DATA PROTECTION POLICY

GENERAL NOTES

The following notes provide a simple overview of what happens to your personal data when you visit this web site. Personal data is defined as all data with which you can be personally identified. For full details on data protection, please refer to our data protection policy included below this text.

DATA COLLECTION ON THIS WEB SITE

Who is responsible for data collection on this web site?

Data processing on this web site is performed by the site operator whose contact details are listed in the legal notice.

How do we collect your data?

One way in which data is collected is when you supply data to us, for example by filling in a contact form.

Other data automatically collected by our IT systems when you visit our site includes technical data such as your internet browser, operating system and time of visit. Data is collected automatically as soon as you visit the web site.

What do we use your data for?

Some data is collected to ensure the smooth provision of the web site. Other data can be used to analyse user behaviour.

What are your rights as regards your data?

At any time, you have the right to be informed of the source, recipient and purpose of your stored personal data, free of charge. You also have the right to demand the correction or deletion of this data. You may send any questions on the subject of personal data to the address shown in the legal notice at any time. Furthermore, you have the right of appeal to the responsible supervisory authority.

In certain circumstances, you have the right to demand restrictions on the processing of your personal data. For more details, see the section in the data protection policy entitled ‘Right to restrictions on processing’.

ANALYSIS TOOLS, TOOLS OF THIRD-PARTY SUPPLIERS

Your surfing pattern may be statistically evaluated when you visit this web site. This is mainly performed by means of cookies and analysis programs. Analysis of your surfing behaviour (which cannot be traced back to you) is generally anonymous.

You may object to the analysis, or prevent analysis by avoiding the use of certain tools. The data protection policy below contains detailed information on these tools and your options for appeal.

2. HOSTING AND CONTENT DELIVERY NETWORKS (CDN)

EXTERNAL HOSTING

This web site is hosted by an external service provider known as the hoster. Personal data collected on this web site and stored on the servers of the hoster mainly comprises IP addresses, contact enquiries, metadata, communication data, contract data, contact details, names, web site visits and other data generated by a web site.

The deployment of a hoster serves to fulfil our contracts with potential and existing customers (article 6 subsection 1b of the GDPR) and serves the interests of safe, fast and efficient provision of online offers by a professional supplier (article 6 subsection 1f of the GDPR).

Our hoster will only process your data to the extent necessary to comply with its service obligations and our instructions regarding such data.

Agreement of a contract on order processing

To ensure processing compliant with data protection requirements, we have concluded a contract governing order processing with our hoster.

3. GENERAL NOTES AND MANDATORY INFORMATION

DATA PROTECTION

The operator of these pages takes the protection of personal data very seriously. In accordance with the statutory data protection provisions and this data protection policy, we treat your personal details in confidence.

When you use this web site, various personal data is collected. Personal data is defined as data with which you can be personally identified. The data protection policy explains what data we collect and what we use it for; it also explains how this is done, and for what purpose.

Users are advised that data transfers over the internet (e.g. via email communications) may be insecure; complete protection of data against third party access cannot be guaranteed.

NOTE ON THE RESPONSIBLE ENTITY

The person responsible for data processing on this web site is:

Christoph Rauter
SK-X optical solutions GmbH®

Kaiserstrasse 101/1-3
1070 Vienna

Tel.: +43 1890 4366
Email: office@sk-x.eu

The responsible entity is the natural person or legal entity who decides, individually or with others, on the purposes and means of processing personal data (names, email addresses and similar).

REVOKING YOUR CONSENT TO DATA PROCESSING

Many data-processing operations are only possible with your explicit consent, which you may withdraw at any time simply by sending us an informal email. The legitimacy of data processed before consent is withdrawn remains unaffected by revocation.

RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES, AND TO DIRECT MARKETING (ARTICLE 21 GDPR)

WHERE DATA IS PROCESSED ON THE BASIS OF ARTICLE 6 SUBSECTION 1(e/f) OF THE GDPR, YOU SHALL HAVE THE RIGHT AT ANY TIME TO REGISTER AN OBJECTION AGAINST THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS RELATING TO YOUR SITUATION; THE SAME APPLIES TO PROFILING BASED ON THESE PROVISIONS. REFER TO THIS DATA PROTECTION POLICY FOR THE RESPECTIVE LEGAL FOUNDATION ON WHICH PROCESSING IS BASED. WHEN YOU REGISTER AN OBJECTION, WE WILL NO LONGER PROCESS THE RELEVANT PERSONAL DATA UNLESS WE CAN PRESENT COMPELLING AND LEGITIMATE REASONS FOR PROCESSING WHICH TAKE PRECEDENCE OVER YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21 SUBSECTION 1 GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA FOR SUCH MARKETING PURPOSES; THE SAME APPLIES TO PROFILING TO THE EXTENT IT IS RELATED TO DIRECT MARKETING. IF YOU REGISTER AN OBJECTION, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (APPEAL UNDER ARTICLE 21 SUBSECTION 2 GDPR).

