The company Gold’s Gym Trading GmbH, located at Saarbrücker Straße 36a, 10405 Berlin, is the operator of the website de.goldsgymgrandcollection.com. We want you to feel comfortable using our website. The protection of your privacy and your personality rights is very important to us. We therefore ask you to read the information about the functions of our website carefully.
I. NAME AND ADDRESS OF DATA CONTROLLER
The data controller as defined in the General Data Protection Regulation (hereinafter “GDPR”) and other national data protection laws of the Member States and other data protection provisions is:
Gold's Gym Trading GmbH
Saarbrücker Straße 36a
Tel.: +49 30 2100 35 555
Fax: +49 30 2100 35 515
You can contact the data controller by e-mail using the following address:
Weitbrucher Straße 19 A
II. SCOPE OF THE PROCESSING OF PERSONAL DATA
As a matter of principle, we process personal data of the users of our online offering only insofar as this is necessary for the provision of a functional online offering and of our content and services. Your personal data is processed regularly only with your consent. An exception applies where it is not possible to obtain your prior consent for specific reasons or the processing of your data is permitted by law.
III. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
⦁ Article 6(1)a GDPR serves as the legal basis when we have obtained your consent to process your personal data for a specific purpose.
⦁ Article 6(1)b GDPR serves as the legal basis when we are required to process your personal data for the performance of a contract, for example when you enter into a membership contract via our online offering. This legal basis also applies to the processing of personal data that is required in order to execute pre-contractual measures, such as when you contact us with queries about our products and services.
⦁ Article 6(1)c GDPR serves as the legal basis when processing of your personal data is necessary for compliance with a legal obligation, for example to fulfil obligations under commercial and tax laws.
⦁ In the event that processing of personal data is necessary in order to protect your vital interests or those of another natural person, Article 6(1)d GDPR provides the legal basis.
⦁ If processing is necessary to pursue the legitimate interest of our company or of a third party and your interests, fundamental rights and freedoms do not override the aforementioned interests, the legal basis for processing of personal data is Article 6(1)f GDPR.
IV. ERASURE OF DATA AND RETENTION PERIOD
We will only process and retain your personal data for the length of time that is required in order to fulfil the purpose for which your personal data was stored. Your data may be retained for longer if this has been required by European or national legislators in regulations, laws or other provisions that we are obliged to uphold. Your personal data will also be blocked or erased if a retention period prescribed by the specified regulations expires, unless it is necessary to continue storing your data in order to conclude a contract or perform a contract.
If your personal data is blocked, it will be deleted as soon as it is no longer subject to statutory or contractual retention periods and as long as there is no reason to assume that deletion would impair your interests that are in need of protection and as long as deletion does not entail disproportionate effort due to the specific form of storage.
V. PROVISION OF ONLINE OFFERING AND CREATION OF LOG FILES
1. Description and scope of data processing
Every time our online offering is accessed, we or our hosting provider collect a series of general data and information from the computer system of the accessing computer. The following data may be collected
⦁ Date and time that the visited web page or online offering is accessed
⦁ Website from which you accessed our online offering (e.g. previous web page, hyperlink or similar)
⦁ Websites that you access via our online offering
⦁ The access status (file transferred, file not found)
⦁ The amount of data sent by you
⦁ The operating system that you are using
⦁ The browser that you are using and the browser version
⦁ The internet service provider used by you
⦁ Your IP address assigned to your computer by your internet service provider when you connect to the internet.
The data is temporarily stored in log files on a server. This data is not stored together with any other of your personal data.
2. Legal basis for data processing
The legal basis for the temporary storage of the data and log files is Article 6(1)f of GDPR.
3. Purpose of data processing
The data has to be collected and stored in order to operate the online offering, to ensure its functionality and to be able to deliver the content of the online offering correctly. The data is also used to optimise our online offering and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. These purposes are also our legitimate interest in data processing as defined in Article 6(1)f of GDPR.
4. Retention period
The data is erased as soon as it is no longer required to fulfil the purpose for which it was collected. If data is stored in log files, this applies after seven days at the latest. It is possible for data to be stored for a longer period. In such a case, your IP address will be deleted or disassociated so that it can no longer be assigned to the accessing client.
5. Objection to data and having data removed
Since the collection of data for the provision of the online offering and the storage of the data in log files are absolutely necessary for the operation of the online offering, you as a user have no option to object.
