Book a demo

Privacy Policy

Last updated:

Privacy Policy

Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 2 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.

Our privacy policy is structured as follows:

I. Information about us as controllers of your data

II. The rights of users and data subjects

III. Information about the data processing

I. Information about us as controllers of your data

The party responsible for this website (the “controller”) for purposes of data protection law is:

WSoptics GmbH
Südliche Keltenstraße 3 86972 Altenstadt
Germany

  info@wsoptics.de

  +49 8861 92801 00

II. The rights of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right

  • to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
  • to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
  • to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
  • to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
  • to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Server data

For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.

The data thus collected will be temporarily stored, but not in association with any other of your data.

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

Online job applications / publication of job advertisements

We offer you the opportunity to apply for jobs with our company via our website. In the case of these digital applications, we collect your application data electronically in order to process your application.

The legal basis for this processing is §26 Para. 1 S. 1 BDSG in conjunction with Art. 88 Para. 1 GDPR.

If you are hired as a result of the application process, we will store the data you provide during the application process in your personnel file for the purpose of the usual organizational and administrative process, naturally in compliance with further legal obligations.

The legal basis for this processing is §26 Para. 1 S. 1 BDSG in conjunction with Art. 88 Para. 1 GDPR.

If we do not hire you, we will automatically delete the data submitted to us two months after the final decision is made. We will not delete the data, however, if we must store the data for legal reasons such as evidence of equal treatment of applicants, until any legal action is concluded, or four months.

In this case, the legal basis is Art. 6 Para. 1 lit. f) GDPR and §24 Para. 1 No. 2 BDSG. Our legitimate interest lies in any legal defense we may have to mount .

If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect per Art. 7 Para. 3 GDPR with future effect.

Sample Data Private Policy provided by the Law Offices of Weiß & Partner

Use of Google Analytics

We use Google Analytics to analyze website usage. The data obtained from this is used to optimize our website as well as advertising measures. 

Google Analytics is provided to us by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes website usage data on our behalf and is contractually committed to measures to ensure the security and confidentiality of the processed data.

During your website visit, the following data is recorded, among others:

  • Pages viewed
  • The achievement of “website goals” (for example, contact requests and newsletter sign-ups)
  • Your behavior on the pages (for example, dwell time, clicks, scrolling behavior)
  • Your approximate location (country and city)
  • Your IP address (in shortened form, so that no clear assignment is possible)
  • Technical information such as browser, Internet provider, terminal device and screen resolution
  • Source of origin of your visit (i.e. via which website or advertising medium you came to us).

No personal data such as name, address or contact details are ever transferred to Google Analytics.

This data is transferred to Google servers in the USA. We would like to point out that the same level of protection under data protection law cannot be guaranteed in the USA as within the EU. 

Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID with which you can be recognized during future website visits.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.

If you do not agree with the collection, you can prevent it with the one-time installation of the browser add-on to disable Google Analytics or by rejecting cookies via our cookie settings dialog.

Source: traffic3.net

On your first visit we ask which categories you allow: “Functionality” (contact form, meeting booking, videos) and “Analytics” (Google Tag Manager, Google Analytics, HubSpot tracking). Until you allow a category, our website makes no connection to third parties and sets no cookie other than the one that stores your choice.

We store your choice in the cookie cc_cookie for 182 days. The legal basis is Section 25 (2) No. 2 TDDDG and Art. 6 (1) (c) GDPR, since we have to be able to prove your consent. You can change your choice at any time through the “Cookie settings” link and withdraw consent with effect for the future (Art. 7 (3) GDPR); the cookies of a withdrawn category are then deleted.

Contact form and meeting booking (HubSpot)

Our contact form and our booking calendar are provided by HubSpot (HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland; parent company HubSpot, Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA). Both load only once you allow the “Functionality” category; until then we offer a plain link or our email address instead.

When they load, your browser transmits your IP address and technical information to HubSpot. When you submit the form or book a meeting, HubSpot processes the data you enter (for example name, email address, company, message, chosen time) on our behalf so that we can answer your request. Inside the form, HubSpot loads fonts from its own servers and from Google Fonts (Google Ireland Limited).

The form is protected against abuse by Google reCAPTCHA Enterprise (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). To do so, reCAPTCHA evaluates, among other things, your IP address and your behaviour on the page, and sets the cookie _GRECAPTCHA for up to six months.

The legal basis for loading is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG; for handling your request it is Art. 6 (1) (b) GDPR, or our legitimate interest in answering enquiries under Art. 6 (1) (f) GDPR. We delete your request once it has been dealt with, unless statutory retention obligations apply. HubSpot, Inc. and Google LLC are certified under the EU-US Data Privacy Framework; where data is transferred to the USA, the transfer is based on the European Commission’s adequacy decision for it.

Google Tag Manager and HubSpot tracking

If you allow the “Analytics” category, we load Google Tag Manager (Google Ireland Limited), which includes Google Analytics and HubSpot’s tracking script. Until then, Google Consent Mode signals analytics and advertising storage as denied.

Our Google Analytics property is linked to Google’s advertising services. Data is therefore also transmitted to Google servers at stats.g.doubleclick.net and google.de, which Google uses to build advertising audiences.

HubSpot tracking records which pages you visit and sets the cookies __hstc and hubspotutk (up to six months), __hssc (30 minutes) and __hssrc (session) for this. If you later submit our contact form, HubSpot can link these visits to your request.

The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. When you withdraw it, the Google Analytics and HubSpot cookies are deleted.

YouTube videos

On our “About us” page we embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). They load only once you allow the “Functionality” category, and then in privacy-enhanced mode from youtube-nocookie.com. Until then we show only a link to the video on YouTube. On wide screens, a video then starts by itself without sound when you scroll to its entry, and pauses when you scroll on.

When a video loads, your browser transmits, among other things, your IP address, the page you are on and technical information to YouTube. Once a video plays, YouTube may use cookies and similar technologies; if you are signed in to Google, YouTube can link the playback to your account. YouTube processes this data under its own responsibility; see Google’s privacy policy at https://policies.google.com/privacy.

The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Google LLC is certified under the EU-US Data Privacy Framework.