Search
Privacy policy for the website https://goldsgym-nutrition.com/de
The company Gold’s Gym Trading GmbH, located at Saarbrücker Straße 36a, 10405 Berlin, is the operator of the website www.goldsgym.shop/de. We want you to feel comfortable using our website. The protection of your privacy and your personality rights is very important to us. We therefore ask you to read the information about the functions of our website carefully.
In the following privacy policy, we inform you about the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the websites, functions and content connected with it, as well as any external online presence, such as our social media profiles (hereinafter all jointly referred to as “online offering”).
I. NAME AND ADDRESS OF DATA CONTROLLER
The data controller as defined in the General Data Protection Regulation (hereinafter “GDPR”) and other national data protection laws of the Member States and other data protection provisions is:
Gold's Gym Trading GmbH
Saarbrücker Straße 38
10405 Berlin
Tel.: +49 30 2100 35 555
Fax: +49 30 2100 35 515
e-mail: service@goldsgym.shop
You can contact the data controller by e-mail using the following address:
Astrid Bemfert
Weitbrucher Straße 19 A
12349 Berlin
e-mail: datenschutz@bemfert.de
II. SCOPE OF THE PROCESSING OF PERSONAL DATA
As a matter of principle, we process personal data of the users of our online offering only insofar as this is necessary for the provision of a functional online offering and of our content and services. Your personal data is processed regularly only with your consent. An exception applies where it is not possible to obtain your prior consent for specific reasons or the processing of your data is permitted by law.
III. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We wish to inform you of the legal basis for our data processing. Where the legal basis is not stated in our privacy policy, the processing of your personal data is based on the following legal bases:
⦁ Article 6(1)a GDPR serves as the legal basis when we have obtained your consent to process your personal data for a specific purpose.
⦁ Article 6(1)b GDPR serves as the legal basis when we are required to process your personal data for the performance of a contract, for example when you enter into a membership contract via our online offering. This legal basis also applies to the processing of personal data that is required in order to execute pre-contractual measures, such as when you contact us with queries about our products and services.
⦁ Article 6(1)c GDPR serves as the legal basis when processing of your personal data is necessary for compliance with a legal obligation, for example to fulfil obligations under commercial and tax laws.
⦁ In the event that processing of personal data is necessary in order to protect your vital interests or those of another natural person, Article 6(1)d GDPR provides the legal basis.
⦁ If processing is necessary to pursue the legitimate interest of our company or of a third party and your interests, fundamental rights and freedoms do not override the aforementioned interests, the legal basis for processing of personal data is Article 6(1)f GDPR.
IV. ERASURE OF DATA AND RETENTION PERIOD
We wish to inform you of our retention and deletion policy with regard to the processing of personal data. The following will apply to the retention period and erasure of data unless more detailed provisions are stated in the subsequent sections of our privacy policy:
We will only process and retain your personal data for the length of time that is required in order to fulfil the purpose for which your personal data was stored. Your data may be retained for longer if this has been required by European or national legislators in regulations, laws or other provisions that we are obliged to uphold. Your personal data will also be blocked or erased if a retention period prescribed by the specified regulations expires, unless it is necessary to continue storing your data in order to conclude a contract or perform a contract.
If your personal data is blocked, it will be deleted as soon as it is no longer subject to statutory or contractual retention periods and as long as there is no reason to assume that deletion would impair your interests that are in need of protection and as long as deletion does not entail disproportionate effort due to the specific form of storage.
V. PROVISION OF ONLINE OFFERING AND CREATION OF LOG FILES
1. Description and scope of data processing
Every time our online offering is accessed, we or our hosting provider collect a series of general data and information from the computer system of the accessing computer. The following data may be collected
⦁ Date and time that the visited web page or online offering is accessed
⦁ Website from which you accessed our online offering (e.g. previous web page, hyperlink or similar)
⦁ Websites that you access via our online offering
⦁ The access status (file transferred, file not found)
⦁ The amount of data sent by you
⦁ The operating system that you are using
⦁ The browser that you are using and the browser version
⦁ The internet service provider used by you
⦁ Your IP address assigned to your computer by your internet service provider when you connect to the internet.
The data is temporarily stored in log files on a server. This data is not stored together with any other of your personal data.
2. Legal basis for data processing
The legal basis for the temporary storage of the data and log files is Article 6(1)f of GDPR.