1. Integration of cookies in online offering
Cookies that remain stored even after the browser has been closed are referred to as “permanent” or “persistent”. If the website is visited again from the same device, the cookie is either sent back to the website that generated it (first-party cookie) or to another website to which it belongs (third-party cookie). The cookie allows the website to recognize that it has already been accessed with this browser and also means that the user experience is improved when the site is accessed again. Cookies can, for example, remember your preferences and adapt the offers displayed on the website to your personal interests and requirements.
You can decide for yourself whether the browser you use allows cookies or not. Stored cookies can be deleted in the system settings of your browser. Please note that the functionality of websites may be restricted or even disabled if cookies are not permitted.
Your current settings with regard to permitted cookies (functional cookies, preferences, statistics, marketing):
Diese Webseite verwendet Cookies. Wir verwenden Cookies, um Inhalte und Anzeigen zu personalisieren, Funktionen für soziale Medien anbieten zu können und die Zugriffe auf unsere Website zu analysieren. Außerdem geben wir Informationen zu Ihrer Verwendung unserer Website an unsere Partner für soziale Medien, Werbung und Analysen weiter. Unsere Partner führen diese Informationen möglicherweise mit weiteren Daten zusammen, die Sie ihnen bereitgestellt haben oder die sie im Rahmen Ihrer Nutzung der Dienste gesammelt haben. Cookies sind kleine Textdateien, die von Webseiten verwendet werden, um die Benutzererfahrung effizienter zu gestalten. Laut Gesetz können wir Cookies auf Ihrem Gerät speichern, wenn diese für den Betrieb dieser Seite unbedingt notwendig sind. Für alle anderen Cookie-Typen benötigen wir Ihre Erlaubnis. Diese Seite verwendet unterschiedliche Cookie-Typen. Einige Cookies werden von Drittparteien platziert, die auf unseren Seiten erscheinen. Sie können Ihre Einwilligung jederzeit von der Cookie-Erklärung auf unserer Website ändern oder wiederrufen.
Erfahren Sie in unserer Datenschutzrichtlinie mehr darüber, wer wir sind, wie Sie uns kontaktieren können und wie wir personenbezogene Daten verarbeiten. Ihre Einwilligung trifft auf die folgenden Domains zu: de.goldsgymgrandcollection.com
2. Use of functional cookies
We use functional cookies so that you can visit our online offering in a user-friendly way and so that the online offering functions properly (cookies required for technical reasons). Some elements of our online offering require that the browser from which you accessed the offering can identify you even after a page change.
The use of functional cookies allows the following functionalities to be provided and the following data is stored:
⦁ Your language settings
⦁ Storage of your browser settings so that our online offering is optimised for display on your device
⦁ Storage of settings to optimise video (e.g. resolution data of your screen)
⦁ Consistent loading of the accessed website so that it remains accessible
⦁ Preventing misuse of the online offering and services, through registration of login processes
The legal basis for the processing of personal data using cookies that are necessary for technical reasons is Article 6(1)f of GDPR.
3. Use of preference and statistics and marketing cookies
We also use preference and statistics cookies in our online offering, enabling us to analyse your browsing behaviour. When you access our online offering, you will be asked, as described above, to consent to the processing of personal data used in this context.
The following data is used through cookies that analyse your browsing behaviour:
⦁ The search terms that you entered
⦁ Frequency of page views
⦁ Recording of the time spent viewing the online offering
⦁ Recording of the order of visits to different websites included in the online offering
⦁ Use of functions of online offering
⦁ Your IP address in anonymized form
The legal basis for the processing of personal data using cookies for analysis purposes is Article 6(1)a of GDPR if you have given your consent in this regard. In addition, the legal basis is also Article 6(1)f of GDPR, as we have a legitimate interest, namely an interest in the analysis, optimization and economic operation of our online offering.
4. Use of the Cookiebot service
The following data is stored in our Cookiebot account:
⦁ Your IP address in anonymised form (the last three digits are set to “0”)
⦁ Date and time of your consent
⦁ The browser that you used
⦁ The URL from which your consent is sent
⦁ An anonymous, random and encrypted key value
⦁ Your consent status, used as proof of your consent.
VII. TRANSFER OF DATA TO THIRD PARTIES
Various service companies are active on our behalf with regard to the operation and optimization of our online offer as well as for our services and for contract processing, e.g. for central IT service providers or for the hosting of our online offer. We pass on to these service providers the data necessary for the fulfilment of the contract.
