Jenoptik Data Protection Center
Jenoptik and you
At Jenoptik, we understand the importance of personal data and the necessity of protecting it. These data protection guidelines detail the information we collect and how we process, store and, if necessary, transfer it, both online and offline. The following information will also be referred to as our "privacy notice", "privacy policy" or "data protection guidelines".
Please read these guidelines to understand how we use your information, how we are committed to protecting any data we receive and what you personally can do with this information. If you have further questions, please contact us.
General Information / Your Rights
At Jenoptik, we set strict standards for the handling of personal data throughout our business operations, regardless of whether the data belongs to interested parties, customers, service providers, suppliers, business partners or other persons. If you have any questions or concerns about data protection, please do not hesitate to contact us, e.g. through the contact form. We look forward to constructive exchanges, criticism and cooperation.
The term "Jenoptik" or "we" refers to the respective responsible (subsidiary) company of the Jenoptik Group. The term "you" refers to person whose personal data is processed on our systems. And by "data" here in our Data Protection Information Center, we generally mean the personal data that we process from you as a data subject within the meaning of the General Data Protection Regulation (GDPR).
Controller and data protection officer:
JENOPTIK AG
Carl-Zeiß-Straße 1 - 07743 Jena - Germany
Under certain circumstances, the controller may also be a company of the JENOPTIK Group. Please see this overview of our subsidiaries
Data Protection Officer of JENOPTIK AG
Carl-Zeiß-Straße 1 - 07743 Jena - Germany
E-mail: data-protection@jenoptik.com
Alternative data protection officers:
Data Protection Officer of JENOPTIK Automatisierungstechnik GmbH
Frank Hillmer, SIKKER GmbH, Kreuzstr. 10, 04103 Leipzig
Tel.: 0341 5663 9750 - E-Mail: info@sikker.de
Data Protection Officer of JENOPTIK Industrial Metrology Germany GmbH
Frank Hillmer, SIKKER GmbH, Kreuzstr. 10, 04103 Leipzig
Tel.: 0341 5663 9750 - E-Mail: info@sikker.de
Data Protection Officer of JENOPTIK Optical Systems GmbH
Frank Hillmer, SIKKER GmbH, Kreuzstr. 10, 04103 Leipzig
Tel.: 0341 5663 9750 - E-Mail: info@sikker.de
Data Protection Officer of JENOPTIK Robot GmbH
Opladener Str. 202 - 40789 Monheim am Rhein - Germany
Phone: 02173 3940-219 - E-Mail: dataprotection.sms@jenoptik.com
Data Protection Officer of TRIOPTICS GmbH
Frank Hillmer, SIKKER GmbH, Kreuzstr. 10, 04103 Leipzig
Tel.: 0341 5663 9750 - E-Mail: info@sikker.de
Below, we provide a more detailed description of our individual processing activities, which we have organized by topic.
The general information provided here apply comprehensively to all individual processing activities presented below, unless deviations are mentioned.
Security of your data
JENOPTIK uses technical and organizational security measures to protect the data we collect from you against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved and regularly checked in line with technological developments.
Recipients of data
If it is necessary for the processing of your request or the conclusion or execution of a contractual or business relationship with you, as well as with regards to centralized or outsourced corporate functions, your data may be passed on to companies affiliated with us or other third parties (e.g. specifically commissioned service providers) for the fulfillment of the above-mentioned purposes and in compliance with data protection requirements.
If it is necessary to disclose or prosecute illegal or abusive incidents, your data will be forwarded to our legal advisors, to law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behavior. Data may also be passed on if it serves to enforce contractual regulations between us and our contractual and business partners.
We are also legally obliged to provide information to certain public authorities on request. These are primarily law enforcement authorities and authorities that prosecute administrative offenses subject to fines.
Processing of data in countries outside the European Economic Area
If it is necessary to process data in third countries (countries outside the EU/EEA) or to transfer data to affiliated companies in third countries to fulfill the purposes stated in each case, we ensure that your data is protected appropriately and in accordance with the GDPR. If there is no adequacy decision by the Commission pursuant to Art. 45 GDPR for the third country concerned, i.e. there is no adequate level of data protection in the third country, we will ensure through contractual arrangements (EU standard contractual clauses on data protection) or other suitable guarantees within the meaning of Art. 46 GDPR that your privacy and your data are also protected in an appropriate and legally provided manner in the company in the third country.
Is the provision of your data mandatory or required?
The following applies in principle to the procedures described in more detail below:
a. Data processing due to legal or contractual regulations:
In connection with our contractual relationship, you are only obliged to provide us with personal data that is necessary for the performance of our contract or to take the steps necessary to fulfill your request. In certain cases, we are also required by law to process your data.
b. Data processing for other reasons:
The provision of your data is not required by law or contract in connection with the present processing of your data or required for the conclusion of a contract, so any failure to provide it has no consequences for you.
Automated decisions in individual cases including profiling
Automated decision-making (including profiling) in accordance with Art. 22 GDPR does not take place with data we collect; if we deviate from this in individual cases, we will indicate this in the procedures described in each case.
Restructuring
As part of the further development of our business, the structure of our company may change by altering its legal form or by founding, buying or selling subsidiaries, parts or components of the company. In such transactions, customer information is passed on along with the portion of the company to be transferred. Whenever personal data is passed on to third parties to the extent described, we ensure that it is done in accordance with this data protection notice and the relevant data protection laws.
Not included in this data protection notice...
is information about procedures that are processed separately on independent websites, such as the data that we process as part of our whistleblower protection system, application or employee management. If your data is processed there, you will also find corresponding data protection information. Data protection information for other special cases will be made available to the data subjects separately.
Your Rights
If your data is processed, you have the following rights vis-Ã -vis the controller. To assert these rights, please contact the responsible data protection officer.
1. right to information
You can request confirmation from us as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request the following information from us:
(1) the purposes for which the data are processed;
(2) the categories of data that are processed;
(3) the recipients or categories of recipients to whom your data has been or will be disclosed;
(4) the planned duration of the storage of your data or, if specific information on this is not possible, criteria for determining the storage duration;
(5) the existence of a right to rectification or erasure of your data, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information about the origin of the data if your data is not collected from you;
(8) the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for you.
You have the right to request information about whether your data is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
2. right to rectification
You have a right to rectification and/or completion vis-Ã -vis the controller if your data is incorrect or incomplete. We must make the correction without delay.
3. right to restriction of processing
You can request the restriction of the processing of your data under the following conditions:
(1) if you dispute the accuracy of your data for a period of time that enables us to verify the accuracy of your data;
(2) if the processing is unlawful and you refuse the erasure of your data and instead request the restriction of the use of your data;
(3) if we no longer need your data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.
If the processing of your data has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing can be lifted in accordance with the above conditions, you will be informed beforehand by us.
4. right to erasure
a) Obligation to delete
You can demand that we delete your data immediately and we are obliged to delete it immediately if one of the following provisions applies:
(1) Your data are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
(4) Your data have been processed unlawfully.
(5) The deletion of your data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.
(6) Your data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
b) Information to third parties
If we have made your data public and are obliged to delete it in accordance with Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, considering the available technology and the implementation costs, to inform other data controllers who process your data that you, as the data subject, have requested them to delete all access to this personal data or copies or replications of this personal data
c) Exceptions
The right to erasure does not exist if the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
(5) for the assertion, exercise or defense of legal claims.
