Data Protection Notice
When using this website, we collect, process and use data. Since protecting the privacy of our users when using this website is important to us, we would like to inform you below about which personal data we collect when providing the service and how we handle these data. Websites of Leica Camera Deutschland GmbH may contain links to websites of other providers to which the data protection statement does not apply.
1 Responsible party / Contact details of the data protection officer
The responsible party for the data processing required to provide the service on this website is Leica Camera Deutschland GmbH, Leica Store & Galerie Frankfurt, Großer Hirschgraben 15, 60311 Frankfurt am Main.
2 Collection and use of your personal data
2.1 General use of the service
When using the website, we collect and store certain data automatically. This includes: the IP address or device ID assigned to the respective end user device, which we require for the transmission of requested content (e.g. in particular content, shopping cart, texts, images and product information as well as files made available for download, etc.), the type of end user device, the URL of the previously visited Internet page, the browser type and operating system used and the date and time of use.
This data processing takes place in order to facilitate the use of the website.
We hold this information for a maximum of one month for the purpose of recognizing and pursuing misuse.
Aside from this, we delete or anonymize these usage data, including the IP addresses, without undue delay as soon as they are no longer needed for the above mentioned purposes.
The processing of the data is carried out on the basis of legal provisions which authorise the data processing because it is necessary for the provision of the website to the user (Art. 6 para. 1(b) GDPR), or because we have a legitimate interest in safeguarding the security and functionality of our website as well as its proper use without the affected data subjects having an overriding interest (Art. 6 para. 1(f) GDPR).
2.2 User Accounts
In order to place orders, you must set up a user account. Alternatively, you can use the “Direct to PayPal” feature (see section 2.3 below).
When setting up a user account you must provide the following information:
- First and last name;
- whether you are a private or a business customer;
- a valid e-mail address;
- your postal address.
You must also select a password for your user account. Furthermore you can provide your date of birth on a voluntarily basis. This provided data are stored in your respective user account.
In order to login to a set up user account, the following data must be entered:
- User identification (e-mail address provided during the registration)
The purpose of the processing is, on the one hand, to collect the data required for the execution of orders; on the other hand, we collect this data to prevent and detect fraud. The processing of the data is carried out on the basis of legal provisions which authorise the data processing because it is necessary for the fulfilment and processing of orders (Art. 6 para. 1(b) GDPR), or because we can assert a legitimate interest in the prevention and detection of fraud without the affected data subjects having an overriding interest (Art. 6 para. 1(f) GDPR).
We delete this information when you delete your user account, unless the information is still required for the purpose of fraud detection.
2.3 Execution of orders
To execute and carry out your order we need you correct name, address and bank data. In order to confirm the receipt of your order and to communicate with you, we need your E-mail address. We also use this data for the purpose of your identification (customer login). Furthermore you will receive your order and shipping confirmation via your E-mail address.
For this purpose, we use the data provided in your user account to carry out orders placed by you. We use your address data to send you the ordered article. To this end we will pass on your address data to the respective logistics company involved. We will use the bank data provided by you to settle the order accordingly and to refund you an amount if necessary. In this regard we pass on your data to the respective payment service providers.
If you decided on reservation and pick up, the data provided by you (name, e-mail address, telephone number, postal address) and the data regarding your reservation (product, price, quantity, article number, etc.) will be passed on to the store selected by you for the purpose of reservation and pick up.
If you decided to finance your purchase price, we will pass on your first and last name, your address and information on the purchase price to our financing service provider, CreditPlus Bank AG, for the purpose of checking your financing request.
Alternatively to setting up a user account, you can use the “Direct to PayPal” feature. In such a case you can place an order by logging into your existing PayPal account via our website by clicking on the "Direct to PayPal" button and confirming that PayPal may provide us with your details for processing your order. We will then use this data to process your order in accordance with the procedure as set forth above and to process the payment process via PayPal. Information on the associated processing of your data by PayPal can be found in PayPal's data protection regulations (https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_EN).
The processing of the data is carried out on the basis of legal provisions which authorise the data processing because it is necessary for the fulfilment and processing of orders (Art. 6 para. 1(b) GDPR).
After the completion of the ordering and shipping process, we delete the data with a time period of three years after the end of the respective calendar year.
2.4 Customer Database
Furthermore we store your name, address and bank data as well as information on the products you ordered and already provided in the course of your order in our customer database. The processing of the data is carried out on the basis of legal provisions which authorise the data processing because we have a legitimate economic interest in the optimisation of our sales activities without the affected data subjects having an overriding interest (Art. 6 para. 1(f) GDPR).
