Privacy Policy of the Leica Camera Group

DATA PROTECTION STATEMENT

During your use of the website leicacamerausa.com and online services of the Leica Camera Group, we will collect, process and use your personal data as described in more detail below. Because the protection of our users’ privacy is important to us, we would like to inform you which personal data we collect when you use the website and the associated services as well as the purposes for which we process the data. 

With a view to protecting the privacy of your end devices (computer or mobile device), we will also provide you with information about storage and access to information on your end device via cookies or similar technologies.

1 Controller / Contact Details

The controller within the meaning of data protection law is:
Leica Camera AG
Am Leitz-Park 5,
35578 Wetzlar
Germany

Email: data-protection@leica-camera.com

Should you have any questions or suggestions regarding data protection or this Privacy Policy, or if you would like to contact us to assert your rights, please use the above-mentioned contact details when submitting your query.

2 Data Protection Officer

You can contact our data protection officer at: DPO@leica-camera.com

3 Automated Data Processing

When accessing our website, your end device automatically transmits certain data for technical reasons, which is required to establish the connection and access the queried and embedded contents (e.g., shopping cart, texts, images, videos and product information as well as data provided for downloading). This comprises:

• the IP address or device ID allocated to the respective end device
• the type of end device in question
• browser type/version
• the operating system used
• the visited website
• the previously visited website (referrer URL)
• the date and time of the server query
• the HTTP status code

The collection and subsequent processing is intended to deliver the contents of our website and make the functions and services associated with our website available to you.

We store this data for the following purposes:

• to ensure the security of our IT systems, e.g., to defend against specific attacks on our systems and to detect attack patterns
• to ensure the proper operation of our IT systems, e.g., when faults occur which we can only resolve by storing the IP address
• for law enforcement, hazard prevention or prosecution if there is specific evidence of crimes

The data is processed on the basis of our overriding legitimate interests specified above; Art. 6 para. 1(f) of the General Data Protection Regulation (GDPR).

We store this data for a period of 14 days. We then delete or anonymize this data, including the IP addresses.

The data is only stored for a longer period when there are specific indications to warrant a justified suspicion of unlawful use which necessitates an additional review and processing of the data for this reason.

4 Hosting

We use the services provided by BigCommerce for the hosting and operation of our website.

BigCommerce, Inc.
11305 Four Points Drive
Building II, First Floor                                    
Austin, TX 78726

BigCommerce process your personal data on our behalf, i.e., exclusively in accordance with their instructions.

5 Data Processing When Visiting the Website and the Related Functions and Services

We process your personal data to provide the functions available when using the website and the associated functions and services.

When you use specific functions in connection with the website or define any settings such as search and filter functions, place products in the shopping cart or select a language, we will process the information you provided and the settings you defined in order to provide these functions.

The processing is required in order to provide you with the requested functions. The legal basis for the respective data processing is Art. 6 para. 1(b) GDPR.

6 Leica Account (General Account)

You can create an account in order to use additional functions of the websites and online services such as product registration.

In order to place orders in our Leica Camera online stores, you need to create an account or alternatively use the “Guest" function. 

6.1 Registration/Login

When registering your account, you must provide the following information:

• country and language
• your first and last name
• your email address
• your chosen password

You can also specify your preferred salutation (optional).

We process mandatory information:

• to create and manage your account for you
• to provide you with the functions and services associated with the account
• to prevent and uncover cases of fraud in connection with the account

You will neither be able to create an account nor use the functions and services associated with the account if you do not provide this information. The legal basis for the processing is Art. 6 para. 1(b) GDPR. Processing is required to execute the contractual relationship with you.

We process the information you provide on a voluntary basis so that we can use your preferred salutation when responding to queries you submit. This also constitutes our legitimate interest as per Art. 6 para. 1(f) GDPR.

We also process the data related to the login to authenticate your login. We have a legitimate interest in ensuring that only authorized persons have access to the respective account, Art. 6 para. 1(f) GDPR.

6.2 Using and Managing the Account

You can also provide additional information in your account. For example, you can supplement, amend and manage:

• your profile (title, address, date of birth, (mobile) phone number, professional ties to photography and alternative [delivery] addresses)
• your interests regarding specific topics, such as photography interests, Leica products and events as well as Leica Camera Stores and their events for which you would like to receive related information
• information regarding products you use that were made by other companies
• your preferences and consent settings for receiving advertising communication and the corresponding processing (item 19)

We process your personal data to manage your account for you, provide the full range of functions available with your account and store the consent settings you provide. This also constitutes our legitimate interest as per Art. 6 para. 1(f) GDPR.

6.3 Product Registration

You can also register and manage your Leica products in your account to make it easier to retrieve firmware updates, instructions and supplemental information on your product.

To register a product, you have to:

• select the product you wish to register (model designation)
• enter the product’s serial number

Optionally, you can add the date of purchase and include a comment.

The processing of mandatory information is required to register the product. Moreover, we process this data, including the optional information provided, to provide you with a comprehensive overview of your camera and sport optics portfolio and to allow you to manage your account, Art. 6 para. 1(b) GDPR.

6.4 Erasing Your Data

We generally save your personal data for the duration of the usage relationship. The data is deleted when you delete your account. 

If the data is required for a longer period for statutory reasons or for the (potential) safeguarding, asserting or enforcing of legal rights (see item 30), it will continue to be stored.

 

If you submit an order to us or book tickets for a Leica Akademie event, we will process your data for the receipt and processing of your order or booking.

7.1 Order or Booking as a New Customer / Registration

You must provide the following information in order to submit an order to us or book a ticket for a Leica Akademie event:

• your salutation
• your first and last name
• your address including country
• your phone number
• your email address

You must also select a password if you also wish to create a Leica customer account along with your order or booking. However, you do not need an account to place the order.

If you want your order to be delivered to a different delivery address, we will also need additional information about the recipient:

• salutation
• first and last name
• address including country

You can also add the company and department.

In addition, you have the option of providing your date of birth and the name of your company, including VAT ID (sales tax number).

7.2 Order or Booking as a Current Customer

If you are already registered as a customer of ours, we use the information provided in your account to fulfill the order or booking you place.

7.3 Data Collection from a Third Party

Your personal data will be provided to us by the orderer in the event that you are the recipient of a product but did not place the order, or if tickets for a Leica Akademie event are for you but were booked by a third party.

7.4 Reservation and Pick-up (Click & Collect) in a Leica Store

You can also designate your order for pick-up at a Leica Store. To do so, you must also select the Leica store at which you want to reserve and pick up your product.

