Privacy policy

May 24, 2018

This Privacy Policy, hereinafter referred to as "Policy", describes the procedure for the processing of personal data by the online store "Dr.Lensor" represented by SIA "OC Vision", hereinafter referred to as "OC Vision".

This Policy is applicable if the Customer uses, has used or has expressed a wish to use the services provided by OC Vision, or is otherwise related to the services provided by OC Vision, including in relation to the Customer established prior to the entry into force of this Policy.

1.Definitions

Processing - any action or set of activities performed with or without automated means on personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or modification, recovery, viewing, use, disclosure, sending by distributing or otherwise making them available, coordination or combination, restriction, deletion or destruction.

Manager - SIA “OC Vision”, unified reg. No. 40003105710, Elijas Street 17 - 4, Riga, LV - 1050, actual service address: Manager's legal address and Manager, stores, the list of which is available at www.lensor.eu and is updated as soon as a new store is opened.

Customer - any natural person who uses, has used or has expressed a wish to use any of the services provided by the company, the goods to be sold or in any other way related to them;

Personal data - any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one that can be identified, directly or indirectly, in particular by reference to an identifier, such as his name, surname, identification number, location data, online identifier or one or more of the physical, physiological, genetic, or physical characteristics of that individual; mental, economic, cultural or social identity.

2. Applicable law

2.1. Regulation No 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (27 April 2016).

2.2. Medical Treatment Law

2.3. Advertising Law, etc.

3. General rules

3.1. This Policy provides general information on how OC Vision processes personal data. More information about personal data processing is provided to Clients by including them in contracts and other documents related to OC Vision services, as well as on OC Vision website www.lensor.eu

3.2. OC Vision provides for the confidentiality of personal data in accordance with applicable laws and regulations and has implemented appropriate technical and organizational measures to protect personal data from unauthorized access, unlawful processing or disclosure, accidental loss, alteration or destruction.

3.3. OC Vision may use personal data controllers at its own discretion to process personal data. In such cases, OC Vision shall take the necessary steps to ensure that such processors carry out the processing of personal data in accordance with the OC Vision guidelines and in accordance with applicable laws and regulations and require appropriate security measures to be taken.

3.4. If OC Vision will update this Policy, the new Policy Edition will be published on the OC Vision website at www.lensor.eu

3.5. To provide the Customer with better and more appropriate products and services, and to provide, maintain, protect, and enhance existing products and services, OC Vision processes aggregated service data.

4. Personal data categories

4.1. Personal Identification Data - name, surname, personal identity number / ID, date of birth, sex, language of communication, place of residence;

4.2. Personal contact information address, phone number, email address

4.3. Special Category Data (Sensitive) - Data on person's visual health

4.4. Purchase data - purchase history, billing data;

4.5. Customer survey data - name of the survey, date of dispatch, date of response, questionnaire and answers;

4.6. Activities on Internet Websites - IP Address, Names of Action Performed, Section, Date and Time of the Website;

4.7. Video data in video surveillance stores;

4.7. Photos and pictures of photos from customer events, photo-taking.

5. Legal basis for data processing

5.1. Customer consent - The Client, as the subject of personal data, gives his consent to the collection and processing of personal data for certain purposes. Customer's consent to direct marketing for new and individual offers. Customer's consent is his free will and independent decision that can be given at any time, thus allowing OC Vision to process personal data for specified purposes. Customer's consent is binding upon it if it is in writing (by filling out a form agreement, sending an electronic request to the Customer's identification or using lensor.eu. The customer has the right to withdraw their prior consent at any time through the designated communication channels with OC Vision. The withdrawal of consent shall not affect the lawfulness of the processing based on consent prior to the withdrawal.

5.2. Conclusion and Execution of the Agreement - To enable OC Vision to enter into and execute a contract with the Customer by providing quality services and servicing the Customer, it must collect and process certain personal data collected prior to the conclusion of the contract with OC Vision or during the concluded contract.

5.3. The legitimate interests of OC Vision - while respecting the interests of OC Vision based on providing quality services and timely support to the Client, OC Vision has the right to process Customer's personal data to the extent it is objectively necessary. The processing of personal data by direct marketing is considered the legitimate interest of OC Vision, resulting in new and / or individual offers of OC Vision products and services to the Client. Considering that OC Vision has several group companies and the brands it represents, OC Vision has a legitimate interest in processing its Customer Data by sending them to other Group companies for internal administrative purposes, including offering OC Vision to its Customers modern products and services.

