Data protection declaration / duty to provide information according to §5 TMG & Art. 13/14 GDPR, European Union as well as applicable laws across world

At HOYA Medical Singapore Pte. Ltd. and its affiliates (“HSO”), we believe the protection of personal data involves far more than just complying with legislation. We are therefore happy that you are interested in how we handle personal data.
We always process personal data such as a person’s name, address, e-mail address, or phone number in accordance with applicable privacy law.
With this privacy notice, we would like to inform everyone about the nature, scope, and purpose of the personal data that we collect, use, and process. Furthermore, we would like to explain to the persons concerned the rights to which they are entitled.
HSO has implemented numerous technical and organizational measures to ensure that the personal data processed via this Web site is protected as comprehensively as possible.
Despite the care we take, Internet-based data transmission is vulnerable to security flaws and, consequently, absolute protection can never be guaranteed. For this reason, you of course have the option of transmitting your personal data by alternative means, for example, by telephone or post.

Name, Address, and Contact Details of the Entity Responsible

HOYA Medical Singapore Pte. Ltd. (Global Headquarter, HSO)
Nobuhiko Shibata
10 Biopolis Road, Chromos, Level Four, Singapore 138670

Singapore
Phone: +65 6681 0000
Email: infra-info@hoya.com
Internet: http://hoyasurgicaloptics.com/

Privacy Officer Contact Details
The Privacy Officers for the data controller are:

Kimiyoshi Shimura
HOYA Medical Singapore Pte. Ltd. (Global Headquarter, HSO)
Phone: +65 6681 0055
Email: HSO-Privacy@hoya.com

Purposes and Legal Grounds for Processing Data – When Visiting Our Web Site in General
Should you use our Web site purely for informational purposes, not register yourself, or convey information to us in some other way (e.g. by e-mail), we will only collect the data that your browser transfers to our server (“server log files”). This data is processed in accordance with GDPR art. 6(1)(f) on the basis of our legitimate interest in improving the stability and functionality of our Web site. This data is not used in any other way and in no way shared with third parties. However, we do reserve the right to analyze log files at a later date if there are reasons to suspect unlawful usage.

Purposes and Legal Grounds for Processing Data – Contact Form
When you contact us (e.g. using our contact form or by e-mail), we collect personal data. This data is stored and used exclusively for the purposes of answering your inquiry and for the associated technological administration. Our legitimate interest in responding to your inquiry forms the legal grounds for processing this data, in accordance with GDPR art. 6(1)(f). If you contact us for the purpose of entering into a contract, there are additional legal grounds for processing provided in GDPR art. 6(1)(b). Your data will be erased once your inquiry has been conclusively resolved. This is the case if it can be assumed that the relevant matter has been completely resolved and if there are no statutory retention periods barring us from erasing the data.

Purposes and Legal Grounds for Processing Data – Newsletter Function
Upon registering for our e-mail newsletter, we will regularly send you information about our company and our offers. The only information that is required for us to send the newsletter is your e-mail address. You may provide other data voluntarily so that we can address you by name. We use the double opt-in method to send out our newsletter. This means that we will only send you an e-mail newsletter if you have explicitly confirmed that you give your consent to us sending newsletters. We will then send you a confirmation e-mail asking you to confirm your desire to receive future newsletters by clicking on a corresponding a link.
By clicking on the confirmation link, you grant us permission to use your personal data in accordance with GDPR art. 6(1)(a). When you register for our newsletter, we save the IP address assigned by your Internet service provider (ISP) along with the date and time of registration so that we can trace any misuse of your e-mail address at a later point in time. The data that we collect when you register for the newsletter is used exclusively for promotional purposes in the form of our newsletter. You can unsubscribe from the newsletter at any time by using the link provided for this in every newsletter. When you unsubscribe, your e-mail address will be immediately deleted from our newsletter mailing list, provided that you have not given your explicit consent to us continuing to use your data or that we do not reserve the right to use the data beyond the given scope in a manner legally allowed and about which we inform you in this notice.

Recipients or Categories of Recipients
Your data is processed by web providers or forwarded to IT service providers.

Transfer to Non-EU/EEA Country
Your data will probably be processed outside the EU or transferred to non-EU/EEA countries: USA and Singapore.

Notice About Profiling and Scoring
Profiling and scoring does not take place.

Deletion Dates
The controller processes and stores the data subject’s personal data only for the period of time required to achieve the purpose for which it is stored or only if the controller is required to store data on account of legislation or regulations that are passed by European Union legislators and regulators, or other legislators, and the controller is subject to this legislation or these regulations.

Should there no longer be any reason to store the data or if a retention period prescribed by a European Union directive or regulation or by other relevant law expires, the personal data will be restricted from processing or deleted as a matter of routine and in accordance with statutory regulations.