For this purpose, we transfer the data provided during your reservation to the store you selected. This comprises:

• your first and last name
• your address
• your email address
• your phone number
• your reservation data: product, price, quantity and item number

7.5 Using and Managing the Leica Customer Account

You can also provide additional information in your account and use the functions and services provided there. For example, you can:

• supplement, amend and manage your delivery and invoice address and your preferred payment method
• manage your e-shop vouchers
• view your order history and the status of your current orders
• download booked Leica Akademie tickets

7.6 Purposes and Legal Basis for Processing

To fulfill the contract, it is necessary to process mandatory information, including the processing of data collected for the product order concerning deviating delivery addresses and optional address supplements, as well as of data required for the reservation. We will also process the corresponding data related to your order or booking for this purpose. In particular, this includes invoice, product and booking data as well as the customer and order number. The above-mentioned data is also processed for managing returned items as well as contract terminations and withdrawals. The legal basis for this is Art. 6 para. 1(b) GDPR.

In the event that you decide to sign up for a Leica customer account when making an order or booking, we process the above-mentioned data:

• to create and manage your account for you
• to provide you with the functions and services associated with the account
• to prevent and uncover cases of fraud in connection with the account

The legal basis for the processing is Art. 6 para. 1(b) GDPR. Processing is required to execute the contractual relationship with you.

Your date of birth is processed to verify your legal capacity and this processing is based on our legitimate interest in verifying your legal capacity (Art. 6 para. 1(f) GDPR).

We process data related to a recipient other than the orderer or deviating participants of Leica Akademie events that we collect for product orders or ticket bookings in order to execute the order as instructed. This also constitutes our legitimate interest as per Art. 6 para. 1(f) GDPR.

7.7 Erasing Your Data

Where the data is processed for the fulfillment and processing of orders or bookings and/or the provision of the account, the data is erased following the complete fulfillment of the contract and/or following the expiration of the statutory warranty obligations or contractual guarantee or, with respect to the Leica customer account, when you delete this account.

If the data is required for a longer period for statutory reasons or for the (potential) safeguarding, asserting or enforcing of legal rights (see item 30), it will continue to be stored.

8. Payments via PayPal / Google Pay or Credit Card

You have the option of choosing between several payment methods for orders and bookings of Leica Akademie events. We use the services provided by various payment service providers to process payments.

The respective service providers are responsible for processing your data and may forward your data to credit agencies in order to verify your identity and perform a credit check; they may also pass on your data to other third parties or service providers for their own purposes. Further information on the processing of your data can be found in the privacy policies issued by the various service providers, which we link to below.

8.1 Payments via PayPal

 “PayPal” is a service of PayPal, Inc, 2211 N 1st St, San Jose, CA. (“PayPal”). You can find the PayPal Privacy Statement at https://www.paypal.com/us/legalhub/privacy-full?locale.x=en_en

If you use the “PayPal” function, your data that is required for the forwarding to your PayPal account and the execution of the payment process is automatically transmitted to PayPal. This data is:

• your IP address
• the total amount of your order and/or booking
• reference to the PayPal account

If you have entered your PayPal account, your email address assigned to the PayPal account can also be accessed via PayPal. PayPal will then transmit the required data regarding your order and/or booking to us for processing. Therefore, PayPal provides us with the following data:

• your first and last name
• your invoice and/or delivery address, as needed

Moreover, PayPal will inform us whether the payment has been completed properly.

8.2 Payments via Google Pay

“Pay with Google Pay” is a service of Google Pay, 1600 Amphitheatre Parkway Mountain View, CA 94043 (“Google”). You can find Google’s Privacy Policy for Google Pay at https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en.

When you use the “Pay with Google Pay” function, we will transfer the data required for forwarding to your Google Pay account to Google. This data includes:

• your IP address
• the date, time and amount of the transaction
• the dealer’s location and description
• a description of the purchased products and/or booked Leica Akademie events or test drives
• your email address, as needed

When you make a payment via Google Pay, Google provides us with the following data:

• your email address
• information on the payment method

• your first and last name
• your delivery address

Moreover, Google will inform us whether the payment has been completed properly.

8.3 Payments via Credit Card

If you choose to pay for your orders and/or bookings by credit card, we will use the services provided by our payment service provider Braintree, 222 West Merchandise Mart Plaza Suite 800 Chicago, IL 60654 USA (“Braintree”) for payment processing and to credit any refunds to your account.

You can find further information on the processing of your data in Braintree’s Privacy Statement at https://www.braintreepayments.com/legal/braintree-privacy-policy.

Braintree collects and processes your payment data in order to process the payment. For this purpose, we automatically forward the following required data to Braintree:

• your IP address
• price
• payment ID
• your credit card data – this is encrypted during collection by Braintree so that we do not have access to this data at any time
• your customer number
• your email address

Moreover, Braintree will inform us whether the payment has been completed properly.

8.4 Purposes and Legal Basis

The data must be processed for the purpose of contract fulfillment, in particular payment processing, including the processing of any chargebacks, Art. 6 para. 1(b) GDPR.

8.5 Erasing Your Data

Data that is processed for the fulfillment and processing of orders and/or bookings is erased following the complete fulfillment of the contract or following the expiry of the statutory warranty obligations or contractual guarantee.

9. Test Drive

You have the opportunity to participate in our test drive covering various Leica systems.

9.1 Test Drive Consultation

You must provide the following information if you wish to book a personal consultation with a Leica expert prior to the test drive:

• your preferred time slot (date and time)
• your first and last name
• your email address
• the desired type of contact (via Zoom or by phone)
• the planned purpose of the test drive
• your level of experience in photography

In addition, you can provide optional information on the camera or camera system you are currently using as well as a phone number.

We use the Calendly service provided by Calendly LLC, 271 17th St NW Ste 1000, Atlanta, Georgia, 30363, USA (“Calendly”) for booking the appointment. Calendly processes your personal data on our behalf, i.e., exclusively in accordance with our instructions (see Art. 4 no. 8 and Art. 28 GDPR).

The European Commission has not adopted an adequacy decision for the US. We have therefore entered into the European Commission-approved standard data protection clauses with Calendly pursuant to Art. 46 para. 2(c) GDPR. Further information on third-country transfers and how you can request additional information is available in item 29.

The processing of your personal data is required to book the personal consultation, Art. 6 para. 1(b) GDPR.

9.2 Online Consultations via Zoom

We use the Zoom video conference tool for consultations conducted online. Zoom is a service provided by Zoom Video Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA (“Zoom, Inc.”). Information on the processing of your personal data by Zoom, Inc. is available at explore.zoom.us/en/privacy/. 

Your personal data is processed in the US. The European Commission has not adopted an adequacy decision for the US. We have therefore entered into the European Commission-approved standard data protection clauses with Zoom, Inc. pursuant to Art. 46 para. 2(c) GDPR. Further information on third-country transfers and how you can request additional information is available in item 29.

When using Zoom, we process your first and last name, email address, password, IP address, other information about your end device, meeting ID and, as needed, other access data, the start and end times of your participation as well as the topic of the online meeting.

In addition, you have the option of providing your phone number and a profile image.