5. right to information
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom your data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed by us about these recipients. These are primarily the companies affiliated with the Jenoptik Group, but may also be processors to whom we have made your data available within the framework of contractual agreements, such as newsletter delivery service providers.
6. right to data portability
You have the right to receive a copy of your data in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that
(1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have your data transmitted directly from us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be impaired by this.
The right to data portability does not apply if the processing of your data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
7. right of objection
You have the right to object, on grounds relating to your specific situation, at any time to processing of your data which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
If your data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your data for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, your data will no longer be processed for these purposes.
In connection with the use of information society services, you have the option of exercising your right to object by means of automated procedures that use technical specifications.
8. right to withdraw the declaration of consent under data protection law
If the processing of your data is based on a declaration of consent under data protection law, you have the right to withdraw this consent at any time with effect for the future.
9. right to lodge a complaint with a supervisory authority
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (you can find the supervisory authority responsible here), in particular in the member state of your place of residence, your place of work or the place of the alleged violation.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Information for website visitors
General information about the website:
Purpose of data processing on the websites
We only process your data insofar as it is necessary to facilitate the usage of our website, content and services. We also process your data to the extent that it is made available to us by your device in order to analyze and continuously adapt the functionality of our website.
Legal basis for the processing of your data in connection with the website
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing. The latter is applicable, for example, if you allow us to use cookies, see below in the section "Use of cookies".
Storage duration and data deletion of website data
Your data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may be stored beyond this if it has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The data will also be blocked or erased if a storage period prescribed by the standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
External links on our websites (disclaimer)
Our website contains links to third-party websites. These links are provided for information purposes only and a link to a website does not constitute an endorsement, approval or recommendation of that website by us. We accept no responsibility for the accuracy, completeness or legality of the content of these linked websites or for any damage that may result from your use of the content of these websites.
Provision of the website and creation of log files
Data types, description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data are collected:
- the date, time, access status (file found, not found, etc.) and the request that your browser sent to the server,
- the amount of data transferred and the website from which you came to the requested page and
- the individual pages of our website that you visit
- the product and version information of the browser used (user agent) and the preferred language set
- GEO-IP data
- Your IP address.
Purpose of data processing
Temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session.
Data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.
Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR. Our legitimate interest lies in the above-mentioned purposes; your interests, fundamental rights and freedoms are not restricted by the processing.
Duration of storage
Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. When collecting your data for the provision of the website, this is applicable when the respective session has ended.
If the data is stored in log files, this is fulfilled after one month at the latest.
Storage beyond this is possible in anonymized form. In this case, your IP address is deleted or anonymized so that it is no longer possible to identify the calling client.
Objection/withdrawal or removal option
The collection of your data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Thus, there is no possibility for you to object in this instance.
Use of Cookies
Data types, description and scope of data processing
Our website uses cookies. If we use analysis and optimization cookies, we will obtain your express consent separately in advance. If this is the case and you agree, cookies are used to enable a statistical range analysis of this website to measure the success of our online marketing measures and test procedures, e.g. to test and optimize different versions of our online offer or its components. Some elements of our website require that the accessing browser can be identified even after a page change.
Cookies are data records that are stored in the Internet browser or by the Internet browser on your computer system. If you access a website, a cookie may be stored on your operating system. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
The following data is stored and transmitted in the cookies:
- Globally Unique Identifier (GUID) - When using a contact form, the pseudonym "GUID" may be merged with your name;
- Language settings;
- Shared Secret (alphanumeric character string);
- Boolean
Consent Management
We use the consent management tool Consentmanager from consentmanager AB, Haltegelvägen 1b, 72348 Vasteras, Sweden. In this context, the date and time of the visit, browser information, consent information, device information and the IP address of the requesting device are processed. Further information on data protection at Consentmanager can be found here: Privacy policy - consentmanager
Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for you. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
We need cookies for the following applications:
- Identification of the user session in the server's memory
- Prevention and defense against attacks (e.g. through anti-forgery tokens to prevent cross-site request forgery)
- Storage of the information that you have read the data protection information
- Storage of the information that you do not want to be redirected to the URL that matches your country
We do not use the user data collected by technically necessary cookies to create user profiles.
Legal basis for data processing
The legal basis for the processing of your data using cookies is Art. 6 para. 1 lit. f GDPR. Obtaining and managing legally required consent is to be regarded as a legitimate interest within the meaning of the aforementioned provision. Our legitimate interest lies in these purposes; the processing does not restrict your interests, fundamental rights and freedoms. In addition, we are legally obliged by ECJ case law to be able to prove your consent to the use of cookies on a later date (opt-in procedure).
Categories of recipients of your data
Consentmanager stores consents and withdrawals on our behalf and on our instructions.
Duration of storage, objection and removal options
Cookies are stored on your computer and transmitted to our website. You therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
eTracker
Data types, description and scope of data processing
We use the services of eTracker GmbH from Hamburg, Germany (www.eTracker.com) to analyze usage data.
eTracker cookies do not contain any information that enables a user to be identified.
The data generated with eTracker is processed and stored by eTracker on behalf of the provider of this website exclusively in Germany and is therefore subject to the strict German and European data protection laws and standards. In this context, eTracker has been independently audited, certified and awarded the ePrivacyseal data protection seal of approval.
Further information on data protection at etracker can be found here (https://www.etracker.com/datenschutz/).
Purpose of data processing
See above in the section "Use of cookies".
Legal basis for data processing
Data processing is carried out on the basis of Art. 6 para. 1 lit. f (legitimate interest) of the General Data Protection Regulation (GDPR). Our legitimate interest is the optimization of our online offer and our website. Since the privacy of our visitors is particularly important to us, data that may allow a reference to an individual person, such as IP address, login or device identifiers, are anonymized or pseudonymized as soon as possible. No other use, merging with other data or disclosure to third parties is carried out by eTracker.
Categories of recipients of your data
eTracker stores consents and withdrawals on our behalf and on our instructions.
Duration of storage
See above in the section "Use of cookies".
Objection/withdrawal or removal option
You can object to the outlined data processing at any time by clicking on the slider. The objection has no negative consequences. If no slider is displayed, data collection is already prevented by other means of blocking.
Sitecore Experience Platform - Website analysis, tracking
Data types, description and scope of data processing
This website is provided with the web content management system Sitecore, which provides web analysis functions. The information generated by cookies about the use of this website, including the anonymized IP address (anonymization is achieved by deleting the last digit), is stored in a database in the Jenoptik data center.
You can prevent the setting of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of this website.
Furthermore, data (e.g. certain system data such as the anonymized IP address, screen resolution, version of the operating system, browser, Flash plug-in, country setting and language setting) is collected and stored in a database in the Jenoptik data center.
Purpose of data processing
We use this information to evaluate the use of the website and to compile reports on the website activities of users for us.
Legal basis for data processing
The legal basis for the processing of your data using cookies is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the above-mentioned purposes; your interests, fundamental rights and freedoms are not restricted by the processing.
Categories of recipients of your data
The data collected remains on our servers and is not passed on to Sitecore or other external recipients.
Duration of storage
See above in the section "Use of cookies".
Objection/withdrawal or removal option
You can prevent storage by deactivating Javascript and the storage of cookies, among other things. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
In this case, no personal user data is processed. Users’ unabridged and therefore non-anonymized IP addresses are not processed.