3. Purpose of data processing
The data has to be collected and stored in order to operate the online offering, to ensure its functionality and to be able to deliver the content of the online offering correctly. The data is also used to optimise our online offering and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. These purposes are also our legitimate interest in data processing as defined in Article 6(1)f of GDPR.
4. Retention period
The data is erased as soon as it is no longer required to fulfil the purpose for which it was collected. If data is stored in log files, this applies after seven days at the latest. It is possible for data to be stored for a longer period. In such a case, your IP address will be deleted or disassociated so that it can no longer be assigned to the accessing client.
5. Objection to data and having data removed
Since the collection of data for the provision of the online offering and the storage of the data in log files are absolutely necessary for the operation of the online offering, you as a user have no option to object.
VI. USE OF COOKIES
1. Integration of cookies in online offering
We use cookies as part of our online offering. Cookies are small text files that are stored in your internet browser or by the internet browser on your computer system. Cookies are downloaded when you visit a website. The cookie contains a characteristic string of characters that enables the browser to identify you when you return to the website. Temporary cookies, also referred to as “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves the online offering and closes the browser. Such a cookie may contain, for example, the contents of a shopping basket in an online shop or a login status.
Cookies that remain stored even after the browser has been closed are referred to as “permanent” or “persistent”. If the website is visited again from the same device, the cookie is either sent back to the website that generated it (first-party cookie) or to another website to which it belongs (third-party cookie). The cookie allows the website to recognise that it has already been accessed with this browser and also means that the user experience is improved when the site is accessed again. Cookies can, for example, remember your preferences and adapt the offers displayed on the website to your personal interests and requirements.
You can decide for yourself whether the browser you use allows cookies or not. Stored cookies can be deleted in the system settings of your browser. Please note that the functionality of websites may be restricted or even disabled if cookies are not permitted.
When you access our online offering for the first time, you will be informed about the use of cookies via an information banner. We use different groups of cookies. If you click on Details in the information banner, you will be shown which cookies we use and to which group they belong. If you do not want us to use a particular cookie or group of cookies, please remove the green tick from the relevant cookie group and click OK to confirm your choice of setting. If you do not remove the green tick, you consent to us using the cookie group. Please note that you cannot influence the use of the necessary functional cookies. Only after you have selected the cookie groups will the cookies be used on the website.
If you have allowed us to use cookies through your browser settings or consent to their use, the following cookies may be used in our online offering.
Your current settings with regard to permitted cookies (functional cookies, preferences, statistics, marketing):
If these cookies also use personal data, you will be informed of this below.
2. Use of functional cookies
We use functional cookies so that you can visit our online offering in a user-friendly way and so that the online offering functions properly (cookies required for technical reasons). Some elements of our online offering require that the browser from which you accessed the offering can identify you even after a page change.
The use of functional cookies allows the following functionalities to be provided and the following data is stored:
⦁ Your language settings
⦁ Storage of your browser settings so that our online offering is optimised for display on your device
⦁ Storage of settings to optimise video (e.g. resolution data of your screen)
⦁ Consistent loading of the accessed website so that it remains accessible
⦁ Preventing misuse of the online offering and services, through registration of login processes
The legal basis for the processing of personal data using cookies that are necessary for technical reasons is Article 6(1)f of GDPR.
3. Use of preference and statistics and marketing cookies
We also use preference and statistics cookies in our online offering, enabling us to analyse your browsing behaviour. When you access our online offering, you will be asked, as described above, to consent to the processing of personal data used in this context.
The following data is used through cookies that analyse your browsing behaviour:
⦁ The search terms that you entered
⦁ Frequency of page views
⦁ Recording of the time spent viewing the online offering
⦁ Recording of the order of visits to different websites included in the online offering
⦁ Use of functions of online offering
⦁ Your IP address in anonymised form
The legal basis for the processing of personal data using cookies for analysis purposes is Article 6(1)a of GDPR if you have given your consent in this regard. In addition, the legal basis is also Article 6(1)f of GDPR, as we have a legitimate interest, namely an interest in the analysis, optimisation and economic operation of our online offering.
4. Use of Google Analytics
We use the services of Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses cookies to enable the use of our online offering to be analysed. The information generated by the cookies about your use of the online offering will generally be transmitted to and stored by Google on servers in the United States of America. Your IP address will, however, be truncated beforehand by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The cookies stored by Google Analytics are deleted after 26 months at the latest.
For more information about Google’s use of data, settings and opt-out options, please visit the Google websites: https://policies.google.com/technologies/partner-sites (How Google uses information from sites or apps of our partners), https://policies.google.com/technologies/ads (Advertising), https://google.de/settings/ads/ (Managing the information Google uses to serve you ads).