If you use the chat or questions function during the consultation, we will process the text you input to display the text during the consultation. The data from your end device’s microphone and, if applicable, the images from the video camera of your end device will be processed for the duration of the consultation in order to allow the display of videos and the playback of audio. However, you can turn off or mute the camera or microphone yourself at any time via the Zoom application.

The legal basis for the data processing to conduct a consultation via Zoom is Art. 6 para. 1(b) GDPR.

If you are already registered as a Zoom user, you can store reports on the online meetings (meeting metadata) in Zoom for up to one month.

9.3 Test Drive

When participating in a test drive, you can decide whether you wish to have the desired Leica system delivered to you for a weekend test drive, or if you prefer to take part in a test drive at a Leica store.

To participate in a test drive, you must reserve an appointment via Eventbrite, an event booking portal provided by Eventbrite, Inc, 535 Mission Street, 8th Floor, San Francisco, CA 94105, USA (“Eventbrite”).

Eventbrite processes your personal data in connection with the reservation on our behalf, i.e., exclusively in accordance with our instructions (see Art. 4 no. 8 and Art. 28 GDPR). Eventbrite also processes data at its own discretion, for example when you register with Eventbrite. Furthermore, Eventbrite evaluates your usage data on its own responsibility. You can find further information in the Eventbrite Privacy Policy at https://www.eventbrite.com/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_US.

The European Commission has not adopted an adequacy decision for the US. We have therefore entered into the European Commission-approved standard data protection clauses with Eventbrite pursuant to Art. 46 para. 2(c) GDPR. Further information on third-country transfers and how you can request additional information is available in item 29.

The following information is required for the reservation:

• selected Leica system
• your booked appointment for receiving the Leica system
• your first and last name
• your email address
• your phone number

Moreover, we receive the confirmation from Eventbrite that your payment has been completed properly.

Following your reservation, we receive an order confirmation from Eventbrite containing the above-mentioned data to confirm your reservation.

The legal basis for the processing is Art. 6 para. 1(b) GDPR. The processing is required to fulfill the contractual relationship with you.

We will delete your personal data following the complete fulfillment of the contract.

If the data is required for a longer period for statutory reasons or for the (potential) safeguarding, asserting or enforcing of legal rights (see item 30), it will continue to be stored.

10 Financing

At this time we are not offering financing plans.

11 Fraud Prevention

We analyze the information provided by our customers during the booking as well as the technical information transferred from your end device to protect ourselves against fraudulent bookings.

When doing so, we use the services provided by Signifyd, 99 Almaden Blvd #400, San Jose, CA 95113 (“Signifyd”). Signifyd processes your personal data on our behalf, i.e., exclusively in accordance with our instructions (see Art. 4 no. 8 and Art. 28 GDPR). Signifyd.com Privacy Policy, https://www.signifyd.com/privacy/ 

The processing is required to safeguard our legitimate interest in preventing and uncovering fraud, Art. 6 para. 1(f) GDPR.

We will erase this data following the complete fulfillment of the contract or following the expiry of the statutory warranty obligations or contractual guarantee. If the data is required for a longer period for statutory reasons or for the (potential) safeguarding, asserting or enforcing of legal rights (see item 30), it will continue to be stored. 

12 Account Security and Troubleshooting

We also process technical data such as internal identifiers, the time of your registration or changes tied to your account. This processing is based on our legitimate interest in logging specific activities to ensure and track the security of your account.

We also process technical data, such as time stamps and activities, to identify and eliminate technical malfunctions or faults as well as to continuously improve the application. We have a legitimate interest in ensuring the functionality and security of our applications as well as continuously improving them.

The legal basis for processing is Art. 6 para. 1(f) GDPR.

13 Forwarding of Data to Leica National Subsidiaries for Executing the Order

We pass on your personal data, which we process in connection with your order, to the respective Leica national subsidiary responsible for the country in which you have placed your order. This is required to ensure the complete processing and delivery of your order.

For orders from the United States, we forward your data to Leica Camera AG., Germany. The European Commission has adopted an adequacy decision for the USA in line with Art. 45 para. 1 GDPR, which states that the USA ensures an adequate level of data protection.

The legal basis for this processing is Art. 6 para. 1(b) GDPR. We also have a legitimate business interest in maintaining an effective sales organization, Art. 6 para. 1(f) GDPR.

14 Logistics Companies

We forward your address data to the respectively commissioned logistics company in order to deliver your order, Art. 6 para. 1(b) GDPR.

If you have provided us with your telephone number for this purpose, we will also transmit this number to the logistics company hired to transport your shipment. Providing the telephone number allows the logistics company to contact you to ensure delivery, for example, in cases where the delivery person cannot find the specified address or cannot immediately locate you. For this purpose, your telephone number is printed on the shipping label where it may be read by third parties, e.g., if the item is dropped off at a parcel shop or left with a neighbor. The data is processed on the basis of our legitimate interest in ensuring proper delivery, Art. 6 para. 1(f) GDPR.

15 Contact, Support, Service and Other Queries

15.1 Queries via Our Contact Form and Availability Notifications

If you submit a query regarding our products and services via our contact form (e.g., in case of questions regarding specific products, the Leica Akademie program or spare parts), or if you wish to be notified when specific products are in stock again, we process the data provided by you, for example:

• your first and last name
• your email address
• the information required in order to process and respond to your request (e.g., information related to your request, the product name, item number and invoice numbers)
• the time and date of your query, as well as further information you provide in your query

15.2 Support Queries and Other Queries

If you contact us via the contact data provided on our website, e.g., for support queries, or contact us via our general contact details provided under item 1, we will process:

• your name
• the time and date of your query, as well as further information you provide in your query

Depending on the contact method chosen by you or the contact details you have provided, we also process:

• your email address
• your phone number
• your address

15.3 Purposes and Legal Basis

For queries in connection with contracts, e.g., in connection with products and services or support queries, data is processed in order to initiate or execute the respective contractual relationship, Art. 6 para. 1(b) GDPR. We process information you provide voluntarily via our contact forms on the basis of our legitimate interest in the effective and proper processing of your queries, Art. 6 para. 1(f) GDPR.

For other queries, processing is based on our legitimate interest in receiving and processing your query, Art. 6 para. 1 (f) GDPR.

15.4 Erasing your Data

We store queries related to contracts for the duration of the contractual relationship, Art. 6 para. 1(b) GDPR. In all other cases, we delete your query three years after the expiration of the calendar year in which we completed the processing of your query.

If the data is required for a longer period for statutory reasons or for the (potential) safeguarding, asserting or enforcing of legal rights (see item 30), it will continue to be stored.

 

 

16 Shared Management of Customer Data and Analysis for Market Research Purposes

16.1 If you have given us your consent to the receipt of advertising information, we will use the information you have provided us with (including data that you may have saved in your account and that we may have received through your interactions with us) on the basis of your consent (Art. 6 para. 1(a) GDPR) to send you advertising information in accordance with your chosen preferences – via email, telephone, push notification via Leica Camera mobile apps and social media (Facebook, Instagram and YouTube).

