Privacy policy

🇬🇧 ENGLISH

Privacy Policy – Goldener Wahl

Last Updated: August 2026

1. Controller

We have not appointed a Data Protection Officer, as this is not required for our business under Art. 37 GDPR. For data protection questions, please contact us at the email above.

2. Data We Collect

Category Examples
Contact Data Name, address, billing/shipping address, phone number, email address
Financial Data Payment card details (encrypted), transaction details, payment confirmation
Account Data Username, encrypted password, settings and preferences
Transaction Data Items viewed, purchased, returned, or cancelled
Communication Information in your messages to us
Device Data Browser type, IP address (anonymized), unique device identifiers
Usage Data How and when you interact with the Services

3. Legal Bases for Processing

Purpose Legal Basis Art. 6 GDPR
Contract fulfillment (order processing, shipping, payment) Contract performance Art. 6(1)(b)
Customer service and communication Contract performance / legitimate interest Art. 6(1)(b) / (f)
Marketing and advertising (email) Consent / legitimate interest (existing customers) Art. 6(1)(a) / (f)
Fraud prevention and security Legitimate interest / legal obligation Art. 6(1)(f) / (c)
Fulfillment of legal obligations (tax, accounting) Legal obligation Art. 6(1)(c)

4. How We Use Your Data

  1. Providing and improving the Services — Payment processing, order fulfillment, account management, shipping, returns
  2. Marketing and advertising — Sending marketing communications by email (only with consent or for existing customers under § 7 UWG), displaying relevant online advertising
  3. Security and fraud prevention — Account authentication, detection and prevention of fraudulent activities
  4. Communication with you — Customer support and maintaining our business relationship
  5. Legal reasons — Compliance with applicable law, responding to legal proceedings, enforcing our policies

5. Cookies and Tracking

This website uses cookies and similar technologies.

5.1 What are cookies?

Cookies are small text files stored on your device.

5.2 Which cookies do we use?

Cookie Type Purpose Storage Period Legal Basis
Essential Necessary for website operation (cart, login) Session to 1 year Art. 6(1)(f)
Functional Storing your preferences Up to 6 months Consent Art. 6(1)(a)
Analytics Visitor statistics (Google Analytics) Up to 14 months Consent Art. 6(1)(a)
Marketing Personalized advertising (Facebook Pixel) Up to 180 days Consent Art. 6(1)(a)

5.3 Cookie Consent

On your first visit, a cookie banner will appear allowing you to give or refuse consent for non-essential cookies. You can withdraw your consent at any time via the link in the footer.

5.4 Managing Cookies

You can also manage or delete cookies via your browser settings. Most browsers provide instructions for this.

6. Recipients of Your Data (Data Processors)

Provider Purpose Location Legal Basis
Shopify Inc. E-commerce platform Canada / EU servers Data processing (Art. 28 GDPR)
Shopify Payments Payment processing Canada / USA Data processing
PayPal (Europe) S.à.r.l. Payment processing Luxembourg (EU) Data processing
Klarna Bank AB Payment processing Sweden (EU) Data processing
DHL Shipping Germany (EU) Data processing
FedEx Shipping Worldwide Data processing
UPS Shipping Worldwide Data processing
Google Analytics Web analytics USA (DPF/SCC) Consent
Meta (Facebook Pixel) Advertising USA (DPF/SCC) Consent

6.1 Transfers to Third Countries (Non-EU)

Some service providers are based in the USA or other countries outside the EU/EEA. For these transfers, we ensure adequate protection through:

  • The EU-US Data Privacy Framework (DPF) for certified US companies
  • The Standard Contractual Clauses (SCC) adopted by the European Commission
  • Your explicit consent (in certain cases)

You can request a copy of these safeguards at info@goldenerwahl.com.

7. Data Retention Periods

Data Type Retention Period Reason
Contract data (invoices, order records) 10 years Tax retention obligation (§ 147 AO)
Payment data (transaction records) 10 years Tax retention obligation
Account data (name, email, password) Until account deletion Contract fulfillment
Newsletter consent Until revocation Consent
Cookie consent 2 years Proof of consent
Analytics data (anonymized) 14 months Google Analytics standard
Support communication 2 years after completion Legitimate interest

8. Your Rights

Right Description Legal Basis
Access (Art. 15) Right to obtain confirmation as to whether we process personal data concerning you Art. 15 GDPR
Rectification (Art. 16) Right to obtain rectification of inaccurate data Art. 16 GDPR
Erasure (Art. 17) Right to obtain deletion of your data ("right to be forgotten") Art. 17 GDPR
Restriction (Art. 18) Right to obtain restriction of processing Art. 18 GDPR
Data Portability (Art. 20) Right to receive your data in a machine-readable format Art. 20 GDPR
Objection (Art. 21) Right to object to processing of personal data concerning you Art. 21 GDPR
Withdraw Consent (Art. 7) Right to withdraw your consent at any time Art. 7 GDPR

To exercise your rights, please contact us at: info@goldenerwahl.com. We will respond to your request within 30 days.

8.1 Objection to Direct Marketing

You have the right to object at any time to the processing of your data for direct marketing purposes (Art. 21(2) GDPR). Upon objection, we will no longer process your data for this purpose.

8.2 Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR):

Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Graurheindorfer Straße 153, 53117 Bonn
Phone: +49 228 997799-0
Email: poststelle@bfdi.bund.de
Website: www.bfdi.bund.de

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects for you or similarly significantly affects you under Art. 22 GDPR.

10. Data Security

  • Encryption: Your data is encrypted during transmission via SSL/TLS.
  • Passwords: Your passwords are hashed and encrypted.
  • Access restrictions: Only authorized employees have access to personal data.

Despite all measures, no security measure is perfect or impenetrable.

11. Children's Data

The Services are not directed to children under 16 years of age (Art. 8 GDPR in conjunction with § 3a of the German Telemedia Act). We do not knowingly collect personal data from children. If you are a parent or guardian of a child who has provided us with their data, please contact us for deletion.

12. Third-Party Links

The Services may contain links to third-party websites. We are not responsible for the privacy or security of such websites.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this website and update the "Last Updated" date.

14. Contact

15. Further Legal Information

Thank you for trusting Goldener Wahl!

"Elegance in Every Choice"