Privacy Policy

Thank you for visiting our website. Compliance with data protection regulations is of particular importance to us. The aim of this privacy policy is to inform you as a user of the website about the type, scope and purpose of the processing of personal data and your existing rights, insofar as you are a data subject within the meaning of Art. 4 No. 1 of the General Data Protection Regulation.

1. Responsible Party

This website and the services offered are operated by:

Nikon SLM Solutions AG

Estlandring 4

23560 Luebeck

Germany

E-Mail: [email protected]

Phone: +49 451 4060-3000

Fax: +49 451 4060 -3250

2. Data Protection Officer

We have appointed a data protection officer.

www.mein-datenschutzbeauftragter.de

Herr Philipp Herold

Hafenstraße 1a

23568 Luebeck

Germany

E-Mail: [email protected]

3. General information

We have designed the website to collect as little data as possible from you.

In doing so, we always ensure that your personal data is only processed in accordance with a legal basis

or consent given by you. We comply with the provisions of the General Data Protection Regulation (GDPR) in

force since 25.5.2018 and the applicable national regulations, such as the Federal Data Protection Act, the

Telecommunications Telemedia Data Protection Act or other more specific laws on data protection.

4. Purpose and legal basis of the processing of personal data

We always process your personal data for a specific purpose. In summary, we process your personal data for the following purposes:

To be able to process your request when you contact us (e.g. e-mail address, first name, surname, company name, region),
For the technical realization of our website and to be able to provide you with our information on this website (e.g. IP address, cookies, browser information),
To send a newsletter with information about our range of services and news about our services (e.g. name, e-mail address),
To receive and process an application from you for one of our open job positions,
To enable you to interact with our chat function,
To enable you to download various white papers and case studies
To enable you to participate in webinars.
To enable you to use our partner channels

The following applies with regard to the legal basis for the processing of your personal data:

We process personal data that is required for the establishment, implementation or processing of our range of services (contract processing) on the legal basis of Art. 6 para. 1 lit. b GDPR. Insofar as we obtain your consent for the processing of your personal data, the consent pursuant to Art. 6 para. 1 lit. a GDPR forms the legal basis for data processing. Data processing is also permitted if we process your data to protect our legitimate interests and your interests or fundamental rights and freedoms with regard to the processing of personal data do not predominate. (Art. 6 para. 1 lit. f GDPR) Insofar as we use external service providers as part of commissioned data processing, the processing is carried out on the legal basis of Art. 28 GDPR.

5. Collection of personal data when visiting our website

If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

IP-address
Date and time of the request
Time difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP-Status code
Amount of data transferred in each case
Website from which the request originates
Browser
Operating system and its interface
Language and version of the browser software

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers.

We use the following hoster:

IONOS SE

Elgendorfer Str. 57

56410 Montabaur

Data Processing

We have concluded a data processing agreement (DPA) with the aforementioned provider. This is a contract prescribed by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Further information on this can be found under “Cookies” in this privacy policy and in the consent management tool used.

6. Integration of services from other providers

Our website uses content and services from other providers. These are, for example, services for the statistical analysis of the use of and visits to our website. In order for this data to be accessed and displayed in the user's browser, it is necessary to transmit the user's IP address to the third-party providers used.

Despite our efforts to only use third-party providers who only need the IP address to deliver content or even work with anonymized IP addresses, we have no influence on whether the IP address may be stored. Information on the third-party providers used can be found below in this privacy policy. We regularly review the implemented third-party providers to ensure that the data protection notices are always up to date to the best of our ability.

Unpkg CDN

Type and scope of processing

We use Unpkg CDN to properly provide the content of our website. Unpkg CDN is a service of Cloudflare, Inc. which acts as a content delivery network (CDN) on our website.

A CDN helps to make the content of our online services, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to Cloudflare, Inc. servers, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Unpkg CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in the secure and efficient provision and optimization of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Storage duration

The specific storage duration of the processed data cannot be influenced by us, but is determined by Cloudflare, Inc. Further information can be found in the privacy policy for Unpkg CDN: www.cloudflare.com/privacypolicy/.

Adobe Typekit

Type and scope of processing

We use Adobe Typekit from Adobe Inc, San Jose, California, US, as a service to provide fonts for our online services. To obtain these fonts, you establish a connection to Adobe Inc. servers, whereby your IP address is transmitted.

Purpose and legal basis

The use of Adobe Typekit is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Adobe Inc. Further information can be found in the privacy policy for Adobe Typekit: www.adobe.com/de/privacy/policies/adobe-fonts.html.

CloudFlare

Type and scope of processing

We use Cloudflare CDN to properly deliver the content of our website. Cloudflare CDN is a service of Cloudflare, Inc. which acts as a content delivery network (CDN) on our website.

A CDN helps to provide the content of our website, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to Cloudflare, Inc. servers, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Cloudflare CDN.

Purpose and legal basis

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Cloudflare, Inc. Further information can be found in the privacy policy for Cloudflare CDN: www.cloudflare.com/privacypolicy/.