16.2 The consent is deemed to be granted to the Leica Camera Group.

To enable us to adapt the communications to your interests and behavior and offer you an optimally personalized experience, we may analyze and combine more of your personal data. This can include the following data:

1. Data that you actively provided us with, e.g.:
   • name
   • date of birth
   • age
   • a further email address
   • mailing address
   • gender 
   • telephone number
   • the data you have made provided us with via social networks
   • personal interests, e.g. photography, professional imaging, hunting, nature observation
   • product registration
2. Data that we obtain through your interactions with us:
   Data on your interactions, such as purchases in Leica Camera stores (POS) and Leica Camera online shops, Customer Care inquiries, your use of the digital Leica Camera channels such as social media, websites, emails, Leica Camera apps and your use of networked Leica Camera products. This data can include the following:
   • IP address
   • cookies
   • device information
   • information you have clicked on
   • location information
   • websites you have visited
   • Leica Camera apps you have used 
   • your purchases (products)
   • your inquiries to Leica Camera Customer Care

16.3 The provision of this data is voluntary. However, without this data we are unable to provide you with the corresponding information.

16.4 We verify your consent using what is known as a double opt-in process: We send you an email requesting that you actively confirm your consent before we contact you with advertising information. We use the information on the confirmation to document your consent and, if necessary, verify it.

16.5.1 Newsletter Tracking

Newsletters and other advertising information that we provide you with via email in accordance with the areas of interest previously selected by you contain what are known as web beacons. Web beacons are pixel-sized files which are downloaded from the server of the sender when the email is opened. Technical information about you is initially collected together with this request, such as:

• delivery of the newsletter
• browser information
• information on the system used
• IP address
• time of retrieval

We also collect the following data about you:

• location of retrieval, which we determine on the basis of your IP address
• information on whether you have opened the email
• information on which of the links in the email you have clicked on

This information will be used for statistical purposes in order to bring about a technical improvement in the services on the basis of the technical data or the target groups and their reading behavior. Although this information can be assigned to the individual recipients for technical reasons, the analyses are merely for the purposes of recognizing the reading behavior of our users and adapting our content accordingly, improving it or sending different content in accordance with the interests of our users.

The provision of this data is voluntary. However, without this data we are unable to adapt our content to you, improve it or send different content in line with your interests.

The legal basis for the processing of your data for the aforementioned purposes is the consent you have provided (Art. 6 para. 1(a) GDPR). 

16.5.2 Forwarding of Your Data to Leica Camera Group Companies for Marketing Purposes

If it is necessary in order to fulfill the aforementioned purposes, the data specified above will be forwarded between the companies of the Leica Camera Group. 

The legal basis for the transmitting of the data and its further processing by the companies of the Leica Camera Group is the consent you have provided (Art. 6 para. 1(a) GDPR).

Should we forward your data to companies of the Leica Camera Group or other recipients outside the European Union or the European Economic Area for the purposes specified in 16.3 and on the basis of your consent, it shall only be forwarded in harmony with the requirements of the GDPR:

• Forwarding to recipients on the basis of an adequacy decision

  Forwarding to recipients on the basis of an adequacy decision The European Commission has decided that an adequate level of dataprotection exists in the following third countries (adequacy decision, Art. 45 GDPR). We transmit your data to the following countries for which an adequacy decision has been taken:

  • Leica Camera AG (Switzerland) – decision dated July 26, 2000
  • Leica Camera Japan Co., Ltd. (Japan) – decision dated January 23, 2019

• Forwarding to recipients on the basis of standard contractual clauses

  Furthermore, we also transfer the aforementioned data to Leica Group companies in third countries that are not currently covered by an EU adequacy decision according to which such third countries generally have an adequate level of data protection. We therefore use the European Commission’s standard contractual clauses as per Art. 46 para. 2(c) GDPR when defining the contractual relationships with Leica Group companies in such third countries in order to establish an adequate level of data protection. The standard contractual clauses can be accessed at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915 at any time.

16.5.3 Right to Withdraw Consent

You can withdraw your consent with effect for the future, either in full or partially, at any time by sending an email to shop@leicacamerausa.com. The withdrawal of your consent does not affect the lawfulness of the processing performed on the basis of your consent prior to its withdrawal. Should you withdraw your consent, we will no longer use this data to send you advertising information.

You can also set your preferences in your account under your profile and thereby change the communication channels through which you wish to receive advertising information.

Leica Camera Group:

* Leica Camera Ltd. (UK), Leica Camera SARL (France), Leica Camera AG (Switzerland), Leica Camera Inc. (USA), Leica Camera Japan Co., Ltd. (Japan), Leica Camera Asia Pacific Pte. Ltd. (Singapore), Leica Camera Singapore (Retail) Pte Ltd. (Singapore), Leica Camera Korea Ltd. (South Korea), Leica Aparelhos Ópticos de Precisão SA (Portugal), Leica Camera Comercial, Unipessoal Lda (Portugal), Leica Camera Italia s.r.l. (Italy), Leica Camera Australia Pty Ltd. (Australia), Leica Camera Frankfurt GmbH (Germany), LFI Photographie GmbH (Germany), Leica Camera Classics GmbH (Austria), Leica Camera Austria GmbH (Austria), Leica Camera Greater China GmbH (Germany, Hong Kong), Leica Camera Hong Kong Limited (China), Leica Camera (Shanghai) Trading Co. Ltd.(China), Leica Camera India Private Limited (India), Leica Camera Malaysia SND. BHD. (Malaysia), Leica Camera (Thailand) Co. Ltd. (Thailand), PT Leica Camera Indonesia (Indonesia), Leica Camera Hong Kong Causeway Bay Limited (China), Leica Camera Deutschland GmbH (Germany), Leica Camera Iberia S.L., Unipersonal (Spain), OOO Leica Camera Russia (Russia)

16.5.4 Forwarding of Your Data to Facebook, Instagram and YouTube for Marketing Purposes

In order for us to send you advertising information, we process your email address, country and language and, if necessary, forward them to the following companies on the basis of your consent (Art. 6 para. 1(a) GDPR):

16.5.4.1 Facebook and Instagram

Information to Be Forwarded to Facebook 
We want to ensure that the ads are only shown to users who are interested in our advertising information. This is why we use Facebook services to show you personalized advertising. The operator of Facebook and Instagram for users outside the US and Canada is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For users in the US and Canada, the operator is Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA.

If you have a Facebook profile, Facebook can match this data withthe information Facebook has already stored about you. Where applicable, Facebook will also combine this data with other data.