The legal basis for the transfer of data to service companies is Art. 6 Para. 1 lit. b and f GDPR.
We may also disclose your personal data to third parties or government agencies if we are obliged to do so by official or court order or if we are entitled to do so, as this is necessary, for example, for the prosecution of criminal offences or for the protection and enforcement of our rights or claims.
The legal basis for this disclosure is Art. 6 para. 1 lit. c and f GDPR.
VIII. CONTACT FORM AND E-MAIL CONTACT
Our website contains a contact form which you can use to contact us electronically. If you use this option, the data you enter in the input mask will be transmitted to us and stored:
⦁ First name, last name
⦁ E-mail address
⦁ Telephone number
⦁ Your message
Alternatively, you can contact us via the e-mail address provided. In this case, the personal data sent with your e-mail will be processed.
The legal basis for the processing of your data when using the contact form and sending an e-mail is Art. 6 (1) lit. f GDPR. If the purpose of contacting us is to conclude or fulfil a contract, Art. 6 (1) (b) is also the legal basis.
In both cases of contact, the personal data is processed solely for the purpose of handling the contact.
We delete your data as soon as the conversation with you has ended. This is the case when the circumstances show that the matter in question has been finally clarified.
IX. USER ACCOUNT
On our online offer, we offer you the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. Your data will not be passed on to third parties. The following data is collected during the registration process:
⦁ First name and surname
⦁ E-mail address
For the processing of orders in our online shop, we also require the following information from you:
⦁ Billing address (if applicable, company and address suffix, street, house number, postcode and town)
⦁ Delivery address (title, first name, surname, company and address suffix, if applicable, street, house number, postcode and town).
The legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR, as the registration and the collection of the further data within the framework of the order serves the fulfilment of a contract of which the user is a contracting party or the implementation of pre-contractual measures.
Your data, which we process in the context of registration and ordering in the online shop, serve the following purposes:
⦁ Provision of the customer account
⦁ Making your customer profile accessible on our online offer
⦁ Use of our online shop
⦁ Delivery of deliveries
⦁ Payment processing
⦁ Queries in connection with placed orders
⦁ Statistical market research
X. PAYMENT PROCESSING
For payment processing we offer Paypal. We do not collect and store any payment transaction information during the payment process. Your personal data required for payment processing will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
This is first name, last name, address, telephone number, e-mail and IP address and other data required for order processing, such as quantity and item number, invoice amount and taxes as a percentage.
These data and the transmission are necessary for the processing of the payment via PayPal, in particular for checking and confirming the identity and for the administration of the payment and customer account.
If it is necessary for the fulfilment of the contract, PayPal may also pass on this data to service providers, subcontractors or other affiliated companies.
XI. GOLD'S GYM SHOP ON SOCIAL NETWORKS/ PLATFORMS
Since we want to communicate with our customers, interested parties and users, we are represented with our own pages on social networks (such as Facebook and Instagram) and platforms. There we also provide information about our services. If you access these pages of the networks or platforms, the terms and conditions and data protection policies of the respective operator apply.
XII. YOUR RIGHTS
We would like to inform you at this point about your rights with regard to the processing of your data. If you wish to exercise any of these rights, you can send us a simple message. You can use the following contact details without incurring any costs other than the transmission costs according to the basic tariff:
Via mail: Gold's Gym Trading GmbH, Saarbrücker Strasse 36a, 10405 Berlin or via e-mail: firstname.lastname@example.org.
For your own protection, we reserve the right to request further information to confirm your identity. If we are unable to identify you, we will refuse to process your request.
You have the right to
⦁ Information about the data stored about you (Art.15 GDPR)
⦁ the immediate correction and/or completion of the personal data concerning you (Art.16 GDPR)
⦁ the deletion of your personal data stored by us (Art.17 GDPR)
⦁ the restriction of the processing of your personal data (Article 18 of the GDPR)
⦁ data portability (Article 20 of the GDPR)
⦁ object to the processing (Article 21 of the GDPR).
⦁ Complaint to the supervisory authority; if you are of the opinion that the processing of your personal data violates existing data protection regulations, you can complain to a supervisory authority without prejudice to other legal remedies. In particular, you can address the complaint to a supervisory authority in the member state of your residence, your place of work or the place of the alleged infringement.
XIII. CHANGES TO THE DATA PROTECTION NOTICE
Status: August 2021, Version 1.0