Privacy Policy
Leica Camera France Sarl

When you order goods from our online dealer store on the classic.leica-camera.com platform of Leica Camera AG ("Leica"), we, Leica Camera France, as the data controller will process your personal data and store it for the period necessary to fulfill the contract and meet our specified purposes, in compliance with our legal obligations. The information below serves to inform you about the type of data concerned, how it is processed and your rights.

Pursuant to Art. 4 (1) of the General Data Protection Regulation (GDPR), personal data means any information relating to an identified or identifiable natural person.

1. Name and contact information of the data controller

   This privacy policy applies to the processing of data collected, for all orders placed in our online dealer store, by the following data controller:
   Leica Camera France Sarl, 134 rue du Faubourg Saint-Honoré, 75008 Paris, France
   E-mail: onlinestore.fr@leica-camera.com
   Phone: 01 46 99 51 63
   
   Feel free to contact us at any time if you have any questions regarding data protection law or your rights as the data subject.

2. Processing of personal data and purposes of processing

   1. When visiting classic.leica-camera.com
      
      We do not collect any personal or other data when you visit the Leica website.
      
      For information about the collection and storage of your personal data by Leica and the nature and purpose of its use by Leica, please refer to Leica’s Privacy Policy.
   2. When ordering from our online dealer store
      
      If you order goods from Leica Camera France, third party supplier, through the classic.leica-camera.com platform, Leica may transmit the following data to us which is required for order processing and shipping as well as for invoicing:
      
      
      • form of address, name, forname
      • billing address
      • e-mail address
      • shipping address, if necessary
      • telephone number
      • payment information
      
      
      The data is processed for the following purposes:
      
      
      • to be able to identify you as a contractual party,
      • to check the entered data for plausibility,
      • for order and payment processing,
      • for the processing of any existing warranty claims and for the exercise of any other claim.
      
      
      Art. 6(1)(b) of the GDPR provides the legal basis for the processing of your data, which is required for the aforementioned purposes in order to properly process your order and for the mutual fulfilment of the obligations arising from the conclusion of the sales contract.
      
      We will store personal data collected by Leica for the purpose of processing of your order and submitted to us for retention until expiry of the statutory retention obligation and of civil and commercial appeal deadlines, and then delete it, unless we are obliged to retain the data for a longer period of time to meet retention and documentation obligations pursuant to tax and commercial law in accordance with Art. 6(1)(c) of the GDPR or if you have consented to additional retention in accordance with Art. 6(1)(a) of the GDPR.
      
      For more information on how Leica stores and processes your personal data, please read Leica's Privacy Policy.
   3. When contacting us
      
      If you have any questions, you can contact us at our e-mail address or via Leica. In this context, we may process the following information:
      
      
      • form of address
      • first name and last name
      • e-mail address
      • subject
      • your message
      
      
      The aforementioned data is necessary for us to identify the requester and contact you personally. In addition, you can also provide your telephone number. This is not mandatory and is not required for use of the contact form. However, it helps us understand the request more easily and clarify any questions we might have.
      
      Data is processed upon your request pursuant to Art. 6(1)(f) of the GDPR. Our legitimate interests result from the aforementioned purposes.
      
      The personal data we collect when you use the contact form will be deleted after processing your request or when our exchanges have ended, provided that no legal data retention periods apply.

3. Transferring data to third parties

   Your personal data will not be transferred to third parties for any other purposes than those listed below.

   1. Contract fulfilment
      
      If legally permitted and necessary for contract fulfilment pursuant to Art. 6(1)(b) of the GDPR, your personal data may be transferred to third parties. In particular, this includes transferring data to shipping companies for the purpose of shipping the goods you ordered. The data transferred may only be used by the third party for the purposes mentioned above.
   2. Other purposes
      
      Furthermore, we will only transfer your personal data to third parties if:
      
      
      • you have given your express and explicit consent in accordance with Art. 6(1)(a) of the GDPR;
      • there is a legal obligation to transfer your personal data pursuant to Art. 6(1)(c) of the GDPR;
      • the transfer of your personal data is necessary pursuant to Art. 6(1)(f) of the GDPR for the analysis, exercise or defense of our legal claims and if there is no reason to assume that you may have an overriding legitimate interest in the confidentiality of your data.
   3. Payment processing
      
      In order to fulfil the contract pursuant to Art. 6(1)(b) of the GDPR, we use various payment service providers for payment processing. For payment processing it may be necessary for us to transfer the personal data you send us during the payment process to the payment service provider. This refers to data such as name, first name, address, telephone number, e-mail address, credit card data or bank account details and transaction data. Occasionally, payment service providers collect this data themselves.
      1. PayPal
         
         You can pay using the payment service provider PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). If you pay using your PayPal account, you will be redirected to the PayPal website where you can log in with your credentials and account details and initiate the payment. You can initiate the payment with or without a PayPal account by providing the required payment information. We have no access to any personal data collected by PayPal. PayPal is responsible for their own processing.
         
