Privacy policy

DATA PROTECTION DECLARATION

  1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the processing of your personal data when using our website. Personal data includes all data that can personally identify you.

1.2 The data controller for processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Golden Sydney. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this site uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" string and the padlock symbol in your browser's address bar.

  1. DATA COLLECTION WHEN VISITING OUR WEBSITE

When you visit our website for informational purposes only, meaning you do not register or otherwise provide information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary to display the website to you:

  • The website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the site
  • Browser used
  • Operating system used
  • IP address used (if applicable, anonymized)

Processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to check server log files later if there are specific indications of illegal use.

  1. COOKIES

To make visiting our website more appealing and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after your browser session ends (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information, such as browser and location data as well as IP address values, to a certain extent. Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie.

Cookies are partly used to facilitate the ordering process by storing parameters, simplifying the ordering process (e.g., remembering the contents of a virtual shopping cart for a future visit to the website). If personal data is processed through cookies, personal data is also processed. This processing is carried out in accordance with Article 6(1)(b) of the GDPR, either for the performance of the contract or in accordance with Article 6(1)(f) of the GDPR, to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and efficient organization of the website visit.

In certain circumstances, we work with advertising partners who help us make our online offerings more attractive to you. For this purpose, cookies from these partners (third-party cookies) are stored on your computer when you visit our website. If we work with these advertising partners, you will be informed about the use of these cookies and the scope of the information collected in the following paragraphs individually.

Please note that you can configure your browser to notify you about the use of cookies and decide whether to accept cookies on a case-by-case basis, or generally refuse to accept cookies. Each browser manages cookie settings differently. These settings are described in each browser’s help menu, which explains how you can change your cookie settings. For each browser, you can find these instructions via the following links:

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) CONTACTING US When you contact us (e.g., via the contact form or by email), personal data is collected. The specific data collected in the case of a contact form is shown in the respective contact form. This data is used solely for the purpose of responding to your inquiry and for the related technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) of the GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted after the final processing of your request, provided that the circumstances indicate that the matter in question has been fully resolved and there are no statutory retention obligations.

5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION In accordance with Article 6(1)(b) of the GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The specific data collected is shown in the respective input forms. The deletion of your customer account is possible at any time and can be requested by sending a message to the address mentioned above for the data controller. We store and use the data you provide for contract execution. After the contract has been fully executed or your customer account has been deleted, your data will be deleted, taking into account the applicable tax and commercial retention periods, unless you have expressly consented to further use of your data or we have reserved the right to use your data for legally permitted purposes, of which we will inform you accordingly.

6) USE OF YOUR DATA FOR DIRECT MARKETING 6.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing any additional data is voluntary and is used to address you personally. We use the double opt-in procedure to send the newsletter. This means that we will only send you a newsletter by email if you have explicitly confirmed that you agree to receive newsletters. We will then send you a confirmation email in which you are asked to confirm that you wish to receive the newsletter in the future by clicking on the corresponding link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6(1)(a) of the GDPR. When you subscribe to the newsletter, we store your IP address as provided by your Internet Service Provider (ISP) as well as the date and time of registration to prevent possible misuse of your email address at a later date. The data collected when subscribing to the newsletter is used exclusively for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the contact mentioned above. After unsubscribing, your email address will immediately be deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we have reserved the right to use your data for legally permitted purposes, about which we inform you in this statement.

6.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services to those already purchased via email. In accordance with our legitimate interest in personalized direct marketing, we do not need your separate consent for this. The data processing is carried out in this context solely on the basis of our legitimate interest in personalized direct marketing pursuant to Article 6(1)(f) of the GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails. You have the right to object to the use of your email address for advertising purposes at any time with future effect by notifying the data controller mentioned at the beginning. You only need to pay the transmission costs according to the basic rates. Upon receiving your objection, the use of your email address for advertising purposes will cease immediately.

7) DATA PROCESSING FOR ORDER PROCESSING **7.1 The personal data we collect is transmitted to the transport company entrusted with the delivery of the goods, to the extent necessary for the delivery of the goods. Your payment data will be transmitted to the payment service provider authorized by us as part of the payment processing, if necessary for processing the payment. If payment service providers are used, we will explicitly inform you below. The legal basis for transmitting the data is Article 6(1)(b) of the GDPR.

7.2 Use of payment service providers (payment service providers)

  • PayPal If payment is made via PayPal, by credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we will transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment process. The transfer takes place in accordance with Article 6(1)(b) of the GDPR and only insofar as it is necessary for the payment processing.

PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transmitted to credit agencies in accordance with Article 6(1)(f) of the GDPR based on PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Where score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical method. Address data is taken into account in the calculation of the score values, among other things. For further information on data protection, including information about the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal remains entitled to process your personal data insofar as this is necessary for the contractual processing of payments.

  • SOFORT If you choose the "SOFORT" payment method, the payment processing will be carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will transmit the information you provided during the ordering process, together with the information about your order, in accordance with Article 6(1)(b) of the GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transmission of your data is carried out exclusively for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. You can find more information about SOFORT's privacy policy at the following Internet address: https://www.klarna.com/sofort/datenschutz

8) REVIEW REMINDERS Own review reminders (no sending via a customer review system).

We use your email address to remind you once to submit a review of your order for the review system we use, provided that you have given your express consent to this during or after your order in accordance with Article 6(1)(a) of the GDPR. You can revoke your consent at any time by sending a message to the data controller.

9) USE OF SOCIAL MEDIA PLUGINS 9.1 Facebook plugins with the Shariff solution

Our website uses so-called social plugins ("plugins") from the social network Facebook operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). In order to increase the protection of your data when you visit our website, these plugins are not unrestrictedly integrated into the page but only via an HTML link (so-called "Shariff solution"). This integration ensures that when you access a page on our website that contains such plugins, no connection is established with Facebook's servers. When you click on the button, a new browser window opens and loads the Facebook page, where you can interact with the plugins (if necessary, after entering your login data). For more information on the purpose and scope of data collection and further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to Facebook's privacy policy at https://www.facebook.com/policy.php

9.2 Pinterest plugins with the Shariff solution

Our website uses so-called social plugins ("plugins") from the social network Pinterest, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). In order to increase the protection of your data when you visit our website, these plugins are not unrestrictedly integrated into the page but only via an HTML link (so-called "Shariff solution"). This integration ensures that when you access a page on our website that contains such plugins, no connection is established with Pinterest's servers. When you click on the button, a new browser window opens and loads the Pinterest page, where you can interact with the plugins (if necessary, after entering your login data). For more information on the purpose and scope of data collection and further processing and use of data by Pinterest, as well as your rights and settings options for protecting your privacy, please refer to Pinterest's privacy policy at https://policy.pinterest.com/en/privacy-policy

9.3 Instagram Plugin as a Shariff Solution

Our website uses what are known as social plugins (“plugins”) from the online service Instagram. Instagram is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).

To enhance the protection of your data when you visit our website, these buttons are not treated as plugins but merely as HTML link buttons on the page. This type of integration ensures that when a page on our website containing such buttons is viewed, it does not establish a connection with Instagram’s servers. When you click on the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins (if applicable, after entering your login details). Instagram LLC, based in the United States, is a member of the EU-U.S. Privacy Shield, which ensures compliance with the level of data protection in force within the EU.

The purpose and extent of the data collection, as well as the processing and further use of the data, are defined by Instagram. For information regarding Instagram’s data protection practices, including your rights and options for privacy settings, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).

DoubleClick uses cookies to serve ads that are relevant to users, improve campaign performance reports, or prevent users from seeing the same ads multiple times. Through a cookie ID, Google captures which ads are displayed in a particular browser and can prevent them from being shown repeatedly. The processing is based on our legitimate interest in optimally marketing our website in accordance with Art. 6, Para. 1, Let. f GDPR.

Additionally, DoubleClick can track conversions using cookie IDs related to ad requests. This occurs, for instance, when a user views a DoubleClick ad and then visits the advertiser’s website using the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no influence over the extent and subsequent use of the data collected by this tool. Therefore, we inform you based on our current knowledge: through the integration of DoubleClick, Google receives the information that you have visited the corresponding part of our website or clicked on an ad from our site. If you are registered with a Google service, Google may attribute the visit to your account. Even if you are not logged into Google or have not signed in, it is possible that your internet service provider may know and log your IP address.

If you wish to opt out of participating in this tracking procedure, you can disable conversion tracking cookies by configuring your browser not to accept cookies from the domain www.googleadservices.com, or visit https://www.google.de/settings/ads. This setting is cleared when you delete your cookies. You can also check with the Digital Advertising Alliance at www.aboutads.info for information on how to install and adjust cookies. Finally, you can configure your browser to notify you about cookie installation, allowing you to decide individually whether to accept cookies in certain cases or generally exclude cookies. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, based in the United States, is certified under the EU-U.S. Privacy Shield, which ensures compliance with the level of data protection in force in the EU. For more information on DoubleClick by Google’s data protection practices, please visit: https://www.google.de/policies/privacy/

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program “Google AdWords” and, as part of Google AdWords, the conversion tracking service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to display ads (referred to as Google AdWords) on external websites to attract attention to our attractive offers. We can determine, based on the advertising campaign data, how effective the different advertising measures are. This helps us to show you ads that are of interest to you, to make our website more appealing to you, and to improve the quality of our services while ensuring a fair calculation of advertising costs.

