Data protection is a matter of trust, and your trust is important to us. To ensure you feel secure when visiting our websites, we strictly adhere to legal regulations when processing your personal data and would like to inform you here about our data collection and use. The following privacy policy explains which data is collected from you on our websites, how we process and use this data, and who you can contact with any questions.
Please note that data transmission over the internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Table of contents
1. Objectives and responsible body
2. Basic information on data processing
3. Processing of personal data
4. Collection of access data
5. Credit check
6. Cookies & Audience Measurement
7. Google Analytics
8. Google Re/Marketing Services
9. Facebook Social Plugins
10. Facebook Remarketing
11. Twitter buttons
12. Pinterest buttons
13. +1 button from Google+
14th Newsletter
15. Product recommendation via email
16. Use of your data for advertising purposes
17. Sweepstakes, market and opinion research
18. Integration of third-party services and content
19. User rights and deletion
20. Changes to the Privacy Policy
1. Objectives and responsible body
This privacy policy explains the nature, scope, and purpose of the processing (including collection, processing, and use, as well as obtaining consent) of personal data within our online services and the associated websites, functions, and content (hereinafter collectively referred to as "online services" or "website"). This privacy policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) used to access the online services.
The responsible entity for the collection, processing, and use of your personal data within the meaning of the German Federal Data Protection Act (BDSG) is Eyeworks GmbH (hereinafter referred to as Eyeworks). Eyeworks GmbH, as the responsible entity, can be contacted using the contact details provided below:
– By mail to: Eyeworks GmbH, Hauptstrasse 52, 8582 Rosental
– Email: datenschutz@lasnik.at
The term "user" encompasses all customers and visitors of our online services. The terminology used, such as "user," is to be understood as gender-neutral.
2. Basic information on data processing
We process users' personal data only in compliance with the applicable data protection regulations and in accordance with the principles of data minimization and data avoidance. This means that user data is only processed if there is a legal basis for doing so, in particular if the data is necessary for the provision of our contractual services and online services, or if processing is required by law, or if consent has been given.
We implement organizational, contractual and technical security measures in accordance with the state of the art to ensure compliance with data protection laws and to protect the data we process against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.
If, within the scope of this privacy policy, content, tools, or other resources from other providers (hereinafter collectively referred to as "third-party providers") are used and their registered office is located abroad, it must be assumed that data will be transferred to the countries where these third-party providers are based. The transfer of data to third countries takes place either on the basis of legal permission, user consent, or specific contractual clauses that guarantee the legally required level of data security.
3. Processing of personal data
In addition to the uses expressly stated in this privacy policy, personal data will be processed for the following purposes based on legal permissions or user consent:
– The provision, execution, maintenance, optimization and security of our services and user services;
– Ensuring effective customer service and technical support.
We only transmit user data to third parties if this is necessary for billing purposes (e.g., to a payment service provider) or for other purposes if these are necessary to fulfill our contractual obligations to the users (e.g., providing addresses to suppliers).
When you contact us (via contact form or email), the information provided by the user will be stored for the purpose of processing the request and in case of follow-up questions.
Personal data will be deleted once it has fulfilled its purpose and there are no legal obligations to retain it.
4. Collection of access data
We collect data about every access to the server on which this service is located (so-called server log files). Access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
We use log data without associating it with the user's identity or creating any other profiles, in accordance with legal regulations, solely for statistical analysis for the purposes of operating, securing, and optimizing our online services. However, we reserve the right to subsequently review the log data if there is a legitimate suspicion of unlawful use based on concrete evidence.
