Privacy Policy

1. Introduction

ZEISS VISION CENTER Indiranagar respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website, in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch and European privacy laws.

2. Data Controller

The data controller for this website is:

3. What Data We Collect

We may collect and process the following data:

• Technical data: IP address, browser type, operating system, device type, and browsing behaviour via cookies and similar technologies.
• Order data: Name, address, email, phone number, and payment details when you place an order.
• Communication data: Any information you provide when contacting us via email, phone, or contact forms.
• Usage data: Pages visited, products viewed, and interactions with our Virtual Try-On feature.

4. Cookies

Our website uses cookies and local storage to:

• Essential cookies: Remember your shopping cart and cookie consent preference. These are necessary for the website to function.
• Analytics cookies: Understand how visitors interact with our website, so we can improve our services.
• Functional cookies: Remember your language preferences and enhance your browsing experience.

You can manage your cookie preferences through your browser settings. Please note that disabling cookies may affect website functionality.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent (Art. 6(1)(a)): For analytics cookies and marketing communications.
• Contract performance (Art. 6(1)(b)): To process your orders and provide customer service.
• Legitimate interest (Art. 6(1)(f)): To improve our website, prevent fraud, and ensure security.
• Legal obligation (Art. 6(1)(c)): To comply with tax and accounting requirements.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Hosting, payment processing, and delivery services that help us operate our business.
• Legal authorities: When required by law or to protect our rights.

All third-party processors are bound by data processing agreements in accordance with GDPR Article 28.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Order data is retained for 7 years for tax compliance. Analytics data is anonymised or deleted after 26 months.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right of access (Art. 15): Request a copy of your personal data.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion of your personal data.
• Right to restrict processing (Art. 18): Request limitation of data processing.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, please contact us at indiranagar@zeiss.co.in.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), secure payment processing, and access controls.

10. Supervisory Authority

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.