Privacy policy
Responsible for data processing:
Christian Koch
Master Goldsmith
Sillgasse 15b
6020 Innsbruck
We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below, we provide detailed information on how we handle your data.
1. Access Data and Hosting
You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, date and time of access, transmitted data volume, and the requesting provider (access data) and documents the access. This access data is evaluated exclusively for the purpose of ensuring a smooth operation of the site and improving our offering. This serves to safeguard our predominantly legitimate interests in a correct presentation of our offering in the context of a balance of interests according to Art. 6 Para. 1 S. 1 lit. f GDPR. All access data is deleted no later than seven days after the end of your visit to the site.
2. Data Processing for Contractual Purposes and Contact
2.1 Data Processing for Contractual Purposes
For the purpose of contract processing (including inquiries and processing of existing warranty and performance claims, as well as any statutory update obligations) according to Art. 6 Para. 1 S. 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us during your order. Mandatory fields are marked as such because in these cases, we require the data to process the contract and cannot send the order without this information. The types of data collected can be found in the respective input forms.
For further information on the processing of your data, especially regarding the disclosure to our service providers for the purpose of order processing, payment, and shipping, please refer to the following sections of this privacy policy. After complete contract processing, your data will be restricted for further processing and deleted after the expiration of tax and commercial retention periods according to Art. 6 Para. 1 S. 1 lit. c GDPR, unless you have expressly consented to further use of your data according to Art. 6 Para. 1 S. 1 lit. a GDPR, or we reserve the right to use the data beyond that, which is legally permitted and about which we will inform you in this statement.
2.2 Customer Account
If you have given your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR by choosing to open a customer account, we use your data for the purpose of opening a customer account and storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or through a designated function in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data according to Art. 6 Para. 1 S. 1 lit. a GDPR, or we reserve the right to use the data beyond that, which is legally permitted and about which we will inform you in this statement.
2.3 Contact
As part of customer communication, we collect personal data for the processing of your inquiries according to Art. 6 Para. 1 S. 1 lit. b GDPR when you voluntarily provide this data during contact with us (e.g., via contact form or email). Mandatory fields are marked as such because in these cases, we require the data to process your contact. The types of data collected can be found in the respective input forms. After complete processing of your inquiry, your data will be deleted unless you have expressly consented to further use of your data according to Art. 6 Para. 1 S. 1 lit. a GDPR, or we reserve the right to use the data beyond that, which is legally permitted and about which we will inform you in this statement.
Live-Chat-Tools Userlike
For the purpose of customer communication, we use the Live-Chat-Tool provided by Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne, Germany ("Userlike"). This serves to protect our predominant legitimate interests in effective and improved customer communication in the context of a balance of interests according to Art. 6 Para. 1 S. 1 lit. f GDPR. Userlike acts on our behalf.
Zendesk:
For the purpose of customer communication, we use the Live-Chat-Tool provided by Zendesk, Inc., 1019 Market Street, San Francisco, CA 94103, USA ("Zendesk"). This serves to protect our predominant legitimate interests in effective and improved customer communication in the context of a balance of interests according to Art. 6 Para. 1 S. 1 lit. f GDPR. Zendesk acts on our behalf. There is no adequacy decision of the European Commission for the USA. Our collaboration with them is based on standard data protection clauses of the European Commission.
WhatsApp:
For the purpose of customer communication, we use the Live-Chat-Tool provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("WhatsApp"). This serves to protect our predominant legitimate interests in effective and improved customer communication in the context of a balance of interests according to Art. 6 Para. 1 S. 1 lit. f GDPR. WhatsApp acts on our behalf. The phone numbers stored on our mobile device are automatically processed on servers of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Only phone numbers of customers who have contacted us via WhatsApp and have already accepted WhatsApp's terms and privacy policy are stored. There is no adequacy decision of the European Commission for the USA. Our collaboration is based on standard data protection clauses of the European Commission.
3. Data Processing for the Purpose of Shipping
For the fulfillment of the contract according to Art. 6 Para. 1 S. 1 lit. b GDPR, we forward your data to the shipping service providers commissioned with the delivery, as far as this is necessary for the delivery of ordered goods.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle the shipping for us (drop-shipping). In these cases, they are considered shipping service providers within the scope of this privacy policy.
Data Transfer to Shipping Service Providers for Shipping Notification: If you have given us your explicit consent for this during or after your order, we will, based on this consent according to Art. 6 Para. 1 S. 1 lit. a GDPR, forward your email address and phone number to the selected shipping service provider so that they can contact you for the purpose of delivery notification or coordination before delivery.
You can revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. Upon revocation, we will delete the data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, which is legally permitted and about which we will inform you in this statement.
