In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
- Person responsible for data processing
The responsible party pursuant to Art. 4 (7) of the EU General Data Protection Regulation (DSGVO) is the
eyes and more GmbH
Hindenburgstrasse 49
22297 Hamburg
- How to contact the data protection officer
You can reach our data protection officer at datenschutz@eyesandmore.com or our postal address with the addition of “the data protection officer”.
- Your rights
You have the following rights in relation to personal data relating to you:
3.1 General rights
You have the right to information, correction, deletion, restriction of processing, objection to processing and data portability. If processing is based on your consent, you have the right to revoke this with effect for the future.
3.2 Rights in the case of data processing according to legitimate interest
Pursuant to Article 21(1) DSGVO, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) DSGVO (data processing in the public interest) or on the basis of Article 6(1)(f) DSGVO (data processing for the purposes of safeguarding a legitimate interest); this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
3.3 Rights in the case of direct marketing
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing in accordance with Article 21(2) of the GDPR; this also applies to profiling insofar as it is related to such direct marketing.
In the event of your objection to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.
3.4 Right to complain to a supervisory authority
You also have the right to complain to a competent data protection supervisory authority about our processing of your personal data.
- Collection of personal data when visiting our website
When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security. The legal basis for this is Art. 6 para. 1 f DSGVO:
-IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system, and its interface, language and version of the browser software.
- Contacting us by e-mail or contact form
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. Insofar as we request input via our contact form that is not required for contacting us, we have always marked this as optional. We use this information to specify your enquiry and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 Para. 1 a DSGVO. Insofar as this involves information on communication channels (e.g. e-mail address, telephone number), you also consent to us contacting you via this communication channel, if necessary, in order to answer your request. You can, of course, revoke this consent at any time for the future.
We delete the data accruing in this context after the storage is no longer necessary, or restrict the processing if there are legal retention obligations.
- Newsletter
6.1 General information
With your consent according to Art. 6 para. 1 a DSGVO, you can subscribe to our newsletter, with which we inform you about our current offers. For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter.
In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
Mandatory information for sending the newsletter is your e-mail address and title. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 a DSGVO.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email or by contacting the data protection officer stated above.
6.2 Newsletter Tracking
We would like to point out that when we send out the newsletter, we measure its success and evaluate your user behaviour. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels. These give us information about when and how you access them. For the analyses, we link the above-mentioned data and the web beacons with your e-mail address. The data obtained in this way enables us to tailor the newsletter to your individual interests. We collect basic information such as opening rate as well as information about when you read our newsletters, which links you click on in them and infer your personal interests from this. The legal basis for this data processing is your consent, Art. 6 para. 1 sentence 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by unsubscribing from our newsletter by clicking on the “Unsubscribe” button. Moreover, such tracking is not possible if you have deactivated the display of images by default in your e-mail programme. In this case, the newsletter will not be displayed to you in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.
- Registration and portal use
You have the option of registering with us and creating a customer account. For registration, we collect and store the following data from you:
Salutation
First name
Last name
Password
Once you have registered, you will receive personal, password-protected access and will be able to view and manage the data you have entered. Registration is voluntary, but may be a prerequisite for using our services.
If you use our portal, we will store your data required for the fulfilment of the contract, if applicable also information on the method of payment, until you finally delete your access. Furthermore, we store the voluntary data you provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all details in the protected customer area. The legal basis is Art. 6 Para. 1 a, b and f DSGVO.
- Online orders – shop
If you place an online order on our website, we collect various data required for the conclusion of the contract. The legal basis is the conclusion and execution of a contract according to Art. 6 para. 1 b DSGVO. The data is stored for the duration of the contract and in accordance with legal obligations. For payment processing, we use various payment service providers, which are always identified and directly accept your entries and are thus recipients of your personal data collected in connection with the payment process. The legal basis for the involvement of payment service providers is the processing of the contract in accordance with Art. 6 Para. 1 b DSGVO. Storage for the purpose of payment takes place for the duration of the payment processing.
- Applicant portal
You can use the applicant portal to apply for a job with us and submit all the necessary information and documents. Use of the applicant portal is voluntary; if you do not wish to submit your application online, you can also send us your application by other means, for example by e-mail or post.
You have the option of uploading your application documents – in particular your CV – to our applicant portal. In this respect, when you create an account for the use of the applicant portal, you will be asked to provide various mandatory details, namely your title, your name (first name and surname) and your contact details (telephone number, postal address and e-mail address). This data is marked as mandatory. All other information is requested on a voluntary basis. Finally, you have the option of applying to us by means of a video in which you can introduce yourself personally. It is up to you to decide which personal data you disclose.