Facebook may share your information within the Facebook group of companies or with other third parties. This may lead to a transfer of personal data to the US and to other third countries not covered by an EU adequacy decision. According to Facebook's own statements, Facebook uses EU standard contractual clauses approved by the European Commission to ensure an adequate level of dataprotection when transferring data to the US and to other third countries not covered by an EU adequacy decision.

You can find general information on the further processing and use of your data by Facebook and your configuration options for protecting your privacy when you use Facebook in the Facebook Privacy Policy at .

Custom Audiences
We use the “Custom Audiences from File” process. If you have given your consent, we will transfer your email address or telephone number that we have on file to Facebook in hashed form. Facebook matches this information to information stored by Facebook. If Facebook detects a match, it will deliver personalized advertising.

16.5.4.2 YouTube
We also transfer the aforementioned data to YouTube. For users in the European Union, the European Economic Area or Switzerland, the operator of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For users outside the European Union, the European Economic Area and Switzerland, the operator is Google LLC,1600 Amphitheatre Pkwy Mountain View, California 94043, USA.

If   you have a Google account, Google can match this data with the information Google has already stored about you. Where applicable, Google will also combine this data with other data.

Google may share your information with other Google companies or other third parties. This may lead to a transfer of personal data to the US and to other third countries not covered by an EU adequacy decision.According to Google’s own statements, Google in this case uses EU standard contractual clauses approved by the European Commission to ensure an adequate level of data protection when transferring data to the US and to other third countries not covered by an EU adequacy decision.

You can find general information about the processing of your personal data by Google at: https://policies.google.com/privacy.

16.5.4.3 Right to Withdraw Consent 
You can withdraw your consent with effect for the future, either in full or partially, at any time by sending an email to data-protection@leica-camera.com. The withdrawal of your consent does not affect the lawfulness of the processing performed on the basis of your consent prior to its withdrawal. Should you withdraw your consent, we will no longer use this data to send you advertising information.

You can also set your preferences in your account under your profile and thereby change the communication channels through which you wish to receive advertising information.

16.5.5 Erasure of Your Data

If you withdraw your consent, we generally erase your data within 72 hours, provided that there is no other legal basis for its further processing. Should it be necessary to store data beyond this period for legal reasons, it will be blocked. The data will then no longer be available for further use.

16.6 CONTACT AND SERVICE INQUIRIES

You can use our websites to send us general contact queries or specific service requests. In doing so, your email address is forwarded to us. You can decide which additional data you wish to make available to us within the scope of the contact (i.e. in the content of the message).

We will process this data in order to answer your query. The data is processed on the basis of legal provisions that authorize data processing because this is necessary in order to process your queries (Art. 6 para. 1(b) GDPR).

You are not obliged to provide the voluntary disclosures described above. However, without this information, we are unable to answer your contact or service query. 

After answering your query, we will delete your query after three years at the end of the respective calendar year.

16.7 USE OF COOKIES

We use cookies to offer certain functions of the website (necessary cookies), analyze your use of the website (analytical cookies) and show you advertisements tailored to your interests inside and outside the Leica Camera website (social media and marketing cookies).

Cookies are text files that contain information. They are saved on your end devices (computer or mobile device) when you visit our websites or use our online services, and do not cause any damage. A general distinction can be made between two types of cookies, known as session and persistent cookies:

Session cookies are small information units containing a randomly generated identification number, which is known as the session ID. Using session IDs enables us to make information such as login data and shopping basket contents available upon the next visit as a personal setting, which also, for example, allows a login session to be continued. A session cookie also contains information on its origin and the retention period. These cookies cannot save any other data. When you log out of your customer account, the used session cookies are deleted.

Persistent cookies store information which may contain personal data from your browser. This can include the following: your anonymized IP address, your device type, the domain, browser type, language, operating system, country, time zone, previously visited websites or information about your interaction with our websites such as click behavior, purchases and preferences. The persistent cookies used on our website are subject to the additional rules described under 2.8 and 2.9.

The legal basis for the use of necessary cookies and the further processing of your data is §15 para. 1 German Telemedia Act (TMG) and Art. 6 para. 1(b) GDPR.

We use analytical cookies in order to gain a better understanding of your usage behavior of our website. This helps us to continuously improve the quality of our website. We use social media and marketing cookies in order to show you advertising tailored to your interests on our website and on the websites of third parties. Your data is collected and processed on the basis of your consent as per Art. 6 para. 1(a) GDPR.

You can withdraw your consent for the use of analytical, social media and marketing cookies and the associated processing of your data for the purposes described in 2.8 and 2.9 with effect for the future at any time by making the corresponding changes to your cookie settings here. The withdrawal of your consent does not affect the lawfulness of the processing performed on the basis of your consent prior to its withdrawal.

You can also view our website without cookies. Most websites accept cookies automatically. You can prevent cookies being saved on your computer by choosing not to accept cookies in your browser settings. To find out how this works, please refer to the help function of your browser. You can delete cookies that have been set on your end device at any time. However, if you do not accept cookies, the functionality of our offerings may be restricted.

16.8 WEB ANALYSIS

16.8.1 Usage Profiles

When you are using our website, we create usage profiles using cookies for the purposes of advertising, market research or the needs-based design of the website. In doing so, only usage data based on pseudonyms is used. In particular, this data consists of characteristics for identifying the users (pseudonym) and information on the beginning, end and scope of the use of our website.

Your data is collected and processed on the basis of your consent as per Art. 6 para. 1(a) GDPR. You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings here.

16.8.2 Google Analytics

We use Google Analytics, a web analytics service offered by Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA. Google Analytics collects pseudonymous data from you about the use of our website, including a   truncated IP address, and uses cookies. This data is transmitted to a Google server in the US and stored there. Google uses this information to analyze your use of the website for us, to prepare reports on the use of our website, and to generate other analyses and evaluations relating to the use of our website and the internet. Google may also combine this information with other information about you, such as your search history, your personal account, usage data from other devices and other information that Google has stored about you. Google may also pass this information on to third parties if this is required by lawor when third parties process this data on behalf of Google. Such third parties may include US authorities.

The European Commission has not adopted an adequacy decision for the US. We have therefore entered into the European Commission-approvedstandard contractual clauses with Google pursuant to Art. 46 para. 2(c) GDPR. They can be accessed at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc at any time.

Your data will be stored by Google Analytics for a period of 14 months. After this period, the data is deleted and only aggregated statistics areretained.

For more information on how Google uses your data, see Google’s Privacy Policy: https://www.google.com/policies/privacy/.

The use of this service and the associated further processing of your data are based on your consent, Art. 6 para. 1(a) GDPR. You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings here.

16.9. SOCIAL MEDIA AND MARKETING SERVICES

16.9.1. Google Services

We use the services described hereinafter and offered by Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA. The European Commission has not adopted an adequacy decision for the US. We have therefore entered into the European Commission-approved standard contractual clauses with Google pursuant to Art. 46 para. 2(c) GDPR. They can be accessed at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc at any time.