Shipping Service Providers:
-
United Parcel Service Deutschland S.à r.l. & Co. OHG Görlitzer Straße 1 41460 Neuss Germany
-
General Logistics Systems Germany GmbH & Co. OHG GLS Germany-Straße 1 - 7 DE-36286 Neuenstein Germany
-
Hermes Germany GmbH Essener Straße 89 D-22419 Hamburg Germany
-
DHL Paket GmbH Sträßchensweg 10 53113 Bonn Germany
-
DPD Deutschland GmbH Wailandtstraße 1 63741 Aschaffenburg Germany
4. Data Processing for Payment Processing
4.1 Data Processing for Transaction Processing:
Depending on the selected payment method, we forward the data necessary for processing the payment transaction to our technical service providers, who act as data processors on our behalf, or to the contracted financial institutions or the selected payment service provider, as far as this is necessary for the payment processing. This serves the fulfillment of the contract according to Art. 6 Para. 1 S. 1 lit. b GDPR. In some cases, payment service providers collect the necessary data for payment processing themselves, e.g., on their own website or through a technical integration in the ordering process. The privacy policy of the respective payment service provider applies in these cases. For questions about our payment processing partners and the basis of our collaboration with them, please contact the contact option described in this privacy policy.
4.2 Data Processing for Fraud Prevention and Optimization of Payment Processes:
If necessary, we provide our service providers with additional data that, together with the data necessary for payment processing, they use as our data processors for the purpose of fraud prevention and optimization of our payment processes (e.g., invoicing, handling disputed payments, supporting accounting). This serves, according to Art. 6 Para. 1 S. 1 lit. f GDPR, to safeguard our predominant legitimate interests in fraud protection and efficient payment management within the framework of a balance of interests.
4.3 Identity and Credit Check when Choosing Klarna Payment Services:
Klarna Direct Debit, Purchase on Account via Klarna, Klarna Installment Purchase If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we ask for your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR to transmit the data necessary for payment processing and an identity and credit check to Klarna. In Germany, the credit check may involve the use of credit reporting agencies mentioned in Klarna's privacy policy. Klarna uses the information received about the statistical probability of payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option mentioned in this privacy policy. This may result in us no longer being able to offer you certain payment options. You can also revoke your consent to the use of personal data at any time directly with Klarna.
4.4 Identity and Credit Check when Choosing Billpay Payment Services (operated by Klarna Bank AB):
If you choose the payment services of Klarna Bank AB (publ.), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter BillPay), we ask for your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR to transmit the data necessary for payment processing and an identity and credit check to Billpay. In Germany, the credit check may involve the use of credit reporting agencies mentioned in Billpay's privacy policy. Billpay uses the information received about the statistical probability of payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option mentioned in this privacy policy. This may result in us no longer being able to offer you certain payment options. You can also revoke your consent to the use of personal data at any time directly with BillPay.
4.5 Identity and Credit Check when Choosing Purchase on Account via PayOne:
If you choose the payment method Purchase on Account (offered through PayOne GmbH, Lyoner Str. 9, 60528 Frankfurt a. M., Germany (hereinafter PayOne)), we ask for your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR to transmit the data necessary for payment processing and an identity and credit check to PayOne. In Germany, the credit check may involve the use of credit reporting agencies mentioned in PayOne's privacy policy. PayOne uses the information received about the statistical probability of payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option mentioned in this privacy policy. This may result in us no longer being able to offer you certain payment options.
5. Email and Telephone Advertising
5.1 Email Newsletter with Registration, Newsletter Tracking with Separate Consent:
When you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to regularly send you our email newsletter based on your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we delete your email address from the recipient list unless you have expressly consented to further use of your data according to Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use the data beyond that, which is legally permitted and about which we will inform you in this statement.
If you have additionally given us your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR to analyze our newsletter, we also analyze your interaction with our newsletter by measuring, storing, and evaluating open rates and click rates for the purpose of designing future newsletter campaigns ("newsletter tracking").
For this evaluation, the emails sent contain one-pixel technologies (e.g. so-called web beacons, tracking pixels) that are stored on our website. For the evaluations, we link the following "newsletter data" in particular:
- the page from which the page was requested (so-called referrer URL),
- the date and time of the request,
- the description of the type of web browser used,
- the IP address of the requesting computer,
- the email address,
- the date and time of registration and confirmation and the one-pixel technologies with your email address or your IP address and possibly an individual ID. Links contained in the newsletter may also contain this ID.
Unsubscribing from newsletter tracking is possible at any time, either by sending a message to the contact option described or via a link provided in the newsletter.
The information is stored as long as you have subscribed to the newsletter.
5.2 Email Newsletter without Registration and Your Right to Object:
If we receive your email address in connection with the sale of a product or service and you have not objected, we reserve the right to regularly send you offers for similar products, such as those already purchased, from our range by email based on § 7 Para. 3 UWG. This serves to safeguard our predominant legitimate interests in an advertising approach to our customers within the framework of a balance of interests.
You can object to this use of your email address at any time by sending a message to the contact option described in this privacy policy or via a link in the advertising email, without incurring any costs other than the transmission costs according to the basic rates.
After objection, we delete your email address from the recipient list unless you have expressly consented to further use of your data according to Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use the data beyond that, which is legally permitted and about which we will inform you in this statement.
5.3 Newsletter Sending:
The newsletter is possibly also sent by our service providers as part of processing on our behalf. For questions about our service providers and the basis of our collaboration with them, please contact the contact option described in this privacy policy.