5. Credit check
We conduct a credit check before finalizing the purchase agreement. This is done to offer you a selection of different payment methods. The credit check also serves to protect us against payment defaults. Furthermore, it serves your and our security by preventing fraud and other criminal offenses. As part of the credit check, we review all available data to determine which payment methods can be offered for an order. This includes checking all previous orders in your customer account. We also verify whether the delivery address differs from the billing address, whether it is a new delivery address, or whether the order is to be delivered to a parcel locker. In addition to the data we already have, we also require data from external service providers. For this purpose, we transmit the personal data required for a credit check (for B2C customers, first and last name, your address, and, if applicable, your date of birth; for B2B customers, company name, company registration number, address, and VAT number) to the following credit service providers:
CRIF GmbH, Diefenbachgasse 35-39, 1150 Vienna
These credit rating agencies use the aforementioned data we transmit to them to assess your creditworthiness for each order using mathematical-statistical methods (scoring). Furthermore, the credit rating agencies use the aforementioned data for other companies (e.g., other online retailers) for address verification and identity checks, as well as for related scoring applications. Your address data is also included in the calculation of the probability score. This may, under certain circumstances, lead to conclusions about serious negative credit history. If you do not agree with the payment method(s) offered to you, you can inform us using the contact details provided in section 1. We will then review the decision taking your perspective into account. You can revoke your consent at any time with effect for the future by contacting us using the contact details provided in section 1. You can also obtain information about the stored data from us and from our credit rating agency (at the addresses mentioned above).
To offer you Klarna's payment options, we will transmit personal data, such as contact and order details, to Klarna. This allows Klarna to assess whether you are eligible for the payment options offered by Klarna and to tailor these options to your needs. General information about Klarna can be found here . Your personal data will be processed by Klarna in accordance with applicable data protection regulations and as described in Klarna's privacy policy .
6. Cookies & Audience Measurement
Cookies are pieces of information that are transferred from our web server or third-party web servers to users' web browsers and stored there for later retrieval. Users are informed about the use of cookies for pseudonymous audience measurement within this privacy policy.
When you first visit our website, a cookie banner appears where, after clicking the “Settings” button, you can agree to or reject the setting of cookies requiring consent (active consent – opt-in).
If you wish to change your cookie settings at a later time, you will find a gear icon in the bottom left corner of our website. You can withdraw your consent at any time by opting out.
Essential cookies are necessary for using our websites; therefore, you cannot disable these cookies. If users do not wish to have cookies requiring consent stored on their computer, they are asked to generally disable the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. Disabling cookies may lead to functional limitations of this online service.
It is possible to manage many online advertising cookies from companies via the US website http://www.aboutads.info/choices or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/.
7. Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google uses cookies. The information generated by the cookie about your use of the website is generally transmitted to and stored on a Google server in the USA.
Google will use this information on our behalf to evaluate users' use of our online services, to compile reports on activity within these online services, and to provide us with other services related to the use of these online services and internet usage. Pseudonymous user profiles may be created from the processed data.
We only use Google Analytics with IP anonymization enabled. This means that Google shortens the IP address of users within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by adjusting their browser settings; furthermore, users can prevent Google from collecting and processing data generated by the cookie and related to their use of the online service by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more information about Google's use of data for advertising purposes, settings and opt-out options, please visit the following Google websites: https://www.google.com/intl/de/policies/privacy/partners ("How Google uses data when you use our partners' sites or apps"), http://www.google.com/policies/technologies/ads ("How Google uses data for advertising"), http://www.google.de/settings/ads ("Manage the information Google uses to show you ads") and http://www.google.com/ads/preferences ("Control the ads you see").
8. Google Re/Marketing Services
We use the marketing and remarketing services (hereinafter referred to as “Google Marketing Services”) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).
Google Marketing Services allow us to display more targeted advertisements on and for our website, presenting users only with ads that potentially match their interests. For example, if a user is shown ads for products they have previously viewed on other websites, this is called "remarketing." For this purpose, when our website and other websites using Google Marketing Services are accessed, Google executes a code and integrates so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") into the website. These tags store an individual cookie, i.e., a small file, on the user's device (comparable technologies may also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, and googleadservices.com. This file records which websites the user visits, which content they are interested in, and which offers they click on. It also includes technical information about the browser and operating system, referring websites, visit time, and other information about the use of the online service. The user's IP address is also recorded. Regarding Google Analytics, we would like to inform you that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and is only transmitted in full to a Google server in the USA and shortened there in exceptional cases. The IP address is not combined with user data from other Google services. The aforementioned information may also be combined with information from other sources. When the user subsequently visits other websites, they may be shown advertisements tailored to their interests.
