POLICY

Goldwin is committed to your privacy. This privacy notice ("Privacy Notice") explains our collection, use, disclosure, retention, and protection of your personal information. It applies to any Goldwin website, application or service including our online shop currently at https://eushop.c3fit.com/ (the "Shop", and collectively the "Offering") where this Privacy Notice is referenced or posted.

1. Who we are

The controller for the processing of your personal information under this Privacy Notice is Goldwin Europe AG, Täfernstrasse 14 A, 5405 Baden-Dättwil, Switzerland, [+41(0)56 483 0505] and [info@goldwineurope.ch]. References to "Goldwin", "we" or "us" are references to GOLDWIN EUROPE AG.

We have appointed the following EU representative pursuant to Art. 27 GDPR as an additional contact point for supervisory authorities and data subjects for inquiries in connection with the General Data Protection Regulation:
VGS Data Protection Partners UG, Am Kaiserkai 69, 20457 Hamburg, Germany
info@datenschutzpartner.eu

2. Personal information we collect and how we use it

We process the personal information that you provide to us, for example when you search for a product or place an order through the Shop, when you communicate with us by phone, e-mail, or otherwise. We may receive information such as your name, address, and phone numbers, credit card information, information about recipients to whom purchases have been shipped, content of reviews and e-mails to us, information given in your account, and financial information. Some of this personal information is necessary to place an order in the Shop, such as a way to identify you, or to request our customer services. The provision of other personal information is voluntary but may be necessary in order to use our Offering.

We receive and store information whenever you interact with our Offering. We also obtain certain types of information when your web browser accesses our Offering, including Internet protocol (IP) address used to connect your device to the internet, login, e-mail address, password, device and connection information such as browser type, version, and time zone setting, browser plug-in types and versions, operating system, and platform, purchase history, the website address (URL) clickstream to, through and from our Offering including date and time, cookie number/ID, products you viewed or searched for, and the phone number used to call us. We may also use browser data such as cookies or similar data on certain parts of our Offering for fraud prevention and other purposes. During your visits, we may use software tools such as JavaScript to measure and collect session information, including page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page. We may also collect technical information to help us identify your device for fraud prevention and diagnostic purposes.

We also use "cookies", unique identifiers that we transfer to your device, to enable our systems to recognize your device and provide features such as personalized advertisements on other websites and storage of items in your shopping cart between visits. The help feature on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies. If you block or reject cookies, you may not be able to use some essential features of our Offering such as keeping items in your shopping cart. We recommend that you leave them turned on.

We may also use web beacons (or "clear GIFs") on our Offering or include them in the e-mail messages we send you. These are a method of delivering an image on a web page or in an e-mail message for the purpose of collecting and transferring information back to us, for example your IP address or time of visit as well as information about how a user responds to an e-mail campaign (see below on marketing). We use web beacon information for a variety of purposes, including site traffic reporting, unique visitor counts, advertising and e-mail auditing and reporting, and personalization. 

We also use web fonts provided by Google LLC, USA. When you load a website that uses web fonts your browser establishes a connection to Google, which tells Google that the site has been accessed from the IP address of your device.

Website analytics: Some of the data generated when you use our Offering, such as data about your browsing session and the click stream, is collected by third party providers of web analytics services through third party cookies placed in the Offering. This information is used to generate reports that help us understand and improve our Offering. For example, we use Google Analytics, a service provided by Google LLC, USA.

Marketing: We may use your personal information, for example your click stream through our Offering and orders placed with us, to present personalized offers to you in our Offering. We also use third party advertising providers to place ads of our Offering on other websites. One way we do so is by allowing network advertising companies with whom we work to place their own cookies when you visit the Offering, to enable the advertising company to recognize you have previously visited our Offering. When you visit a third-party web site on which that network advertising company has purchased ad space, the advertising company can then recognize your interest in our products and services and deliver one of our advertisements.

We may also use your name and e-mail address(es) to send you alerts, updates, newsletters and other information by e-mail, but will ask for consent first unless we have obtained your contact details from you in the context of an order placed with us. To help us make e-mails more useful and interesting, we may collect confirmation when you open e-mail from us or learn about links followed from the e-mail (for example through the use of web beacons, which we have described above). If you do not wish to receive e-mail from us, you can unsubscribe at any time by following the link included in our e-mails.

