
Data privacy notice
How we treat your data
We are pleased about your visit and your interest in our products and services. The protection of your personal data is important to us. We would therefore like to inform you below about how personal data is processed at Carl Zeiss AG and other companies in the ZEISS Group (hereinafter referred to as ZEISS).
Personal data is data that enables the direct or indirect identification of a person. It does not matter whether the determination can be made on the basis of a single piece of information or several pieces of information. The more information and data can be combined, the more precisely the person can be determined. Personal data includes, for example, the name, address, age or e-mail address, but also indirect data such as an IP address or social security number.
Privacy Notice Pursuant to the Digital Personal Data Protection Act, 2023
Carl Zeiss India and other companies in the ZEISS Group (hereinafter referred to as ZEISS India) respects and understands the importance of your privacy - and is therefore committed to protect personal information of Data Principals including but not limited to customers, employees, job applicants, or visitors of our website. It is in recognition of this need for personal data protection and ZEISS commitment to India Data protection law DPDPA, and secured management of any Personal information received/collected by us that Carl Zeiss India and other companies in the ZEISS Group (hereinafter referred to as ZEISS) has established this Privacy Notice.
This privacy notice outlines the categories of personal information collected by ZEISS, grounds of such processing, applicable safeguards as well as mechanism of how you may exercise your data protection rights with respect to processing of your personal information.
Our Commitment to You
We ensure transparency in managing your personal information and comply with Digital Personal Data Protection Act, 2023 Data Fiduciary obligation.
Protecting Your Personal Data
ZEISS is committed to protecting your information by handling it responsibly and safeguarding it using appropriate technical, administrative and physical security measures.
Your Rights as a Data Principal under the Digital Personal Data Protection Act (22 of 2023)
You control your personal data. We uphold your fundamental right to data privacy. The Digital Personal Data Protection Act 2023 confers upon your specific rights concerning your personal information.
1. Right to Information Access
You may request a summary of your personal data detailing the nature and category of personal data processed by us, processing activities undertaken and details of third parties where your data has been shared along with the description of the personal data so shared. This includes obtaining an electronic copy of your personal data maintained in our records without incurring any charges. Furthermore, you may receive clear documentation regarding how we utilize your information across our eye care services, ensuring complete transparency in our data handling practices. This does not apply to any sharing of personal data by ZEISS with another data fiduciary who is authorized by law to obtain such personal information where such sharing is pursuant to a request made in writing for the purpose of prevention or detection or investigation of offences or cyber incidents, or for prosecution or punishment of offences.
2. Right to Data Rectification and Removal
We empower you to maintain control over your personal information through multiple channels. You may direct us to correct any inaccuracies in your personal information, update incomplete, irrelevant or inaccurate data in our systems, and request complete erasure of your personal data from our records which is no longer necessary for the purpose for which it was processed unless retention is necessary for a legal purpose. We process all such requests with utmost priority while maintaining compliance with applicable regulations in the eye care manufacturing sector.
3. Grievance Resolution Rights
We maintain a robust grievance redressal framework focused on protecting your privacy interests. This includes a dedicated data protection channel at ZEISS and a structured grievance redressal mechanism. You have the right to register your grievances with us in respect of any act or omission regarding the performance of ZEISS obligations in relation to fair processing of your personal data or the exercise of their rights under the DPDP. Our team upholds a strict commitment to address and resolve all privacy-related concerns within 30 business days of receipt, ensuring prompt and effective resolution of your queries.
4. Nomination Rights
You retain the right to designate a nominee who shall exercise these rights on your behalf, ensuring continuity of data protection in the event of incapacity or death. This nomination can be modified at any time through our formal processes, providing you with flexibility in managing your data protection preferences and rights.
At ZEISS, we manage your data rights requests promptly as per DPDP Act 2023 guidelines. To protect your privacy, we verify your identity before processing any requests. If we require additional time beyond standard processing periods, we will inform you of the expected completion date. In cases where we cannot fulfil a request, we will provide a clear explanation such rejection.
For assistance, contact our Data Protection Officer as mentioned here.
Data Transfer Outside India
ZEISS ensures secure and compliant transfer of personal data beyond Indian borders in accordance with the Digital Personal Data Protection Act 2023. We implement robust safeguards through:
- Adherence to transfer regulations specified by the Data Protection Board of India
- Compliance with governmental restrictions on data flows to notified countries.
- Implementation of prescribed contractual safeguards for permitted international transfers.
- Regular monitoring of cross-border data protection requirements
We maintain transparency in our international data processing activities and undertake transfers only to countries approved by the Central Government. For specific inquiries about our cross-border data practices, please contact our Data Protection Officer as mentioned here.
Duration of storage
Your personal data will be deleted immediately upon the completion of the specific purpose for which it was collected. However, we will retain your data for the duration required by applicable laws and regulations. In compliance with our legal obligations, we will store your data until the end of the designated organizational retention periods. Additionally, your data will be retained until the expiry of applicable statutory limitation periods necessary to assert, exercise, or defend legal claims.
Once these periods have elapsed and the data is no longer necessary for the intended purposes, we will systematically delete the relevant data.
Data Protection Officer
The responsible party for the processing and protection of your personal data is Carl Zeiss India.
If you have any questions regarding data protection or questions relating to the processing of your personal data or the exercise of your rights, please contact us by either using the contact form at the top of this page or the following email address:
Corporate Data Protection Officer
Carl-Zeiss-India
E-mail: dpo.in@zeiss.com (Please do not send confidential content by e-mail)
How to Submit a Request
To submit an access, correction or deletion request, you can use our online form and in order to submit a request as an authorized agent on behalf of a consumer, contact us at dpo.in@zeiss.com
For questions or concerns about our privacy notices and practices, contact us at legal.in@zeiss.com
Disclaimer
Please note that only individuals who are 18 years of age or older, and who have the capacity to access our platform, are permitted to share personal data with us.
Changes to this privacy notice
This privacy notice is subject to modification in the event of changes to our privacy practices or upon notification from governmental authorities. In the event of any amendments, we shall publish the revised privacy notice on this website. Should there be significant changes that affect the processing of your personal data, we will notify you via email or through any other communication channels available to us.
-
1
Last updated: March 11th, 2025