Contact form and e-mail contact
Data types, description and scope of data processing
Various contact forms are available on our website which can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to the Jenoptik Group company responsible for processing the respective request and stored. These vary depending on the contact form and can be
- Salutation
- First name
- Last name
- Company
- Address
- Zip code and city
- Country
- Phone number
- e-mail address
- Internet address
- Text of the request
- Specify whether existing customer or new customer
- Customer number
- Indication of whether the request relates to prototype or series production
- Specification of the quantity of the requested product
- Information on the product category of the products or services offered
- Serial number of the camera
- Specification of machine data (machine type, serial number, fabrication/material number) for service and support services
where mandatory information is marked with (*).
The following data is also stored at the time the message is sent:
- Your IP address
- Date and time of registration
- Context data (referrer, domain, browser language, your country, etc.)
Your consent is obtained for the processing of the data as part of the sending process and reference is made to this data protection information.
Alternatively, you can contact us via the e-mail address provided. In this case, your data transmitted with the e-mail will be stored.
The data will be used exclusively for processing the conversation and forwarded to the organizational units or companies of the Group responsible for the request.
Purpose of data processing
The processing of your data from the input mask serves us solely to process the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data. The other data processed during the sending process is used to prevent misuse of the contact form and to ensure the security and functionality of our information technology systems.
Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if you have given your consent.
The legal basis for the processing of data transmitted while sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
Categories of recipients of your data
Inquiries by email are forwarded to mailboxes in various areas of the company. The type of request determines whether data is processed further (e.g. in a customer relationship management system, in an applicant management system or other applications).
Duration of storage
Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the data from the input screen of the contact form and the data sent by email, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional data collected during the sending process is automatically deleted from the website's content management system after a period of three months. However, depending on the type of further processing (see section "Recipient categories"), it may be processed for longer in other systems, e.g. due to applicable retention obligations.
Objection/withdrawal or removal option
You can withdraw your consent to the processing of your data at any time with effect for the future. For newsletters, simply use the unsubscribe link in the footer. If you contact us by e-mail, you can object to the storage of your data at any time. In such a case, the conversation cannot be continued. To withdraw your declaration of consent, simply let us know.
Information for newsletter subscribers and recipients of mailings
Mailing in the context of online marketing activities
Data types, description and scope of data processing
If you have contacted us via the relevant dialog boxes, for example on our website, we may, with your consent, send mailings based on the information you have provided.
Purpose of data processing
We process the above data in order to fulfill your request to contact us.
Legal basis for data processing
The legal basis for this processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Categories of recipients of your data
Your data will be passed on or transmitted to third parties if it is necessary for the preparation, processing and evaluation of the mailing. Recipients may be IT and shipping service providers, for example.
Duration of storage
We process your data for the duration of the survey and evaluation and for the assertion, exercise or defense of legal claims, and delete it after completion of the respective process with a period of up to three years after the end of the respective calendar year.
Objection/withdrawal or removal option
You have the option of withdrawing your consent to the processing of your data at any time with effect for the future. To withdraw your declaration of consent, all you need to do is inform us.
General information on measuring success for all types of newsletters or mailings
Data types, description and scope of data processing
The newsletters contain information that is retrieved from our server when the newsletter is opened or from their server, if we use a mailing service provider. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are collected.
Purpose of data processing
We use this information for the technical improvement of our services as well as for statistical surveys to analyze the opening and reading behavior of the target groups and to determine which links are clicked. However, these evaluations are only used to recognize the reading habits of our users on a statistical basis and to adapt our content to them or to send different content according to the statistically determined interests of our users and target groups.
Legal basis for data processing
We base this processing on our legitimate interest in direct marketing and its success analysis, Art. 6 para. 1 sentence 1 lit. f GDPR.
Categories of recipients of your data
The information for measuring success is collected by us or, if applicable, by the shipping service provider and is not forwarded to other recipients.
Duration of storage
The data will be accessed for the purpose of processing until you unsubscribe. Thereafter, they will be stored for one year on an internal blacklist to prevent future mailings and for the assertion, exercise or defense of legal claims.
Objection/withdrawal or removal option
It is not possible to object only to the measuring of success. In this case, the entire newsletter subscription must be canceled and/or the use of the e-mail address for sending advertising must be objected to (see the unsubscribe links at the end of each newsletter).
The Jenoptik Newsletter
Data types, description and scope of data processing
Interested parties have the option of subscribing to a free newsletter. When subscribing to the newsletter, the data from the input mask is transmitted to us. Specifically, these are
- Salutation
- First name
- Name
- E-mail address
whereby mandatory fields will be marked with an (*). The remaining information is voluntary when registering for the newsletter.
The following data is also collected during registration:
- IP address of the calling computer
- Date and time of entry and double opt-in registration
- Original form
- Language for newsletter
Your consent is obtained for the processing of the data in the web form as part of the registration process and reference is made to this privacy policy. A confirmation email will be sent to the email address you entered for the newsletter mailing using the double opt-in procedure. This confirmation e-mail is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter.
The data will be used exclusively for sending the newsletter.
Purpose of data processing
The purpose of collecting your e-mail address is to send you the newsletter by e-mail.
The voluntary additional information is used to personalize the salutation when sending the newsletter.
The collection of other data as part of the registration process serves to prevent misuse of the services or the e-mail address used.
Legal basis for data processing
The legal basis for the processing of your newsletter registration data is Art. 6 para. 1 lit. a GDPR if you have given your consent.
Categories of recipients of your data
We only pass on your data to contractually bound, specialized processors who are entrusted with the execution of the newsletter dispatch. Your data will only be transferred in accordance with the applicable data protection regulations.
Furthermore, we will not transfer your data to other third parties without your permission or legal basis. If we include links to social media or websites in the newsletter and you access them via the links/buttons, this is done without our involvement in this communication. The newsletter therefore does not result in any direct data flow with a social media channel or website operator.
Duration of storage
The data will be processed for its respective purpose until you unsubscribe. After that, they will be stored on an internal blacklist for up to three years in order to prevent accidental future mailings and for the assertion, exercise or defense of legal claims.
Objection/withdrawal or removal option
You can cancel your subscription to the newsletter at any time. For this purpose, you will find a corresponding link in every newsletter.
Mailings in connection with the purchase of goods and/or services
Data types, description and scope of data processing
If you purchase goods and/or services from us and provide us with your contact details, we may use them to send you our mailing, offers of similar goods or services or for customer satisfaction surveys in accordance with the provisions of competition law.
Legal basis for data processing
The data protection basis for sending the mailing and the surveys is our legitimate interest in the processing (Art. 6 para. 1 sentence 1 lit. f GDPR), which consists of sending our customers direct advertising for our goods and/or services and analyzing and improving booking/purchasing experiences and service quality.
Categories of recipients of your data
Your data will be transmitted to the providers of our email marketing software and (if applicable) to our service provider for the evaluation of customer surveys, with whom we have concluded binding data processing agreements.
Duration of storage
The data will be accessed for the purpose of processing until you unsubscribe. Thereafter, they will be stored on an internal blocking list for up to three years to prevent accidental future mailings and for the assertion, exercise or defense of legal claims.
Since we may also process your contact data for the purposes of contractual communication, we will store your contact data for at least as long as it is required for the purposes of contractual communication, irrespective of any prior objection to the sending of advertising.
Objection/withdrawal or removal option
You can object to the sending of advertising at any time without giving reasons. To do so, simply use the corresponding link that you will find at the end of all our newsletters.
Newsletter to determine customer satisfaction and similar surveys
Data types, description and scope of data processing
For the customer satisfaction survey, we process data that we receive from the respective contractual and business partners, our customers (data subjects).