RIGHT OF APPEAL TO THE RESPONSIBLE SUPERVISORY AUTHORITY

In the event of violations of the GDPR, the affected party shall be entitled to appeal to a supervisory authority, especially in the member state of their habitual residence, their workplace or the place of the supposed infringement. This right of appeal is upheld irrespective of other administrative or legal remedies.

RIGHT OF DATA PORTABILITY

You have the right to have copies of data that we process automatically with your consent, or in fulfilment of a contract, sent to yourself or a third party in a conventional, machine-readable format. Direct transfers of data to another responsible person will only be performed where this is technically possible.

SSL/TLS ENCRYPTION

For security reasons, and to safeguard the transfer of confidential content (e.g. orders or enquiries you send to us as the site operator), this site uses SSL and TLS encryption. An encrypted connection is indicated by the change from ‘http://’ to ‘https://’ and the appearance of a padlock symbol in your browser address bar.

When SSL/TLS encryption is activated, data you transmit to us cannot be seen by third parties.

INFORMATION, DELETION AND CORRECTION

In accordance with the applicable legal regulations, you have the right to request details of your stored personal data, its origins and recipients and the purpose of data processing at any time, free of charge; you also have the right to correct or delete such data. You may send any questions on the subject of personal data to the address shown in the legal notice at any time.

RIGHT TO RESTRICT PROCESSING

You have the right to demand restrictions on the processing of your personal data. You may contact us at the address shown in the legal notice at any time. The right to restrict processing applies in the following cases:

• If you dispute the accuracy of personal data that we store, we will usually need some time to check this. For the duration of the checking process, you have the right to demand that the processing of your personal data is restricted.
• Where the processing of your personal data is (or was) unlawful, you may demand restrictions on data processing instead of deletion.
• When we no longer require personal data which you still need to establish, exercise or defend legal claims, you shall be entitled to demand restrictions on the processing of your personal data rather than its deletion.
• Where you register an objection under article 21 subsection 1 of the GDPR, it is necessary to weigh up your interests against our own. Until the overriding interests are established, you have the right to demand restrictions on the processing of your personal data.

If you restrict the processing of your personal data, this data – regardless of its storage – may only be processed with your consent, or to assert, exercise or defend legal claims, or to safeguard the rights of another natural person or legal entity, or for reasons of a substantial public interest of the European Union or a member state.

4. DATA COLLECTION ON THIS WEB SITE

COOKIES

Our internet pages make use of ‘cookies’, small text files that do not damage your device in any way. These are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

When you visit our site, some cookies from third-party enterprises may also be stored on your device (third-party cookies). These enable us, and you, to utilise certain services of third-party companies (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically essential as certain web site functions would not be available without them (e.g. shopping cart function, display of videos). Other cookies serve to evaluate user behaviour or display advertising.

Cookies required to perform electronic communication processes or perform specific functions that you request (e.g. shopping cart function) are stored on the basis of article 6 subsection 1f of the GDPR. The web site operator has a legitimate interest in storing cookies to support the technically optimised provision of services. Where specific consent is requested (e.g. consent to the storage of cookies), processing is carried out solely on the basis of article 6 subsection 1a of the GDPR; such consent may be withdrawn at any time.

You can adjust your browser settings so that you can be informed where cookies are activated and only allow them in specific cases, accept cookies in certain instances, block them completely or automatically delete cookies when you close your browser. The full functionality of our web site may be restricted where cookies are deactivated.

Where cookies are used from third-party companies or for analysis purposes, we will specifically inform you via the data protection policy and obtain your consent as necessary.

COOKIE CONSENT WITH BORLABS COOKIE

Our web site uses cookie consent technology from Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document this according to data protection requirements. The supplier of this technology is Borlabs (Benjamin A. Bornschein, Georg-Wilhelm-Strasse 17, 21107 Hamburg; hereafter Borlabs).

