GDPR Data Protection Policy

GDPR Data Protection Policy

Our Privacy Policy was last updated on January 6, 2025.

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your data when you use the Service and informs you of your privacy rights and how the law protects you.

We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy was created by SIRUI GDPR Privacy Policy.

Interpretation and Definitions

Interpretation

Words with initial capital letters have meanings defined under the following conditions. The following definitions have the same meaning whether they appear in singular or plural form.

Definitions

For the purposes of this Privacy Policy:

• "Account" means a unique account created for you to access our Service or parts of our Service.
• "Company" (referred to as "the Company", "we", "us", or "our" in this agreement) refers to SIRUI Optical GmbH, Ernst-Augustin-Straße 1A, 12489 Berlin, Germany

For the purposes of the GDPR, the company is the data controller.

• "Country" refers to Germany and other countries within the EU.
• "Cookies" are small files placed by a website on your computer, mobile device, or another device and contain details of your browsing history on this website among their many uses.
• "Data Controller" in the sense of the GDPR (General Data Protection Regulation) is the company, the legal entity that alone or jointly with others determines the purposes and means of processing personal data.
• "Device" means any device that can access the Service, such as a computer, a mobile phone, or a digital tablet.
• "Personal Data" means any information relating to an identified or identifiable natural person.

For the purposes of the GDPR, personal data means any information relating to you such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity.

• "Service" refers to the website.
• "Service provider" means any natural or legal person who processes data on behalf of the company. It refers to third-party companies or individuals employed by the company to facilitate the service, provide the service on behalf of the company, perform services related to the service, or assist the company in analyzing how the service is used.

For the purposes of the GDPR, service providers are considered data processors.

• "Usage data" refers to data automatically collected either generated through the use of the service or from the service infrastructure itself (for example, the duration of a page visit).
• "Website" refers to SIRUI, accessible at https://www.siruishop.de/
• "You" means the person accessing or using the service, or the company or other legal entity on whose behalf that person accesses or uses the service.

Under the GDPR (General Data Protection Regulation), you may be referred to as the data subject or user as you are the individual using the service.

Collection and use of your personal data

Types of data collected

Personal data

While using our service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to, the following:

• Email address
• First and last name
• Phone number
• Address, state, province, postal code, city
• Usage data

Usage data

Usage data is automatically collected when using the service.

Usage data may include information such as the Internet Protocol address of your device (e.g., IP address), browser type, browser version, the pages of our service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the service via or through a mobile device, we may automatically collect certain information, including but not limited to the type of mobile device you use, the unique ID of your mobile device, the IP address of your mobile device, your mobile phone operating system, the type of mobile internet browser you use, unique device identifiers, and other diagnostic data.

We may also collect information that your browser sends when you visit our service or when you access the service via or through a mobile device.

Tracking technologies and cookies

We use cookies and similar tracking technologies to track activity on our service and to store certain information. Tracking technologies used include beacons, tags, and scripts to collect and track information as well as to improve and analyze our service. Technologies we may use include:

• Cookies or browser cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to alert you when a cookie is sent. However, if you do not accept cookies, you may not be able to use some parts of our service. Unless you have set your browser to refuse cookies, our service may use cookies.
• Web Beacons. Certain sections of our service and our emails may contain small electronic files called web beacons (also known as clear GIFs, pixel tags, and single-pixel GIFs), which allow the company, for example, to count users who have visited these pages or opened an email, and for other related website statistics (e.g., recording the popularity of a particular section and checking system and server integrity).

Cookies can be "persistent" or "session" cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser.

We use both session and persistent cookies for the purposes listed below:

• Necessary/essential cookies

• Cookie policy/cookie acceptance notice

• Functionality cookies

• Tracking and performance cookies

Use of your personal data

The company may use personal data for the following purposes:

• To provide and maintain our service, including monitoring the use of our service.
• To manage your account: to manage your registration as a user of the service. With the personal data you provide, you can access various features of the service available to you as a registered user.
• To fulfill a contract: the development, compliance, and execution of the purchase contract for the products, items, or services you have purchased through the service or have concluded another contract with us.
• To contact you: To contact you by email, phone call, SMS, or other equivalent forms of electronic communication, such as push notifications from the mobile app about updates or informational messages related to functionalities, products, or contractually agreed services, including security updates, where necessary or appropriate for their implementation.
• To provide news, special offers, and general information about other similar goods, services, and events that we offer that you have already purchased or inquired about, unless you have opted not to receive such information.
• To manage your requests : To process and handle your requests to us.
• For business transfers: We may use your data to evaluate or carry out a merger, sale, restructuring, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or in the context of bankruptcy, liquidation, or similar proceedings, where the personal data we hold about our service users is among the transferred assets.
• For other purposes: We may use your information for other purposes, such as data analysis, identifying usage trends, and determining the effectiveness of our advertising campaigns, and to evaluate and improve our service, products, services, marketing, and your experience.

We may share your personal data in the following situations:

• With service providers: We may share your personal data with service providers to monitor and analyze the use of our data service for payment processing, to contact you.
• For business transfers: We may share or transfer your personal data in connection with or during negotiations of a merger. Sale of company assets, financing, or acquisition of all or part of our business by another company.
• With affiliated companies: We may share your data with our affiliated companies. In such cases, we will require these affiliated companies to respect this privacy policy. Affiliated companies include our parent company and any other subsidiaries, joint venture partners, or other companies we control or that are under common control with us.
• With business partners: We may share your data with our business partners to offer you certain products, services, or promotions.
• With other users: If you share personal information or otherwise interact with other users in public areas, this information may be viewed by other users, made available to all users, and may be publicly distributed outside.
• With your consent: With your consent, we may disclose your personal data for other purposes.