The newsletter and the newsletter tracking described above are possibly also sent by our service providers as part of processing on our behalf. For questions about our service providers and the basis of our collaboration with them, please contact the contact option described in this privacy policy.
Our service providers are located and/or use servers in the USA. For the USA, there is no adequacy decision by the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.
5.4 Sending Review Requests by Email:
If you have given us your explicit consent for this during or after your order according to Art. 6 Para. 1 S. 1 lit. a GDPR, we use your email address to request a review of your order via the rating system we use. This consent can be revoked at any time by sending a message to the contact option described in this privacy policy or via a link in the review request.
Review requests may also be sent by our service providers as part of processing on our behalf. For questions about our service providers and the basis of our collaboration with them, please contact the contact option described in this privacy policy.
Our service providers are located and/or use servers in these countries: USA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on these guarantees: standard data protection clauses of the European Commission, standard data protection clauses of a supervisory authority.
5.5 Telephone Advertising:
If you have given us your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR, we use the data required for this purpose or separately provided by you for our own advertising purposes, e.g., to inform you about interesting offers and our products. You can revoke your consent at any time, either by sending a message to the contact option described in this privacy policy or by making an oral statement during each call. After revocation, we delete your phone number unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, which is legally permitted and about which we will inform you in this statement.
The advertising calls are provided by our service providers as part of processing on our behalf, to whom we pass on your data for this purpose.
Our service providers are located and/or use servers in these countries: USA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on these guarantees
6. Cookies and Other Technologies
General Information:
To make your visit to our website attractive and enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session (session cookies), while others remain on your device and allow us to recognize your browser on your next visit (persistent cookies). We use technologies that are essential for the use of certain functions of our website (e.g., shopping cart function). These technologies collect and process IP addresses, visit time, device and browser information, and information about your use of our website (e.g., information about the contents of the shopping cart). This is done as part of a balancing of interests in the predominant legitimate interests of an optimized presentation of our offer according to Art. 6 para. 1 sentence 1 lit. f GDPR.
In addition, we use technologies to fulfill the legal obligations to which we are subject (e.g., to be able to prove consents to the processing of your personal data) and for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy. You can find the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have given your consent to the use of technologies in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy.
7. Use of Cookies and Other Technologies for Web Analysis and Advertising Purposes
7.1 Use of Google Services for Web Analysis and Advertising Purposes
Google Analytics:
For the purpose of website analysis, data (IP address, visit time, device and browser information, and information about your use of our website) is automatically collected and stored with Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not merged with other data from Google. Data processing is based on an agreement on order processing by Google.
Optimization of our website for marketing purposes: To optimize the marketing of our website, we have activated the data sharing settings for "Google products and services." This allows Google to access and use the data collected and processed by Google Analytics to improve Google services. Data sharing with Google under these data sharing settings is based on an additional agreement between controllers. We have no influence on the subsequent data processing by Google.
Google Optimize: For the purpose of creating and conducting tests, we also use the extension function of Google Analytics, Google Optimize.
User-ID function: For the purpose of optimizing the marketing of our website, we use the so-called User-ID function. With this function, we can assign a unique, permanent ID to your interaction data from one or more sessions on our online presence, allowing us to analyze your user behavior across devices and sessions.
Cross-Device Tracking with Google Signals: For web analysis, the extension function of Google Analytics, Google Signals, enables so-called "Cross-Device Tracking." If your internet-enabled devices are linked to your Google account and you have activated the "personalized advertising" setting in your Google account, Google can create reports on your usage behavior (especially cross-device user numbers) even when you switch devices. There is no processing of personal data by us in this regard; we only receive statistics created based on Google Signals.
DoubleClick-Cookie: For web analysis and advertising purposes, the extension function of Google Analytics uses the so-called DoubleClick cookie to enable recognition of your browser when visiting other websites. Google will use this information to compile reports on website activities and to provide other services related to website usage.
Google AdSense:
Our website markets ad space through Google AdSense for third-party ads. This allows the display of interest-based advertising through the collection and processing of data (IP address, visit time, device and browser information, and information about your use of our website) and the automatic assignment of a pseudonymous UserID, which is used to determine interests based on visits to this and other websites.
Google Ads:
For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing cookie is set when you visit our website. This enables interest-based advertising through the collection and processing of data (IP address, visit time, device and browser information, and information about your use of our website) and the use of a pseudonymous cookieID and based on the pages you visited. Further data processing only takes place if you have activated the "personalized advertising" setting in your Google account. If you are logged into Google during your visit to our website in this case, Google uses your data together with Google Analytics data to create and define cross-device remarketing audience lists.
Google Ads Conversion Tracking: For website analysis and event tracking, we measure your subsequent usage behavior when you arrive at our website via a Google Ads advertisement using Google Ads Conversion Tracking. Cookies can be used for this purpose, and data (IP address, visit time, device and browser information, and information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter) can be collected, from which usage profiles are created using pseudonyms.
Google Maps:
For the visual representation of geographical information, Google Maps collects, transmits, and subsequently processes data about your use of the map functions, especially the IP address and location data. We have no influence on this subsequent data processing.