Every time you visit our web site, a Borlabs cookie is saved on your browser, storing the consent you grant and revocations of such consent. This data is not passed on to the provider Borlabs Cookie.

The data collected is stored until you delete the Borlabs cookie yourself, you ask us to do so, or the purpose of data storage no longer applies. Mandatory legal retention periods remain unaffected. For full details on data processing with Borlabs Cookie, please refer to https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs Cookie consent technology is used to obtain legally required authorisation on the use of cookies. The legal basis for this is article 6 subsection 1c of the GDPR.

CONTACT FORM

Where you use the contact form to send us an enquiry, we will store the details entered into the form (including the contact details you provide) in order to process your enquiry and address any follow-up questions. We will not pass on this data without your consent.

This data is processed in line with article 6 subsection 1b of the GDPR insofar as your enquiry is connected to the fulfilment of a contract or is necessary for pre-contractual measures to be taken. In all other cases, processing serves our legitimate interest in effectively handling enquiries forwarded to us (article 6 subsection 1f GDPR) or is based on your consent (article 6 subsection 1a GDPR) where this is requested.

We retain data you enter in the contact form until you request that we delete it, withdraw your consent to its storage or the purpose of data storage no longer applies (e.g. your enquiry is resolved). Mandatory legal regulations (and in particular retention periods) remain unaffected.

ENQUIRIES BY EMAIL, PHONE OR FAX

When you contact us by email, telephone or fax, we store and process your enquiry along with all personal data supplied (name, subject of enquiry) in order to respond to your request. We will not pass on this data without your consent.

This data is processed in line with article 6 subsection 1b of the GDPR insofar as your enquiry is connected to the fulfilment of a contract or is necessary for pre-contractual measures to be taken. In all other cases, processing is based on your consent (article 6 subsection 1a GDPR) and/or our legitimate interests (article 6 subsection 1f GDPR) as we have a valid interest in effectively handling enquiries we receive.

We retain the data you submit to us in contact enquiries until you request that we delete it, withdraw your consent to its storage or the purpose of data storage no longer applies (e.g. your issue is resolved). Mandatory legal regulations (and in particular statutory retention periods) remain unaffected.

DATA USE AFTER SUCCESSFUL REGISTRATION

Finding an optician: your business data (name, street, town, postcode, telephone number, email address, URL) will be published on the SK-X® web site under ‘Find an optician’. To make it easier for interested customers to find a network partner, the aforementioned data is published, and may also be found through a Google Maps search.

USE OF DATA FROM THE ORDER FORM

Customer-related data from the order form is utilised to fulfil the order (i.e. to produce goggles with SK-X® technology). SK-X® continues to store this data for documentation reasons. Also for the purposes of documentation, job numbers and names are stored as submitted to us by the relevant network partner on the order form. Note that the storage of client names must be anonymous in line with the General Data Protection Regulations.

5. ANALYSIS TOOLS AND ADVERTISING

GOOGLE ANALYTICS

This web site uses functions of the web analysis service Google Analytics. The supplier is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics makes use of ‘cookies’, text files stored on your computer that enable us to analyse usage of our web site. Information on site usage generated by these cookies is generally transferred to a Google server in the USA, where it is stored.

The storage of Google Analytics cookies and the use of the analysis tool is based on article 6 subsection 1f GDPR. The site operator has a legitimate interest in analysing user behaviour in order to optimise its web content and its advertising. Where specific consent is requested (e.g. consent to the storage of cookies), processing is carried out solely on the basis of article 6 subsection 1a of the GDPR; such consent may be withdrawn at any time.

IP anonymisation

On this web site we have activated the IP anonymisation function, which means Google will abbreviate your IP address within European Union member states and other signatories to the agreement on the European Economic Area before transmission to the USA. A full IP address will only be transferred to a Google server in the USA (and subsequently abbreviated) in exceptional circumstances. At the request of the operator of this web site, Google will use this information to evaluate your usage of the site with a view to compiling reports on web site activity and providing additional services associated with web site and internet usage to the site operator. Google will not combine the IP address communicated from your browser by means of Google Analytics with other data.

Browser plugin

You can prevent the storage of cookies by adjusting the relevant setting on your browser software; please note that if you do so, however, you may not be able to make full use of the site functions. You may also prevent the gathering by Google of data on your use of the web site which is generated by the cookie (including your IP address) and the processing of this data by Google by downloading and installing a browser plugin available from the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objecting to data collection

You may stop Google Analytics collecting your data by clicking on the following link. An opt-out cookie will be set, preventing the collection of your data on future visits to the site: Deactivate Google Analytics.