The conversion tracking cookie is activated when a user clicks on a Google AdWords ad. Cookies are small text files that are placed on your computer. Typically, these cookies expire after 30 days and are not used for personal identification. If a user visits certain pages of this site and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across the sites of AdWords customers. The information collected via the conversion tracking cookie is used to create conversion statistics for AdWords customers who have opted into conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page containing a conversion tracking tag. However, they do not receive any information that personally identifies the users. If you do not wish to participate in tracking, you can block this use by disabling Google’s conversion tracking cookie via your internet browser in the user settings. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising in accordance with Art. 6, Para. 1, Let. f of the GDPR.

Google LLC, based in the United States, is certified under the EU-U.S. Privacy Shield, which ensures compliance with the level of data protection in force in the EU. For more information on Google’s data protection practices, please visit: https://www.google.de/policies/privacy/

You can permanently disable cookies for advertising preferences by configuring your browser software accordingly or by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be available or may only be used to a limited extent if cookies are disabled.

11) WEB ANALYSIS SERVICES

Google (Universal) Analytics

This website uses Google Analytics, a web analysis service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, text files that are stored on your computer and enable the analysis of your website usage. The information generated by the cookie about your use of this website (including your shortened IP address) is generally transmitted to a Google server in the United States and stored there.

This site uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures the anonymisation of the IP address by shortening it and excludes any possibility of direct personal identification. With this extension, your IP address is shortened by Google within the member states of the European Union or in other countries that are party to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases is the full IP address sent to a Google server in the United States and shortened there. In these exceptional cases, this processing is performed in accordance with Art. 6, Para. 1, Let. f of the GDPR based on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.

On our behalf, Google will use this information to analyse your use of the website, to compile reports on website activities, and to perform other services related to website and internet usage. The user’s IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data.

You can prevent the use of cookies by selecting the appropriate settings in your browser software; however, please note that in this case, you may not be able to use all features of this site to their full extent. You can also prevent the collection of data generated by the cookie related to your website usage (including your IP address) to Google and the processing of these data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plugin or in the context of browsers on mobile devices, click on the following link to install an opt-out cookie that prevents Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and for this domain; if you delete your cookies in this browser, you must click this link again): Google Analytics Opt-out

Google LLC, based in the United States, is certified under the EU-U.S. Privacy Shield, which ensures compliance with the level of data protection in force in the EU. This site also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. Upon first visiting a page, a unique, permanent, and anonymous ID is assigned to the user, which is set for all devices. This allows interaction data from different devices and sessions to be attributed to a single user. The user ID does not contain any personal data and is not transmitted to Google.

You can object to the collection and storage of data via the user ID at any time with effect for the future.

For more information about data protection in connection with Google Analytics, please visit the Google Analytics help page: https://support.google.com/analytics/answer/6004245?hl=en

12) RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING

Facebook Custom Audience via Pixel Tracking

This site uses the "Facebook Pixel" provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With your explicit consent, this allows us to track user behaviour after they have viewed or clicked on a Facebook advertisement. This process is used to assess the effectiveness of Facebook ads for statistical purposes and market research and can assist in optimising future advertising efforts.

The data collected is anonymous to us and does not allow us to draw conclusions about the identity of users. However, the data is stored and processed by Facebook, enabling it to link to the profile of the respective user. Facebook uses the data for advertising purposes in accordance with its data usage policy (https://www.facebook.com/about/privacy/).

You can allow Facebook and its partners to display ads on and off Facebook. A cookie may also be stored on your computer for this purpose. These processing operations only take place with your explicit consent as per Art. 6, Para. 1, Let. a of the GDPR.

Consent to the use of the Facebook Pixel can only be given by users over the age of 13. If you are younger, please ask your parents or guardians for permission. Facebook Inc., based in the United States, is a member of the EU-U.S. Privacy Shield agreement, which ensures compliance with the data protection standards in force within the EU.