5.4. Execution of Legal Obligations - OC Vision is entitled to process personal data in order to comply with the requirements of regulatory enactments, as well as to respond to legitimate requests from the state and local government.

5.5. Protection of Vulnerable Interests - OC Vision is entitled to process personal data to protect the vital interests of the Customer or other natural person, eg when processing is necessary for humanitarian purposes, for monitoring of natural disasters and man-made, in particular epidemics and their spread, or in emergency humanitarian situations (acts of terrorism, technogenic disasters, etc.).

5.6. Execution of Official Powers or Public Interest - OC Vision is entitled to process data for the purpose of performing a task performed in the public interest or in the exercise of official authority granted by OC Vision. In such cases, the basis for the processing of personal data is contained in regulatory enactments.

6. Purposes of data processing

6.1. General Customer Relationship Management and Access to Products and Services, and Administration - to enter into and execute a contract with the Customer; to ensure the topicality and accuracy of the data by checking and supplementing the data.

6.2. OC Vision processes personal data to ensure high quality, timely and convenient customer service during contractual relationships:

6.2.1. Customer relationship management (including remote), ensuring the conclusion and execution of the Agreements, as well as the implementation of related processes;

6.2.2. Customer's creditworthiness testing to offer the Customer new and more modern products and services as well as payment services;

6.2.3. For dealing with the Customer's complaints and providing support in relation to the services provided, the goods sold;

6.2.4. efficient cash flow management, including administration of Customer's payments and debts;

6.2.5. Informing the client about the products and services of all OC Vision companies;

6.2.6. Video surveillance for crime prevention and OC Vision and customer property protection;

6.2.7. For the registration of services of interest to the Customer, management of changes in existing services and generation of statistics or reports on self-service portals.

6.3. OC Vision processes personal data to promote industry development and offer new services to Customers, including:

6.3.1. creation and presentation of new products;

6.3.2. processing of market data and business model development involves processing of statistical data of OC Vision clients;

6.3.3. OC Vision processes personal data to build and maintain OC Vision internal processes, document circulation and other internal processes (eg archiving of contracts and other documents) to the extent necessary and sufficient.

6.4. OC Vision is authorized to process the data for the following purposes, as well as for other purposes, with the free and explicit consent of the Customer:

6.4.1. Verification of Customer's Personal Data in Debt History Databases Prior to Signing a Contract to Assess Customer's Ability to Perform Contract Obligations

6.4.2. Promoting the image of OC Vision on the market by sending the customer wishes for the celebration, giving bonuses, organizing surveys for customer satisfaction, improving existing products and services, and creating new products.

7. Rights of the Customer as a Data Subject

The Customer (data subject) has the right to the processing of his / her data which is classified as personal data in accordance with applicable laws and regulations. These rights are generally:

7.1. Request correction of your personal data if they are inappropriate, incomplete or incorrect.

7.2. Refuses to process your personal data if the processing is based on legitimate interests, including objections to personal data profiling.

7.3. Require the deletion of your personal data, for example, if personal data are processed on the basis of consent and the Customer has withdrawn its consent. This right does not apply if the Personal Data whose deletion is requested is also processed on the basis of another legal basis, such as a contract or obligations under the relevant regulatory enactments, or their preservation is governed by the requirements of applicable law.

7.4. Restrict the processing of your personal data in accordance with applicable laws, for example, when OC Vision evaluates whether the Customer has the right to delete his or her data.

7.5. Receive information whether OC Vision processes Customer's personal data and, if processed, accesses them.

7.6. Receive your personal data provided by the Customer to OC Vision and processed on the basis of consent and performance in written form or in one of the most commonly used electronic formats and, if possible, to transfer such data to another service provider (data portability).

7.7. Recall your consent to the processing of your Personal Data.

7.8. Do not be subject to fully automated decision-making, including profiling, if such decision-making has legal effects or has a material impact on the Customer in a similar manner.

7.9. Submit complaints about the use of personal data to the Data State Inspectorate (www.dvi.gov.lv) if the Customer considers that the processing of his / her personal data violates his / her rights and interests in accordance with applicable laws and regulations.