For more information on the way Google Analytics handles user data, please refer to the data protection policy of Google: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have concluded a contract governing order processing with Google, and we implement in full the stringent rules of data protection authorities on the use of Google Analytics.

Demographic reports in Google Analytics

This web site uses the demographic function of Google Analytics, which facilitates the production of reports containing details of the age, gender and interests of site visitors. This data is drawn from interest-based advertising by Google as well as visitor data from third-party suppliers, and cannot be linked to individuals. You may deactivate this function in the display settings of your Google account at any time, or prevent the collection of your data through Google Analytics as described in ‘Objecting to data collection’.

Duration of storage

Data stored by Google at user and event level which is linked to cookies, user recognition features (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised or deleted after 14 months. For more details, click the following link: https://support.google.com/analytics/answer/7667196?hl=de

GOOGLE ANALYTICS REMARKETING

This web site uses the functions of Google Analytics Remarketing in connection with the multi-device functions of Google Ads and Google DoubleClick. The supplier is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

This function makes it possible to link the advertising target groups generated by Google Analytics Remarketing with the multi-device functions of Google Ads and Google DoubleClick. In this way, interest-based and personalised advertising adapted to your previous usage and surfing patterns on one particular device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).

Where you have granted appropriate consent, Google links your web and app browser history to your Google account for this purpose. This means the same personalised advertising can be activated on any device on which you log in to your Google account.

To support this function, Google Analytics records Google-authenticated user IDs which are temporarily linked to our Google Analytics data in order to define and create target groups for multi-device advertising.

You may permanently prevent multi-device remarketing/targeting by deactivating personalised advertising. To do so, follow this link: https://www.google.com/settings/ads/onweb/.

The data collected in your Google account is only summarised with your consent, which you can submit to Google or revoke (article 6 subsection 1a GDPR). Where data capture processes are not merged in your Google account (e.g. because you do not have a Google account or you objected to such consolidation), data is collected in line with article 6 subsection 1f GDPR. Legitimate interest derives from the fact that the site operator has an interest in the anonymised analysis of site visitors for marketing purposes.

For more information and the data protection regulations, refer to the Google data protection policy at: https://policies.google.com/technologies/ads?hl=de.

GOOGLE ADS AND GOOGLE CONVERSION TRACKING

This web site uses Google Ads, an online advertising program of Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

We make use of ‘conversion tracking’ in connection with Google Ads. When you click on an advertisement placed by Google, a cookie is set for conversion tracking. Cookies are small text files placed on the user’s computer by an internet browser. These cookies, which become invalid after 30 days, are not used to identify users personally. Where a user visits certain pages of this web site and the cookie has not elapsed, Google and ourselves will discern that a user was directed to this site after clicking on an advertisement.

Every Google Ads customer receives a different cookie. The cookies cannot be monitored through the web sites of Google Ads customers. Information collected by means of conversion cookies is used to compile conversion statistics for Google Ads customers who opted for conversion tracking. Customers learn the total number of users that have clicked on their advertisement and been forwarded to a page with a conversion tracking tag; they do not receive any information that can be used to identify users personally. If you do not want to participate in tracking, you can easily prevent this by deactivating the Google conversion tracking cookie in the user settings of your browser. This means you will not be included in conversion tracking statistics.

The storage of conversion cookies and the use of this tracking tool is based on article 6 subsection 1f GDPR. The site operator has a legitimate interest in analysing user behaviour in order to optimise its web content and its advertising. Where specific consent is requested (e.g. consent to the storage of cookies), processing is carried out solely on the basis of article 6 subsection 1a of the GDPR; such consent may be withdrawn at any time.

The Google data protection regulations contain more information on Google Ads and Google conversion tracking: https://policies.google.com/privacy?hl=de.

You can adjust your browser settings so that you can be informed where cookies are activated and only allow them in specific cases, accept cookies in certain instances, block them completely or automatically delete cookies when you close your browser. The full functionality of our web site may be restricted where cookies are deactivated.

6. NEWSLETTER

NEWSLETTER DATA

If you wish to receive the newsletter offered on this web site, you need to provide an email address along with information that enables us to verify you are the owner of the specified email address and that you consent to receive the newsletter. No further data is collected, or is only gathered on a voluntary basis. We only use this data to provide the information requested and do not pass it on to third parties.