2.5 Consents to receive newsletter and other advertising
If you have given us your consent to receive newsletters and other promotional communications, we will use your provided data (including data you may have entered in your user account) on the basis of your consent (Art. 6 para. 1(a) GDPR) to send you newsletters and other promotional communications - depending on the preferences you set up - by mail, by telephone or by electronic mail (e-mail, SMS, MMS, instant message).
We verify your consent by using the so-called Double-Opt-In-Procedure. To this end, we will send you an e-mail to the e-mail address you provided in the course of the subscription to actively confirm your consent to receive newsletters and other promotional content before we start sending you respective advertisement. We use the information about the confirmation to document and, if necessary, to prove your given consent.
You can withdraw you consent at any time with effect for the future by sending an E-Mail to email@example.com. The withdrawal of your consent does not affect the lawfulness of the processing based on the given consent prior to its withdrawal. If you withdraw your consent, we will no longer us your data to send you newsletters or other promotional communications.
2.6 Contact and service inquiries
You can send us general contact inquiries or specific service inquiries by using our website, for example if you want to return an ordered product. By doing so the personal data you provided (e.g. your e-mail address, name, etc.) will be passed on to us. When contacting us, you can decide which additional data you will provide to us (e.g. the content of the message).
We process your data in order to answer your inquiries. The processing of the data is carried out on the basis of legal provisions which authorise the data processing because it is necessary in order to process your inquiry (Art. 6 para. 1(b) GDPR).
After final answering of your inquiry, we delete your inquiry with a period of three years after the end of the respective calendar year.
2.7 Usage of cookies
Session cookies are small information units in which randomly generated identification number, the so-called session ID, is stored. By using session cookies we can provide login data or the content of a shopping cart, etc. as a personal preset during the next visit, which makes it for example possible to maintain a login session. In addition, a session cookie stores information about its origin and the storage period. These cookies cannot store any other data. If you log out of your customer account, the session cookies used will be deleted.
The processing of the data is carried out on the basis of legal provisions which authorise the data processing because it is necessary for the intended and comprehensive provision of the website and the functionalities offered thereon (Art. 6 para. 1(b) GDPR).
|You can also view our website without cookies. Most Internet browsers automatically accept cookies. You can prevent cookies from being stored on your hardware by selecting "do not accept cookies" in your browser settings. Please refer to the instructions of your browser manufacturer to find out how this works in detail. You can delete cookies already set on your computer at any time. If you do not accept cookies, however, this can lead to functional restrictions of our services.|
2.8 Web analysis
2.8.1 User profiles
When using our website, we set up user profiles using cookies for the purpose of advertising, market research or a demand-oriented design of our website. We only use usage data based on pseudonyms. These are in particular features to identify the user (pseudonym) and information about the beginning, the end and the scope of the use of our website.
|You can prevent cookies from being stored on your hardware by selecting "do not accept cookies" in your browser settings. Please refer to the instructions of your browser manufacturer to find out how this works in detail. You can delete cookies already set on your computer at any time. If you do not accept cookies, however, this can lead to functional restrictions of our services.|
The processing of the data is carried out on the basis of legal provisions which authorise the data processing because we have a legitimate interest regarding a demand-oriented design as well as the statistical evaluation of our website and the fact that your legitimate interests do not override (Art. 6 para. 1(f) GDPR, Sec. 15 para. 3 TMG).
2.8.2 Google Analytics
We use Google Analytics on our website, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", i.e. text data files which are stored on your end device and enable an analysis of how you use the website. The information produced by the cookies with regard to your use of this website (including your abbreviated IP address) is normally transmitted to a server of Google in the USA and stored there. This transmission of data takes place on the basis of a corresponding EU-US privacy shield certification of Google which can be seen at the following address: http://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.
Google uses this information on our behalf for the purpose of analysing your use of the website, compiling reports about the website activities and additional services for us involved with the use of the website and the internet usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.
You can deactivate Google Analytics using a browser Add-on if you do not want the website analysis. The browser Add-on can be downloaded under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
Alternatively, you can prevent cookies from being stored on your hard disk by selecting "do not accept cookies" in your browser settings. Please refer to the instructions of your browser manufacturer to find out how this works in detail. You can delete cookies already set on your computer at any time. If you do not accept cookies, however, this can lead to functional restrictions of our services.
The processing of the data is carried out on the basis of legal provisions which authorise the data processing because we have a legitimate interest regarding a demand- oriented design, the statistical evaluation of our website as well as the efficient advertising of our website and the fact that your legitimate interests do not override (Art. 6 para. 1(f) GDPR, Sec. 15 para. 3 TMG).
