Privacy Policy

Protecting your personal data is important to us. We process your personal data exclusively in accordance with the applicable data protection legislation, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This Privacy Policy explains which personal data we process when you visit our website, the purposes for which it is processed, and the rights you have as a data subject.

1. Data Controller

CLARACARE GmbH
Jülicher Straße 72a
52070 Aachen
Germany

Phone: +49 178 3002051
Email: mail@upglasses.org

2. Data Protection Officer

We have appointed a Data Protection Officer. You can contact them at:
Email: dataprotection@upglasses.org

3. General Information on Data Processing

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, email address, telephone number or IP address.

We process personal data only where there is a legal basis for doing so. Depending on the nature of the processing, this is based in particular on:

• your consent pursuant to Article 6(1)(a) GDPR;
• the performance of a contract or the implementation of pre-contractual measures pursuant to Article 6(1)(b) GDPR;
• compliance with a legal obligation pursuant to Article 6(1)(c) GDPR; or
• our legitimate interests pursuant to Article 6(1)(f) GDPR, provided that your interests or fundamental rights and freedoms do not override those interests.

4. Website Hosting

Our website is hosted on the Odoo Online cloud platform.

For the operation of our website, we use Odoo S.A. as our technical service provider. Where Odoo processes personal data on our behalf, this is carried out on the basis of a Data Processing Agreement in accordance with Article 28 GDPR.

When you access our website, the hosting provider automatically processes technical information required to make the website available and to ensure its security and stability.

This may include in particular:

• IP address of the requesting device;
• date and time of access;
• pages and files accessed;
• volume of data transferred;
• browser type and browser version;
• operating system used;
• referring URL;
• information on successful or unsuccessful access requests.

The processing is carried out to ensure the secure and reliable operation of the website and to protect against attacks and misuse.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, stable and efficient online service.

5. Server Log Files

When you visit our website, certain technical information is automatically stored in so-called server log files.

These data are used exclusively for:

• ensuring the reliable operation of the website;
• maintaining IT security;
• analysing technical errors; and
• preventing and investigating misuse or unauthorised access.

The processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR.

6. Cookies and Consent Management

Our website uses cookies. Cookies are small text files stored on your device that contain certain information. They help us provide a user-friendly, secure and technically functional website.

Some cookies are essential for the operation of the website and are set automatically. Other cookies are only used with your consent.

When you visit our website for the first time, you can choose which categories of optional cookies you wish to allow through our consent management system. You may change or withdraw your consent at any time with future effect.

Depending on the type of cookie, processing is carried out:

• on the basis of your consent pursuant to Article 6(1)(a) GDPR;
• on the basis of our legitimate interest in the technically flawless provision of our website pursuant to Article 6(1)(f) GDPR;
• on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG); or
• on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR in conjunction with Section 25(2) TDDDG.

Further information about the cookies we use can be found in our Cookie Policy.

7. Web Analytics with Plausible Analytics

We use Plausible Analytics to analyse and optimise our website.

The purpose of the web analytics is solely to evaluate the use of our website statistically and to continuously improve our services. Only aggregated usage data are processed.

Plausible Analytics operates within our Odoo Online environment. According to the provider, the service is designed with privacy in mind and does not create user profiles or track visitors across different websites.

The collected data are used exclusively to generate aggregated usage statistics.

The processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in analysing and improving our online services.

8. Contact Form

If you contact us using our contact form, we process the personal data you provide solely for the purpose of handling your enquiry and communicating with you.

Depending on the nature of your enquiry, the following data may be processed:

• name;
• email address;
• company;
• telephone number (where provided);
• the content of your message;
• the date and time of your enquiry.

The information marked as mandatory is required in order to process your enquiry. Any additional information is provided voluntarily.

Processing is carried out:

• for the implementation of pre-contractual measures pursuant to Article 6(1)(b) GDPR where your enquiry relates to the conclusion of a contract; or
• on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR in responding to general enquiries.

Your data will only be retained for as long as necessary to process your enquiry or where statutory retention obligations apply.