You can find general information about the processing of your personal data by Google at: https://policies.google.com/privacy. 

You also have the following configuration options on Google:

• You can disable personalized advertising from Google: www.google.com/ads/preferences
• You can disable personalized advertising based on device: https://support.google.com/ads/answer/1660762?hl=en and https://support.google.com/ads/answer/2662922 
• You can disable personalized advertising in your browser: https://optout.networkadvertising.org?c=1

16.9.1.1 Google Remarketing & Personalization of Advertising in the Google Network
If you have given your consent, we will use the remarketing services from Google. Google uses cookies to track how you use our website in order to show you interest-based cross-device advertising for our products on other pages within the Google Ad network. This includes Google Searchand other sites operated by Google and its subsidiaries as well as sites operated by Google’s advertising partners. Accordingly, the information is transmitted to Google and Google’s partners. Any further data processing will only take place if you have consented to Google linking your browsing history to your Google account and using information from your Google account to personalize ads you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data to form target groups.

The use of these services and the further processing of your data are based on your consent (Art. 6 para. 1(a) GDPR). You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings here.

16.9.1.2 Google Ads and Conversion Tracking
This website uses Google Ads and, in this connection, conversion tracking (visitor action evaluation).

When you click on an ad placed by Google, a conversion tracking cookies saved on your computer. These cookies have a limited validity period of 30 days, contain no personal data and are thus not used for personal identification purposes. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and have been forwarded to this page. Every Google Ads customer receives a different cookie. It is therefore not possible to track cookies via the websites of Ads customers.

The information collected using the conversion cookie is  used to compile conversion statistics. In these statistics we can see the total number of users who clicked on one of our ads and were forwarded to a page with a conversion tracking tag. However, we receive no information which allows users to be identified personally.

The use of this service and the associated further processing of your data are based on your consent, Art. 6 para. 1(a) GDPR. You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings here.

16.9.2. Other Services

16.9.2.1 Facebook Pixel
If you have given your consent, we will use the Facebook pixel remarketing function on our website. Facebook pixel is a snippet of JavaScript code. The Facebook pixel captures when you perform certain actions on our website or visit certain areas of our website. The Facebook pixel also collects usage data (such as URL, referrer URL, IP address, device and browser properties and timestamps). The Facebook pixel generates a checksum (hash value) from this information and transfers this hash value to Facebook. Where available, the Facebook cookie is also queried and your Facebook ID is transmitted. If you have a Facebook profile and log in there, the data transmitted by the pixel can be used to present targeted, personalized advertising on Facebook. Data from users who do not have a Facebook profile will be discarded, unused, by Facebook. You can find further information on the collection and use of data by Facebook as well as your rights in this connection and options for protecting your privacy in the Facebook Privacy Policy at https://www.facebook.com/about/privacy/.

The operator of Facebook for users outside the US and Canada is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For users in the US and Canada, the operator is Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA.

Facebook may share your information within the Facebook group of companies or with other third parties. This may lead to a transfer of personal data to the US and to other third countries not covered by an EU adequacy decision. According to Facebook's own statements, Facebook uses EU standard contractual clauses approved by the European Commission to ensure an adequate level of data protection when transferring data to the US and to other third countries not covered by an EU adequacy decision.

The use of this function and the associated further processing of your data are based on your consent, Art. 6  para. 1(a) GDPR. You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings here.

16.9.2.2 LinkedIn Insight Tag
This website uses the “Insight Tag” function by LinkedIn Ireland Unlimited, Wilton Plaza, Wilton Pl, Dublin, 2, Ireland (“LinkedIn”). The Insight Tag is a small JavaScript code section that is added to this website in order to enable detailed reports on advertising campaigns and obtain valuable information about you as a visitor to this website. We use the Insight Tag in order to track conversions, retarget website visitors and gain further information about you as a LinkedIn member when you view one of our ads. The Insight Tag enables LinkedIn to collect data such as the URL, referrer URL, IP address, device and browser properties, time stamp and page views during a visit to this website. LinkedIn encrypts this data, anonymizes it within seven days and deletes the anonymized data within 90 days. LinkedIn does not share any personal data with us, but rather only offers summarized reports on the target group for the websites and the performance of ads. With the Insight Tag, LinkedIn also offers us the possibility of retargeting so that we can use the collected data to display targeted ads outside this website without you being identified.

Please note that LinkedIn also transfers personal data to third countries outside the European Economic Area that are not covered by an EU adequacy decision. Where such a transfer occurs, LinkedIn uses the standard contractual clauses approved by the European Commission. You can find relevant information at https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=en.

As a member of LinkedIn, you can manage the use of your personal data for advertising purposes in your LinkedIn account settings.

Further information on the collection and use of data by LinkedIn as wellas your rights in this connection and options for protecting your privacy can be found in the LinkedIn Privacy Policy at https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

The use of this function and the associated further processing of your data are based on your consent, Art. 6  para. 1(a) GDPR. You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings here.

 

16.10 EMBEDDED VIDEOS ON OUR WEBSITE

We embed videos from third-party providers on our website (“embedded videos”). When you click on an embedded video on our website, a connection to the servers of the third-party provider is established, within the scope of which we transfer your IP address to the respective third-party provider. This is a technical requirement in order to enable you to call up the selected video.

The transfer takes place on the legal basis of our legitimate interest in a needs-based design of our website and in enabling the provision of the embedded videos requested by you, as well as on the condition that your legitimate interests do not override this (Art. 6 para. 1(f) GDPR).

Third-party providers can also use cookies or similar technologies (e.g. pixel tags) for marketing purposes. Using these technologies, third-party providers can collect information on the websites you have visited, information on your browser or operating system, and further details on the use of our website and combine it with data from other sources. If you are logged in to your own account with the third-party provider, you also enable the third-party provider to assign your surfing behavior directly to your personal profile.

The legal basis for the processing is your consent as per Art. 6 para. 1(a) GDPR. You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings here.

We use embedded videos from the following third-party providers:

16.10.1. Vimeo

Our website uses embedded videos from the vimeo.com site operated by Vimeo, Inc. The site is operated by Vimeo, Inc. 555 West 18th Street NewYork, New York 10011, USA. The data is processed by Vimeo in the US. The European Commission has not adopted an adequacy decision for the US. We have therefore entered into the European Commission-approvedstandard contractual clauses with Vimeo pursuant to Art. 46 para. 2(c)GDPR. They can be accessed at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc at any time.

You can find further information on the processing of data by Vimeo in the Vimeo Privacy Policy (https://vimeo.com/privacy).

16.10.2. YouTube

Our website also uses embedded videos from youtube.com.

For users habitually resident in the European Union, the EuropeanEconomic Area or Switzerland, the operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. For users habitually resident outside the European Union, the European Economic Area and Switzerland, the operator and controller of the website is Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA.