Relevant personal data required for the customer satisfaction survey are surname, first name, company name/company, e-mail address, serial numbers of purchased devices, the services purchased from us, as well as information and value judgments that you may send us via a questionnaire.
Purpose of data processing
We process this data for the purpose of the customer satisfaction survey with the resulting associated processing.
Legal basis for data processing
The legal basis for this processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Categories of recipients of your data
Your data will be passed on or transmitted to third parties if it is necessary for the preparation, processing and evaluation of the customer satisfaction survey. Recipients may be IT and shipping service providers, for example.
Duration of storage
We process your data for the duration of the survey and evaluation and for the assertion, exercise or defense of legal claims, and delete it after completion of the respective process with a period of up to three years after the end of the respective calendar year.
Objection/withdrawal or removal option
You have the option of withdrawing your consent to the processing of your data at any time with effect for the future. To withdraw your declaration of consent, all you need to do is inform us. After that, they will be stored on an internal blacklist for up to three years in order to prevent accidental future mailings.
Information for recipients of press releases
Data types, description and scope of data processing
We process your data if we have received it from you as a representative of the media or if it is publicly available. We do this to inform you about important content, news and developments in the JENOPTIK Group. The information is sent to you by e-mail. We process the following data:
- Salutation,
- First name, last name,
- E-mail address,
- If applicable, field of specialization or interest.
We regularly inform representatives of the media about news, developments and events in the company. The processing of your data in our press distribution list is solely for the proper dispatch of press releases to representatives of the media. Your e-mail address is required to send the press release. The processing of other data serves to prevent misuse of the services and - if necessary - to ensure a personalized approach to the addressees and the processing of individual press inquiries between the company and media representatives.
Legal basis of the processing:
If you have asked to be included in the mailing list, we understand this request as consent to data processing in accordance with Art. 6 para. 1 lit. a GDPR.
If we have included you in the distribution list without you having explicitly asked us to do so, this is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interest pursued is the representation of the company and the communication of the company with the media to create transparency and to communicate press releases.
Categories of recipients of your data
We only pass on your data to contracted processors who are entrusted with the dispatch of press releases. Your data will be transmitted exclusively in accordance with the applicable data protection regulations.
Duration of storage:
The data will be deleted as soon as it is no longer required for the purpose for which it was collected, or you have informed us that you no longer wish to receive information from us. Thereafter, it will be stored on an internal blocking list for up to three years in order to prevent accidental future mailings and for the assertion, exercise or defense of legal claims.
Objection/withdrawal or removal option
As the recipient of the press releases, you can withdraw your consent at any time or object to the processing at any time. For this purpose, you will find a corresponding e-mail address in every press release.
Information for investors
Data types, description and scope of data processing
We regularly inform capital market participants about news and developments in the company by sending out investor relations reports by e-mail or fax free of charge and on an ad hoc basis. The e-mails or faxes are sent via e-mail or fax distribution lists using the electronic platform of a service provider (EQS Group AG, Munich). The following data are processed:
- Salutation
- First name, last name
- E-mail address or fax number
- Company
We regularly inform capital market participants about news, developments and events in the company. The processing of personal data in our investor relations distribution list is solely for the proper dispatch of investor relations notifications to capital market participants. The user's e-mail address or fax number is required in order to send the investor relations message by e-mail or fax. The processing of other personal data serves to prevent misuse of the services and - if necessary - to ensure a personalized approach to the addressees and the processing of individual inquiries between companies and capital market representatives. These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
Legal basis of the processing:
If we have included you in the distribution list without you having explicitly asked us to do so, this is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interest pursued is the representation of the company and the communication of the company with the investors, whereby we assume that this is in line with the interests of the investors. Since any conflicting interests of the investors (e.g. data minimization or protection of data subjects' rights) are fully considered, the interests of the controller prevail here.
Categories of recipients of your data
We only pass your data on to contracted processors who are entrusted with the dispatch of press releases. Your data will be transmitted exclusively in accordance with the applicable data protection regulations.
Duration of storage:
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Your e-mail address or fax number will therefore be stored in the corresponding distribution list until you inform us that you no longer wish to receive investor relations messages by e-mail or fax.
Objection/withdrawal or removal option
You have the option to object to the processing of your personal data in our investor relations mailing list at any time. To exercise your objection, please let us know using the link provided in the investor relations message or by sending an email to ir@jenoptik.com. All personal data processed in our Investor Relations mailing list will be deleted in this case.
Information for shareholders of JENOPTIK AG regarding the registered shares
Data types, description and scope of data processing
The shares of JENOPTIK AG are registered shares. Section 67 of the German Stock Corporation Act stipulates that registered shares must be entered in the company's share register, stating the full name, date of birth, address and number of shares held by the shareholder. The shareholder is generally obliged to provide the company with this information. In accordance with a provision in the Articles of Association of JENOPTIK AG, the shareholder should also provide their e-mail address to facilitate communication.
The credit institutions involved in the acquisition or custody of your JENOPTIK AG registered shares regularly forward the information relevant for maintaining the share register to us on your behalf. This is done via Clearstream Banking Aktiengesellschaft, Mergenthalerallee 61, 65760 Eschborn, Germany, which acts as the central depository for the technical processing of securities transactions and the safekeeping of shares for the banks.
If you sell your shares, the bank of the new purchaser will notify us. The following personal data will be transmitted to us by the credit institutions:
- First name and surname of the shareholder
- Date of birth of the shareholder
- Address of the shareholder
- Shareholder number
- Number of shares owned by the shareholder
- E-mail address of the shareholder
- Indication of whether the shares are held by the company or by third parties.
Purpose of the processing:
We process your personal data exclusively for the purpose of maintaining the legally required share register of JENOPTIK AG. Should we wish to process your personal data for a purpose not mentioned above, we will inform you in advance within the framework of the statutory provisions and only initiate this if we are permitted to do so by a legal authorization basis in accordance with Art. 6 GDPR.
Legal basis of the processing:
The legal basis for the processing of your personal data is Article 6(1)(c) GDPR in conjunction with the obligations relating to us under stock corporation law.
Categories of recipients of your data
External service providers:
We sometimes use external service providers for the administration and technical management of the share register (share register service company, IT service provider) and for handling the Annual General Meetings (AGM service provider). External service providers who process data on our behalf are contractually bound as processors in accordance with Article 28 (3) GDPR. Computershare Deutschland GmbH & Co KG, Elsenheimerstrasse 61, 80687 Munich, Germany, has been commissioned to maintain the share register of JENOPTIK AG and performs this task as a processor within the meaning of Art. 28 GDPR.
Other recipients:
In addition, we may transfer your personal data to other recipients in accordance with Art. 6 para. 1 lit. c GDPR if we are legally obliged to do so, such as by transferring data to authorities to fulfil legal notification obligations (e.g. if legally prescribed voting rights thresholds are exceeded) or if another basis for authorization in accordance with Art. 6 GDPR entitles us to transfer data.
Duration of storage:
We delete your personal data as soon as it is no longer required for the above-mentioned purposes and there is no legal obligation to retain the data. Corresponding proof and retention obligations arise from the German Commercial Code, the German Fiscal Code and the German Money Laundering Act, among others. The storage periods are regularly up to ten years.
Information for Jenoptik events
Information in the run-up to events
Data types, description and scope of data processing
When planning and registering for an event, the following data from the input screen is transmitted to us:
- Salutation
- Title
- First name
- Name
- Company
- E-mail address
- Code if applicable
whereby mandatory fields will be marked with an (*).