Please do not submit any health data or other special categories of personal data within the meaning of Article 9 GDPR via the contact form unless we have expressly requested you to do so.

9. Google Maps

This website uses the Google Maps API, a mapping service that displays maps and provides directions to help you locate our premises.

For users in the European Economic Area and Switzerland, Google Maps is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For users outside these regions, the service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

When you visit our website, Google receives information about your access to our website and, where applicable, additional log data. Google stores and processes this information for advertising, market research, and the improvement of its own services. Cookies used by Google Maps are generally not deleted when you close your browser but expire after a certain period (up to six months) unless deleted earlier.

If you access Google Maps while logged into your Google account, Google may associate your visit with your Google profile. If you do not wish this association to occur, you must log out of your Google account before visiting our contact page.

Where personal data is transferred to the United States, such transfers are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework.

The legal basis for the use of Google Maps is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG, which you provide via our cookie banner.

The purpose of the processing is to improve the usability of our website and make our location easier to find.

You may withdraw your consent at any time with future effect via our cookie banner.

You can also prevent data transmission to Google by disabling JavaScript in your browser. Please note that, in this case, you will not be able to use the map display.

Further information about Google's processing of personal data can be found at: 
Google Privacy & Terms.

10. LinkedIn

We maintain a company profile on LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn") to communicate with interested parties and provide information about our products and services:

As part of operating our LinkedIn presence, we may receive aggregated statistics provided by LinkedIn regarding the use of our page. These statistics may include demographic information (such as age, gender, region, or country), employment-related information (such as job title, function, industry, professional experience, or company size), and interaction data (such as likes, shares, followers, and views of images and videos). These statistics may also provide information about users' interests and which content is particularly relevant to them.

We may use this information to improve the design of our LinkedIn presence and optimise our content. The collection and use of these statistics are subject to joint controllership with LinkedIn.

Further information regarding joint controllership, the scope of these statistics, and LinkedIn's contact details can be found in the LinkedIn Page Insights Joint Controller Addendum (the “Addendum”).

The legal basis for this processing is Article 6(1)(b) GDPR where communication relates to existing or prospective contractual relationships and Article 6(1)(f) GDPR based on our legitimate interest in effective communication and information.

We have no influence over the processing of data carried out independently by LinkedIn under its own terms of use. Please note that your usage behaviour may be transmitted to LinkedIn when you visit our page. LinkedIn may process this information to create more detailed statistics and for its own market research and advertising purposes. Cookies and other identifiers may be stored on users' devices for this purpose. Based on these user profiles, advertisements may be displayed both within LinkedIn and on third-party websites.

Further information is available in the LinkedIn Privacy Policy.

Where we receive your personal data through our LinkedIn presence, you have the rights described in this Privacy Policy. If you wish to exercise your rights directly against LinkedIn, we recommend contacting LinkedIn directly, as LinkedIn has access to the relevant technical information and can implement appropriate measures. We will support you where possible and forward your request where appropriate.

11. Your Rights

Where your personal data is processed, you have the following rights under the GDPR: 

The right of access (Article 15 GDPR).

As well as the right to rectification (Article 16 GDPR).

Where the applicable legal requirements are met, you are also entitled to the following rights:

• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to notification (Article 19 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object (Article 21 GDPR)
• Right to withdraw consent at any time with future effect (Article 7(3) GDPR)

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR.

Right to Object (Article 21 GDPR):

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data where such processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR. This also applies to profiling based on those provisions.

We will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or the processing serves the establishment, exercise, or defence of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing. This also applies to profiling insofar as it is related to direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes.

You may also exercise your right to object by automated means using technical specifications where available.

You also have the right, pursuant to Article 7(3) GDPR, to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of your personal data violates the GDPR.

The competent supervisory authority in North Rhine-Westphalia is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Germany

Phone: +49 211 38424-0
Fax: +49 211 38424-999
Email: poststelle@ldi.nrw.de

12. Changes to this Privacy Policy