When we receive an application via the applicant portal, your documents will be forwarded electronically to the relevant employees at our company. Your application will not be forwarded to third parties for their own use; however, we will forward the application to the franchisee responsible if you have applied for a position at a franchisee’s location. We may also involve service providers to support the application process, who will then act as processors on our behalf, for example to organise interviews or to conduct an assessment centre. If you have applied for an advertised position, your application documents will be automatically deleted six months after the end of the recruitment process, provided that no other legitimate interests prevent deletion. Such legitimate interests in this sense are, for example, obligations to provide evidence in proceedings under the General Equal Treatment Act (AGG). In the case of an application without reference to an advertised position (unsolicited application), the application will be retained for as long as there is a possibility that the application may be of interest. The account you set up will itself remain in existence even if the application documents are deleted, but it can be deleted separately.
You have the option at any time to request the deletion of your application or to delete the account you created altogether, even before the expiry of the retention periods provided for. In the event of a successful application, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the legal requirements. In all other cases, the legal basis for storing your applicant data is your consent in accordance with Art. 6 Para. 1 lit. a) DSGVO.
- Online presence and website optimisation
10.1 Use of cookies
In order to make visiting our website more attractive and to enable the use of certain functions (e.g. ordering), we use so-called cookies on various pages. When you call up our website, you will be informed by means of an information banner about the use of cookies on this website and our data protection declaration will be pointed out to you once again. On our website, we distinguish between required cookies, statistics cookies and marketing cookies. Since you cannot use our website properly without the required cookies, these are activated by default. However, we only set statistics and marketing cookies with your consent, which you can give and also revoke here.
The legal basis for data processing when cookies are used is, in the case of necessary cookies, on the one hand our legitimate interest in technical functionality and, on the other hand, your consent.
What are cookies?
Cookies are small text files that are stored on your computer when you visit certain websites. We use cookies, for example, to keep track of what you have in your shopping basket, to submit contact forms and to remember you when you return to our site. Please note that cookies cannot harm your computer. To learn more about cookies in general and how to manage them, visit www.aboutcookies.org.
Manage cookies
Most browsers are set so that cookies are automatically activated. However, these settings can be changed http://www.aboutcookies.orgby you. For example, you can usually set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.
Our website cannot be used properly without the necessary cookies, as these are required for processes such as ordering. In order to be able to purchase products, you must always have cookies enabled in your browser. If you disable cookies, you will be able to browse the website, but you will not be able to submit contact forms or place orders.
10.2 Web analysis with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, 1600. Google Analytics uses cookies, which enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
The eyes + more website uses Google Analytics with the extension “anonymize IP”. This means that your IP address collected by the Google Analytics cookie is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of eyes+more, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a DSGVO. You can revoke this consent at any time by adjusting your cookie preferences as described above. In addition, you can delete cookies already stored at any time in your browser settings. If you do this, you may no longer be able to use all the functions of the websites to their full extent. For more information on terms of use and data protection, please visit www.google.com/analytics/terms/de.html or www.google.com/intl/de/analytics/privacyoverview.html.
10.3 Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC). If you have given your consent, Google will link your web and app browsing history with your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you log in with your Google account.
To support this feature, Google Analytics collects Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad targeting. You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/. The aggregation of the collected data in your Google account is based solely on your consent, which you can give or withdraw at Google (Art. 6 para. 1 lit. a DSGVO). In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of the data is also based on your consent pursuant to Art. 6 (1) lit. a DSGVO. Further information and the data protection provisions can be found in Google’s data protection declaration at: https://www.google.com/policies/technologies/ads/.
10.4 Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising programme of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). Within the framework of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user’s computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we will be able to recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a DSGVO. You can revoke this consent at any time by adjusting your cookie preferences as described above. You can find more information on Google AdWords and Google conversion tracking in Google’s privacy policy: https://www.google.de/policies/privacy/.
10.5 Google reCaptcha
We use reCaptcha v3 on our websites. reCaptcha is an offer from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and serves to prevent improper automated entries in web forms and thus to protect the technical systems of the hoster. We use it for this purpose and this is also our legitimate interest, Art. 6 para. 1 f DSGVO.
When you call up one of our websites in which reCaptcha is integrated, a connection to Google’s servers is established. A reCaptcha cookie is set. This cookie evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user. This data is transferred to Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can find Google’s privacy policy and terms of use here: https://www.google.com/policies/privacy/ and here: https://policies.google.com/terms.
10.6 Facebook Pixel
Our website uses the visitor action pixel from Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion measurement. This makes it possible to track the behaviour of page visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy. This enables Facebook to serve advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.
You can find further information on protecting your privacy in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
You can also deactivate the “Custom Audiences” remarketing function in the settings section for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.