In addition, the following data is collected via automated retrieval during online registration:
- IP address of the calling computer
- Date and time of entry and double opt-in registration
- Original form
- Language for mailings.
We use the data exclusively to e-mail you information about and invitations to upcoming events in the Jenoptik Group.
Google reCAPTCHA
We use the Google reCAPTCHA function in our registration forms. This function is primarily used to determine whether an entry was made by a natural person or abusively by machine and automated processing.
This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
In addition to your IP address, Google may also collect other information that is necessary for the provision and guarantee of this service.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in security and the prevention of unwanted, automated access.
Google offers further information on the general handling of your user data at https://policies.google.com/privacy.
Purpose of data processing
The purpose of collecting your e-mail address is to inform you about events within the Jenoptik Group or to invite you to such events.
The collection of other data as part of the registration process serves to prevent misuse of the services or the e-mail address used. We also need this data for the entire invitation management process.
You only need to enter a code if you have received it from us in advance.
Legal basis for data processing
If you have expressed an interest in participating in our events, Art. 6 para. 1 lit. a GDPR is the legal basis for the processing of your registration data. If we invite you to our events, our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR applies as the legal basis, whereby we assume that your rights and freedoms are not restricted by this invitation.
Categories of recipients of your data
We only pass on your data to contracted processors who are entrusted with the execution of the mailings. Your data will only be transferred in accordance with the applicable data protection regulations.
Furthermore, we will not transfer your data to other third parties without your or legal permission.
Duration of storage
The data will be deleted for the assertion, exercise or defense of legal claims one year after deregistration or blocking.
Objection/withdrawal or removal option
You can withdraw your event registration and our invitation at any time without giving reasons with effect for the future. There is a corresponding link for this purpose in every mailing. You can also use this link to object to our invitation if it is based on our legitimate interest.
Information for participants
Data types, description and scope of data processing
If you have received an invitation to an event, your data will be processed for the preparation, implementation and follow-up of the event. This includes, among other things:
- Salutation
- Title
- First name
- Name
- Company
- E-mail address
- Presence at the event
- Willingness to participate
- Shuttle service requirements
The following data is also collected during registration:
- IP address of the calling computer
- Date and time of entry and double opt-in registration
- Original form
- Language for mailings
Your consent was obtained for the processing of the data in the web form as part of the registration process and reference was made to this data protection notice. A confirmation email will be sent to the email address you entered for the event registration using the double opt-in procedure. This confirmation e-mail is used to check whether the owner of the e-mail address has authorized the receipt of information/invitations to Jenoptik events.
Purpose of data processing
Your data is processed for the planning and implementation of upcoming events. The processing of the e-mail address is required, among other things, to send you current information.
The processing of your data also serves the planning of future events.
If we make image and sound recordings with participants during the events, we would like to use these for publication on websites to represent the controller.
Legal basis for data processing
The legal basis for the processing of your registration data is Art. 6 para. 1 lit. a GDPR if you have given your consent.
We can also rely on a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR for sending an invitation. Our legitimate interest lies in the organization of events with which we represent ourselves and our products to our target groups.
The processing of image and sound recordings may also be based on our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The legitimate interest pursued is the representation and presentation of the company, in particular via the website. By using various techniques and methods (e.g. time lapse, group pictures), the interference with the rights of the data subjects is kept as low as possible. You have the option to directly object to this at any time, preferably when the recordings are made.
Categories of recipients of your data
In accordance with the statutory provisions, we will only pass on your data to contracted processors who are entrusted with the implementation of the mailings and the event. In individual cases, such as with image and sound recordings, data may also be passed on to the press or to persons of public interest for their own purposes should they participate. It may also be the case that participating service providers make image and sound recordings for reference purposes. In such cases, separate information is regularly provided directly at the event in question.
Duration of storage
The personal data will be processed until withdrawal or objection and then blocked for further processing. To comply with legal requirements, it may be necessary to continue to store your personal data. This may also be necessary for the assertion, exercise and defense of legal claims.
Objection/withdrawal or removal option
You can withdraw your event registration and our invitation at any time without explanation with effect for the future. There is a corresponding link for this purpose in every mailing. You can also use this link to object to our invitation if it is based on our legitimate interest. The same applies to image and sound recordings.
Information for visitors at the stand
Data types, description and scope of data processing
The information you provide to us at our trade fair stand or on similar occasions is usually business card data (name, function, business contact details) and your general or specific interest in our products and services.
Purposes for which your data is processed
- Communication with business partners about products, services and projects, e.g. to process your inquiries or provide technical information about products;
- Creating a personal profile with business-related information about interactions between you and us with the aim of providing you and the company you work for with relevant information and suitable offers on services and products and to improve our personal communication with you;
- Carrying out market analyses, competitions, contests or similar campaigns and events.
Legal basis for data processing
The processing of personal data takes place either with the intention of initiating a contract with you, in which case Article 6(1)(b) GDPR applies as the legal basis,
Or, where applicable, the processing is based on our following legitimate interests (Article 6 (1) (f) GDPR):
- Fulfillment of the contact request expressed by you by submitting the contact details
- Information about the products and services we offer
This interest does not conflict with your fundamental freedoms and rights, as these continue to be granted in full.
Recipients and categories of recipients
Your data is processed centrally within the Group in a customer relationship management system (CRM). They are exclusively available to us and, if applicable, to other companies of the Jenoptik Group and are not passed on to third parties.
Duration of storage
We process your data in our systems until the purpose is fulfilled, the legal basis no longer applies or you object to the processing and there is no longer a legal obligation to retain the data.
Objection/withdrawal or removal option
You can object to data processing at any time without explanation with effect for the future. Unless there are separate retention obligations arising from any contractual cooperation, your data will be deleted at your request.
Information for contractual partners
Types of data, purpose and scope of processing
We process your data for the purpose of initiating a contract, fulfilling a contract and informing you about our products. In this context, we process the following data:
- Name
- Address
- E-mail address
- Phone number
- Title
- Length of service
- Position in the company
Legal basis of the processing
Contract initiation and fulfillment of the contract
Insofar as a contract is sought or a contract is to be fulfilled, the processing of your data is based on Art. 6 para. 1 lit. b GDPR. The storage of your data is also partly based on further legal obligations (e.g. tax regulations) in accordance with Art. 6 para. 1 lit. c GDPR. After fulfillment of the contract, we process the data based on the legitimate interest to protect us from legal claims or to assert them in accordance with Art. 6 para. 1 lit. f GDPR.
Advertising
If you receive advertising from us as an existing customer, the processing of your data is based on the consent you have given in accordance with Art. 6 para. 1 lit. a or our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our interest is to inform you about new products, promotions and the like, whereby we assume that this could match the products you have already purchased.
Business partner verification
If we are legally obliged to check our business partners, for example regarding the fulfillment of compliance requirements (as stipulated in the Money Laundering Act), the processing of your data is based on Art. 6 para. 1 lit. c GDPR. In the event of a possible verification of the solvency of business partners, our legitimate interest is based on Art. 6 para. 1 lit. f GDPR. Although our business partners are predominantly institutions, we may also process personal data in individual cases, such as ID card data or the managing director's residential address.
Duration of storage
Your data will not be processed beyond the described use. As a rule, your data will be deleted as soon as the purpose no longer applies, and we are not obliged to store the data any longer. However, data from contractual partners is regularly subject to tax retention obligations, which can be up to 10 years.
