Privacy

Privacy policy regarding the use of our website

The following information pursuant to Art. 13 et seq. GDPR on data protection serves to fulfill the obligation to provide information when collecting personal data on our website.

In the following sections of this privacy policy, Steiner-Optik would like to inform you, among other things, about the extent to which information about you is processed via the website and for what purposes this information is used.

1. Name and contact details of the data controller

STEINER-Optik GmbH
Dr.-Hans-Frisch-Str. 9
95448 Bayreuth
Email: military@steiner.de
Tel.: +49 (0) 921-7879-0

2. Contact details of the data protection officer:

Ascon-Datenschutz GmbH & Co.KG
Stefan Auer
Lina-Ammon-Str. 19
90471 Nürnberg
Tel.: +49 (0) 911 148986-50
Email: office@ascon-datenschutz.de

3. Purposes for which the personal data are to be processed, and the legal basis for the processing

3.1 Processing of access data

For technical reasons, we process a limited amount of data (so-called connection data) each time you access our website. This data is technically necessary to establish and maintain a connection between your device and our servers. This data is processed in the web server's main memory for the duration of the connection.

The following data or data categories are collected:

IP address
Source port of the calling device or gateway (e.g., firewall or proxy)
Timestamp (date and time) of the retrieval
Amount of data transferred
Notification of whether the retrieval was successful (using an HTTP error code)
Message explaining why a request may have failed (using an HTTP error code)
Referrer (the previously visited website)
User-Agent (browser type and version used to access our website)
Width and height of the display screen
Your browser's language settings

The IP address, timestamp, HTTP error code, referrer and user agent are automatically logged when you access our website to ensure their functionality and security. These logs also help us optimize the website. Your IP address is only processed in abbreviated form in the logs and is therefore anonymized. It is not possible for us to create personal user profiles from this data.

The processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. A balancing of interests was carried out and concluded that the processing is necessary to protect our legitimate interests and that these override your interests, fundamental rights and freedoms which require the protection of personal data.

3.2 Cookies and related technologies

3.2.1 General

This website uses cookies and related technologies (e.g., scripts). Cookies help make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your device and saved by your browser, for example, to remember information about you, such as your language preferences or login details. Some of these cookies are set by us and are called first-party cookies. We also use third-party cookies, which originate from a domain other than the website you are visiting.

Basically, we distinguish between the following cookie categories:

Technically required, necessary cookies
Statistics cookies
Marketing cookies

Further information on the individual categories, as well as the option to reject each cookie category (except for technically necessary cookies) and a list of all cookies used, can also be found in the "Cookie settings".

3.2.2. Technically required, necessary cookies

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit ends. These cookies are technically essential for the operation of the website and to provide the service requested by the user, and therefore cannot be deactivated.

The processing is based on legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. A balancing of interests was carried out and concluded that the processing is necessary to protect our legitimate interests and that these override your interests, fundamental rights and freedoms which require the protection of personal data.

3.2.3 Cookies requiring consent, such as analytics and tracking cookies and related technologies (e.g., tracking scripts)

Our website also integrates advertising, marketing, and analytics tools from third-party providers. These are not technically necessary for the operation of the website, but serve to enhance its functionality, for example , to record user behavior, to display advertising tailored to this behavior, or to enable an analysis of the use of our website.

These services will only become active after you have explicitly given your consent using the consent banner.

An overview of all third-party services integrated into the website, as well as detailed information on each of these services, can be found under point 10.

3.3 Data processing in connection with contacting us

When you contact Steiner-Optik , your information such as

E-mail address
if applicable, first and last name
if applicable, phone number

The data is generally stored only for the purpose of processing and responding to the request, as well as for possible follow-up requests and, if necessary, for further consultation.
The legal basis for processing your data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. A balancing of interests was carried out and concluded that the interests of the data subjects do not outweigh our interests in processing. In this case, we have a legitimate interest in responding to your inquiry, for which the processing of the data and data categories mentioned here is necessary.

3.4 Data processing in connection with the spare parts service

When you contact us and use the spare parts form, the following personal data will be processed:

First and Last Name
Address details such as street, postal code, city, country
Telephone number
E-mail address

In principle, this data is only stored for the purpose of processing and responding to the request, as well as for possible follow-up requests and, if necessary, for further consultation.
The legal basis for processing your data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. A balancing of interests was carried out and concluded that the interests of the data subjects do not outweigh our interests in processing. In this case, we have a legitimate interest in responding to your inquiry, for which the processing of the data and data categories mentioned here is necessary.