8. Profiling of personal data of customers as data processing

8.1. Profiling is any kind of automated processing of personal data in the form of the use of personal data for the purpose of assessing certain personal aspects related to a natural person, in particular to analyze or predict aspects related to the individual's personal preferences, interests, credibility, behavior, location or movement;

By processing Customer's personal data, OC Vision can perform profiling to send nice wishes, gifts, bonuses, creating and expressing individual offers or conducting customer surveys. Automated individual decisions are only for business purposes and will not have legal consequences for the Customer. The Customer shall have the right at any time to object to the automated decision and not to be the subject of such a decision.

8.2. Direct marketing and the basis for sending commercial notifications to the Customer: OC Vision conducts direct marketing (marketing), distributing commercial communications to the Customer, so that the Customer is always informed about new, modern and / or directly created products, services, as well as specific contract terms (eg discounts). ). The Customer shall have the right at any time and free of charge to waive the receipt of commercial communications by notifying OC Vision.

9. Cookies

9.1. Cookies are small text files that are created and stored on a client device (computer, tablet, mobile phone, etc.) by visiting the OC Vision website. Cookies “remember” the user experience and basic information and thus improve the ease of use of the OC Vision website.

9.2. Cookies are used to process common user habits and site usage history, diagnose problems and deficiencies in site activity, collect user behavior statistics, and ensure full and convenient use of site functionality.

9.3. If the Customer does not wish to allow the use of cookies, the Customer may do so in the settings of his / her browser, however, the use of the Site may be significantly impeded and difficult. Deleting saved cookies is possible in the browser settings section of your device by deleting the saved cookie history.

9.4. Sites maintained by OC Vision use functional, analytical, advertising, and mandatory cookies.

10. Storage period

Personal data will only be processed as long as it is necessary for the purpose of the processing. The storage period may be based on a contract with the Customer, the legitimate interests of OC Vision, or applicable laws (such as laws on accounting, money laundering, limitation, civil law, etc.).

11. Types of Personal Data Collection

11.1.OC Vision acquires the Customer's personal data when the Customer:

11.1.1. acquires and uses OC Vision products or services;

11.1.2. Sign up for news or other services from OC Vision;

11.1.3. asks OC Vision for more information about the product used by the Customer or the service connected to the Customer, or communicates with OC Vision regarding requesting a complaint or information by identifying the Customer;

11.1.4. participates in contests, lotteries or surveys;

11.1.5. visit or browse the OC Vision website;

11.1.6. is filmed with OC Vision video surveillance equipment in OC Vision stores;

12. Customer Data Protection

12.1. OC Vision provides, continuously reviews and enhances security measures to protect Customer's personal data from unauthorized access, accidental loss, disclosure or destruction. To do this, OC Vision uses modern technology, technical and organizational requirements, including firewalls, intrusion detection, analysis software, and data encryption.

12.2. OC Vision thoroughly inspects all service providers who process Customer's personal data on behalf of OC Vision, as well as assess whether co-operation partners (personal data controllers) apply appropriate security measures to ensure that Customer's personal data is processed in accordance with OC Vision delegation and regulatory requirements . Collaboration partners are not allowed to process Customer's personal data for their own purposes.

12.3. OC Vision shall not be liable for any unauthorized access to personal data and / or loss of personal data if it is not dependent on OC Vision, such as Customer's fault and / or negligence.

13. Processing area

13.1 Usually personal data are processed in the European Union / European Economic Area (EU / EEA), but in some cases they may be transferred and processed in non-EU / EEA countries.

13.2 The transfer and processing of personal data outside the EU / EEA may take place if it is legally justified, ie to fulfill a legal obligation, to enter into or execute a contract, or with the consent of the Customer, and appropriate security measures have been taken. Appropriate security measures include:

- Agreements have been concluded, including EU standard contract clauses or other approved rules, code of conduct, certification, etc., approved under the General Data Protection Regulation;

- a sufficient level of data protection is ensured in the EU / EEA non-beneficiary country according to the decision of the EU Commission;

- The Recipient is certified to the Privacy Shield (applicable to recipients located in the United States).

13.3 Upon request, the Customer may obtain further information on the transfer of Personal Data to countries outside the EU / EEA.

14. Contact information

14.1 The Customer may contact OC Vision regarding issues, withdrawal of consent, requests, use of data subject rights and complaints about the use of personal data.

14.2. Contact information for OC Vision is available at: lensor.eu section of the contact.

14.3. Contact details of the Data Protection Specialist appointed by OC Vision: gdpr@ocvision.eu or Elijas Street 17 - 4, Riga, LV - 1050 with the mark "Data Protection Specialist".