User data is processed pseudonymously within the framework of Google marketing services. This means that Google does not store or process, for example, the name or email address of users, but rather processes the relevant data on a cookie-related basis within pseudonymous user profiles. From Google's perspective, this means that ads are not managed and displayed for a specifically identified person, but rather for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has explicitly permitted Google to process the data without this pseudonymization. The information collected about users by DoubleClick is transmitted to Google and stored on Google's servers in the USA.
Among the Google marketing services we use is the online advertising program "Google AdWords." With Google AdWords, each AdWords customer receives a different "conversion cookie." Therefore, cookies cannot be tracked across the websites of different AdWords customers. The information collected using the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users.
We integrate third-party advertisements based on the Google marketing service “DoubleClick”. DoubleClick uses cookies, which enable Google and its partner websites to display ads based on users' visits to this website and other websites on the internet.
We also integrate third-party advertisements based on the Google marketing service "AdSense". AdSense uses cookies, which enable Google and its partner websites to display ads based on users' visits to this website or other websites on the internet.
Another Google marketing service we use is the “Google Tag Manager”, which allows us to integrate other Google analysis and marketing services into our website (e.g. “AdWords”, “DoubleClick” or “Google Analytics”).
Further information on Google's use of data for marketing purposes can be found on the overview page: https://www.google.com/policies/technologies/ads, and Google's privacy policy is available at https://www.google.com/policies/privacy.
If you wish to object to data collection by Google marketing services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.
9. Facebook Social Plugins
Our website uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins are recognizable by one of the Facebook logos (a white “f” on a blue tile, the terms “Like” or “Gefällt mir”, or a “thumbs up” icon) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
When a user accesses a feature of this online service that contains such a plugin, their device establishes a direct connection to Facebook's servers. The plugin's content is transmitted directly from Facebook to the user's device and integrated into the online service. Usage profiles of users can be created from the processed data. We therefore have no control over the scope of data that Facebook collects using this plugin and are informing users accordingly, based on our current knowledge.
By integrating these plugins, Facebook receives information that a user has accessed the corresponding page of the website. If the user is logged into Facebook, Facebook can associate the visit with their Facebook account. When users interact with the plugins, for example, by clicking the Like button or leaving a comment, the corresponding information is transmitted directly from their device to Facebook and stored there. Even if a user is not a member of Facebook, it is still possible that Facebook will learn and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.
The purpose and scope of data collection and the further processing and use of data by Facebook, as well as the related rights and settings options for protecting users' privacy, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.
If a user is a Facebook member and does not want Facebook to collect data about them via this website and link it to their Facebook profile data, they must log out of Facebook and delete their cookies before using our website. Further settings and options to object to the use of data for advertising purposes are available within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. These settings are platform-independent, meaning they apply to all devices, such as desktop computers and mobile devices.
10. Facebook Remarketing
Within our online services, we use so-called "Facebook pixels" from the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). With the help of the Facebook pixel, Facebook can identify visitors to our website as a target group for displaying advertisements, so-called "Facebook ads." Accordingly, we use the Facebook pixel to ensure that the Facebook ads we place are only shown to Facebook users who have also demonstrated an interest in our website. In other words, with the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interests of users and are not perceived as intrusive. Furthermore, with the help of the Facebook pixel, we can track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad.
The Facebook pixel is integrated directly by Facebook when you visit our website and may store a so-called cookie, i.e., a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be recorded in your profile. The data collected about you is anonymous to us and therefore does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible. Facebook's data processing is governed by its Data Policy. Accordingly, you can find further information on how the remarketing pixel works and on the display of Facebook ads in general in Facebook's Data Policy: https://www.facebook.com/policy.php.
You can object to the collection of data by the Facebook pixel and the use of your data for displaying Facebook ads. To do so, you can visit the page set up by Facebook and follow the instructions there regarding the settings for interest-based advertising: https://www.facebook.com/settings?tab=ads or declare your objection via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. The settings are platform-independent, meaning they apply to all devices, such as desktop computers or mobile devices.
11. Twitter buttons
We use buttons from the Twitter service. These buttons are provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They are recognizable by terms such as "Twitter" or "Follow" or by a stylized blue bird. Using these buttons, you can share a post or webpage from this website on Twitter or follow the provider on Twitter.