4. Automated decision-making including profiling

Steiner-Optik does not make automated individual decisions, including profiling, in accordance with Article 22, paragraphs 1 and 4 of the GDPR.

5. Data transfer to a third country

Data transfers to countries outside the EU and the European Economic Area ("third countries") occur in the context of the administration, development, and operation of IT systems. Such transfers only take place on the basis of:

an adequacy decision of the European Commission within the meaning of Art. 45 GDPR.
an approved certification mechanism pursuant to Article 42 GDPR together with legally binding and enforceable commitments of the controller or processor in the third country.
standard data protection clauses adopted by the Commission in accordance with the examination procedure under Article 93(2) GDPR.

Currently, when using our website, personal data is transferred to third countries, in particular the USA, through the use of third-party services in the following cases:

Data will be transferred to Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Data will be transferred to Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA
Data is transferred to YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Transfer of data to Meta Platforms Inc. (formerly Facebook Inc.), 1 Hacker Way, Menlo Park, CA 94025, USA

6. Categories of recipients of data

For the processing of personal data for the purposes mentioned here, we use the following categories of recipients as processors within the meaning of Art. 28 GDPR:

Server providers for hosting our website
IT service providers to maintain our IT infrastructure
External service providers for additional services
Providers of marketing and analytics services
Further processors within the meaning of Art. 28 GDPR in the course of commissioned data processing

These service providers process personal data and are contractually obligated to comply with applicable data protection laws.

Your data will also be shared to the extent that we are legally obligated to do so.

7. Storage duration and criteria for determining the duration

Personal data is generally stored only as long as necessary to fulfill the purposes stated here, or as required by statutory retention periods. Once the respective purpose ceases to apply or the retention periods expire, the data is deleted in accordance with legal regulations.

For marketing purposes, we store your data until you object to its use, withdraw your consent, or such contact is no longer legally permissible. We store your other data as long as we need it to fulfill the specific purpose (e.g., for contract fulfillment or processing) and delete it once that purpose no longer applies.

All connection data stored on the web server is automatically deleted shortly after the connection ends. Anonymized access logs are retained for 30 days. If parts of the access logs are required for evidentiary purposes, they will be exempt from deletion until the incident in question is fully resolved.

8. Information about your data subject rights

Steiner-Optik GmbH is responsible for the processing of your data, unless otherwise stated.

You can request information from us at any time (Art. 15 GDPR) regarding the data we have stored about you and its correction (Art. 16 GDPR) in case of errors. Furthermore, you can request the restriction of processing (Art. 18 GDPR), the portability (Art. 20 GDPR) of the data you have provided to us in a machine-readable format, or the erasure of your data (Art. 17 GDPR) – insofar as it is no longer needed.

Furthermore, you have the right to object at any time to the use of your data based on public or legitimate interests (Art. 21 GDPR).

Insofar as we process your data based on your consent, you can withdraw this consent at any time with effect for the future (Art. 7 para. 3 GDPR). From the moment we receive your withdrawal, we will no longer process your data for the purposes specified in the consent.

If you wish to exercise your data subject rights, please address your request to:

STEINER-Optik GmbH
Dr.-Hans-Frisch-Str. 9
95448 Bayreuth
Email: military@steiner.de
Tel.: +49 (0) 921-7879-0

or at:

Email: office@ascon-datenschutz.de

9. Right to lodge a complaint with a supervisory authority

Furthermore, you can lodge a complaint with a supervisory authority at any time in accordance with Article 77 Paragraph 1 of the GDPR. For us, this is generally the

Bayerische Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Postfach 1349, 91504 Ansbach, Email: poststelle@lda.bayern.de, Telephone: +49 (0) 981 180093-0, zuständig.

Alternatively, you can contact the supervisory authority responsible for your area.

10. Data protection information for all third-party services integrated on this website

10.1 Data protection notice regarding the use of Google Tag Manager

This website uses Google Tag Manager, a web analytics service provided by Google Inc. LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Tag Manager is a tool that allows us to integrate tracking and statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It serves only to manage and deploy the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google's parent company in the United States.