The legal basis for the processing of personal data using cookies in conjunction with the use of Google Analytics for analysis purposes is Article 6(1)a of GDPR if you have given your consent in this regard. We also have a legitimate interest in data processing as defined in Article 6(1)f of GDPR, as we have an interest in the optimisation of our online offering and our advertising presence.
You can revoke your consent to the aforementioned data processing at any time by changing the settings with regard to the permitted cookies or by changing your browser settings. To deactivate Google Analytics, you can download and install a browser plug-in at https://tools.google.com/dlpage/gaoptout?hl=de/
5. Use of the remarketing function of Google Inc.
We use the remarketing function of Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA(“Google”). The function displays interest-based advertisements to visitors to our website within the framework of the Google advertising network.
To do this, Google uses cookies to enable it to show advertising to visitors based on their interests within the Google advertising network. This involves content that you have previously accessed on websites within the Google advertising network. Google guarantees that it will not collect any personal data during this process.
If you do not wish to use Google’s remarketing function, you can deactivate the use of cookies for interest-based advertising within the Google advertising network at http://www.google.de/settings/ads
We use this function on the basis of Article 6(1)f of GDPR given our legitimate interest.
6. Use of the affiliate program Awin (formerly Zanox)
We use the affiliate program of AWIN AG, Eichhornstraße 3, 10785 Berlin in our online offering in the form of text links, image links, advertising banners or input forms. Awin uses cookies. Cookies are text files that are stored on your computer so that your use of the website can be analysed. Awin also uses web beacons. Web beacons are invisible images used to collect information. Through these web beacons, visitor traffic on our online offering can be evaluated. The information generated by cookies and/or web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to a server of Awin where it is stored. Awin uses this information for the purpose of evaluating your use of the website in relation to the advertisements, compiling reports on website activity and advertisements for website operators, and providing other services relating to website activity and internet usage. Awin may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Zanox’s behalf.
The legal basis for the processing of personal data using cookies in conjunction with the use of Awin for analysis purposes is Article 6(1)a of GDPR if you have given your consent in this regard. We also have a legitimate interest in data processing as defined in Article 6(1)f of GDPR, as we have an interest in the optimisation of our online offering and our advertising presence.
You can revoke your consent to the aforementioned data processing at any time by changing the settings with regard to the permitted cookies or by changing your browser settings.
7. Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated into our online offering in order to display our Trusted Shops seal of approval and any ratings collected, as well as to offer Trusted Shops products to buyers after they have placed an order.
This serves to protect our overriding legitimate interests in the optimal marketing of our offering pursuant to Article 6(1)f of GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is viewed, the web server automatically saves a server log file containing, for example, your IP address, the date and time, the amount of data transferred and the requesting provider (access data), and documents the visit. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site.
Further personal data will only be transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order, or are already registered to use them In such a case, the contractual agreement between you and Trusted Shops applies accordingly.
8. Use of the Cookiebot service
We are obliged to document your consent or withholding of consent in relation to the use of cookies pursuant to Article 7(1) of GDPR. To this end, we make use of the service provided by cookiebot.com.
The following data is stored in our Cookiebot account:
⦁ Your IP address in anonymised form (the last three digits are set to “0”)
⦁ Date and time of your consent
⦁ The browser that you used
⦁ The URL from which your consent is sent
⦁ An anonymous, random and encrypted key value
⦁ Your consent status, used as proof of your consent.
The key and your consent status are also stored in a “CookieConsent” cookie so that our online offering can automatically read and respect your consent in all subsequent page requests and future user sessions for a period of up to 12 months. You may view and change your level of consent at any time in the privacy policy. This is described above.
9. Retention period, objection to data, and option of having data removed with regard to data collected when using cookies
Cookies are stored on your computer and transmitted to us by it. This means that you, as the user, have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. You can also control this, as described above, by giving or revoking your consent within the framework of our online offering. Cookies that have already been saved can be deleted at any time.