Google may share your information with other Google companies or other third parties. This may lead to a transfer of personal data to the US and to other third countries not covered by an EU adequacy decision. According to Google’s own statements, Google in this case uses EU standard contractual clauses approved by the European Commission to ensure an adequate level of data protection when transferring data to the US and to other third countries not covered by an EU adequacy decision.

You can find further information on the processing of data by Google in the Google Privacy Policy (https://policies.google.com/privacy).

16.11 OUR SOCIAL MEDIA PRESENCE

We operate pages or profiles on different social media platforms. In this context, personal data is processed as described below.

When you interact with us via our social media presence or our posts, we collect and process the information that you provide in this respect, which may include your user name and any profile photo. This is the case, for example, whenever you like, share or retweet a post, comment on it or provide other content. This data is regularly processed on the basis of our legitimate interest in making the corresponding functions available on our social media pages (Art. 6 para. 1(f) GDPR) and, if applicable, on the basis of your consent given to the operator of the social media platform (Art. 6 para. 1(a) GDPR) or your contractual relationship with the operator (Art. 6 para. 1(b) GDPR). Please also note that this content is published on our social media pages in line with your account settings and can be accessed by anyone worldwide.

We may also process the data to be able to receive and process inquiries or messages via our social media pages (Art. 6 para. 1(b) GDPR).

In addition, the operators collect and process your personal data under their own data protection responsibility when you visit our social media pages and/or interact with them or our posts. This is especially true if you are registered with or logged in to the platform. Even if you are not logged in to a platform, the operators collect certain personal data, such as unique identifiers linked to your browser or device, when you accessthe site. Please note that this data may be combined across different platforms and services if they are operated by the same operator. For example, both Facebook and Instagram are operated by Facebook Ireland Limited and Facebook Inc. You can find further information in the operators’ privacy policies, which we link to below.

Specifically, we operate the following social media presences:

16.11.1. Facebook

You can find our Facebook fan page here.

For users outside the US and Canada, Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).For users in the US and Canada, Facebook is operated by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA.

Facebook collects personal data from you when you are logged in to Facebook and visit or like our Facebook page. Facebook may collect pseudonymous usage data from you when you visit our Facebook page even if   you are not registered with Facebook. You can find further information in the Facebook Privacy Policy at https://www.facebook.com/about/privacy and at https://en-gb.facebook.com/legal/terms/information_about_page_insights_data. The privacy policy also provides information on the configuration options for your Facebook account.

Facebook may share your information within the Facebook group of companies (transmission to Facebook in the US) or with other third parties. This may lead to a transfer of personal data to the US and to other third countries not covered by an EU adequacy decision. According to Facebook's own statements, Facebook uses EU standard contractual clauses approved by the European Commission to ensure an adequate level of data protection when transmitting data to the US and to other third countries not covered by an EU adequacy decision.

In addition, as part of operating our Facebook page, we are jointly responsible with Facebook for the processing of Page Insights. Facebook uses Page Insights to analyze user behavior on our Facebook page and provides this information to us in a depersonalized form. For this purpose, we have entered into an agreement with Facebook Ireland regarding our joint responsibility for data protection, which you can access at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. In this agreement, Facebook agrees, among other things, to assume primary responsibility pursuant to GDPR for the processing of Page Insights and to fulfill all obligations under the GDPR with respect to the processing of Page Insights. The processing serves our legitimate economic interests in the optimization and needs-based design of our Facebook fan page, Art. 6 para. 1(f) GDPR.

16.11.2. Instagram

You can find our Instagram page here.

For users outside the US and Canada, Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). For users in the US and Canada, Facebook is operated by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA. You can find the Instagram Data Policy at: https://privacycenter.instagram.com/policy. It also contains information about the configuration options for your account.

Your personal data may also be shared with other Facebook or Instagram companies. This may lead to a transfer of personal data to the US and to other third countries not covered by an EU adequacy decision. In thiscase, Facebook uses the standard contractual clauses approved by the European Commission. The Instagram Data Policy contains further information on this issue, too.

Furthermore, we are jointly responsible with Facebook for the processing of Instagram Insights as part of operating our Instagram page. Facebookuses these Instagram Insights to analyze user behavior on our Instagram page and provides this information to us in a depersonalized form. For this purpose, we have entered into an agreement with Facebook regarding our joint responsibility for data protection, which you can access at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. 
In this agreement, Facebook agrees, among other things, to assume primary responsibility pursuant to GDPR for the processing of Instagram Insights and to fulfill all obligations under the GDPR with respect to the processing of Instagram Insights. The processing serves our legitimate economic interests in the optimization and needs-based design of our Instagram page, Art. 6 para. 1(f) GDPR.

16.11.3. Twitter

You can find our Twitter account here.

For users outside the US, Twitter is operated by Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland. For users in the US, Twitter is operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

You can find the Twitter Privacy Policy at: https://twitter.com/en/privacy. It also provides you with information about the configuration options for your Twitter account.

Twitter also transfers personal data to third countries outside the European Economic Area that are not covered by an EU adequacy decision. Where such a transfer occurs, Twitter uses the standard contractual clauses approved by the European Commission.

We also use Twitter Analytics. Through this function, Twitter International provides us with depersonalized information about the use of our account. This information allows us to analyze and optimize the effectiveness of our Twitter activities. The associated processing is based on our legitimate interest in optimizing our Twitter activities (Art. 6 para. 1(f) GDPR).

16.11.4. Pinterest

You can find our Pinterest page here.

For users outside the US, Pinterest is operated by Pinterest Europe Ltd.,Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. For users in the US, Pinterest is operated by Pinterest Inc. at 651 Brannan Street, San Francisco, CA 94107, USA. You can find the Pinterest Privacy Policy at https://policy.pinterest.com/en/privacy-policy.

Pinterest transfers your personal data to third countries outside the European Economic Area that are not covered by an EU adequacy decision. Where such a transfer occurs, Pinterest takes suitable data protection measures, e.g. by entering into the standard contractual clauses approved by the European Commission. You can obtain further information on this topic in the Pinterest Privacy Policy.

Finally, Pinterest provides us with depersonalized information and analyses regarding the use of our account. This information allows us to analyze and optimize the effectiveness of our Pinterest activities. The associated processing is based on our legitimate interest in optimizing our Pinterest activities (Art. 6 para. 1(f) GDPR).

16.11.5.YouTube

You can find our YouTube page here.

For users in the European Union, the European Economic Area or Switzerland, the operator of YouTube is Google Ireland Limited, GordonHouse, Barrow Street, Dublin 4, Ireland. For users outside the European Union, the European Economic Area and Switzerland, the operator is Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043,USA. You can find the Google Privacy Policy at https://policies.google.com/privacy. It also contains information about the configuration options for your Google account. Please note that your Google account may be used for different Google services (e.g. Gmail, YouTube, Google Search) and that Google may combine personal data about the Google services you use according to your Google account settings. Google may share your information with other Google companies or other third parties. This may lead to a transfer of personal data to the US and to other third countries not covered by an EU adequacy decision. According to Google’s own statements, Google in this case uses EU standard contractual clauses approved by the European Commission to ensure an adequate level of data protection when transferring data to the US and to other third countries not covered by an EU adequacy decision.