Social media: We may use social media such as Facebook to maintain a social media presence such as a Facebook Fanpage and to carry out digital advertising. When you interact with a social media presence, for example if you like our page, the provider may collect personal information about you and process it together with other data kept by the provider to provide anonymous reports to us. The controller for the data collected about you is the social media provider jointly with us. We may also use plug-ins and similar technologies from social media sites such as Facebook. If you interact with a plug-in your browser connects directly to the provider's servers, usually in the USA, which tells the provider that your browser has called the corresponding page and the IP address of your device. If you are logged in to your social media account the provider can link that data with your profile. If you wish to receive additional information or use your rights, please refer to the privacy notice of the relevant provider.

Information from other sources: We may receive information about you from other sources and add it to the information kept about you, for example delivery and address information from our logistics providers, account information, purchase information, search results and links from the websites of other entities of the Goldwin group, and credit history information from credit information providers, which we use to help prevent and detect fraud.

3. How we share personal information

We may share your personal information with other entities of the Goldwin group for the purposes set out in this Privacy Notice and for administrative purposes. Your personal information may be combined with personal information originating from another Goldwin entity for the respective purposes. In addition, we may share personal information with other companies and individuals who provide services to us, such as fulfilling orders, delivering, sending mail and e-mail, analyzing data, marketing and business development assistance, IT services, processing credit card payments, and providing customer service. Our providers have access to personal information needed to perform their functions, but may not use it for other purposes.

We also use Shopify as an e-commerce platform. For more information, please read Shopify's Privacy Statement (https://eushop.c3fit.com/14502636/policies/26255811.html) and Terms of Service (https://eushop.c3fit.com/14502636/policies/26255875.html).

Additionally we may disclose personal information to the reasonably necessary extent that such disclosure is appropriate to comply with the law, enforce or apply our customers terms and other agreements, or protect the rights, property or safety of Goldwin, our users or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk management. Moreover, as we continue to develop our business we may sell or buy our business or assets. In such transactions, customer data generally is one of the transferred assets but remains subject any pre-existing privacy notice.

4. How we transfer personal information to recipients abroad

We may share personal information with recipients (as explained in Section 3 above) abroad including in countries that do not provide the same level of data protection as the laws of your home country or EU/EEA laws. However, we are under an obligation to ensure that appropriate safeguards are in place to protect your personal information in such transfers, unless the recipients are certified under the Swiss/US Privacy Shield. We usually rely on a data transfer agreement based on the "EU standard contractual clauses". If you wish to receive a copy of these agreements, please contact us at the address indicated below. We may also transfer personal information with your explicit consent and in certain other situations as permitted by applicable law.

5. How we retain your personal information

We retain your personal information for as long as it is necessary for the purposes for which the data is collected, and as long as we have a legitimate interest in keeping personal information, for example to enforce or defend claims or for archiving purposes and IT security. We also retain your personal information as long as it is subject to a legal retention obligation.

6. How we protect your personal information

We apply appropriate technical and organisational security processes to safeguard the security of your personal information and to protect it against unauthorised or unlawful processing and to prevent the risk of loss, unintentional alteration, unintentional disclosure or unauthorised access.

7. The legal basis for our use of personal information

We process personal information on the legal basis that:

– our processing is required for entering into or performing a contract;

– our processing is required for legitimate interests – these include for example customer care and communicating with customers and potential customers outside of a contract, marketing activities, getting to know our customers and other people better, improving and developing products and services, preventing, detecting and investigating fraud and offences, protecting customers, employees and other persons and data, secrets and assets of Goldwin, ensuring IT security, business operations including websites and other systems, company management and development, the sale or purchase of companies, parts of companies and other assets, and the enforcement or defence of legal claims;

– our processing is permitted with your consent, if we ask you for your consent separately; and

– our processing is necessary to comply with legal and regulatory obligations.

8. Your choice and rights in relation to your personal information

You can always choose not to provide information to us. However, we need to process some personal information to be able to enter into or carry out a business relationship with you. In addition, our Offering cannot be used without disclosing certain information (for example the IP address of the device).

You are within the scope of the data protection law applicable to you entitled to the following: To ask for details of the information we hold about you and how we process it and to receive a copy of your personal information. You may also have your personal information rectified or deleted, restrict our processing of that information, and object to the processing of your personal information. In particular, you may object to the processing of your personal information for advertising purposes, including direct marketing at any time without giving reasons.

You may also choose to withdraw your consent. Please note that even after you have chosen to withdraw your consent we may be able to continue to process your personal information to the extent required or permitted by law. You may also lodge a complaint in relation to our processing of your personal information with a local supervisory authority.

9. Updates to this Privacy Notice

This Privacy Notice is effective from [15th March, 2019Date of last revision]

As business and technology evolves, we may need to change this Privacy Notice. We encourage you to regularly review this Privacy Notice to make sure you are up-to-date with how we use your personal information.