When a user visits a page on this website that contains such a button, their browser establishes a direct connection to Twitter's servers. The content of the Twitter button is transmitted directly from Twitter to the user's browser. We therefore have no influence on the scope of data that Twitter collects using this plugin and are informing users according to our current knowledge. According to this information, only the user's IP address and the URL of the respective webpage are transmitted when the button is accessed, and this data is not used for any purpose other than displaying the button.
Further information can be found in Twitter's privacy policy at http://twitter.com/privacy.
12. Pinterest buttons
We use the "Pin It" buttons of the Pinterest service, http://pinterest.com. These buttons allow users to share our articles or web pages on their Pinterest boards.
When a user visits a website containing a “Pin It” button, their browser establishes a direct connection to Pinterest's servers. The content of the “Pin It” button is then transmitted directly from Pinterest to the user's browser. We therefore have no control over the scope of data that Pinterest collects using the “Pin It” button and are informing users accordingly, based on our current understanding. According to this understanding, only the user's IP address and the URL of the respective website are transmitted, and this data is used solely for displaying the “Pin It” button and sharing the content.
Further information can be found in Pinterest's privacy policy at http://pinterest.com/about/privacy/.
13. Google+
We use the buttons of the social network Google+ (e.g. “+1” button), which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
When a user visits a page of this online service that contains such a button, the browser establishes a direct connection to Google's servers. The content of the button is transmitted directly from Google to the user's browser and integrated into the website. The provider therefore has no influence on the scope of data that Google collects via these buttons.
According to Google, no personal data is collected unless the button is clicked. Only for logged-in Google+ members is such data, including the IP address, collected and processed.
Further information on how Google processes your data can be found on the overview page: https://www.google.com/policies/technologies/ads/, Google's privacy policy is available at https://www.google.com/policies/privacy/.
If you wish to object to data collection by Google marketing services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences/.
14th Newsletter
The following information explains the content of our newsletter, the registration, distribution, and statistical evaluation procedures, as well as your rights to object. By subscribing to our newsletter, you agree to receive it and to the procedures described.
Newsletter content: We only send newsletters, emails, and other electronic notifications containing promotional information (hereinafter "newsletters") with the recipient's consent or where legally permitted. If the newsletter's content is specifically described during the registration process, this description is decisive for the user's consent. Otherwise, our newsletters contain the following information: "Events, our products, product offers, promotions, and general information about our company."
Double opt-in and logging: Subscription to our newsletter uses a double opt-in process. This means that after registering, you will receive an email asking you to confirm your subscription. This confirmation is necessary to prevent anyone from subscribing using someone else's email address. Newsletter subscriptions are logged to document the registration process in accordance with legal requirements. This includes recording the time of registration and confirmation, as well as the IP address. Changes to your data stored with the email service provider are also logged.
Email service provider: Newsletters are sent by "Werbeagentur Morré, Johann-Kamp-Platz 1, 8074 Raaba-Grambach" (hereinafter referred to as "email service provider"). You can view our email service provider's privacy policy at https://agenturmorre.at/datenschutz.
The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on the servers of the email service provider. The email service provider uses this information to send and analyze the newsletters on our behalf. Furthermore, according to its own information, the email service provider may use this data to optimize or improve its own services, for example, for the technical optimization of newsletter delivery and display, or for business purposes, such as determining the countries of origin of the recipients. However, the email service provider does not use the data of our newsletter recipients to contact them directly or to share it with third parties.
Registration details: To subscribe to the newsletter, simply provide your email address. Optionally, we ask you to provide the following information: "First and last name and address for newsletter personalization. Date of birth and gender to tailor the newsletter content to our readers' interests."
Statistical Data Collection and Analysis – The newsletters contain a so-called "web beacon," i.e., a pixel-sized file that is retrieved from the email service provider's server when the newsletter is opened. During this retrieval, technical information such as browser and system details, as well as your IP address and the time of retrieval, are collected. This information is used to technically improve the services based on the technical data or to analyze target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. The statistical data collection also includes determining whether the newsletters are opened, when they are opened, and which links are clicked. While this information can be technically associated with individual newsletter recipients, it is neither our intention nor that of the email service provider to monitor individual users. Rather, the analyses serve to help us understand our users' reading habits and to tailor our content accordingly, or to send different content based on our users' interests.