VII. NEWSLETTER
If you register for the newsletter, you consent until further notice to receiving a personalised newsletter from Gold’s Gym Trading GmbH and to Gold’s Gym Trading GmbH sending you advertising on products, services, promotions and satisfaction surveys. If you have agreed to receive information on the topics of fitness, training, nutrition and lifestyle from RSG Group GmbH, you consent until further notice to receiving a personalised newsletter from RSG Group and its subsidiaries CYBEROBICS GmbH, THE REED GmbH, LOOX Sports GmbH and McFIT MODEL AGENCY GmbH in addition to the Gold’s Gym Shop newsletter and to the aforementioned RSG Group companies sending you advertising on products, services, promotions and satisfaction surveys.In order to be sent a newsletter that is optimised for you, you consent to an evaluation by us that measures if and when the newsletter is opened and which links you click on. Detailed information on the distribution procedure and the data collected for the purpose of the newsletter can be found in the text below. You can revoke your consent and terminate receipt of the newsletter at any time. A corresponding link is provided for this purpose in every newsletter. You may also revoke your consent by sending a simple message by post (Gold’s Gym Trading GmbH, Saarbrücker Straße 36a, 10405 Berlin) or by e-mail to service@goldsgym.shop. You will incur no costs apart from the cost of transmission of the message at the standard rate.
1. Description and extent of data processing for newsletter distribution
Within the scope of our online offering, you have the option of subscribing to a free newsletter at various points.
As part of the registration process, your consent to the processing of the data is obtained and reference is made to this data protection statement.
Registering for our newsletter involves a double opt-in process. This means that after subscribing to our newsletter you will receive an email in which you are requested to confirm your registration. This confirmation is required to ensure that nobody can sign up using somebody else’s email address. Newsletter registrations are logged to enable the registration process to be documented in line with the legal requirements. This involves saving information about the times at which registration and confirmation were logged, as well as the relevant IP address.
In addition, even if you do not register for our newsletter we may use your e-mail address for distribution of a newsletter if you purchase goods or services from Gold´s Gym Trading GmbH through our online offering and provide your e-mail address in this context. In such a case, the newsletter will be sent only for the purpose of direct marketing for similar goods or services.
2. Legal basis and purpose of data processing
The legal basis for distribution of the newsletter and associated tracking is your consent pursuant to Article 6(1)a of GDPR.
The registration process is logged on the basis of our legitimate interest pursuant to Article 6(1)f of GDPR. Our interest in this case is the implementation of a user-friendly and secure newsletter distribution procedure, which is in our commercial interests and enables us to document your consent and at the same time to meet your expectations.
The legal basis for the sending of the newsletter following the sale of goods or services is Article 7 para. 3 of the Unfair Competition Act (UWG) in the Federal Republic of Germany and Article 107 paras. 2 and 3 of the Telecommunications Act (TKG) in Austria.
The purpose of processing your e-mail address is to send you the newsletter.
3. Retention period
The data is erased as soon as it is no longer required to fulfil the purpose for which it was collected. Your e-mail address will continue to be stored for the newsletter distribution while you remain subscribed to the newsletter.
You can revoke your consent and terminate receipt of the newsletter at any time. A corresponding link is provided for this purpose in every newsletter. You can also revoke your consent by sending a simple message to us. Please use the following contact details to do this at no charge except for the costs of basic transmission of the message to us:
By post: Gold’s Gym Trading GmbH, Saarbrücker Straße 36a, 10405 Berlin or by e-mail: service@goldsgym.shop.
In order to document the consent that you have formerly granted we can store the e-mail address that you have provided for up to three years on the basis of our legitimate interest before deleting it. In such an instance your e-mail address is stored solely for the purpose of a potential defence of a claim against us.
4. Newsletter distribution by MailChimp
Our newsletter is sent out using the mailing service provider MailChimp, a service of the US provider The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (hereinafter “MailChimp”). The privacy policy of the distribution service provider can be viewed at https://mailchimp.com/legal/privacy/.
MailChimp is certified by the Privacy Shield and we have concluded an external data processing agreement with it.
We use MailChimp’s services on the basis of our legitimate interest pursuant to Article 6(1)f of GDPR.
MailChimp may use recipients’ data without identification of a specific user in order to optimise or improve its own services, such as to optimise the technical distribution process and improve the display of the newsletter. MailChimp is not authorised to use our newsletter recipients’ data to contact them on its own account or to share this data with third parties.
Registration for our newsletter is done via a double opt-in with MailChimp and is documented accordingly. If you unsubscribe, your data at MailChimp will be deleted.
5. Newsletter tracking
The newsletters may contain “web beacons”, which are single-pixel files that are retrieved from our server or from the server of our mailing service provider when a newsletter is opened. When these files are accessed, technical information such as details about your browser, operating system and your IP address are collected along with the time at which the newsletter was accessed.
The legal basis for the processing of data in respect of newsletter evaluation is Article 6(1)f of GDPR.