Notice of Right to Object When Consent Is Selected as Legal Grounds
You have the right at any time to withdraw any consent given to the processing of your data. If you withdraw your consent, we will immediately delete the data concerned, provided there are no other legal grounds to support further processing. If you withdraw your consent, it will not affect the legality of the processing operations conducted until the time of the withdrawal.

Notice About Profiling and Scoring
Google Analytics, Piwik/Matomo

Rights of the Data Subject
You can request information about the personal data concerning you that we have stored by writing to the above address. Moreover, in certain situations you can request to have your data rectified or erased.

You may additionally have the right to have the processing of your data restricted as well as the right to obtain the data you have provided in a structured, commonly used, and machine-readable format.

In addition, you have the right to complain to a supervisory authority for data protection. The supervisory authority with jurisdiction over us is:
            
[Singapore]
Personal Data Protection Commission
10 Pasir Panjang Road, #03-01 Mapletree Business City Singapore 117438
Phone: +65 6377 3131
Fax: +65 6577 3888
           
           
Cookies
The Web site for HSO uses cookies. Cookies are text files that are downloaded and stored on a computer system through a Web browser.
There are numerous Web sites and servers that use cookies. Many cookies contain what is called a cookie ID, which acts as a unique identifier for the cookie. The ID consists of a sequence of characters through which Web sites and servers can recognize the specific Web browser in which the cookie was saved. This makes it possible for the visited Web sites and servers to differentiate between the data subject’s individual browser and other browsers that receive other cookies. Specific Web browsers can thus be recognized and identified using the unique cookie ID.

By using cookies, HSO can provide Web site users with more user-friendly services that would otherwise not be possible.
The use of cookies optimizes the information and offerings on our Web site for the user’s benefit. Cookies enable us to recognize the people using our Web site, as described above. The reason we seek to recognize users is so that we can make it easier for them to use our Web site. A person who uses a Web site that saves cookies, for example, does not have to repeatedly log in every time he/she visits the site, as the Web site and the cookie saved on the user’s computer take care of it for him/her. Another example is the cookie saved for a shopping basket in an online shop. The online shop remembers the items the customer puts in his/her virtual basket by using a cookie.

The data subject can at any time stop cookies being saved by our Web site by activating the corresponding settings in his/her Web browser and, in doing so, permanently object to cookies being saved. Furthermore, cookies that have already been saved can be deleted at any time using the Web browser or other software programs. This is a function available in all common Web browsers. If the data subject deactivates his/her Web browser’s cookie-saving function, it may in some cases no longer be possible to use the complete functionality of our Web site.

Data Protection Provisions for the use of the web analytics service Piwik/Matomo
This website uses the open source web analytics service Piwik/Matomo. Piwik/Matomo uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before it is stored.
You can prevent these cookies being stored by selecting the appropriate settings in your browser.
However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website.
If you do not agree with the storage and use of your data, you can disable this feature here(Opt-out).
In this case, an opt-out cookie will be stored in your browser to prevent Piwik/Matomo from storing your usage data.

Data Protection Provisions for the use of Google Analytics (with Anonymization Function)
The controller has integrated the Google Analytics component into this Web site (using the anonymization function). Google Analytics is a Web analytics service. Web analytics involves the collection, storage, and analysis of data regarding the behavior of Web site visitors. A Web analytics service records data that includes the Web site from which a data subject has arrived at another (called the “referrer”), the sub-sites that are accessed on a Web site, and the length of time spent on a sub-site. Web analytics is used primarily to optimize Web sites and for cost-benefit analyses on Internet advertising.
The company operating the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.
The controller adds the “_gat.anonymizelp” feature for the Web analytics service provided by Google Analytics. This extension abbreviates and anonymizes the IP address of the data subject’s Internet connection when our Web site is visited from a member state of the European Union or European Economic Area.
The purpose of the Google Analytics component is to analyze visitor traffic to our Web site. Google uses the acquired data and information for purposes such as analysis of our Web site’s usage, composing online reports for us that display the activities on our Web site, and rendering other services associated with the usage of our Web site.
Google Analytics saves a cookie on the data subject’s information technology system. There is an explanation of what cookies are earlier in this notice. Saving cookies enables Google to analyze how our Web site is used. Every time an individual page is visited on this Web site, the latter being operated by the controller and featuring an integrated Google Analytics component, the relevant Google Analytics component automatically causes the Web browser on the data subject’s information technology system to transfer data to Google for online analysis. As part of this technological operation, Google gains knowledge of personal data such as the data subject’s IP address, which is used to enable Google to perform actions such as tracking visitor origin and clicks, which is in turn used to calculate commission.
The cookie is used to save personal information, for example time of visit, place the visit was from, and frequency of the data subject’s visits to our Web site. Every time our Web site is visited, this personal data, including the IP address for the data subject’s Internet connection, is transferred to Google in the United States. This personal data is stored by Google in the United States. In some cases, Google shares the personal data collected through these technological processes with third parties.
As already explained above, the data subject can at any time stop cookies being saved by our Web site through his/her Web browser’s corresponding settings and at the same time permanently object to cookies being saved. Web browser settings along these lines generally also prevent Google from saving cookies on the data subject’s information technology system. Furthermore, cookies that have already been saved by Google Analytics can be deleted at any time using the Web browser or other software programs.
Additionally, the data subject has the option of objecting to and preventing the acquisition of data generated by Google Analytics in relation to use of this Web site and objecting to and preventing the processing of this data by Google. To utilize this option, the data subject must download and install a browser add-on available at this link: https://tools.google.com/dlpage/gaoptout. This browser add-on uses JavaScript to tell Google Analytics that data and information on Web site visits must not be transferred to Google Analytics. Installation of the browser add-on is deemed an objection by Google. If the data subject’s information technology system is erased, reformatted, or reinstalled at a later point in time, the data subject will have to reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or a person subject to his/her influence, it is possible to reinstall or reactivate the browser add-on.
You can find more information and Google’s applicable privacy provisions at https://www.google.de/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/us.html. Google Analytics is explained in more detail at https://www.google.com/intl/en_us/analytics/.