The storage of and access to information on the end user's terminal equipment is governed by Section 25 Paragraph 1 of the TDDDG. The legal basis for the further processing of your personal data is your voluntary and informed consent pursuant to Art. 6 Paragraph 1 Sentence 1 Letter a of the GDPR. You grant your consent via the consent banner.

For more information about Google Tag Manager, please visit:
https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

10.2 Vimeo (Videos)

Our website uses plugins from the video portal Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Vimeo's servers. The plugin's content is transmitted directly from Vimeo to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.

This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision pursuant to Article 45 GDPR, meaning that personal data may be transferred without further safeguards or additional measures.

If you are logged into Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. If you interact with the plugins (such as clicking the play button on a video), this information is also transmitted directly to a Vimeo server and stored there.

For videos from Vimeo embedded on our site, the tracking tool Google Analytics is automatically integrated. This is Vimeo's own tracking system, over which we have no access and which cannot be influenced by our site. Google Analytics uses so-called "cookies" for tracking; these are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.

The storage of and access to information on the end user's terminal equipment is governed by Section 25 Paragraph 1 of theTDDDG. The legal basis for the further processing of your personal data is your voluntary and informed consent pursuant to Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR. You grant your consent via the consent banner.

You can view Vimeo's privacy policy at: https://vimeo.com/privacy.

10.3 YouTube Videos

Some pages on our website contain links to YouTube. Generally, we are not responsible for the content of linked websites. However, if you follow a link to YouTube, please be aware that YouTube stores and uses its users' data (e.g., personal information, IP address) in accordance with its own data privacy policy for business purposes.

The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

On some subpages of our website, we also directly embed videos stored on YouTube. This embedding displays content from the YouTube website in a portion of a browser window. When you access a (sub)page of our website that contains embedded YouTube videos, a connection is established to the YouTube servers, and the content is then displayed on the website by being sent to your browser.

YouTube content is embedded only in "enhanced privacy mode." This mode is provided by YouTube itself and ensures that YouTube does not initially store any cookies on your device. However, when you access the relevant pages, your IP address and possibly other data are transmitted, specifically indicating which of our web pages you have visited. This information cannot be associated with you personally unless you are logged into YouTube or another Google service before or while accessing the page. Once you start playing an embedded video by clicking on it, YouTube, through enhanced privacy mode, only stores cookies on your device that do not contain personally identifiable information, unless you are currently logged into a Google service. These cookies can be blocked through appropriate browser settings and extensions.

The storage of and access to information on the end user's terminal equipment is governed by Section 25 Paragraph 1 of the TDDDG. The legal basis for the further processing of your personal data is your voluntary and informed consent pursuant to Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR. You grant your consent via the consent banner.

You can view YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy/.

10.4 Google Analytics

On our websites we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

In this context, pseudonymized user profiles are created and cookies are used (see section "Cookies"). The information generated by the cookie about your use of this website may include, among other things:

a temporary recording of the IP address without permanent storage
Location data
Browser type/version
Operating system used
Referrer URL (previously visited page)
Time of server request

The pseudonymized data may be transferred by Google to a server in the USA and stored there.

The information is used to evaluate website usage, compile reports on website activity, and provide other services related to website and internet usage for market research and to tailor these web pages to user needs. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf.

The storage of and access to information on the end user's terminal equipment is governed by Section 25 Paragraph 1 of the TDDDG. The legal basis for the further processing of your personal data is your voluntary and informed consent pursuant to Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR. You grant your consent via the consent banner.

Google's default data retention period is 14 months. Beyond this, personal data is stored only as long as necessary to fulfill the processing purpose. The data is deleted as soon as it is no longer required for this purpose.

The parent company, Google LLC, is certified under the EU-US Data Privacy Framework as a US company. This constitutes an adequacy decision pursuant to Article 45 of the GDPR, meaning that the transfer of personal data may take place without further safeguards or additional measures.

Further information on data protection when using GA4 can be found at: https://support.google.com/analytics/answer/12017362?hl=de.

10.5 Google Maps

We use Google Maps (API) on our website. The operator of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive maps to visually represent geographic information. Using this service, for example, our location can be displayed, and directions to our location can be provided more easily.

When you access pages on our website that include a Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers in the USA, provided you have given your consent in accordance with Art. 6 para. 1 lit. a) GDPR. Google Maps also loads Google Web Fonts, Google Photos , and Google Stats . The provider of these services is also Google Ireland Limited. When you access a page that includes Google Maps, your browser loads the web fonts and photos required to display the map into your browser cache. For this purpose, your browser establishes a connection to Google's servers. This allows Google to know that our website was accessed via your IP address. This occurs regardless of whether Google provides a user account that you are logged into, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want your activity to be associated with your Google profile, you must log out of your Google account. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google.

