Privacy Notice
1. General Information
General information on data protection at Olympus and on this website can be found in our general Privacy Notice. There you will find information on your rights as a data subject, on the deletion of your data and on the transfer of data to third parties and to third countries.
This Privacy Notice, in conjunction with the above-mentioned general Privacy Notice, informs you about data processing on our website https://olympus-europa.com.
2. Controller and Data Protection Officer
Olympus Europa SE & Co. KG
Wendenstraße 20
20097 Hamburg, Deutschland
Tel/Fax: +4940 - 23773 - 0
E-Mail: dataprotection@olympus-europa.com
For written inquiries to the Olympus Data Protection Officer, the above address with the addition of "c/o Data Protection EMEA" and the following e-mail address shall apply: dataprotection@olympus-europa.com
3. Purposes and Legal Bases of Processing; Data Recipients
In this section you will find information about the purposes and legal bases of the processing operations on this website and about the respective data recipients.
3.1 Visiting our Website
We process your personal data when you visit our website in order to display this website to you. For this purpose, we process the following categories of data:
- IP address
- Type and version of the browser used
- User agent (type of terminal device, if applicable type of operating system)
- Referer page (website from which you reached our website via hyperlink)
- Date and time of access
- Language setting of the browser used
We also use so called content delivery networks as well as web fonts and embedded videos from third-party providers to deliver content on the website and process the above-mentioned categories of data for this purpose. Your IP address may therefore also be transferred to third countries outside the EEA when you visit the website.
When you visit the website, we also process the above-mentioned categories of data in order to create reach measurements and visitor statistics for the website, as well as to perform so-called "A/B tests". A/B tests simulate two different versions of a website. For this purpose, some users test version A and others version B. In this way, two or more variations of a landing page can be displayed and improvement possibilities for the website can be identified.
The legal basis for this processing is in each case our legitimate interest in the efficient operation of a representative, global corporate website and in its optimization and improvement, art. 6 (1) (f) GDPR.
3.2 Contact via the Contact Form or by Email
If you contact us via our contact form or by e-mail, the personal data transmitted with your e-mail and the data you entered in the contact form will be processed by us in order to process and respond to your inquiry.
For inquiries by e-mail, we process your e-mail address, the subject and content of the e-mail, as well as any file attachments.
For inquiries via the contact form, we process the following categories of data:
- Type of inquiry
- Message (free text)
- First name
- Last name
- Email address
- IP address
- Date and time of the inquiry
The legal basis for processing your data to handle an inquiry via e-mail or contact form is our legitimate interest in receiving and responding to incoming inquiries via common, electronic communication channels (art. 6 (1) (f) GDPR). In this case processing will only take place if there are compelling reasons worthy of protection that outweigh your legitimate interests (art. 21 GDPR). If the contact is related to the conclusion of a contract, the legal basis is art. 6 (1) b GDPR.
3.3 Job Alerts
If you register for the “job alert” feature, we process your personal data in order to offer you the requested service (regular dispatch of an e-mail newsletter with information about current job offers).
We process the following categories of data for this purpose:
- E-mail address
- Your password
- User language
- Desired position
- Desired working hours (full-time or part-time)
- Desired department
- Desired employment type
- Self-selected name for the above search settings
After setting up the job alert via our website, we will send you a confirmation e-mail containing a link to activate the newsletter (""double opt-in""). The legal basis for this processing is your consent, art. 6 (1) (a) GDPR. You can revoke this consent at any time with effect for the future by clicking on ""Unsubscribe"" in the footer of an email, or by logging in to our website with the selected data and unsubscribing from the job subscription."
3.4 Online Applications and User Account
If you create an account on our website to apply for an advertised position, we process your personal data to enable the registration and application process in this way.
We process the following categories of data for this purpose:
- Salutation
- First name
- Last name
- E-mail address or login
- Password
- User language
- Application letter and resume
- Files uploaded by you, if applicable
- ""How did you hear about us""
Data release – It is possible to choose between ""I agree that my data will be stored if my application is not successful and that I will be informed about future job offers"" or ""I would like my data to be deleted as soon as the current application process is completed"".
The legal basis for this processing is the establishment of an employment relationship, Sec. 26 (1) German Federal Data Protection Act (BDSG), if you are applying for a job in Germany. Otherwise, the legal basis for the initiation of the employment contract is art. 6 (1) (b) GDPR.
We use the services of a third-party provider to process online applications and to send the job subscription. The legal basis for this is our legitimate interest in efficiently designing application processes and effectively selecting suitable applicants, art. 6 (1) (f) GDPR.
