Privacy policy
The person responsible for data processing is: Jens-Christian Fritz (Ella-Kay-Strasse 9, 10405 Berlin, Germany)
Email: jens-christian.fritz@goldenbonsai.de
Telephone: 017684101530
We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below we will inform you in detail about how your data is handled.
1. Access data and hosting
You can visit our websites without providing any personal information. Every time a website is accessed, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and the time of retrieval, the amount of data transferred and the requesting provider (access data) and documents the retrieval. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offering. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a correct presentation of our offer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.
All access data will be deleted no later than seven days after the end of your visit to the site.
2. Data processing for contract processing and comunicating with customers
2.1 Data processing for contract processing
For the purpose of contract processing (including inquiries about and processing of any existing warranty and service disruption claims as well as any legal update obligations) in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR, we collect personal data if you provide it to us as part of your order process voluntarily. Mandatory fields are marked as such because in these cases we absolutely need the data to process the contract and we cannot send the order without it. Which data is collected can be seen from the respective input forms. Further information on the processing of your data, in particular on the transfer to our service providers for the purposes of order, payment and shipping processing, can be found in the following sections of this data protection declaration. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiry of the tax and commercial law retention periods in accordance with Art 6 Paragraph 1 Sentence 1 Letter a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
2.2 Customer account
If you have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account and to store your data for future orders on our website. Deleting your customer account is possible at any time and can be done either by sending a message to the contact option described in this data protection declaration or using a function provided for this purpose in the customer account. After your customer account is deleted, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art 6 Paragraph 1 Sentence 1 Letter a GDPR or we reserve the right to use the data further, which is permitted by law and about which we inform you in this declaration.
2.3 Contacting us
As part of customer communication, we collect personal data in order to process your inquiries in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR if you voluntarily provide this to us when you contact us (e.g. via contact form or email). Mandatory fields are marked as such because in these cases we absolutely need the data to process your request. Which data is collected can be seen from the respective input forms. Once your request has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art 6 Paragraph 1 Sentence 1 Letter a GDPR or we reserve the right to use the data further, which is permitted by law and about which we inform you in this declaration.
3. Data processing for the purpose of processing the shipping
In order to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, to the extent that this is necessary for the delivery of ordered goods.
4. Data processing for payment processing
When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.
4.1 Data processing for transaction processing
Depending on the payment method selected, we pass on the data necessary to process the payment transaction to our technical service providers who work for us as part of the order processing, or to the commissioned credit institutions or to the selected payment service provider, to the extent that this is necessary to process the payment. This serves to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g. on their own website or via a technical integration in the ordering process. The data protection declaration of the respective payment service provider applies. If you have any questions about our payment processing partners and the basis of our cooperation with them, please contact us using the contact option described in this data protection declaration.
4.2 Data processing for the purpose of preventing fraud and optimizing our payment processes
If necessary, we provide our service providers with additional data, which they use together with the data necessary to process the payment as our processors for the purposes of fraud prevention and optimizing our payment processes (e.g. invoicing, processing disputed payments, accounting support). In accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, this serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in our protection against fraud and in efficient payment management.
5. Advertising via email
5.1 Email newsletter with registration, newsletter tracking with separate consent
If you register for our newsletter, we will use the data required for this or provided separately by you to regularly send you our email newsletter based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR.
You can unsubscribe from the newsletter at any time and can do so either by sending a message to the contact option described above or via a link provided in the newsletter.
After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR or we reserve the right to use your data beyond this is permitted by law and about which we inform you in this statement.
If you have also given us your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR to analyze our newsletter, we will also analyze your engagement with our newsletter to optimize our newsletter further (“newsletter tracking”).
For this evaluation, the emails sent contain single-pixel technologies (e.g. so-called web beacons, tracking pixels) that are stored on our website. For the evaluations, we link the following “newsletter data” in particular:
- the page from which the page was requested (so-called referrer URL),
- the date and time of opening the newsletter,
- the description of the type of web browser used,
- the IP address of the requesting computer,
- the E-Mail adress,
- the date and time of registration and confirmation
and the one-pixel technologies with your email address or your IP address and, if applicable, an individual ID. Links contained in the newsletter may also contain this ID.
You can unsubscribe from newsletter tracking at any time and can do so either by sending a message to the contact option described above or via a link provided for this purpose in the newsletter.
The information will be stored for as long as you have subscribed to the newsletter.
5.2 Newsletter dispatch
The newsletter and the newsletter tracking presented above may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact option described in this data protection declaration.
Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Canada.
Our service providers are located and/or use servers in these countries: USA, India. There is no adequacy decision from the European Commission for this country/these countries. Our cooperation with you is based on these guarantees: European Commission Standard Data Protection Clauses.
6. Cookies and other technologies
General information
To make your visit to our website more attractive and enable the use of certain features, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of your browsing session, i.e., when you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser during your next visit (persistent cookies).
Privacy protection for devices
When using our online offering, we use essential technologies to provide the expressly desired telemedia service. Storing information on your device or accessing information already stored on your device does not require your consent in this regard.
For non-essential functions, the storage of information on your device or access to information already stored on your device requires your consent. We would like to point out that if you do not give your consent, certain parts of the website may not be fully accessible. Your consents, if given, remain in effect until you adjust or reset the respective settings on your device.