If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you can also completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then be unavailable.

The storage of and access to information on the end user's terminal equipment is governed by Section 25 Paragraph 1 of the TDDDG. The legal basis for the further processing of your personal data is your voluntary and informed consent pursuant to Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR. You grant your consent via the consent banner.

You can view Google's terms of service at
https://www.google.de/intl/de/policies/terms/regional.html and the additional terms of service for Google Maps can be found at
https://www.google.com/intl/de_US/help/terms_maps.html.

You can view Google Maps' privacy policy at: ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/

11. Data protection information regarding the use of social media channels

To enable us to communicate with you on social networks and inform you about our services, we maintain our own pages there. When you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered by this visit, in accordance with Article 26 of the GDPR.

We are not the original provider of these pages, but merely use them within the scope of the options offered to us by the respective providers.
Therefore, we would like to point out that your data may also be processed outside the European Union or the European Economic Area. Using these services may therefore involve data protection risks for you, as exercising your rights, e.g., to access, erasure, or objection, could be more difficult, and processing on social networks is often carried out directly by the providers for advertising purposes or to analyze user behavior, without our being able to influence this . If the provider creates user profiles, cookies are often used, or the user behavior is associated with your own member profile on the social networks.

The processing of personal data described above is carried out in accordance with Article 6(1 ) (f) GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to communicate with you in a modern manner and/or to inform you about our services. If you are required to give your consent to data processing as a user to the respective providers, the legal basis is Article 6(1 ) (a) GDPR in conjunction with Article 7 GDPR.

Since we have no access to the providers' data, we advise you to assert your rights (e.g., to information, rectification, erasure, etc.) directly with the respective provider. Further information on the processing of your data on social networks is listed below for each of the social network providers we use:

11.1 Facebook

Meta Pixel from Meta Platforms Ireland Limited on our website . The Meta Pixel allows us to track the behavior of website visitors in order to optimize our advertising, create target groups, and measure the effectiveness of our advertising campaigns. In particular, technical data such as IP address, browser and device information, pages visited, interactions, as well as cookie and recognition identifiers may be processed and transmitted to Meta .

The storage of and access to information on the end user's terminal equipment is governed by Section 25 Paragraph 1 of the TDDDG. The legal basis for the further processing of your personal data is your voluntary and informed consent pursuant to Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR. You grant your consent via the consent banner.

Meta processes some of the data under its own data protection responsibility. For further information on data processing by Meta , storage duration, options to object, and any transfers to third countries, please refer to Facebook's privacy policy at https://www.facebook.com/about/privacy

Unless users object, Meta (Facebook) may process content from adult users in the EU, such as photos, posts, or comments, to train its own AI models. This is based on a legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. As a company, we have no influence over this specific data processing by Meta . Users can object to this via an online form on the Meta platforms.

The parent company , Meta Platforms Inc., is a US company certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision pursuant to Article 45 of the GDPR, meaning that personal data may be transferred without further safeguards or additional measures.

11.2 LinkedIn

We operate our own company page on LinkedIn, using the technical platform and service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland .

Please note that you use this LinkedIn page and its features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, rating).

LinkedIn and Steiner-Optik operate this page jointly in accordance with Art. 26 GDPR, insofar as it concerns the 'Page Insights ' functions.

By presenting our company on LinkedIn, we aim to increase our presence on social media and thereby support our marketing and public relations efforts. At the same time, we can communicate with users, answer potential inquiries, and encourage them to apply for positions with us. The legal basis for this data processing is Article 6(1 ) (f) GDPR. Our legitimate interest lies particularly in our business interest in sharing information and communicating with our users.

Please note that LinkedIn also processes your personal data for its own purposes, over which we have no control. This may involve processing data outside the EU, particularly in the USA. Information on how LinkedIn uses this data can be found here:

https://www.linkedin.com/legal/privacy-policy

https://www.linkedin.com/help/linkedin/ask/TSO-DPO

As of July 2026

This privacy policy is subject to ongoing review, and Steiner-Optik reserves the right to make changes at any time. Such changes will be published on this website.