RESPONSIBILITY FOR DATA PROCESSING
Smart Dry Eyes GmbH
Stralauer Allee 14
10245 Berlin
Email: info@smartdryeyes.com
Collection of Personal Data When Visiting Our Website
Provision of Data
In general, you are not legally or contractually required to provide personal data in order to use our website. If the provision of data is necessary for concluding a contract, or if the user is obliged to provide personal data, we will inform you of this and the consequences of not providing such data in this privacy policy.
Data Transfers to Third Countries
We may use service providers and third-party vendors located in countries outside the European Union and the European Economic Area. The transfer of personal data to such third countries takes place—unless based on the user’s consent—either under an adequacy decision by the European Commission (Art. 45 GDPR) or with appropriate safeguards to ensure data protection (Art. 46 GDPR). If an adequacy decision exists for the transfer to a third country, we will indicate this in this privacy policy. Otherwise, users may request a copy of the appropriate safeguards unless already included in the privacy policies of those service providers or third parties.
Automated Decision-Making
Should we perform any automated decision-making, including profiling, we will inform you in this privacy policy about this fact, the underlying logic, and the significance and intended effects of such processing. In all other cases, no automated decision-making takes place.
Processing for Other Purposes
Data is generally processed only for the purposes for which it was collected. If, in exceptional cases, it is processed for other purposes, we will inform you beforehand and provide all relevant information (Art. 13(3) GDPR).
Data Processing When Visiting the Website
Whenever a user accesses our website, their browser transmits various data. During the website visit, the following data is processed and stored in log files even after the session ends:
- Browser type and version
- Operating system
- Pages and files accessed
- Transferred data volume
- Date and time of access
- User’s internet provider
- IP address
- Referrer URL
Processing this data is necessary to deliver the website to the user and optimize it for their device. Storage in log files helps improve the security of our website (e.g., protection against DDoS attacks).
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website and improving its security. Log files are automatically deleted after six months.
Cookies, Tracking Pixels, and Mobile Identifiers
We use technologies on our website to recognize the device being used. These may include cookies, tracking pixels, and/or mobile identifiers.
Recognizing a device may serve different purposes. It may be necessary to provide certain features of our website, such as a shopping cart. These technologies may also be used to track user behavior on the site, e.g., for advertising purposes. The specific technologies we use and their purposes are described separately in this privacy policy.
Here’s a general explanation of how these technologies work:
- Cookies are small text files containing specific information stored on the user’s device. They typically include an identification number (cookie ID) assigned to a device.
- Tracking pixels are transparent image files embedded in web pages that enable log file analysis.
- Mobile identifiers are unique numbers (Mobile ID) stored on a mobile device and can be read by a website.
Some cookies are necessary for our website to function properly. The legal basis for such cookies is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing essential website features.
Non-essential cookies are used to make our website more user-friendly or to track usage. The legal basis depends on whether we obtain the user’s consent or can rely on a legitimate interest. Users may revoke their consent at any time via their browser settings.
Users can prevent or object to data processing via cookies by adjusting their browser settings. However, doing so may limit the availability of certain website features. We provide more information about objection options in this privacy policy. Where applicable, we also provide opt-out links.
To manage user consent for cookies, we use Borlabs Cookie, a WordPress plugin that does not transmit personal data to third parties. You can manage your cookie preferences here: Cookie Settings
Contact
When users contact us, we process their information, along with the date and time, for the purpose of handling the inquiry, including any follow-up questions.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest is in responding to user inquiries. If the inquiry relates to the fulfillment of a contract or pre-contractual measures, the legal basis is additionally Art. 6(1)(b) GDPR.
Data is deleted once the inquiry and any follow-ups are resolved. We review, at least every two years, whether data collected through user contact should be deleted.
Other Third-Party Services
Google Analytics
We use Google Analytics to analyze the use of our website.
Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
To track user activity on the website, a cookie is placed on the user’s device. We use Google Analytics with the “anonymize IP” extension, which shortens the user’s IP address before it is transmitted to servers in the USA. Data evaluated includes approximate location, device type, screen resolution, browser, and visited pages including time spent on them.
Personal data is only processed with the user’s consent under Art. 6(1)(a) GDPR.
Data collected by Google Analytics is automatically deleted after 14 months.
Opt-Out:
Google Analytics Privacy Policy