Cancellation/Revocation – You can unsubscribe from our newsletter at any time, i.e., revoke your consent. This simultaneously revokes your consent to its distribution by the email service provider and the statistical analyses. A separate revocation of the distribution by the email service provider or the statistical analysis is unfortunately not possible. You will find a link to unsubscribe at the end of each newsletter.
15. Product recommendation via email
If you have made a purchase from Eyeworks GmbH, you will regularly receive product recommendations from us via email. You will receive these product recommendations regardless of whether you have subscribed to our newsletter. We want to provide you with information about products from our range that might be of interest to you based on your previous purchases. If you no longer wish to receive product recommendations or any promotional messages from us, you can object at any time without incurring any costs other than standard transmission fees. A written notification to the contact details listed in section 1 (e.g., email, fax, letter) is sufficient. Of course, you will also find an unsubscribe link in every email.
16. Use of your data for advertising purposes
In addition to processing your data to fulfill your purchase at Eyeworks GmbH, we also use your data for the following purposes: to continuously improve your shopping experience and make it more user-friendly and personalized; to communicate with you about your orders, as well as about specific products or marketing campaigns; and to recommend products or services that may be of interest to you. For this purpose, we use existing information such as email read receipts, information about the device you are using, your internet connection, operating system and platform, the date and time of your visit to our website, the products you have viewed, and information we have received from you (including automatically transmitted or generated information). We also use your order history. You can object to the use of your personal data for advertising purposes at any time, either entirely or for specific measures, without incurring any costs other than the standard transmission fees. A written notification to the contact details listed in section 1 (e.g., email, letter) is sufficient.
17. Competitions, market and opinion research
For prize draws, we use your data to notify winners and to advertise our offers. Detailed information can be found in the terms and conditions of the respective prize draw. We also use your data for market and opinion research. Data collected for market and opinion research is not used for advertising purposes. Detailed information (especially regarding the evaluation of your responses) can be found within the respective survey or wherever you provide your information. Your survey responses will not be shared with or published by third parties. You can object to the use of your data for market and opinion research at any time, either entirely or for specific purposes, without incurring any costs other than standard transmission fees. A written notification to the contact details listed in section 1 (e.g., email, letter) is sufficient. Of course, you will also find an unsubscribe link in every survey email.
18. Integration of third-party services and content
It is possible that our online services may include content or services from third-party providers, such as maps or fonts from other websites. The integration of third-party content always requires that these providers are aware of users' IP addresses, as they cannot send the content to users' browsers without them. The IP address is therefore necessary for displaying this content. Furthermore, these third-party providers may set their own cookies and process user data for their own purposes.
Usage profiles of users will be created from the processed data. We will use this content in a way that minimizes data collection and avoids unnecessary data processing, and we will select reliable third-party providers with regard to data security.
The following overview lists third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and, in some cases, the opt-out options already mentioned here:
– External fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”). Google Fonts are integrated by making a server request to Google (usually in the USA). Privacy policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.
– Maps from the third-party service “Google Maps” provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.
– Videos from the platform “YouTube” of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.
19. User rights and data deletion
Users have the right to request, free of charge, information about the personal data we have stored about them.
In addition, users have the right to rectification of inaccurate data, withdrawal of consent, blocking and erasure of their personal data, and the right to lodge a complaint with the competent supervisory authority in the event of unlawful data processing.
The data we store will be deleted as soon as it is no longer required for its intended purpose and there are no legal obligations to retain it.
20. Changes to the Privacy Policy
We reserve the right to amend this privacy policy to reflect changes in the law or modifications to the service or data processing. However, this applies only to statements regarding data processing. If user consent is required or if parts of the privacy policy govern the contractual relationship with users, changes will only be made with the users' consent.
Users are asked to regularly review the content of the privacy policy.
As of November 23, 2019