Privacy policy for the use and Application of Google Maps
The data controller has integrated Google Maps on this website.

Google Maps (API) is a web service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") to display interactive (land) maps for visual representation of geographical information. By using this service, visitors to the website are shown the company’s location and any directions are made easier.
Information about the use of the respective website (such as the IP address) is transmitted to and stored by Google on servers in the USA as soon as the sub-pages into which the Google Maps map is integrated are accessed. This happens regardless of whether Google provides a user account through which the person concerned is logged in, or whether no user account exists. If the person concerned is logged in to Google, their data will be assigned directly to their account. If this assignment is not desired, the person concerned must log out before activating the button. Google saves the data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular according to art. 6 para. 1 lit. f GDPR on the basis of the legitimate interests of Google in the insertion of personalised advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
If the person concerned does not agree to the future transmission of his/her data to Google as part of the use of Google Maps, it is also possible to completely deactivate the Google Maps web service by switching off the JavaScript application in the browser. Google Maps and therefore also the map display on this website cannot be used.

Google’s terms of use can be viewed at www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website ("Google Privacy Policy"): www.google.de/intl/de/policies/privacy/

Data Protection Provisions for the Use of LinkedIn
The controller has integrated components from LinkedIn Corporation into this Web site. LinkedIn is an online social network that enables users to connect with existing business contacts as well as new ones. LinkedIn has over 400 million registered users in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited Web sites in the world.
The company operating LinkedIn is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, United States. Privacy issues outside of the United States are handled by LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Our Web site features a LinkedIn component (LinkedIn plug-in), which causes the browser used by the data subject to download a corresponding rendering of the component from LinkedIn every time our Web site is visited. You can find more information about the LinkedIn plug-ins at https://developer.linkedin.com/plugins. This technological process involves LinkedIn receiving knowledge of the particular sub-site on our Web site that the data subject is visiting.
Every time the data subject visits our Web site and for the entire length of time he or she spends on our Web site, LinkedIn will identify the specific sub-site on our Web site that the data subject is visiting if he or she is simultaneously logged in to LinkedIn. This information is collected by the LinkedIn component and matched with the data subject’s LinkedIn account by LinkedIn. If the data subject clicks on one of the LinkedIn buttons integrated into our Web site, LinkedIn will match this information with the data subject’s personal LinkedIn account and store this personal data.

The LinkedIn component always informs LinkedIn of the data subject visiting our Web site if the data subject is simultaneously logged in to LinkedIn at the time of visiting our Web site, irrespective of whether the data subject clicks on the LinkedIn component. If the data subject does not want this information to be transferred to LinkedIn in the described manner, he or she can prevent it being transferred by logging out of his or her LinkedIn account before visiting our Web site.
On the Web site https://www.linkedin.com/psettings/guest-controls, LinkedIn offers users the opportunity to unsubscribe from e-mail messages, SMS messages, and targeted advertising and to manage advertising settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, who may store cookies. Users can reject these cookies at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s applicable terms and conditions for privacy can be read at https://www.linkedin.com/legal/privacy-policy. LinkedIn’s cookie policy is available at https://www.linkedin.com/legal/cookie-policy.