Retention of your personal data

The company retains your personal data only as long as necessary for the purposes set out in this privacy policy. We will retain and use your personal data to the extent necessary to fulfill our legal obligations (e.g., if we need to keep your data to comply with applicable laws), to resolve disputes, and to enforce our legal agreements and policies.

The company also stores usage data for internal analytical purposes. Usage data is generally stored for a shorter period unless it is used to enhance security or improve the functionality of our service, or we are legally required to retain this data for longer periods.

Transfer of your personal data

Your information, including personal data, is processed at the company’s operational offices and at any other locations where the parties involved in processing are located. This means that this information may be transferred to and stored on computers located outside your state, province, country, or other governmental jurisdiction, where data protection laws may differ from those of your jurisdiction.

Your consent to this privacy policy and the subsequent transmission of this information constitutes your agreement to this transfer.

The company will take all reasonably necessary steps to ensure that your data is secure and handled in accordance with this privacy policy and that no transfer of your personal data to an organization or country occurs unless adequate controls are in place, including the security of your data and other personal information.

Disclosure of your personal data

Business transactions

If the company is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.

Law enforcement

Under certain circumstances, the company may be required to disclose your personal data if required by law or if there is a legitimate request from authorities (e.g., a court or government agency).

Other legal requirements

The company may disclose your personal data if it believes in good faith that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the company
• Prevent or investigate possible misconduct related to the service
• Protect the personal safety of service users or the public
• Protect yourself from legal liability

Security of your personal data

The security of your personal data is important to us, but please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Detailed information on the processing of your personal data

The service providers we use may have access to your personal data. These third parties collect, store, use, process, and transfer information about your activities on our service according to their privacy policies.

Analytics

We may use third-party providers to monitor and analyze the use of our service.

Email Marketing

We may use your personal data to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You can unsubscribe from receiving some or all of these communications from us by following the unsubscribe link or instructions in an email we send or by contacting us.

GDPR Privacy

Legal basis for processing personal data under the GDPR

We may process personal data under the following conditions:

• Consent:You have given your consent to the processing of personal data for one or more specific purposes.
• Performance of a Contract : The provision of personal data is necessary for the performance of an agreement with you and/or for other pre-contractual obligations related thereto.
• Legal Obligations: Processing personal data is necessary to comply with a legal obligation to which the company is subject.
• Vital Interests: Processing personal data is necessary to protect your vital interests or those of another natural person.
• Public Interests: Processing personal data is related to a task carried out in the public interest or in the exercise of official authority vested in the company.
• Legitimate Interests: Processing personal data is necessary to protect the legitimate interests of the company.

In any case, the company is happy to assist in clarifying the specific legal basis applicable to the processing, and in particular, whether the provision of personal data is a legal or contractual requirement or a requirement necessary for the conclusion of a contract.

Your rights under the GDPR

The company commits to respecting the confidentiality of your personal data and ensuring that you can exercise your rights.

According to this privacy policy and by law, if you reside within the EU, you have the right:

• Request access to your personal data. The right to access, update, or delete the information we have about you. Whenever possible, you can directly access, update, or request deletion of your personal data in the "Your Account Settings" section. If you cannot perform these actions yourself, please contact us for assistance. This will also provide you with a copy of the personal data we have stored about you.
• Request correction of the personal data we have stored about you. You have the right to receive incomplete or incorrect information corrected.
• Objection to the processing of your personal data. This right exists if we rely on a legitimate interest as the legal basis for processing your personal data and there is something about your particular situation that leads you to object to the processing of your personal data by us for this reason. You also have the right to object if we process your personal data for direct marketing purposes.
• Request deletion of your personal data. You have the right to ask us to delete or remove personal data if there is no compelling reason for us to continue processing it.
• Request the transfer of your personal data. We will provide you or a third party you select with your personal data in a structured, commonly used, and machine-readable format. Please note that this right only applies to automated information for which you initially gave us your consent or for which we used the information to fulfill a contract with you.
• Withdraw your consent. You have the right to withdraw your consent to the use of your personal data. If you withdraw your consent, we may not be able to grant you access to certain specific features of the service.

Exercising your GDPR data protection rights

You can exercise your rights to access, rectify, delete, and object by contacting us. Please note that we may ask you to verify your identity before responding to such requests. When you make a request, we will do our best to respond as quickly as possible.

Customer Data Requests

You have the right to complain to a data protection authority about our collection and use of your personal data. If you are in the European Economic Area (EEA), please contact your local data protection authority in the EEA for more information.

Children's Privacy

Our service is not directed at individuals under 13 years old. We do not knowingly collect personal data from individuals under 13. If you are a parent or guardian and know that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from individuals under 13 without verifying parental consent, we will take steps to remove that information from our servers. 

If we rely on consent as a legal basis for processing your data and your country requires parental consent, we may need to obtain your parents' consent before we collect and use this data.

Links to other websites

Our service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's website. We strongly recommend that you read the privacy policies of every website you visit.

We have no control over the content, privacy policies, or practices of third-party websites or services and assume no responsibility for them. 

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will notify you by email and/or by a clearly visible notice on our service before the change takes effect, and update the "Last Updated" date at the top of this Privacy Policy.

We recommend that you regularly review this Privacy Policy for any changes. Changes to this Privacy Policy take effect when they are posted on this page.

Contact us

If you have any questions about this Privacy Policy, you can contact us:

• By visiting this page on our website: https://www.siruishop.de/
• By sending us an email: service@sirui.com