3.5 Registering and Administrating a „MyOlympus“-User Account
To create a personal profile for the ""MyOlympus"" service on our website, you must enter certain data in an input mask. The following categories of data are collected:
- Salutation
- First name
- Last name
- Nickname
- E-mail address
- Country name
- Password
- ""I am not a robot"" confirmation
- User agreement/ agreement to the terms of use (MyOlympus)
In the account settings you can also enter other optional profile information, namely:
- Street and house number
- Postal code
- City
- Phone number
- Date of birth
- Picture
- Avatar
- Product registration (date of purchase and serial number of the device)
- Additional information about your favourite product and service-related interests can be clicked.
- Content for a public profile / set-card with text and images
- Subscribe to newsletter
Since the registration is necessary for the performance of a contract (user agreement for MyOlympus) to which you are a party, the provision in art. 6 (1) (b) GDPR serves as the legal basis for the processing. If you provide this information to us, we will use your data to manage your product registrations and link them to your account. For more information, please see the MyOlympus Terms of Use.
Please note that if your registration is successful, you can also log in to other platforms such as the MyOlympus community, our online store or the Test & Wow platform with the user account you have created. In doing so, further data may be requested from you when you log in for the first time.
You can delete your user account at any time. You can change your stored data at any time by changing your settings on the profile page. In addition, you can revoke the consent given during registration at any time. If the data is required for the performance of a contract or for the implementation of precontractual measures, early deletion can only take place if the contractual or legal obligations permit such deletion.
3.6 Registration for Participation in an Event
To participate in an event that is advertised via the MyOlympus community, you must fill out an input mask. The following data categories are collected:
- Salutation (gender) - mandatory field
- First name - mandatory field
- Last name - mandatory field
- E-mail - mandatory field
- Telephone number - optional
- Company - optional
- Country - optional
- City - optional
- Street - optional
- House number - optional
- Postal code - optional
The legal basis for this processing is your consent, art. 6 (1) (a) GDPR.
3.7 Consent Management und Cookie-Banner
We use a third-party provider to provide a consent management platform and cookie banner. This allows visitors to the website to give and revoke consent to individual cookie categories and to receive information about the cookies used on the website.
For this purpose, we process the data categories mentioned in section 3.1. Your IP address may also be transferred to third countries outside the EEA.
The legal basis for using this third-party provider is our legitimate interest in obtaining consent from our website visitors, providing visitors with information relating to consent and managing cookie categories, art. 6 (1) (f) GDPR. You may object to processing that takes place on the basis of our legitimate interests. The processing will then only take place if there are compelling legitimate grounds that outweigh your legitimate interests (art. 21 GDPR).
3.8 Tracking and Advertisement
We use third-party services on our website to enable us to use so-called ""re-marketing"" and ""conversion tracking"" functions. These functions enable us to present website users on other websites with ads based on their interests and relating to our products and services. This is done by analysing the user's interaction on our website, e.g. the offers in which the user is interested, in order to be able to place targeted ads on other sites after the user has visited our website.
For this purpose, we process the data categories mentioned in section 3.1 as well as the following data categories:
- Visited (sub-) pages
- Clicked links
- Duration and type of interaction with the website
- Surfing behaviour when visiting the website
Your data may also be transferred to third-party providers in third countries outside the EEA. The legal basis for this processing is your consent, art. 6 (1) (a) GDPR. You can revoke this consent at any time with effect for the future by clicking on ""Cookie Settings"" in the footer of the website.
4. Cookies
We use so called cookies on our website. Cookies are text files that are stored by your Internet browser on your device. When you visit our website, various cookies are stored on your device and read by our website. Technically necessary cookies are automatically used when you visit the website. The legal basis for the use of technically necessary cookies is our legitimate interest in operating a representative corporate website, art. 6 (1) (f) GDPR.
Subject to your consent we use additional cookies to statistically analyse the use of the website and to offer personalized content and possibly advertising by creating pseudonymized user profiles. For this purpose, we also pass on information on website usage to service providers for advertising and analysis. Your data may also be transferred to service providers in third countries, e.g. the US. You give your consent to technically unnecessary cookies via our ""Cookie Banner"", which is displayed when you first visit the website and can be accessed at any time via the ""Cookie Settings"" link in the footer of the website. The legal basis for the use of technically unnecessary cookies is your consent pursuant to art. 6 (1) (a) GDPR. You can revoke this consent at any time with effect for the future by clicking on ""Cookie settings"" in the footer area of the website. This link will also provide you with more information on the categories of data processed by cookie, the recipients of the data, the purposes of the processing and third country transfers when using the respective cookies.
By changing the settings of your browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically by changing the settings of your browser accordingly. If you deactivate all cookies for our website, it may no longer be possible to use all the functions of the website properly.