Google Analytics

Type and scope of processing

We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical analysis of our online services. This includes, for example, the number of visits to our website, the time spent on the website, subpages visited or the browser used. Google Analytics 4 uses cookies, scripts and pixels to evaluate user behaviour, as well as algorithms based on machine learning, which automatically analyze event data such as scrolling movements. This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but it is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Fonts

Type and scope of processing

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online services. To obtain these fonts, you establish a connection to the servers of Google Ireland Limited, whereby your IP address is transmitted.

Purpose and legal basis

The use of Google Fonts is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

Google ReCaptcha

Type and scope of processing

We have integrated Google reCAPTCHA components on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request comes from a natural person or is automated by means of a program. When you access this content, you establish a connection to the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the time spent on the website and the user's mouse movements in order to distinguish automated requests from human requests. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.

Purpose and legal basis

The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

Cookies are small text files that are stored on your data carrier and save certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent, as well as information about the age of the cookie and an alphanumeric identifier.

Cookies enable our systems to recognize the user's device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard disk of the user's computer. Cookies help us to improve our website and offer you a better and more personalized service. They enable us to recognize your computer or (mobile) device when you return to our website and thus:

To store information about your preferred activities on the website and thus tailor our website to your individual interests.
To speed up the processing of your requests.

We work together with third-party services that help us to make the Internet offer and the website more interesting for you. Therefore, cookies from these partner companies (third-party providers) are also stored on your hard disk when you visit the website. These are cookies that are automatically deleted after the specified time.

For more information on the individual third-party providers, please refer to the Cookie Consent Tool and the data protection information contained therein.

If you do not wish to use browser cookies, you can set your browser so that the storage of cookies is not accepted. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the “Block third-party cookies” setting in your browser. We assume no responsibility for the use of third-party cookies.

8. Contacting (contact forms, request for quotations)

You can contact us by e-mail or via our contact form (offer form for business customers). In this case, we store the personal data you provide in order to process your request and to contact you to process your request. Where we request information via our contact form, we have marked the mandatory fields required for making contact accordingly (asterisk). The voluntary information is used to specify your request and to improve the processing of your request. The requested data is transmitted to us by you on a purely voluntary basis.

Depending on the type of request, the legal basis for this processing is Art. 6 para. 1 lit. b GDPR for requests that you make yourself as part of a pre-contractual measure or Art. 6 para. 1 sentence 1 lit. f GDPR if your request is of a different nature. The legitimate interest follows from the purposes mentioned under point 4 a.). If personal data is requested that we do not need for the fulfillment of a contract or to protect legitimate interests, it will be transmitted to us on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

9. Partner Channels

You have the option of accessing various documents and files on our website via our partner channels. To do this, you must register with us with a name, company, e-mail address and password to gain access to the channels. After logging in, you can read and download the various files via the partner channels. We only process the technically necessary data for the provision of the service and the data specified above. The processing of your data is based on our legitimate interest in the secure provision of the files in accordance with Art. 6 para. 1 lit. f of the GDPR. Registration for the portal is voluntary, but cannot be used without providing the above data. Your data will not be passed on to third parties and will only be stored until the purpose of processing no longer applies and no statutory retention periods prevent deletion.

10. Job application procedure

We publish job vacancies on our website that you can apply for by e-mail. If you decide to apply for an open position, we will process the personal data you provide there and transmit to us exclusively for the purpose of carrying out the application process.

The legal basis for the processing of your personal data as part of the application process is Section 26 (1) in conjunction with (2) BDSG.

In the event of a decline, we will delete your data as soon as a retention period of 6 months, as required by labor law, has expired. This period begins when the rejection is sent. If you have expressly consented to the further use of your data for subsequent contact regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent.

If an employment relationship is established following the application process, the data will initially continue to be stored to the extent necessary and permissible and then transferred to the personnel file.

Data will only be transferred to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations or if you have given your consent.

The provision of personal data in the context of application processes is neither legally nor contractually required. You are therefore not obliged to provide the personal data. However, the provision of personal data is necessary for the decision on an application or the conclusion of a contract of employment with us. However, you should only provide such personal data in your application as is necessary for the acceptance and execution of the application. If you do not provide us with any personal data in an application, we cannot make a decision on the establishment of an employment relationship.

Please note that applications that you send to us by e-mail are transmitted unencrypted. In this respect, there is a risk that unauthorized persons may intercept and use this data.

11. Presence in social media

In order to present our company in the best possible way and to communicate with you as a user, customer or interested party and to inform you about the services we offer, we make use of our presence on social networks. When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection as exists in the EU cannot be guaranteed in all countries outside the EU. In this context, there may be risks for you as a user if the transferred data is processed in so-called third countries with an inadequate level of data protection.

This makes it more difficult to enforce known user rights. In addition, your data may not be processed in your interest by the provider in the third country. We only transfer personal data to third countries for which an adequate level of protection has been confirmed or if the transfer of personal data can be ensured by contractual agreements or other suitable guarantees.