Categories of recipients of your data
All companies within the Jenoptik Group have access to your data.
Data will only be passed on to recipients outside our company if this is permitted or required by regulations or if we are otherwise authorized to pass on data. Under these conditions, recipients of your data may be
- Contact management systems (customer relationship management system, CRM) for better processing of your data and a more personalized approach
- Administration and communication systems, such as e-mail and software
- Contract management systems for cataloging and illustrating contracts
- Supplier portals for better communication and documentation of compliance with legal requirements
- Public bodies and institutions, in the event of a legal or official obligation
Objection/withdrawal or removal option
You can object to data processing for advertising purposes at any time without explanation with effect for the future.
Information on sweepstakes
Types of data, purpose and scope of processing
From time to time, sweepstakes may be held on the website or at the trade fair stand or as a part of events. We process your data in order to be able to run the sweepstake. In connection with this, we may process the following data, such as:
- Name
- Address
- E-mail address
- Phone number
- Title
- Length of service
- Position in the company
Legal basis of the processing
As we are interested in running the sweepstake smoothly, we rely on Art. 6 (1) (f) GDPR (legitimate interest) as the legal basis. Our interest lies in the acquisition of customers or employees, the promotion of the working atmosphere or marketing measures. Since your rights and freedoms are not restricted by this and you provide your data voluntarily, our interest in the processing outweighs this.
Duration of storage
The data processed for the implementation of the sweepstake will be completely deleted within 6 months after the winner has been determined. If the prize could not be delivered by then, it will be forfeited.
Categories of recipients of your data
Data will only be passed on to recipients outside our company if the nature of the prize or the handover of the prize makes it necessary. For example, if a sweepstake takes place together with a cooperation partner who sends the prizes directly, this could entail a necessary data transaction.
Objection/withdrawal or removal option
You can object to data processing in the context of a sweepstake at any time without giving reasons with effect for the future.
Information for applicants
You can apply to us at any time. All information on vacancies or the application process can be found at: Careers: Curious how to become a JENIUS? | Jenoptik
If you would like to apply to us electronically, please only use our online application portal.
Please do not send your application by e-mail, as we cannot guarantee that your data will be transmitted securely in this way.
If you apply via our applicant portal, you will also find further information there.
Information for participants of video conferences and webinars
It cannot be ruled out that meetings initiated by third parties may be conducted using a tool other than the one provided by JENOPTIK (e.g. Zoom).
These tools are not covered by this declaration.
Data types, description and scope of data processing
You will be invited to an online meeting by e-mail with an invitation link and/or a calendar appointment. If you have a Microsoft account, you can also be invited to a meeting on an ad hoc basis. Your first name, surname and e-mail address will be processed. The same applies if a webinar or broadcast is held. In this case, prior registration and/or activation may be required.
To participate in an online meeting, you must at least provide your name and - if you are participating by telephone - your telephone number. In the latter case, we will inform you of this option for data-saving participation as part of the invitation. You can deactivate transmission via microphone and camera at any time via the corresponding settings. We only record meetings with your consent and prior notification. If the chat function is used in an online meeting, the content of the chat messages, the date and time and the participants are logged and saved. Microsoft stores and uses the metadata to enable us to analyze and report on the use of Teams and to provide technical support.
The following data can be processed during a meeting:
- Participant details: display name, if applicable, first name, surname, telephone number, e-mail address, password (encrypted for authentication), profile picture (optional), department/team;
- Metadata: Meeting topic and description, IP address, participant's phone number, type of device/software (Windows/Mac/Linux/Web/iOS/Android Phone/Windows Phone), time of participant's last activity, number of chat and channel messages, number of meetings attended, duration of audio, video and screen sharing time;
- When using chat or channel messaging: Text data for display and logging if necessary;
- When exchanging files: the personal data contained in the files;
- For audio use: Recording data of the microphone;
- When using video: Recording data of the video camera;
- For recordings: Audio, video and screen sharing for storage in the cloud / Microsoft Stream;
- When using the telephone: incoming and outgoing phone numbers, country name, start and end time, other connection data if applicable, such as the IP address of the device.
Purpose and legal basis of the processing
In order to conduct online meetings, telephone and/or video conferences and/or webinars, workshops or similar (hereinafter collectively referred to as "Meetings"), we use "Teams", a software from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft").
The legal basis for data processing to conduct online meetings using the aforementioned tool is our legitimate interest in the effective conduct of meetings in accordance with Art. 6 para. 1 lit. f GDPR.
Insofar as the online meetings are conducted within the framework of existing contractual relationships with you, the legal basis is Art. 6 para. 1 lit. b GDPR.
Recipients or categories of recipients of your data
Within our company, access to your data is granted to those departments that require it to process the above-mentioned purposes. Processors employed by us (Art. 28 GDPR) and other service providers may also receive data for these purposes. These are companies in the IT services category.
Data is only passed on to recipients outside our company if this is permitted or required by regulations or if we are otherwise authorized to pass on data. Under these conditions, recipients of personal data may be
- Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft")
- Public bodies and institutions, if there is a legal or official obligation.
- In rare individual cases of maintenance or for fault analysis, hardware or software support partners may be used. The statutory contractual provisions on purpose limitation and confidentiality are concluded with these partners.
Microsoft will receive the above information in order to process your request. All data traffic is encrypted (MTLS, TLS or SRTP). Microsoft processes the data primarily in the EU in accordance with our contractual agreements. If data is nevertheless processed in the USA, an appropriate level of data protection outside the EU/EEA is guaranteed by the EU standard contractual clauses we utilize with Microsoft.
Further information can be found in Microsoft's privacy policy, available at: https://privacy.microsoft.com/de-de/privacystatement
Duration of storage
Your data will only be stored by us for as long as is necessary for the purposes described or until you object to the use of your data.
Objection/withdrawal or removal option
You can object to data processing in the context of an online meeting at any time without giving reasons with effect for the future. Unless there are separate retention obligations arising from any contractual cooperation, we will delete your data in accordance with your request.
Information about our social media presence
Our company profile on social media and other online platforms
We are currently active on Instagram/Facebook, LinkedIn, XING/kununu and YouTube as well as on WeChat, Weibo and Tencent in Asia.
We are represented within social networks and platforms with our company profile. When using the respective networks, personal data is collected. The terms and conditions and data protection guidelines of the respective network operators apply. We would like to underscore that you use the networks and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). To avoid the additional outflow of your data, you can alternatively access the information offered by us via social media on our website https://www.jenoptik.de/.
Please note that the "social media connect icons" or "sharing buttons" sometimes contained on our website or in our newsletters are only intended to give you the opportunity to conveniently connect to your corresponding account and interact with our content there. This means that no data processing takes place between you and us, but only directly between you and your social media account.
Our presence on social networks leads to a dilemma in terms of data protection law because, on the one hand, we have an interest in presenting ourselves to as large an audience as possible - but, on the other hand, we cannot exert any real, effective influence on the service providers' compliance with data protection regulations. This applies irrespective of the contractual arrangements with the respective service providers, which we describe below. We therefore appeal to you as a user to make use of your options to make your profile more data protection friendly.
A list of the networks we use and a link to the respective privacy policies can be found here:
- Instagram / Facebook:
Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland
Meta | Privacy Center - LinkedIn:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, D04 Y9Y7, Ireland
Privacy Policy together with: European Regional Hub (linkedin.com) - XING / kununu:
New Work SE, Am Strandkai 1. 20457 Hamburg
Data protection at XING - YouTube:
Google Building, Gordon House, Barrow Street, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland
Privacy Policy
Instagram and Facebook
Controller under data protection law
We have no control over the network operators processing of personal data.
