Legal Notice
Data protection
- General information and mandatory information
- Designation of the responsible body
- The responsible body for data processing on this website is:
General information and mandatory information
- Goldstube Handels GmbH
- Moritz Höllenreiner
- Westenriederstrasse 13
- 80331 Munich
Revocation of your consent to data processing
Some data processing operations are only possible with your express consent. You can revoke the consent you have already given at any time. An informal notification by email is sufficient to revoke your consent. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Right to lodge a complaint with the relevant supervisory authority
As a data subject, you have the right to lodge a complaint with the responsible supervisory authority in the event of a data protection violation. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to third parties. It is provided in a machine-readable format. If you request the data to be transferred directly to another person responsible, this will only be done if it is technically feasible.
Right to information, correction, blocking, deletion
At any time, within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if necessary, a right to correct, block or delete this data. In this regard and also if you have any further questions on the subject of personal data, you can contact us at any time using the contact options listed in the legal notice.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses an SSL or. TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line in your browser and by the lock symbol in the browser line.
Server log files
The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. These are:
- Visited page on our domain
- Date and time of the server request
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- IP address
This data will not be merged with other data sources. The basis for data processing is Article 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.
Data transmission when concluding a contract for the purchase and shipping of goods
Personal data will only be transmitted to third parties if necessary in the context of contract processing. Third parties can be, for example, payment service providers or logistics companies. No further transmission of data will take place or only if you have expressly agreed to this.
The basis for data processing is Article 6 Paragraph 1 Letter b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.
Registration on this website
To use certain functions, you can register on our website. The data transmitted is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise we will reject the registration.
In the event of important changes, for example for technical reasons, we will inform you by email. The email will be sent to the address provided during registration.
The data entered during registration is processed based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke the consent you have already given at any time. An informal notification by email is sufficient to revoke your consent. The legality of the data processing that has already taken place remains unaffected by the revocation.
We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.
Contact form
Data transmitted via the contact form, including your contact details, will be stored in order to be able to process your request or to be available to answer follow-up questions. This data will not be passed on without your consent.
The data entered into the contact form is processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke the consent you have already given at any time. An informal notification by email is sufficient to revoke your consent. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.
Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to storage or there is no longer any need to store the data. Mandatory legal provisions – in particular retention periods – remain unaffected.
Newsletter data
To send our newsletter we need an email address from you. Verification of the email address provided is necessary and consent to receive the newsletter is required. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter.
The data provided when registering for the newsletter will be processed exclusively based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke the consent you have already given at any time. To revoke your consent, simply send an informal message by email or unsubscribe using the “unsubscribe” link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
Data entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.
YouTube
Our website uses plugins from YouTube to integrate and display video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you access a page with an integrated YouTube plugin, a connection to the YouTube servers is established. This tells YouTube which of our pages you have accessed.
YouTube can assign your surfing behavior directly to your personal profile if you are logged into your YouTube account. You can prevent this by logging out beforehand.
The use of YouTube is in the interest of an attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR.
Details on how to handle user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.
Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offering more user-friendly, effective and secure.
Some cookies are “session cookies.” Such cookies are automatically deleted at the end of your browser session. However, other cookies remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.
With a modern web browser you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when the program is closed. Deactivating cookies may result in limited functionality of our website.
The setting of cookies that are necessary to carry out electronic communication processes or to provide certain functions you require (e.g. shopping cart) is based on Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in storing cookies to ensure that our services are technically error-free and seamless. If other cookies are set (e.g. for analysis functions), they will be treated separately in this data protection declaration.
Google Analytics
Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies.” These are small text files that your web browser stores on your device and enable website usage to be analyzed. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.
Google Analytics cookies are set on the basis of Article 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.
IP anonymization
We use Google Analytics in conjunction with the IP anonymization function. It guarantees that Google shortens your IP address within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transfers the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.
Browser Plugin
The setting of cookies by your web browser can be prevented. However, this could limit some functions of our website. You can also prevent the collection of data relating to your website use, including your IP address, and subsequent processing by Google. This is possible by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our website: deactivate Google Analytics.
Details on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google. com/analytics/answer/6004245?hl=de.
Order processing
In order to fully comply with legal data protection requirements, we have concluded an order processing contract with Google.
Demographic characteristics in Google Analytics
Our website uses the “demographic characteristics” function of Google Analytics. It can be used to create reports that contain information about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section “Objection to data collection”.
Payment
The controller has integrated the secupay.Credit card components of secupay AG (hereinafter “secupay”), Goethestr. 6, 01896 Pulsnitz, on this website. secupay is a payment institution within the meaning of the Payment Services Supervision Act (ZAG) and is registered with the Federal Financial Supervisory Authority (BaFin), Graurheindorfer Str. 108, 53117 Bonn (registration number: 126737) and enables cashless payment for products and services on the Internet.
secupay represents a process through which the purchase price claim is assigned to secupay. This enables a retailer to deliver goods, services or downloads to the customer immediately after the order.
If you, as the data subject, select “credit card” as a payment option during the ordering process in our online shop, your data will be automatically transmitted to secupay. By selecting this payment option, you consent to the transmission of personal data required for payment processing.
When processing payments with a credit card, you as the buyer transmit the payment method data to secupay. secupay then carries out a technical check of the risk of payment default. The transaction result is then automatically communicated to the online retailer.
The personal data exchanged with secupay includes first name, last name, address, email address, IP address, telephone number or other data that is necessary for payment processing. The data is transmitted for the purposes of payment processing and fraud prevention. The data controller will also transmit other personal data to secupay if there is a legitimate interest in the transmission. The personal data exchanged between secupay and the data controller may be transmitted by secupay to credit agencies. This transmission is for the purpose of identity and creditworthiness checks.
secupay may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfill the contractual obligations or if the data is to be processed on behalf of secupay.
You have the option of revoking your consent to the handling of personal data at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.
The applicable secupay data protection regulations can be found at https://www.secupay.com/de/datenschutz.
Google Web Fonts
Our website uses web fonts from Google. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
By using these web fonts, it is possible to present you with the representation of our website that we want, regardless of which fonts are available to you locally. This is done by retrieving the Google Web Fonts from a Google server in the USA and thereby passing on your data to Google. This is your IP address and which page you visited on our website. The use of Google Web Fonts is based on Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website.
The company Google is certified for the US-European data protection agreement “Privacy Shield”. This data protection agreement is intended to ensure compliance with the level of data protection applicable in the EU.
Details about Google Web Fonts can be found at: https://www.google.com/fonts#AboutPlace:about and further information in Google’s privacy policy: https://policies.google.com/privacy/partners?hl=de
Source: Data protection configurator from mein-datenschutzbeauftragter.de
