (Article 6 para. 1 lit. f GDPR), you have the right to object to this if the reasons for this arise from your particular situation. This also applies to profiling based on these provisions.
In this case, we will no longer process your data unless we can prove compelling reasons worthy of protection for the processing. This must outweigh your interests, rights and freedoms, or processing serves to assert, exercise or defend legal claims.
If we process your data for direct marketing purposes, you may object to the processing of your data. This also applies to profiling insofar as it is connected with such direct advertising.
After your objection, your data will no longer be processed for these purposes.
You have the right to complain to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed the GDPR-provision. Other administrative or judicial remedies that you may be entitled to remain unaffected.
This website is hosted by Wallop Design Limited in United Kingdom.
Last modified: 24/05/2018