Privacy Policy

1) Controller and general information

1.1 Thank you for visiting our website and for your interest. In the following we explain in plain terms what happens to your personal data when you use our site. Personal data means any information that can be used to identify you as a person.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is: Thomas Kempf, Optik Kempf, Ramsteiner Str. 10, 66882 Spesbach, Germany, phone: 063715941135, email: thomas@optikkempf.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 To protect the transmission of personal data and other confidential content (such as inquiries sent to the controller), this website uses SSL or TLS encryption for security reasons. You can recognise an encrypted connection by the "https://" prefix in the address bar and the lock icon in your browser.

2) Data collection when visiting our website

If you use our website purely for information purposes – that is, you neither register nor otherwise provide us with information – we only collect the data that your browser automatically transmits to our server (so-called "server log files"). In order to display the site to you, we collect the following technically required information:

the page you visited
date and time of access
the amount of data transferred in bytes
the source/referrer from which you reached the page
the browser used
the operating system used
the IP address used (where applicable, in anonymised form)

This processing is based on Art. 6 (1) (f) GDPR; our legitimate interest lies in ensuring and improving the stability and functionality of our website. The data are not passed on or used in any other way. However, should there be concrete indications of unlawful use, we reserve the right to review the server log files retrospectively.

3) Cookies

To make visiting our website pleasant and to enable certain functions, we use cookies – small text files stored on your device. Some of these cookies are deleted again once you close your browser (so-called "session cookies"), while others remain on your device for longer and allow your page settings to be saved (so-called "persistent cookies"). You can check the storage period in the cookie settings of your browser.
Where personal data are processed through individual cookies, this is done in accordance with Art. 6 (1) (b) GDPR to perform a contract, in accordance with Art. 6 (1) (a) GDPR where consent has been given, or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interest in the best possible functionality of the website and a user-friendly, effective design of your visit.
You can configure your browser to inform you about the setting of cookies, to decide on a case-by-case basis, or to reject cookies in certain cases or generally.
Please note that the functionality of our website may be limited if you do not allow cookies.

4) Contacting us

When you contact us – for example via the contact form or by email – we process your personal data solely for the purpose of handling and answering your inquiry, and only to the extent necessary for this. The legal basis is our legitimate interest in answering your inquiry pursuant to Art. 6 (1) (f) GDPR. If your inquiry relates to a contract, Art. 6 (1) (b) GDPR applies as an additional legal basis. We delete your data once it is apparent from the circumstances that the matter in question has been conclusively dealt with – subject to any statutory retention obligations to the contrary.

5) Use of customer data for direct advertising

5.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory detail for sending the newsletter is your email address; any further details are voluntary and are used only to be able to address you personally. For sending the newsletter we use the so-called double opt-in procedure: you will only receive our newsletter after you have expressly consented to its receipt by clicking a verification link sent to the address you provided.

By activating the confirmation link, you consent to the use of your personal data pursuant to Art. 6 (1) (a) GDPR. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, so that any later misuse of your email address can be traced. The data collected during registration are used strictly for the intended purpose. You can unsubscribe from the newsletter at any time, either via the link provided in the newsletter itself or by notifying the controller named above. After you unsubscribe, we will promptly remove your email address from our distribution list, unless you have expressly consented to further use of your data or we reserve a more extensive use that is permitted by law and about which we inform you in this policy.

5.2 Newsletter dispatch via CleverReach
We send our email newsletters via the technical service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany ("CleverReach"), to which we pass on the data you provided when registering. This transfer is based on Art. 6 (1) (f) GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. The data you enter for the purpose of receiving the newsletter (e.g. your email address) are stored on CleverReach servers in Germany or Ireland.
CleverReach uses this information on our behalf to send and statistically evaluate the newsletters. For this evaluation, the newsletters sent by email contain so-called web beacons or tracking pixels – single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message was opened and which links were clicked. By means of so-called conversion tracking it can also be analysed whether, after clicking such a link, a predefined action (e.g. a purchase on our website) took place. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). The data are collected exclusively in pseudonymised form and are not linked to your other personal data; a direct attribution to a person is excluded. These data serve solely the statistical analysis of newsletter campaigns, the results of which we use to better tailor future newsletters to the interests of the recipients.
If you wish to object to the analysis of your data for statistical purposes, you must unsubscribe from the newsletter.
We have concluded a data processing agreement with CleverReach obliging CleverReach to protect our customers' data and not to pass it on to third parties.
Further information on CleverReach's data analysis is available here:
https://www.cleverreach.com/de/funktionen/reporting-und-tracking/
You can view CleverReach's privacy policy here:
https://www.cleverreach.com/de/datenschutz/.