If you do not have a Facebook account, you can disable Facebook’s usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
10.7 Hotjar
This website uses Hotjar, an analysis software of Hotjar Ltd, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). With Hotjar it is possible to measure and analyse the usage behaviour on our website. The information generated by the “tracking code” and “cookie” about your visit to our website is transmitted to the Hotjar server in Ireland and stored there. The following information is collected by the tracking code: Device dependent data.
The following information may be recorded by your device and browser:
Your device’s IP address (collected and stored in an anonymised format).
Your email address, including your first and last name, if you have provided it to us through our website
Screen size of your device
Device type and browser information
Geographical location (country only)
The preferred language to display our website
Log data
The following data is automatically generated by our servers when Hotjar is used:
Referring domain
Visited pages
Geographical location (country only)
The preferred language used to display our website
Date and time when the website was accessed
Hotjar will use this information to evaluate your use of our website, compile usage reports, and provide other services relating to website usage and internet evaluation of the website. Hotjar also uses services provided by third party companies, such as Google Analytics and Optimizely, to provide services. These third parties may store information that your browser sends as part of the website visit, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please see their respective privacy statements. You can prevent the collection of data by Hotjar here. This tool is used exclusively with your consent in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time by changing your cookie settings as described above.
10.8 Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google’s servers. This informs Google that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.
If your browser does not support web fonts, a standard font from your computer will be used.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.
10.9 Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
Google Maps is used in the interest of an appealing presentation of our online offers and to make it easy to find the places we indicate on the website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.
More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.
10.10 Vimeo
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.
For more information on the handling of user data, please see Vimeo’s privacy policy at: https://vimeo.com/privacy.
10.11 Fonts.com
This website uses “fonts.com”, a font service provided by Linotype GmbH (“fonts.com”), Werner-Reimers-Straße 2-4, 61352 Bad Homburg (“fonts.com”). Each time this website is called up, files are loaded from a “fonts.com” server to display texts in a particular font. In the process, your IP address may be transmitted to a “fonts.com” server and stored as part of the usual weblog. The further processing of this information is the responsibility of “fonts.com”, please refer to the data protection information of “fonts.com” for the corresponding conditions and setting options. The design of our website constitutes a legitimate interest pursuant to Art. 6 Para. 1 lit. f DSGVO.
- Data transfer
Your data will be transferred to third parties if we are legally obliged to do so, if the transfer of data is necessary for the performance of the contractual relationship, if you have expressly consented to the transfer of your data or if the transfer is in accordance with our legitimate interests. External service providers and partner companies, such as online payment providers or the shipping company commissioned with the delivery, only receive your data insofar as this is necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers come into contact with your personal data, we ensure within the framework of commissioned processing pursuant to Art. 28 DSGVO that they comply with the provisions of the data protection laws in the same manner. Certain processing is carried out by companies within the Hans Anders Group. Therefore, data is regularly transferred within the group of companies. As a rule, the transfer takes place on the basis of a contract processing agreement. In other cases, for example for the analysis of aggregated data for the purpose of market research, Art. 6 para. 1 lit. f DSGVO is the legal basis for the transfer, whereby our legitimate interest lies in the efficient design of our processes. We attach importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection is established at the recipient before transferring your personal data. This means that a level of data protection comparable to the standards within the EU is achieved via EU standard contracts or similar measures.
- Data security
We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress.
- Competitions
13.1 General information
When you enter our competitions, we process the following personal data about you:
Your first and last name
A salutation (Mr/Mrs)
Your postal address
Your e-mail address.
We use this data exclusively to conduct the competitions, to notify the winners by e-mail and to send the prizes by post. The data processing is based on Art. 6 para. 1 lit. b DSGVO. We will delete your data when it is no longer required for the aforementioned purposes. This is usually the case when the competition has been completed and the prizes have been sent to the winners.
13.2 Newsletter for competitions
If you subscribe to our newsletter by ticking the appropriate box on the competition card or in the online form, we will store your e-mail address in our distribution list. We use this exclusively to send you our newsletter. This data processing is based on your consent in accordance with Art. 6 Para. 1 lit. a, 7 DSGVO. You can revoke your consent at any time by clicking on the “unsubscribe” link in the newsletter.
- Statistical evaluations
Eyes and more also processes the data mentioned under 7. and 8. in order to create statistical evaluations. These serve the purpose of improving and further developing the products and services offered by us, in particular with regard to product features, service quality and marketing. For the preparation of the evaluations, personal data will only be used to the extent necessary for the aforementioned purposes. As far as possible, the data will be pseudonymised or anonymised before use. The results of the evaluations are used exclusively in aggregated form and are also passed on in this form and for the aforementioned purposes to other companies affiliated with eyes and more within the Hans Anders Group, if applicable. The legal basis for the processing of the data described above is Art. 6 para. 1 p. 1 lit. f DSGVO.
Status March 2021