However, as the operator of the company profile, we are "joint controllers" with the network operators pursuant to Art. 26 GDPR according to the documents submitted to us. The networks are operated by: Meta Platforms Ireland Ltd, 4 Grand Central Square Grand Canal Harbour, Dublin 2, Ireland. The operators have impliedly concluded a corresponding agreement with us.
Details on the delimitation of responsibility can be found in the following agreement: Facebook.
You can find more information on Instagram at: Terms of Use | Instagram Help Center. For Facebook: https://www.facebook.com/help/pages/insights (please log in to your account to access this page).
With the agreement, the operator of the social network recognizes the joint data protection responsibility regarding so-called insights data and assumes essential data protection obligations to inform data subjects, to ensure data security and to report data protection violations.
Data types, description and scope of data processing
The networks are online services with different focuses. Sometimes you can primarily share your photos and videos there, sometimes you can also offer other information.
When you visit our company profile on the relevant network, the network operator regularly collects data from you, including your IP address and other information available on your end device (information about your end device, your location, your login data, etc.). The data collected from you when you use the network is processed by the relevant network operator and, if applicable, assigned to your user account. We have no control over processing by the network operators. You use the networks at your own risk.
Some network operators use the user data collected to carry out analyses for their own purposes. In addition, they may provide us, as the operator of the JENOPTIK company profile, with statistical evaluations of user behavior. We only receive the data as statistical evaluations or in anonymized form. Such use of analysis tools by us take place on:
- Instagram (via "Instagram Insights") Information on how the tool works can be found at: https://help.latest.instagram.com/788388387972460
- Facebook (via "Facebook Insights") Information on how the tool works can be found at: https://www.facebook.com/help/pages/insights
Purposes that we pursue with data processing
Social media enables us to communicate quickly, directly and easily with our target groups in various markets. We maintain company profiles on the networks to inform active users and interested parties about our services and to establish communication with them. Insofar as we receive further information, e.g. due to comments, direct messages or because we are followed or our content is shared, the corresponding processing takes place exclusively for the purpose of communication and interaction.
Clear knowledge of how the social network operator, including Facebook, uses the data from the visit to the company profile for its own purposes, how and to what extent activities on the company profile are assigned to individual users, how long the data is stored by the network operator and whether it is passed on to third parties is not conclusively and clearly stated by the respective network operators despite joint controllership.
The respective network operators use the data collected to improve their advertising systems, among other things. Further information can be found in the respective data protection notices of the network operators. As the operator of the company profile, we receive evaluations/statistics that are created based on visits to our company profile. This enables us to control the marketing of our activities or to place advertising aimed at specific target groups.
Legal bases, balancing our legitimate interests with the interests and freedoms of the data subjects
The processing of your data serves our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our interest is to provide you with insights into our company and our products and thus improve the perception of our company. Your rights and personal freedoms are fully safeguarded by us.
Recipients, categories of recipients, possibly in third countries
In the case of social media, you transmit the data to the respective service provider yourself. We cannot influence which other recipients or categories of recipients the service provider involves. Please consult the respective data protection information of the service provider to which we have referred above.
We will only disclose your data (insofar as it is made known to us via the service provider) to third parties if and insofar as this is necessary and legally permissible or if there is a corresponding legal or statutory obligation to do so.
The network operators may transfer your data to countries outside the European Union (third countries). Despite the joint controllership pursuant to Art. 26 GDPR, we have no comprehensive influence on the type and scope of the data processed by the network operators, the type of processing and use or the transfer of this data to third parties. When data is transferred to third countries (in particular to the USA), there is a risk that these countries do not have an adequate level of data protection and that the authorities there may gain access to your data without giving you sufficient legal remedies against this.
Duration of processing
Generally, data may only be processed for social media until the purpose has been achieved and/or the legal basis no longer applies. As your data is not processed on our own systems in the case of social media, we have no influence on the duration of processing.
Objection/withdrawal or removal option
You can object to data processing on social media at any time without giving reasons with effect for the future. We have no influence on the management of your account with the respective service providers, as the contractual relationship exists directly between you and the service provider. You should therefore contact the service provider directly with your request for deletion. As far as the account operated by us with the service provider is concerned, we will try to comply with your request as much as possible within the scope of our possibilities.
Enforcement of data subject rights
In principle, you can assert your data subject rights both against us and against the operator of the respective social network (e.g. Facebook). Regarding "Instagram and Facebook Insights", we kindly ask you to address your requests directly to the network operator. The latter has the direct possibility of influencing the processed data. Should you nevertheless address your request to us, we will of course contact the network operator. You can also file an objection for Instagram using the form provided by Facebook (https://www.facebook.com/help/contact/1994830130782319).
Controller under data protection law
LinkedIn has concluded an implied contract with us for commissioned processing, which means that this service provider works on our behalf. However, we have not yet been able to issue any "documented instructions" to this service provider, meaning that it processes the data provided by you and your devices de facto on its own behalf.
Data types, description and scope of data processing
The networks are online services with different focuses. We typically use LinkedIn to present ourselves as an employer to potential applicants. You would likely use LinkedIn to present yourself favorably to potential employers; you will present personal data, such as professional successes and career steps, but possibly also personal views and opinions in the limited public sphere of your network.
When you visit our company profile on the relevant network, the network operator regularly collects data from you, including your IP address and other information available on your end device (information about your end device, your location, your login data, etc.). The data collected from you when you use the network is processed by the relevant network operator and, if applicable, assigned to your user account. We have no influence on this processing by the network operators. You use the networks on your own responsibility. The network operator's data protection information therefore applies: LinkedIn Privacy Policy. This Contact form | LinkedIn Help is provided for queries to the network operator.
Some network operators use the user data collected to carry out analyses for their own purposes. In addition, they may provide us, as the operator of the JENOPTIK company profile, with statistical evaluations of user behavior. We only receive the data in anonymized form as statistical evaluations. Such use of analysis tools by us takes place through reporting tools.
Purposes that we pursue with data processing
Social media enables us to communicate quickly, directly and easily with our target groups in various markets. We maintain company profiles on the networks in order to inform and communicate with active users and interested parties about our services. Insofar as we receive further information, e.g. due to comments, direct messages or because we are followed or our content is shared, the corresponding processing takes place exclusively for the purpose of communication and interaction.
Clear knowledge of how the social network operator, including LinkedIn, uses the data from the visit to the company profile for its own purposes, how and to what extent activities on the company profile are assigned to individual users, how long the data is stored by the network operator and whether it is passed on to third parties is not conclusively and clearly stated by the respective network operators despite our order processing relationship.
The respective network operators use the data collected to improve their advertising systems, among other things. Further information can be found in the respective data protection notices of the network operators. As the operator of the company profile, we receive evaluations/statistics that are assembled based on visits to our company profile. This enables us to control the marketing of our activities or to place targeted advertising aimed at specific groups.
Legal bases, balancing our legitimate interests with the interests and freedoms of the data subjects
The processing of your data serves our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our interest is to provide you with insights into our company and our products and thus improve the perception of our company. Your rights and personal freedoms are fully safeguarded by us.
Recipients, categories of recipients, possibly in third countries
In the case of social media, you transmit your data to the respective service provider yourself. We cannot influence which other recipients or categories of recipients the service provider involves. Please consult the respective data protection information of the service provider to which we have referred above.