Finally, Google provides us with depersonalized information and analyses regarding the use of our account and regarding interactions with our videos. This information allows us to analyze and optimize the effectiveness of our YouTube activities. The processing carried out in this respect is based on our legitimate interest in optimizing our YouTube activities (Art. 6 para. 1(f) GDPR).

 

17 OTHER FORWARDING OF DATA

Alongside the other cases mentioned in this Privacy Policy, your personal data can only be forwarded without your prior and express consent in the following cases:

17.1 SERVICE PROVIDERS

We rely on contractually bound third-party companies and external service providers (“processors”) for the provision of services. In such cases, personal data is forwarded to these processors in order to enable further processing. We carefully select and regularly check these processors in order to ensure that your rights and freedoms are protected. The processors may only use the data for the purposes specified by us and are also contractually obligated by us to only handle the data in accordance with this Privacy Policy and the German data protection laws.

The processors we use fall into the following categories:

• IT service providers
• cloud providers
• server hosters
• software service providers

Data is forwarded to processors on the basis of Art. 28 para. 1 GDPR, alternatively on the basis of our legitimate interest in the economic and technical advantages associated with the use of specialized processors, as well as on the condition that your rights and interests relating to the protection of your personal data do not override this (Art. 6 para. 1(f) GDPR).

In the event that personal data is forwarded to a processor outside the EU or the European Economic Area and no adequacy decision of the European Commission is in place, we guarantee the proper processing of the data through measures such as those described in Art. 46 et seq. GDPR, i.e. by concluding the appropriate contracts or through certifications of the organization receiving the data; for further information, please contact the data protection officer.

17.2 MISCELLANEOUS FORWARDING OF DATA

Alongside the other cases mentioned in this Privacy Policy, your personal data can only be forwarded without your prior and express consent in the following cases:

• If it is necessary in order to clarify unlawful or improper use of the service or for prosecution, personal data will be forwarded to the law enforcement authorities and, if necessary, to injured third parties. However, this only takes place if there are specific indications for unlawful or improper behavior. Data can also be forwarded for the purpose of implementing terms of use or other agreements. In this context, our legitimate interest in processing the data lies in ensuring the proper functioning of our website and the service and, if applicable, in executing, enforcing or defending legal claims.
• Furthermore, we are legally obliged to provide information to certain public bodies upon request. These bodies are law enforcement authorities, authorities that pursue offenses that entail fines, and the financial authorities.
• During the development of our business it is possible that the structure of our company is altered through a change of legal structure, through the foundation of subsidiaries, business units or subdivisions, or is purchased or sold. For transactions of this nature, the customer information is passed on together with the part of the company that is to be transferred. Each time that personal data is forwarded to third parties to the extent described above, we will ensure that this takes place in accordance with this Privacy Policy and the relevant data protection laws.

18 AUTOMATED INDIVIDUAL DECISION-MAKING

We do not use automated processing – including profiling – to reach decisions which have a legal effect on you or significantly affect you in a similar way.

19 RIGHTS OF THE DATA SUBJECT

19.1 YOUR RIGHTS

When the respective prerequisites are in place, you have the following rights: 

• Right of Access: You have a right to request confirmation at any time as to whether we are processing personal data that concerns you. Furthermore, you have the right to access the personal data concerning you that is being processed by us in the scope described in Art. 15 GDPR.
• Right to Rectification: You have a right to the rectification of inaccurate personal data concerning you.
• Right to Erasure: You can also request the erasure of your personal data, e.g. when your data is no longer necessary for the purpose for which it was collected or otherwise processed.
• Right to Restriction of Processing: Furthermore, you have the right to request the restriction of processing of your personal data; in such a case, the data is blocked from any processing. This right applies in particular when the accuracy of the personal data is disputed between you and us.
• Right to Data Portability: If we process your personal data in order to fulfill a contract with you or on the basis of your consent, you also have the right to receive your personal data in a structured, commonly used and machine-readable format, if and to the extent to which you have provided us with the data.

In addition, in accordance with Art. 21 para. 1 GDPR, you can object to data processing on grounds relating to your particular situation. However, this only applies in cases in which we perform data processing in order to fulfill a legitimate interest of Leica Camera AG or a third party on the basis of Art. 6 para. 1(f) GDPR or processing on the basis of Art. 6 para. 1(e) GDPR (performing a task in the public interest or in the exercise of official authority). If you can present such a reason and we cannot assert a compelling, legitimate interest in the further processing, we will no longer process this data for the respective purpose. According to Art. 21 para. 2 GDPR, you also have the right to object at any time to the processing of your data for the purposes of direct marketing, including profiling in connection with such marketing. Following the objection, we will no longer process your personal data for the purposes of direct marketing. The other rights to object described in this Privacy Policy are unaffected by this.

Should you wish to access data concerning your person that is stored by Leica Camera AG, assert your other rights or if you have questions regarding data protection at our company, you can contact us either by mail (Leica Camera AG, Am Leitz-Park 5, 35578 Wetzlar) or by email at data-protection@leica-camera.com. After answering your query, we will delete your query after three years at the end of the respective calendar year.

Furthermore, you have the right to lodge a complaint with a supervisory authority at any time, in particular a supervisory authority in the member state of your place of residence, work or the place at which the suspected infringement took place if you are of the view that the processing of personal data concerning you is in violation of data protection law.

19.2 DATA PROCESSING WHEN EXERCISING YOUR RIGHTS

Lastly, we would like to point out that in the event that you exercise your rights as per Art. 15 to 22 GDPR, we will process the personal data provided by you for the purpose of implementing these rights and providing verification hereof. We will only process data stored for the purpose of preparing for and providing access for this purpose, as well as for the purpose of data protection monitoring, and will otherwise restrict processing in accordance with Art. 18 GDPR. This processing takes place on the legal basis of Art. 6 para. 1(c) GDPR in connection with Art. 15 to 22 GDPR and Art. 34 para. 2 of the German Federal Data Protection Act (BDSG).

20 ERASURE OF DATA

Unless described otherwise in this Privacy Policy, we erase or anonymize your data as soon as it is no longer required for the purposes for which we collected or otherwise processed it as per the above. We generally save your personal data on the website and the associated services for the duration of the usage or contractual relationship plus a period of 30 days during which we keep backup copies following erasure. We also retain your data if we are obliged to do so for legal reasons or if the data is required for longer due to criminal proceedings or for the safeguarding, assertion or implementation of legal claims. Should it be necessary to store data for legal reasons, its processing will be blocked. The data will then no longer be available for further use.