To disable cookies on your computer, you can configure your web browser to refuse cookies or to delete cookies already stored. However, disabling all cookies may lead to the inability to use certain functions of our website. You can refuse the use of cookies by third-party providers, such as Facebook, at the following site: https://www.aboutads.info/choices/.

Google AdWords Remarketing

Our website uses the Google AdWords Remarketing feature, which enables us to display ads related to this website in Google search results as well as on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google places a cookie in your browser, which allows for personalised advertising based on the pages you have visited using a pseudonymous cookie ID. The processing is based on our legitimate interest in optimally marketing our website in accordance with Art. 6, Para. 1, Let. f of the GDPR.

Further data processing only occurs if you have agreed to Google linking your browsing history on the internet and applications to your Google account, and for Google to use your account information to personalise the ads you see online. In this case, if you are logged into Google while visiting our site, Google uses your data in conjunction with Google Analytics data to create and define target audience lists for cross-device remarketing. To achieve this, Google temporarily associates your personal data with Google Analytics data to create target groups.

You can permanently disable the placement of cookies for advertising preferences by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/onweb/. You can also consult the Digital Advertising Alliance at www.aboutads.info for information on how to manage cookies effectively. Lastly, you can configure your browser to alert you when cookies are being set, allowing you to decide individually whether to accept them or to exclude their acceptance in certain cases or generally. If you refuse cookies, the functionality of our website may be limited.

Google LLC, based in the United States, is certified under the EU-U.S. Privacy Shield, ensuring compliance with the data protection standards in force within the EU. For more information about Google’s advertising policies and data protection practices, please visit: https://www.google.com/policies/technologies/ads/.


13) RIGHTS OF THE DATA SUBJECT

13.1 The applicable data protection legislation grants you extensive rights as the data subject concerning the processing of your personal data by the data controller, which we inform you of below:

  • Right of Access (Art. 15 GDPR): You have the right to obtain information about your personal data that we process, including the purposes of processing, categories of personal data processed, recipients or categories of recipients to whom your data has been or will be disclosed, the intended duration of storage or the criteria for determining the storage period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if we have not collected it from you, and the existence of automated decision-making, including profiling, along with any relevant information about the logic involved and the scope and consequences of such processing for you. You also have the right to be informed about the safeguards provided under Art. 46 of the GDPR in case of transfers of your data to third countries.

  • Right to Rectification (Art. 16 GDPR): You have the right to request the rectification of inaccurate personal data concerning you and/or to complete incomplete data we hold about you without undue delay.

  • Right to Erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data if the conditions of Art. 17 Para. 1 are met. However, this right does not exist, particularly when the processing is necessary to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims.

  • Right to Restrict Processing (Art. 18 GDPR): You have the right to request the restriction of processing your personal data, particularly when you contest the accuracy of your data, when you refuse the erasure of your data due to unlawful processing and instead request the restriction of processing, if you need your data for the establishment, exercise, or defence of legal claims after we no longer need the data for the purposes of processing, or if you have objected to processing based on your particular situation, as long as it has not been established that our legitimate grounds prevail.

  • Right to Notification (Art. 19 GDPR): You have the right to request rectification, erasure, or restriction of processing from the data controller, who is obliged to inform all recipients to whom your personal data has been disclosed about the rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.

  • Right to Data Portability (Art. 20 GDPR): You have the right to transmit your personal data that you have provided to us in a structured, commonly used, and machine-readable format to a third party or to have it transmitted to another controller, where technically feasible.

  • Right to Withdraw Consent (Art. 7 Para. 3 GDPR): You have the right to withdraw your consent to the processing of your data at any time, with effect for the future. In the event of withdrawal, we will delete the relevant data immediately unless further processing is based on a legal basis for processing without consent. The legality of the processing carried out based on your consent until withdrawal is not affected.

  • Right to Lodge a Complaint (Art. 77 GDPR): If you believe that the processing of your personal data concerning you is contrary to the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence, place of work, or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

13.2 Right to Object

If we process your personal data on the basis of our legitimate interest, you have the right to object at any time for reasons related to your particular situation. If you exercise your right to object, we will cease the collection and processing of your personal data. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to establish, exercise, or defend legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising. You can express your objection as indicated above.

If you exercise your right to object, we will cease the collection and processing of your data for direct marketing purposes.

14) RETENTION PERIOD FOR PERSONAL DATA

The retention period for personal data is determined based on the respective legal retention periods (e.g., commercial and tax retention periods). After the expiry of this period, the corresponding data will routinely be deleted, provided they are no longer necessary for the performance of the contract or for the conclusion of a contract and/or if we have no legitimate interest in continuing to store them.