We will only disclose your data (insofar as it is made known to us via the service provider) to third parties if and insofar as it is necessary and legally permissible or if there is a corresponding legal or statutory obligation to do so.
The network operators may transfer your data to countries outside the European Union (third countries). Despite the commissioned data processing relationship in accordance with Art. 28 GDPR, we have no control over the type and scope of the data processed by the network operators, the type of processing and use or the transfer of this data to third parties. When data is transferred to third countries (in particular to the USA), there is a risk that these countries do not have an adequate level of data protection and that authorities there may gain access to your data without you having sufficient legal remedies to address this. However, in order to minimize the risk for you, LinkedIn considers the standard contractual clauses presented by the European Commission to be binding.
Duration of processing
Generally, data may only be processed for social media until the purpose has been achieved and/or the legal basis no longer applies. As your data is not processed on our own systems in the case of social media, we have no influence on the duration of processing.
Objection/withdrawal or removal option
You can object to data processing on social media at any time with no explanation with effect for the future. We have no influence on the management of your account with the respective service providers, as the contractual relationship exists directly between you and the service provider. You should therefore contact the service provider directly with your request for deletion. As far as the account operated by us with the service provider is concerned, we will try to comply with your request as much as possible within the scope of our possibilities.
Enforcement of data subject rights
You can find the LinkedIn privacy policy here: European Regional Hub (linkedin.com). LinkedIn has concluded a contract data processing agreement with us, so you are welcome to contact us. However, we must point out that we have no information available about what data LinkedIn processes about you. We will therefore refer you to the direct contact to the operator: Contact form | LinkedIn Help
XING / kununu
Controller under data protection law
We would like to give you the opportunity to rate us as an employer if you are (or have been) employed by us or have applied for a job with us. kununu is a suitable platform for this because it is quite widespread in this country and therefore offers a certain degree of objectivity.
kununu is a brand of the social network XING, which in turn is operated by Hamburg-based New Work SE. kununu considers itself to be an independent controller for data processing, so we were unable to conclude a contract with kununu in this regard. We therefore only refer to the rather detailed privacy policy of XING, because kununu does not provide its own privacy policy on its website, but only a kind of FAQ data protection - kununu. The kununu widget is not used on our websites, so if you use kununu, you do so entirely at your own risk.
Glassdoor / indeed / Recruit
Controller under data protection law
Glassdoor is also a suitable platform for employer ratings, not least because of its global presence with, according to its own information, 2.5 million rated companies with which we compete for the best employees.
Glassdoor is a sister company of indeed, which together belong to the Japanese Recruit Holdings Co, Ltd. Since we only operate a "free account" on Glassdoor in the sense of "employer branding", in which we represent the Jenoptik Group, there is no written contractual relationship that goes beyond compliance with the terms of use. We only receive an anonymized version of the reviews you may submit about us.
With Glassdoor, we also only refer to their rather detailed privacy policy HR Tech Privacy - Glassdoor Privacy Policy, which very openly describes the extent of the data collected from you and its worldwide distribution. On this (much shorter) page you will find a link to the Glassdoor portal where you can view and edit your data: https://hrtechprivacy.com/brands/glassdoor#privacypolicy. Here, too, we would like to point out that we are pleased if you rate us openly and honestly as an employer on this platform - however, you do so at your own risk as far as your personal data is concerned. For example, we have no influence on how long your data is stored on Glassdoor.
YouTube (Google / Alphabet)
Responsibility for data processing
Since we stopped using Google Analytics many years ago, we are no longer contractually linked to Google/Alphabet (apart from the use of AdWords, for which we pay on a case-by-case basis). Via our free YouTube company account, we occasionally upload material on which we present our company and, above all, our products. You can also jump directly to our website from some YouTube uploads.
YouTube (Google) therefore shows our advertising clips - and YouTube can link the user data of the people who search for these clips (or who are randomly offered them and then watch them) to user profiles.
Mind you: users watch the videos that are hosted on YouTube. And YouTube uses their data. We have no insight into this data processing. We do not pass on users' personal data to YouTube (Google), nor are we able to instruct YouTube (Google) how to process any data of visitors to our YouTube channel. This means that important conditions for a classic order processing relationship between us and YouTube (Google) no longer apply. Nevertheless, we try to be as transparent as possible towards you.
Types of data, purpose and scope of processing
Social media enables us to communicate quickly, directly and easily with our target groups in various markets. We maintain company profiles on the networks in order to inform and communicate about our services with active users and interested parties. Insofar as we receive further information, e.g. due to comments, direct messages or because we are followed or our content is shared, the corresponding processing takes place exclusively for the purpose of communication and interaction.
Social network operators, including YouTube, do not share a clear outline of how they use the data from a visit to the company profile for its own purposes, how and to what extent activities on the company profile are assigned to individual users, how long the data is stored by the network operator and whether it is passed on to third parties.
The respective network operators use the data collected to improve their advertising systems, among other things. Further information can be found in the respective data protection notices of the network operators (see below). As the operator of the company profile, we receive evaluations/statistics without personal reference that are created based on visits to our company profile. This enables us to control the marketing of our activities or to place targeted interest-based advertising.
Legal basis for data processing
The processing of your data by the network operator serves our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our interest is to provide you with insights into our company and our products and thus to improve the perception of our company. Your rights and personal freedoms are fully safeguarded by us.
Recipients or categories of recipients of your data
In the case of social media, you transmit the data to the respective service provider yourself. We cannot influence which other recipients or categories of recipients the service provider involves. Please consult the respective data protection information of the service provider which we have referred to above.
We will only disclose your data (insofar as it is made known to us via the service provider) to third parties if and insofar as it is necessary and legally permissible or if there is a corresponding legal or statutory obligation to do so.
The network operators may transfer your data to countries outside the European Union (third countries). As described above, we have no influence on the type and scope of the data processed by the network operators, the type of processing and use or the transfer of this data to third parties. When data is transferred to third countries (in particular to the USA), there is a risk that these countries do not have an adequate level of data protection and that the authorities there may gain access to your data without giving you sufficient legal remedies to address this. However, YouTube (Google) points out that standard contractual clauses are said to have been established with the overseas group companies, the wording of which unfortunately were not disclosed.
Duration of storage
Generally, data may only be processed for social media until the purpose has been achieved and/or the legal basis no longer applies. As your data is not processed on our own systems in the case of social media, we have no influence on the duration of processing.
Objection/withdrawal or removal option
You can object to data processing on social media at any time without explanation with effect for the future. We have no influence on the management of your account with the respective service providers, as the contractual relationship exists directly between you and the service provider. You should therefore contact the service provider directly with your request for deletion. As far as our account with the service provider is concerned, we will try to comply with your request as much as possible within the scope of our possibilities.
Rights of data subjects
In principle, you can assert your data subject rights both against us and against the operator of the respective social network (e.g. YouTube). Regarding the aforementioned "Insights", we ask that you address any such requests directly to the network operator. The latter has the direct ability to manage the processed data. Should you nevertheless address your request to us, we will gladly contact the network operator. You can lodge an objection via the website https://policies.google.com/privacy#infochoices provided by Google.
You can find the YouTube privacy policy here: https://policies.google.com/privacy. You are also welcome to contact us. However, we must clarify that we do not have any information about what data YouTube processes about you. We therefore refer you to the direct contact to the operator: Privacy and Security Center - YouTube Help (google.com)