5. Links to Social Networks
Our website contains links to social networks (Twitter, LinkedIn and YouTube). These services are operated exclusively by third-party providers. If you follow the links, information may be transmitted to these providers. More information about the purpose and scope of data collection and further processing of your data by the provider, as well as about your rights, can be found in the privacy notices of the respective provider:
YouTube is offered by
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
https://policies.google.com/privacy?hl=de&gl=de
LinkedIn is offered by
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA
http://www.linkedin.com/legal/privacy-policy/
Twitter is offered by
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA
Last Changed: 30.08.2022
6. Your Rights
We want to inform you about your rights concerning the processing of your personal data by us. If you have any questions concerning your rights or if you want to exercise one or several of your rights towards us please send us an e-mail to dataprivacy@olympus-europa.com.
6.1 Right to withdraw the data protection declaration of consent (Article 7 para. 3 GDPR)
In case that the processing of your data by us is based on your explicit consent you have the right to withdraw this consent at any time. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawal. You will be informed about this right before you give your consent.
6.2 Right to information (Article 15 GDPR)
In accordance with Article 15 GDPR, you have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you have a right to information about these personal data and to the following information: [list the information according to Article 15 GDPR]. When personal data is transferred to a third country or an international organization you have the right to be informed about appropriate safeguards to ensure that the recipients are also in compliance with the provisions of the GDPR.
6.3 Right to correction (Article 16 GDPR)
You can request us to correct any incorrect data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
6.4 Right to deletion or "right to be forgotten" (Article 17 GDPR)
You have the right to request the immediate deletion of your data if one of the following reasons applies:
- data is no longer necessary for the purposes for which they were collected or otherwise processed,
- you withdraw your consent on which the processing was based and there is no other legal basis for the processing,
- you oppose to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation and there are no overriding legitimate grounds for processing,
- you oppose to the processing for direct marketing in accordance with Article 21 para. 2 GDPR,
- the data have been processed unlawfully,
- the deletion of data is necessary to fulfil a legal obligation under European or German law,
- the data were collected in relation to an offer of information society services directly to a child provided in accordance with Article 8 para. 1 GDPR.
We will comply with the request for deletion unless we are legally obliged or entitled to continue storing and processing your data. In particular legal retention periods are considered as legal obligations. Furthermore we are entitled to continued storage if we are unable to assert, exercise or defend legal claims without your data.
If we have made your data public and are obliged to delete it, we will take appropriate measures, taking into account the available technology and the implementation costs, to inform those responsible if you have also requested the deletion from them.
6.5 Right to limitation of processing (Article 18 GDPR)
In accordance with Article 18 GDPR, we may only process data to a limited extent in the following cases:
- you dispute the accuracy of your data until we are able to verify its accuracy,
- the processing is unlawful and you refuse to delete your data and instead request that the use of personal data be restricted,
- we no longer need the data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
- you object to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation, as long as it is not yet clear whether the legitimate reasons for the processing by us outweigh your interests.
If processing has been restricted we may only store this data. Any further processing in such case is only permissible with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. You can revoke your consent given in this connection at any time. You will be notified by us before the restriction is lifted.
6.6 Notification Obligation regarding Rectification or Erasure of Personal Data (Article 19 GDPR)
We are obliged to inform all recipients to whom your data have been disclosed about a correction or deletion of your data or a restriction of the processing. This shall not apply if it is impossible or involves a disproportionate effort. We will inform you about these recipients if so requested.
6.7 Right to data transferability (Article 20 GDPR)
You have the right to receive the data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to instruct us with the transmission of your data to a third party, provided that
- the processing of the data is based on your consent or on a contract and
- processing is carried out using automated methods.
You may request that we transfer your data directly to the third party if this is technically feasible.
However, this right must not impair the rights and freedoms of other persons, including our company. If this is the case, we are entitled to refuse the delivery or transfer of your data.
6.8 Automated Decision in Individual Cases including Profiling (Article 22 GDPR)
On our websites your data is not subject of decisions made exclusively on the basis of automated processing (e.g. profiling). You have the right not to be subject to a decision based exclusively on automated processing - including profiling - if this has legal effect against you or significantly impairs it in a similar manner.
6.9 Right to Object (Article 21 GDPR)
If we process your data on the basis of a legitimate interest (Article 6 para. 1 lit. f GDPR), you have the right to object to this if the reasons for this arise from your particular situation. This also applies to profiling based on these provisions.
In this case, we will no longer process your data unless we can prove compelling reasons worthy of protection for the processing. This must outweigh your interests, rights and freedoms, or processing serves to assert, exercise or defend legal claims.
If we process your data for direct marketing purposes, you may object to the processing of your data. This also applies to profiling insofar as it is connected with such direct advertising.
After your objection your data will no longer be processed for these purposes.
6.10 Right of Appeal to a Supervisory Authority (Article 77 GDPR)
You have the right to complain to a supervisory authority, in particular in the Member State where you are staying, working or suspect that an infringement of the General Data Protection Regulation against you has taken place. Other administrative or judicial remedies that you may be entitled to remain unaffected.