Data protection information  

Welcome to the Jenoptik Hub, designed to facilitate communication with you. Using this platform is voluntary and allows you to manage and update your own data, as well as monitor your submitted service tickets. 

1. Identity of the Controller 

The term "Jenoptik" or "we" refers to the respective responsible (subsidiary) company of the Jenoptik Group. The controller responsible for the processing of your personal data within the Jenoptik Hub is the respective group company with which you are in a business relationship and whose services you use via the portal. The contact details of the responsible (subsidiary) company can be found here. 

If you have any questions about the Jenoptik Hub, you can also contact  

JENOPTIK AG
Carl-Zeiss-Str. 1 - 07743 Jena - Germany
Phone: 03641 65-0 - E-Mail: info@jenoptik.com 

2. Contact details of the data protection officer 

If you have any questions regarding the processing of your personal data or wish to exercise your rights, you may contact the relevant group company directly. Alternatively, you may contact the Corporate Privacy Officer, who will coordinate your request with the responsible company. 

JENOPTIK AG
Corporate Privacy Officer of
Carl-Zeiss-Str. 1 - 07743 Jena - Germany
Phone: 03641 65-2340 - E-Mail: data-protection@jenoptik.com 

3. Categories of Data 

The personal data processed in the Jenoptik Hub mainly includes account information of our customers, but also contact information. Additionally, information about the last login, ticket processing, and any requests made in the comments are processed: 

  • Your contact information, such as title, first and last name, business address, business telephone number, business mobile phone number and business e-mail address,  

  • organization information, including position and company name, customer number, Account ID, Approval Status and Active Flag of the account, date and time of account creation, 

  • other personal data that you provide in contact, 

  • information that you provide as part of a support request, a comment or post, 

  • other information whose processing is necessary in the context of a project or the handling of a contractual relationship with us or which is voluntarily provided by business partners, e.g. in the context of orders placed, inquiries or project details, 

  • information that is automatically collected when you use the Jenoptik Hub, such as your device and user ID, information about your operating system, pages and services that you have used and visited during your visit, as well as the date and time of a user request, 

  • date and time of last login, 

  • creation date of contact within Jenoptik Hub, 

  • contact login status. 

4. Purposes for which personal data are to be processed 

These data are used for communication, customer service, and ensuring the proper functioning of the Jenoptik Hub. 

5. Legal basis for data processing 

The legal basis for processing is legitimate interest according to Article 6 paragraph 1. f of the GDPR. 

Our legitimate interest in processing the personal data of our customers’ contacts lies in providing an efficient and user-friendly platform for communication and support. The use of the Jenoptik Hub is entirely voluntary for our customers. The data of customer representatives are processed to enable direct, streamlined communication, and to give customers full transparency and control over their support tickets and their status. This processing is also in the interest of our customers and their employees, as it allows them to access relevant information and manage their tickets at any time-regardless of our business hours or the availability of specific contact persons. Additional benefits for the data subjects include faster response times, reduced administrative effort, secure management of requests, and the ability to update and correct their own contact details directly within the Jenoptik Hub. 

6. Recipients / categories of recipients 

All companies within the Jenoptik Group have access to your data.  

Data will only be transferred to recipients outside our company if this is permitted or required by regulations or if we are otherwise authorized to transfer data.  

Under these conditions, and to the extent applicable, recipients of your data may be  

  • Customer relationship management systems (CRM) for better processing of your data and a more personalized approach 

  • Administration and communication systems, such as e-mail and software  

  • Contract management systems  

  • External compliance service agents 

  • Public bodies and institutions, in the event of a legal or official obligation. 

In cases of maintenance or for fault analysis, hardware or software support partners may be used. The statutory contractual provisions on purpose limitation and confidentiality are concluded with these partners. 

7. Transfer to a third country 

A transfer to a third country is not planned, but could take place, for example, in the context of processing in cloud solutions or in the context of cooperation with other Group companies. In this case, the appropriate level of data protection is ensured by the agreement of standard contractual clauses and/or the existence of a valid adequacy decision in accordance with Art. 45 GDPR. 

8. Duration of storage 

The personal data processed in the Jenoptik Hub will generally be deleted as soon as they are no longer required for the purposes stated and no statutory retention obligations apply.  

Account and access data (e.g., last login) will be deleted when the user account is deleted. Deactivating access to the Jenoptik Hub does not delete any access data as reactivation is possible. Deactivating or deleting access to the Jenoptik Hub does not delete backend data in the customer relation management system. 

Tickets are automatically depersonalized after 5 years. Regardless of this, attachments included with the tickets are automatically deleted after 30 days, unless longer statutory retention periods apply.  

Otherwise, statutory retention periods, particularly those under commercial and tax law, shall apply. 

9. Rights of data subjects 

As a data subject, you have the following rights under the GDPR vis-à-vis the controller: 

– Information (Art. 15) 

– Rectification (Art. 16) 

– Deletion (Art. 17) 

– Restriction of processing (Art. 18) 

– Data portability (Art. 20) 

– Objection to processing (Art. 21) 

To assert your rights, please contact the above-mentioned Corporate Privacy Officer. 

You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. 

10. Provision of personal data is mandatory or required 

The provision of personal data in connection with this processing is not required by law or contract or necessary for the conclusion of a contract, so that failure to provide it has no consequences for you. 

 11. Automated decisions in individual cases including profiling

An automated decision (including profiling) in accordance with Art. 22 GDPR does not take place with the data collected here.