In addition to the respective provider of a social network, we also collect and process personal user data on so-called “fan pages”. This notice informs you which data we collect from you on our social media sites, how we use it and how you can object to the use of your data. The respective data processing purposes and data categories can be found in the respective offer listed in more detail below.

The activities in social media operated by us and described in more detail below are carried out on the basis of a balancing of interests in accordance with Art. 6 para. 1 lit. f) GDPR.

To achieve this, cookies are used which record user behavior and enable the user to be profiled. A specific list of the purposes for which user data is processed can be found in the data protection notices of the respective providers. By making the appropriate settings in your user account, you can restrict profiling, at least to a certain extent. For the exact procedure, please read the relevant data protection information of the respective provider.

The relevant platforms are:

Platform	Responsible Party	Data protection information of the platform providers
YouTube	Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland --	policies.google.com/privacy
X	Twitter International Unlimited Company Attn: Data Protection Officer One Cumberland Place, Fenian Street Dublin 2, D02 AX07 IRELAND --	x.com/en/privacy
LinkedIN	LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland --	de.linkedin.com/legal/privacy-policy?
Instagram		privacycenter.instagram.com

Nikon SLM Solutions AG operates profiles on the listed platforms in order to draw attention to products and services and to interact with customers, interested parties and other users of the platform.

The platform operators also use certain data that they have collected from users of the platform (e.g. whether a photo on a profile has been marked with “Like” or commented on) to create aggregated usage statistics and make them available to the respective operators of the profile (so-called “insights” or “analytics”). We as the profile operator also receive such usage statistics. The information we receive as profile operators does not allow us to draw any conclusions about individual users. The profile operator itself has no access to personal data that the platform operator processes for the creation of usage statistics. Only the respective platform operator determines which data is processed for these purposes and how. As the profile operator, Nikon SLM Solutions AG has no legal or actual influence on the processing by the platform operators.

For processing in connection with the creation of usage statistics, Nikon SLM Solutions AG and the respective platform operator are considered joint controllers within the meaning of Art. 26 GDPR. Where possible, joint controllership agreements are in place with the respective platform operators.

In addition, data processing by Nikon SLM Solutions AG as the profile operator only takes place to a very limited extent:

Processing of usernames and comments that are deleted due to a breach of netiquette. These will be retained within the limitation period to provide any necessary evidence in the event of legal disputes.
Processing of usernames and individual messages when you contact us via messenger services
Recruiting potential applicants on career platforms

For these purposes, we generally only process your name, message content, comment content and the profile information you have provided “publicly”.

12. Whitepaper-Download

You have the option of asking to receive various white papers on our website. For this purpose, we generally collect your e-mail address and company name. You are also free to provide further information, such as your telephone number. The whitepapers are provided on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You have the option to withdraw your consent at any time. The lawfulness of the processing of your data remains unaffected until the time of revocation. Your data will no longer be processed for the stated purpose after you withdraw your consent.

13. Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration your information will be blocked and cannot be used for any other purpose. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

Your personal data may be processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the GDPR.

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by e-mail to [email protected] or by sending a message to the contact details given in the imprint.

14. Rights of the data subject

You have the right:

to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, conclusive information about its details;
in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller (data portability);
in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future and
to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to [email protected].

15. Forwarding your personal data

Your personal data will be passed on as described below.

Data will also be passed on if we are entitled or obliged to pass on data due to legal provisions and/or official or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.

If your data is passed on to service providers to the extent necessary, they will only have access to your personal data to the extent necessary to fulfill their tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the GDPR. Insofar as your personal data is processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR, we ensure that the processing of personal data is carried out in accordance with the GDPR.

We place great importance on processing your data within the EU/EEA. However, we may use service providers who process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient before your personal data is transferred. This can be achieved, for example, by means of EU standard contracts or binding corporate rules or special agreements to which the company may be subject.

16. Data Security

We use technical and organizational measures to secure our website against loss, destruction, access, modification or dissemination of your data by unauthorized persons.

In particular, your personal data is transmitted to us in encrypted form. We use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) coding system. Our security measures are continuously improved in line with technological developments.

17. Storage duration for the personal data

With regard to the storage period, we delete personal data as soon as its storage is no longer necessary for the fulfillment of the original purpose and there are no longer any statutory retention periods. The statutory retention periods form the criterion for the final duration of the storage of personal data. After the period has expired, the corresponding data is routinely deleted. If there are retention periods, processing is restricted by blocking the data.

18. References and links

When accessing Internet pages to which reference is made on our website, you may again be asked for information such as your name, address, e-mail address, browser properties, etc. This privacy policy does not regulate the collection, disclosure or handling of personal data by third parties.

Third-party service providers may have different and separate provisions regarding the collection, processing and use of personal data. It is therefore advisable to inform yourself on the websites of third parties about their practices regarding the handling of personal data before entering personal data.

Status: September 2024