         For more information on how PayPal protects data, please refer to PayPal's privacy policy.
      2. Adyen
         
         For payment processing and any refunds you may receive, we use our payment service provider Adyen B.V., Simon Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, the Netherlands ("Adyen"). In this case, your IP address, information about your order such as billing amount, customer number, your e-mail address, and a payment ID as well as the credit card or bank account details you entered will be transmitted to Adyen for further payment processing. Adyen will also transfer this information to other third parties if necessary for payment processing (e.g., banking institution, credit card institution). Furthermore, Adyen may transfer this information to credit agencies to check your identity and creditworthiness.
         
         Adyen is solely responsible for the processing of payment data during the subsequent payment processing process. The collection and transfer of your data is encrypted and we do not have access to this information. Here you can find more information about data protection related to Adyen.
         
         We use Adyen to integrate other payment services. In this case, your IP address, personal data, customer data, order and billing data as well as payment information related to the payment method and service used will be transmitted to Adyen, if necessary, to enable the technical integration of the payment services on our website for you. Below please find information about the individual payment services and possible integration via Adyen.
      3. Google Pay
         
         We offer payment processing through the payment service provider Google Payment Ireland Limited, 70 Sir John Rogersons's Quay, Dublin 2, Ireland ("Google Pay"). If you decide to use Google Pay for your payment, you will be redirected to the Google Pay page where you can log in with your credentials and account details and initiate the payment. After being redirected to the Google Pay website, we will have no access to the data collected by Google Pay. Google Pay is integrated through Adyen (see above). Here you can find more information on data protection related to Google Pay.
      4. Apple Pay
         
         We offer payment processing through the payment service provider Apple Inc., 1 Apple Park Way, Cupertino, California, 95014, United States ("Apple Pay"). If you decide to use Apple Pay for your payment, you will be redirected to the Apple Pay page where you can log in with your credentials and account information and initiate the payment. After being redirected to the Apple Pay website, we will have no access to the data collected by Apple Pay. Apple Pay is integrated through Adyen (see above). Here you can find more information on data protection related to Apple Pay.

4. Data security

   All data you transmit personally will be encrypted by Leica using the common secure TLS (Transport Layer Security) standard. TLS is a secure and tested standard which is also used, for example, for online banking. You can recognize a secure TLS connection by the “s” appended to http (i.e. https://..) in the address bar of your browser or the lock symbol in the lower part of your browser.
   
   We also use proper technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. We constantly improve our security measures in line with technological developments.

5. Data security

   You have the right:

   • pursuant to Art. 15 of the GDPR, to obtain confirmation as to whether or not personal data about you are being processed and, where they are, to request access to said personal data as well as certain information about their processing. In particular, you can obtain information about the processing purposes, the category of personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to correct, delete, restrict any processing or to object to processing of your personal data, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, detailed information about it;
   • pursuant to Art. 16 of the GDPR, to immediately demand the correction of inaccurate or incomplete personal data stored by us;
   • pursuant to Art. 17 of the GDPR, to request the erasure of your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims;
   • pursuant to Art. 18 of the GDPR, to request the restriction of the processing of your personal data where (i) you dispute the accuracy of the data, (ii) the processing is unlawful, but you object to its erasure, (iii) we no longer need the data, but you need it to establish, exercise or defend legal claims or (iv) you have objected to the processing pursuant to Art. 21 of the GDPR;
   • pursuant to Art. 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another data controller where the processing is based on consent or on contract and is carried out using automated processes;
   • pursuant to Art. 7(3) of the GDPR, to withdraw your given consent at any time resulting in the fact that we will no longer be allowed to continue processing your data in the future based on your previous consent, and
   • to complain to a supervisory authority pursuant to Art. 77 of the GDPR. For this purpose, you can typically contact the supervisory authority of your habitual residence or place of work or our company headquarters.

   Information about your right to object pursuant to Art. 21 of the GDPR
   
   On grounds relating to your particular situation, you have the right to object to the processing of your personal data based on Art. 6 (1)(e) of the GDPR (data processing for reasons of public interest) and Art. 6(1)(f) of the GDPR (data processing based on a balancing of interests) at any time; this includes profiling based on the provisions of Art. 4(4) of the GDPR.
   
   If you object, we will no longer process your personal data unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
   
   If your objection concerns the processing of data for the purpose of direct marketing, we will immediately stop data processing. In this case, it is not necessary to specify a particular situation, including profiling, to the extent that it is related to such direct marketing.
   
   If you wish to exercise your right to object, simply send an e-mail to onlinestore.fr@leica-camera.com.

Validity and amendment of this Privacy Policy

This Privacy Policy is currently valid and was last updated in September 2024.

Due to changes in legal or regulatory requirements or changes in Leica's range of products, it may be necessary to update this Privacy Policy.