6) Online marketing

6.1 Facebook Pixel for the creation of Custom Audiences (with cookie consent tool)
Within our online offering we use the so-called "Facebook Pixel" of the social network Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
If a user clicks on an advertisement we have placed on Facebook, the Facebook Pixel adds a parameter to the URL of our linked page. Where our site allows the sharing of data with Facebook via the pixel, this URL parameter is written into the user's browser by means of a cookie that our linked page itself sets. This cookie is then read by the Facebook Pixel and enables the data to be forwarded to Facebook.
By means of the Facebook Pixel, Facebook is able to identify the visitors of our online offering as a target group for displaying advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to show the Facebook Ads we place only to those Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in particular topics or products, determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). We also wish to ensure that our Facebook Ads correspond to the potential interest of users and are not perceived as intrusive. Furthermore, we can evaluate the effectiveness of the Facebook advertisements for statistical and market research purposes by tracking whether users were directed to our website after clicking on a Facebook advertisement (so-called "conversion").
The data collected are anonymous for us and do not allow us to draw conclusions about the identity of the users. However, the data are stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display advertisements on and off Facebook.
The data processing operations associated with the use of the Facebook Pixel only take place if you have given your express consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

7) Site functionalities

7.1 Embedding of YouTube videos
This website uses the embedding function of "YouTube" to display and play videos. YouTube belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use the extended data protection mode, which according to the provider stores user information only once a video is actually played. When you start playback of an embedded video, "YouTube" sets cookies in order to collect information about user behaviour. According to "YouTube", these serve, among other things, to record video statistics, improve usability and prevent abuse. If you are logged in to Google, your data are assigned directly to your account when you click on a video. If you do not want this assignment to your YouTube profile, please log out before activating it. You have a right to object to the creation of such user profiles, which you must assert with YouTube. In the course of using YouTube, personal data may also be transmitted to servers of Google LLC in the USA.
Irrespective of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further processing operations beyond our control.
All of the processing operations described above, in particular the reading of information on the device used via the tracking pixel, are only carried out if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without this consent, YouTube videos will not be used during your visit.
You can withdraw your consent at any time with effect for the future. To do so, please deactivate this service in the "cookie consent tool" provided on the website or via the options communicated to you on the website.
Further information on data protection at "YouTube" can be found in the YouTube terms of use at https://www.youtube.com/static?template=terms and in Google's privacy policy at https://www.google.de/intl/de/policies/privacy

7.2 Google reCAPTCHA

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). It helps us to distinguish whether an entry is made by a natural person or improperly by automated processing. We use reCAPTCHA specifically in the contact form; the program required for it is only loaded once you start working with the form – when the page is merely viewed, no transmission to Google takes place. When used, the service transmits your IP address and, where applicable, further data required by Google for reCAPTCHA to Google. The processing is based on Art. 6 (1) (f) GDPR and on our legitimate interest in preventing abuse and spam. In the course of using Google reCAPTCHA, personal data may also be transmitted to servers of Google LLC in the USA.

Further information on Google reCAPTCHA and Google's privacy policy is available at: https://www.google.com/intl/de/policies/privacy/

Insofar as legally required, we have obtained your consent for the processing of your data described above pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future; to do so, please use the option to object described above.

8) Tools and miscellaneous

8.1 Cookie consent tool

In order to obtain effective user consent for cookies and cookie-based applications that require consent, this website uses a so-called "cookie consent tool". It is shown to you when you access the site as an interactive interface on which you can grant consent for specific cookies and/or cookie-based applications by ticking boxes. Through the use of the tool, all cookies and services requiring consent are only loaded once you have granted the corresponding consent. This ensures that such cookies are only set on your device where consent has been given.
The tool itself sets technically necessary cookies in order to store your cookie preferences. As a rule, no personal user data are processed in this context.
If, in individual cases – for example to store, assign or log your cookie settings – personal data (such as the IP address) are nevertheless processed, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in lawful, user-specific and user-friendly consent management for cookies and thus in a lawful design of our website.
A further legal basis is Art. 6 (1) (c) GDPR: as the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding interface on our website.

9) Rights of the data subject

9.1 Applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the cited legal basis for the respective conditions of exercise:

right of access pursuant to Art. 15 GDPR;
right to rectification pursuant to Art. 16 GDPR;
right to erasure pursuant to Art. 17 GDPR;
right to restriction of processing pursuant to Art. 18 GDPR;
right to notification pursuant to Art. 19 GDPR;
right to data portability pursuant to Art. 20 GDPR;
right to withdraw consent given pursuant to Art. 7 (3) GDPR;
right to lodge a complaint pursuant to Art. 77 GDPR.

9.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA WITHIN THE SCOPE OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THIS OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

10) Duration of storage of personal data

How long we store personal data depends on the respective legal basis, the purpose of processing and – where applicable – the relevant statutory retention period (e.g. retention periods under commercial and tax law).

If we process personal data on the basis of express consent pursuant to Art. 6 (1) (a) GDPR, we store these data until you withdraw your consent.

Where statutory retention periods exist for data processed in the context of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, these data are routinely deleted after the retention periods have expired – provided they are no longer required for the performance or initiation of a contract and there is no longer a legitimate interest in their continued storage.

If we process personal data on the basis of Art. 6 (1) (f) GDPR, we store these data until you exercise your right to object pursuant to Art. 21 (1) GDPR – unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Data that we process for the purpose of direct advertising on the basis of Art. 6 (1) (f) GDPR are stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this policy regarding specific processing situations, stored personal data are otherwise deleted as soon as they are no longer required for the purposes for which they were collected or otherwise processed.