2.9 Embedded videos on our website
Our site uses embedded videos from the vimeo.com site operated by Vimeo, Inc. and YouTube, LLC, operated by youtube.com. Operator of the website is respectively Vimeo, Inc. 555 West 18th Street New York, New York 10011, USA ("Vimeo") or YouTube, LCC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"). If you click on an embedded video on our website, a connection to the Vimeo or YouTube servers is established. The respective Vimeo or YouTube server is informed of our websites you have visited.
If you are logged into your Vimeo or YouTube account, you allow Vimeo or YouTube to associate your surfing behaviour directly with your personal profile.
3 Disclosure of data
A disclosure of your personal data without your express prior consent occurs, in addition to the other instances mentioned in this data protection statement, only in the following cases:
- Personal data will be disclosed to criminal prosecution authorities as well as, if necessary, harmed third parties if necessary to investigate illegal or abusive use of the website. However, this only occurs if there are specific indications for illegal use or misuse. A disclosure can also take place if this serves to enforce the terms and conditions for the use of the website or other agreements or if necessary, to assert, exercise or defend legal claims. Our legitimate interest for the processing is safeguarding the proper functioning of our website and to assert, exercise or defend legal claims, as the case may be.
- We are also required by law to provide information to certain governmental agencies. These are the criminal prosecution authorities, public authorities that prosecute administrative misdemeanors sanctioned with fines and the tax authorities.
- We may have to rely on third party companies and external service providers under contractual relationships which may be located outside the EU or the EEA in order to provide our service, for example, for our customer service or the hosting of the website. In such situations, information will be disclosed to these companies or individual persons, in order to permit the further processing. We carefully select these external service providers and regularly examine them in order to make sure that your privacy is preserved, and the data can only be used for the purposes determined by us. They are also obligated under contracts with us to treat your data exclusively in accordance with this data protection statement as well as the German laws on data protection. To the extent a party outside the EU or the EEA is involved, we make sure that there is an adequate level of data protection, for example, by concluding corresponding contracts or using certifications of the respective recipient that keeps the data.
- During the course of the further development of our business, it is possible that the structure of our company will change by changing the legal form, establishing, purchasing or selling subsidiaries, company divisions or parts of the company. In case of such transactions, the customer information is passed on together with the part of the business which is transferred. We make sure in the case of each disclosure of personal data to third parties as described above that this takes place in accordance with this data protection statement and applicable data protection laws.
4 Rights of the data subject
You have the right to obtain information at any time about the data stored about you. You may also be entitled to the following rights in case the respective requirements are met:
- Right to rectification: You have the right to have false personal data concerning you be corrected.
- Right to erasure: You may also request the deletion of your personal data, for example if your data are no longer required for the purposes for which they were collected or otherwise processed.
- Right to restriction of processing: You also have the right to request that the processing of your personal data be restricted; in such a case, the data will be blocked for any processing. This right exists in particular if the accuracy of the personal data between you and us is debated.
- Right to data portability: If we process your personal data to fulfil a contract with you or on the basis of your consent, you also have the right to receive your personal data in a structured, commonly used and machine-readable format, provided and to the extent that you have made the data available to us.
According to Art. 21 para. 1 GDPR, you may additionally object to data processing on grounds relating to your particular situation. However, this only applies in such cases in which we process data to fulfil a legitimate interest of Leica Camera Frankfurt GmbH or a third party. If you can state such a ground and we cannot assert a compelling interest worthy of protection in the further processing, we will not process these data for the respective purpose.
This does not affect the other rights of objection described in this data protection statement.
If you wish to have information about your stored personal data, enforce your other rights or if you have questions about how we protect data, you can contact us either by mail (Leica Camera Frankfurt GmbH, Großer Hirschgraben 15, 60311 Frankfurt am Main) or by E-Mail via firstname.lastname@example.org. After final answering of your inquiry, we delete your inquiry with a period of three years after the end of the respective calendar year.
You also have the right to file a complaint at any time with a supervisory authority, in particular a supervisory authority in the Member State where you are staying, working or the place of alleged infringement, if you believe that the processing of personal data concerning you is in violation of applicable data protection laws.
5 Deletion of data
Unless otherwise described in this data protection statement, we will only store your personal data for as long as it is necessary to achieve the purposes stated herein or within the framework of a statutory storage period; in the latter case, we will block your data for other processing.
6 Amendments to this data protection statement
We always keep this data protection statement at the newest level. Therefore, we reserve the right to amend them from time to time and make changes when collecting, processing or using your data. We will inform you prior any amendments coming into force. The current version of the data protection statement is always available under https://www.leicastore-frankfurt.de/en/datenschutzhinweis.