All of this information is used to improve the services using the technical data or target audience and its reading habits on the basis of the location at which the newsletter was accessed and the times of access. The procedure also detects whether the newsletter has been opened, when it was opened and what links have been clicked. Even if this information would technically allow the identification of an individual newsletter recipient, neither we nor the distribution service provider will monitor individual users. The evaluations are used by us to determine the reading habits of our users and to tailor our content to them or to send newsletters of interest to our users.
6. Unsubscribing from the newsletter
You can terminate your consent to the use of your e-mail address for our newsletter at any time via a link at the bottom of the e-mail.
VIII. DISCLOSURE OF DATA TO SERVICE PROVIDERS AND OTHER THIRD PARTIES
For the operation and optimisation of our online offering as well as for our services and for the processing of contracts, various service companies are active on our behalf, e.g. for central IT service providers or for the hosting of our online offering. We forward the data needed for performance of the respective contract to these service providers.
The legal basis for the disclosure of data to service providers is Article 6(1)b and f of GDPR.
We may also disclose your personal data to third parties or government agencies if we are obliged to do so by official or court order or if we are entitled to do so, as required, for example, for the prosecution of criminal offences or for the protection and enforcement of our rights or claims.
The legal basis for this disclosure is Article 6(1)c and f of GDPR.
IX. CONTACT FORM AND E-MAIL CONTACT
There is a contact form on our website that you can use to contact us electronically. If you make use of this option, the data you enter in the input form will be transmitted to us and stored:
⦁ First name, surname
⦁ Subject
⦁ E-mail address
⦁ Tel.
⦁ Your message
Alternatively, you can contact us via the e-mail address provided, in which case the personal data sent with your email will be processed.
The legal basis for the processing of your data when using the contact form and sending an e-mail is Article 6(1)f of GDPR. If the purpose of contacting us is to conclude or perform a contract, Article 6(1)(b) also forms the legal basis.
In both cases of contact, your personal data will be processed solely for the purpose of handling the contact.
We will delete your data as soon as the conversation with you has ended. This is the case when circumstances indicate that the matter in question has been finally resolved.
X. USER ACCOUNT
As part of our online offering, we offer you the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. Your data will not be disclosed to third parties. The following data is collected as part of the registration process:
⦁ First name and surname
⦁ E-mail address
⦁ Password
In order to process orders in our online shop, we also require the following information from you:
⦁ Invoice address (where applicable company name and addition to address, street and street number, postcode and town)
⦁ Delivery address (where applicable company name and addition to address, street and street number, postcode and town)
The legal basis for the processing of the data is Article 6(1)b of GDPR, as the registration and the collection of further data in the context of the order serves the performance of a contract to which the user is a party or the implementation of pre-contractual measures.
Your data, which we process in the context of registration and ordering in the online shop, is used for the following purposes:
⦁ Provision of customer account
⦁ Making your customer profile accessible within our online offering
⦁ Use of our online shop
⦁ Deliveries
⦁ Payment processing
⦁ Queries in relation to placed orders
⦁ Statistical market research
XI. PAYMENT PROCESSING
For the processing payments, we offer the use of different payment service providers for your convenience. We do not collect or store any payment transaction information during the payment process. This data is only disclosed directly to the respective payment service provider.
1. Sofortüberweisung
If you choose Sofortüberweisung as your payment option, you will be redirected to the pages of the company Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany.
To process your payment, Sofort GmbH must be provided with the personal data necessary for reliable processing, i.e. your surname, first name, address, telephone number, IP address and e-mail address.
For the purpose of checking your identity and creditworthiness, Sofort GmbH may, under certain circumstances, transmit personal data to credit agencies.
The account or credit card data collected by Sofort GmbH in the course of the purchase transaction as well as the transmitted PIN and TAN allow for the invoice amount for your order to be transferred after a technical check of the account balance and the retrieval of further data to check for sufficient funds.
The completed transfer is transmitted to us.
Sofort GmbH is solely responsible for the protection and handling of the data that it collects.
Further information is available from Sofort GmbH at https://klarna.com/sofort/datenschutz/
You can contact us directly by e-mail at datenschutz@sofort.com or in writing at Sofort GmbH, Theresienhöhe 12, 80339 Munich.
2. Klarna invoice or hire purchase
If you decide to process your order via Klarna Invoice or Klarna Part Payment, the payment will be processed by Klarna Bank AB, Sveavägen 46, 11134 Stockholm, Sweden.