Data entered in the newsletter registration form is solely processed on the basis of your consent (article 6 subsection 1a GDPR). At any time, you may revoke your consent to the storage of data and your email address, and the usage thereof to send the newsletter, via the unsubscribe link in the newsletter. The legitimacy of data processed remains unaffected by revocation.

The newsletter service provider and ourselves store the data you provide in order to receive the newsletter until you unsubscribe from the newsletter, after which you will be removed from the distribution list. Data that we store for other purposes remains unaffected by this.

When you unsubscribe from the newsletter distribution list, we and the newsletter service provider may place your email address on a blacklist to prevent future email communications. Data from the blacklist is only used for this purpose and is not combined with other data. This serves both your interests as well as our interest in complying with legal obligations on the sending of newsletters (a legitimate interest under the terms of article 6 subsection 1f GDPR). There is no time limit on storage in the blacklist. Where your interests override our legitimate interest, you may object to storage.

7. PLUGINS AND TOOLS

YOUTUBE WITH ENHANCED DATA PROTECTION

This web site incorporates videos from YouTube. The operator of the pages is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in expanded data protection mode. According to YouTube, in this mode YouTube does not store any information on visitors to this web site before they watch a video. Note that expanded data protection mode does not completely rule out the transmission of data to YouTube partners. YouTube thereby establishes a connection to the Google DoubleClick network, regardless of whether you watch a video.

When you start a YouTube video on this site, a connection to the servers of YouTube is established and YouTube is notified which of our pages you have visited. When you are logged in to your YouTube account, you enable YouTube to assign surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube can also store various cookies on your device after starting a video. YouTube can use these cookies to gather information on visitors to this web site. This information is used, among other things, to compile video statistics, enhance user friendliness and prevent fraud attempts. The cookies remain on your device until you delete them.

Other data processing operations, over which we have no control, may be triggered when you start a YouTube video.

We make use of YouTube with a view to presenting our online offers in an attractive way. This constitutes a legitimate interest under the terms of article 6 subsection 1f GDPR. Where specific consent is requested (e.g. consent to the storage of cookies), processing is carried out solely on the basis of article 6 subsection 1a of the GDPR; such consent may be withdrawn at any time.

For more information on data protection and YouTube, see the YouTube data protection policy at: https://policies.google.com/privacy?hl=de.

GOOGLE WEB FONTS

To ensure the uniform depiction of fonts, this site makes use of ‘web fonts’ from Google. Google Fonts is locally installed. No connection to the servers of Google is established.

For more information on Google web fonts, refer to https://developers.google.com/fonts/faq and the Google data protection policy: https://policies.google.com/privacy?hl=de.

GOOGLE MAPS (WITH CONSENT)

This web site uses the Google Maps service via an API. The supplier is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure data protection on this site, Google Maps is deactivated the first time you visit the site. A direct connection to the servers of Google will only be established if you activate Google Maps yourself (consent in line with article 6 subsection 1a GDPR). This prevents your data being transferred to Google on your first visit.

After activation, Google Maps stores your IP address, which is generally then transferred to a Google server in the USA for storage. The supplier of this site has no influence on data transmissions after Google Maps is activated.

The Google data protection policy contains more information on the handling of user data: https://www.google.de/intl/de/policies/privacy/.

GOOGLE RECAPTCHA

We make use of Google reCAPTCHA (hereafter ‘reCAPTCHA’) on this web site. The supplier is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to ascertain whether data entries on this web site (e.g. via a contact form) are made by a person or an automated program. To do this, reCAPTCHA uses various features to analyse the behaviour of site visitors. The analysis starts automatically when a visitor enters the web site. reCAPTCHA evaluates various items of information for analysis purposes, including the user’s IP address, duration of site visit and mouse movements. Data captured by the analysis is forwarded to Google.

reCAPTCHA analyses run entirely in the background. Visitors to the web site are not advised that an analysis is taking place.

Data is stored and analysed on the basis of article 6 subsection 1f GDPR. The site operator has a legitimate interest in protecting its web content against improper automated surveillance and spam. Where specific consent is requested (e.g. consent to the storage of cookies), processing is carried out solely on the basis of article 6 subsection 1a of the GDPR; such consent may be withdrawn at any time.

For more information on Google reCAPTCHA, refer to the Google data protection regulations and usage conditions via the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

Call up cookie box