In order to process the payment, consent is required for the transmission to Klarna Bank AB of the personal data required for an identity and credit check, such as first name and surname, title, date of birth, gender, e-mail and IP address, telephone number, as well as the data required in connection with invoicing, such as the number and order number of the items, invoice amount and taxes as a percentage, invoicing information, account or credit card data including expiry date and CCV code.
As part of the identity and credit check carried out in Germany, data may be transmitted to the following credit agencies:
• Arvato Infoscore Consumer Data GmbH and Infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden
• Bürgel Wirtschaftsinformationen GmbH & Co KG, Postfach 500166, 22701 Hamburg
• Creditreform Boniversum GmbH, Hellersbergstrasse 11, 41460 Neuss
• Deltavista GmbH, Freisinger Landstrasse 74, 80939 Munich
• SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
If necessary to fulfil the contractual services, personal data may also be made available to service providers and subcontractors within the Klarna Group.
In addition to previous payment behaviour, Klarna also uses scientifically recognised statistical scoring methods to estimate future payment behaviour in order to make a payment processing decision.
Klarna Bank AB provides more detailed information in its privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy/.
3. PayPal
If you choose PayPal as your payment processing option, your personal data required for payment processing will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
This data includes your first name, surname, address, telephone number, e-mail and IP address and other data required for order processing, such as quantity and item number, invoice amount and taxes as a percentage.
The data and transmission of the data are necessary for the processing of the payment via PayPal, in particular for checking and confirming identity and for the administration of the payment and customer account.
If required for performance of the contract, PayPal may also disclose this data to service providers, subcontractors or other affiliated companies.
If the payment methods invoice or direct debit are selected, PayPal will transmit personal data to credit agencies for identity and credit checks. A detailed list can be found in PayPal’s privacy policy at https://paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE/
4. Payment service provider PAYONE
If you choose credit card as your payment option, the payment will be processed by BS PAYONE GmbH, Fraunhoferstraße 2-4, 24118 Kiel, Germany.
For this purpose, BS PAYONE GmbH collects and stores, among other information, your name and address, your credit card number (including validity period), invoice amount and currency. BS PAYONE GmbH may use this information for the purpose of payment processing and pass it on to us. PAYONE is obliged to handle the information in accordance with German data protection laws You can view the privacy policy of PAYONE GmbH at https://payone.de/datenschutz/
We have concluded an external data processing contract with PAYONE and fully implement the strict requirements set by the German data protection authorities when using PAYONE.
XI. GOLD’S GYM SHOP ON SOCIAL NETWORKS/PLATFORMS
Since we want to communicate with our customers, interested parties and users, we have our own pages in social networks (such as Facebook and Instagram) and platforms. We also provide information about our services there. If you access these pages of the networks or platforms, the terms and conditions and data protection policies of the respective operator will apply accordingly.
Unless we state otherwise in our privacy policy, we only process the data of users who communicate with us within the social networks or platforms.
XII. YOUR RIGHTS
We wish to inform you of the rights you hold in relation to the processing of your data. If you wish to assert these rights, please send us a simple message. Please use the following contact details to do this at no charge except for the costs of basic transmission of the message to us:
By post: Gold’s Gym Trading GmbH, Saarbrücker Straße 36a, 10405 Berlin or by e-mail: service@goldsgym.shop
When we receive a request we reserve the right to obtain additional information to confirm your identity in order to ensure your privacy is protected. If you are unable to confirm your identity we will not carry out the request.
You have the following rights:
⦁ Right of access by the data subject (Article 15 GDPR)
⦁ Right to rectification or completion without undue delay of inaccurate personal data concerning you (Article 16 GDPR)
⦁ Right to erasure of your personal data that we store (Article 17 GDPR)
⦁ Right to restriction of processing (Article 18 GDPR)
⦁ Data portability (Article 20 GDPR)
⦁ Right to object (Article 21 GDPR).
⦁ Complain to a supervisory authority; if you believe that the processing of your personal data is in breach of the data protection laws; you may complain to a supervisory authority without prejudice to other legal remedies. The complaint may be submitted to a supervisory authority in the Member State where you reside, where you work or where you believe the breach was committed.
XII. CHANGES TO THE PRIVACY POLICY
We reserve the right to update this privacy policy at any time in order to ensure it remains compliant with the current statutory requirements or to reflect changes to our services, such as if we change our online offering or introduce other services. The new privacy policy will then take effect when you next visit our online offering.
Version: May 2021, Version 1.0