Subsequent data processing through cookies and other technologies
We use technologies that are essential for the use of certain features of our website (e.g., shopping cart functionality). These technologies collect and process your IP address, visit time, device and browser information, and information about your use of our website (e.g., shopping cart contents) as part of a legitimate interest to optimize the presentation of our offerings, as per Article 6, Paragraph 1, Sentence 1, letter f of the GDPR.
Additionally, we use technologies to fulfill legal obligations (e.g., to provide proof of consent for processing your personal data) as well as for web analytics and online marketing. Further information, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.
You can find cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have given your consent for the use of technologies as per Article 6, Paragraph 1, Sentence 1, letter a of the GDPR, you can revoke your consent at any time by sending a message to the contact information described in the privacy policy.
7. Use of cookies and other technologies
If you have given your consent in accordance with Article 6, Paragraph 1, Sentence 1, letter a of the GDPR, we use the following cookies and other technologies from third-party providers on our website. The data collected in connection with the use of these technologies will be deleted after the purpose has been achieved, and you can withdraw your consent at any time with future effect. Further information on revocation options can be found in the "Cookies and other technologies" section below. Additional information, including the basis for our cooperation with each provider, can be found in the respective technology sections. If you have any questions about the providers and the basis of our cooperation with them, please contact us using the contact information provided in this privacy policy.
7.1 Use of Google Services
We use the following technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google technologies about your use of our website is typically transmitted to and stored on servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. There is no adequacy decision of the European Commission for the USA. Our cooperation with them is based on the European Commission's standard data protection clauses. If your IP address is collected via Google technologies, it will be truncated before storage on Google's servers through IP anonymization activation. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there. Unless otherwise stated for specific technologies, data processing is based on an agreement for each respective technology between jointly responsible parties in accordance with Article 26 of the GDPR. Further information about data processing by Google can be found in Google's privacy policy.
Google Analytics
For the purpose of website analysis, data (IP address, visit time, device and browser information, and information about your use of our website) is automatically collected and stored with Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not merged with other data from Google. Data processing is based on an agreement for data processing with Google.
Google Signals, an extension function of Google Analytics, allows for "Cross-Device Tracking" for web analysis. If your internet-capable devices are linked to your Google account and you have enabled "personalized advertising" in your Google account settings, Google can create reports on your usage behavior (especially cross-device user numbers) even when you switch devices. We do not process personal data in this regard. We only receive statistics generated based on Google Signals.
Google Maps
To visually display geographic information, Google Maps collects and transmits data about your use of map features, including your IP address and location data, to Google for subsequent processing. We have no control over this subsequent data processing.
Google Tag Manager
Google Tag Manager allows us to manage various codes and services on our website. During the implementation of individual tags, Google may process personal data (e.g., IP address, online identifiers, including cookies). Data processing is based on an agreement for data processing with Google. Using Google Tag Manager allows for the integration of various services/technologies. If you do not wish to use specific tracking services and have deactivated them, this deactivation will apply to all tracking tags integrated via Google Tag Manager.
7.2 Use of Facebook Services
Use of Facebook Pixel
We use Facebook Pixel as part of the technologies provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). With Facebook Pixel, data (IP address, visit time, device and browser information, and information about your use of our website based on events predefined by us, such as visiting a webpage or subscribing to a newsletter) is automatically collected and stored, from which usage profiles are created using pseudonyms.
To enable this, a cookie is automatically set by Facebook Pixel when you visit our website, allowing for the automatic recognition of your browser when you visit other websites. Facebook (by Meta) will merge this information with additional data from your Facebook account and use it to compile reports on website activities and provide other services related to website usage, especially personalized and group-based advertising. Information collected by Facebook (by Meta) technologies about your use of our website is typically transmitted to and stored on servers of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. There is no adequacy decision of the European Commission for the USA. If data transmission to the USA falls under our responsibility, our cooperation is based on the European Commission's standard data protection clauses. Further information about data processing by Facebook can be found in Facebook's (by Meta) privacy policy.
Facebook Analytics
Within the framework of Facebook Business Tools, statistics on visitor activities on our website are created using data collected by Facebook Pixel. Data processing is based on an agreement for data processing with Facebook (by Meta). This analysis is intended to optimize the presentation and marketing of our website.
8. Social Media
8.1 Social Plugins from Facebook (by Meta), Instagram (by Meta), Pinterest
Our website uses social buttons from social networks. These are embedded as HTML links on the page, so there is no connection to the servers of the respective provider when you visit our website. When you click on one of the buttons, the website of the respective social network opens in a new browser window, where you can, for example, like or share the content.
8.2 Our Online Presence on Facebook (by Meta), Instagram (by Meta), YouTube, Pinterest
If you have given your consent in accordance with Article 6, Paragraph 1, Sentence 1, letter a of the GDPR to the respective social media operator, your data is automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms mentioned above. Pseudonymous usage profiles are created from this data, which can be used, for example, to display advertisements within and outside the platforms that likely match your interests. Cookies are usually used for this purpose. For detailed information on data processing and usage by the respective social media operator, as well as contact information and your privacy protection options, please refer to the linked privacy policies of the providers. If you need further assistance in this regard, you can contact us directly.
Facebook (by Meta) is offered by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is typically transmitted to and stored on servers of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. There is no adequacy decision of the European Commission for the USA. Our cooperation with them is based on the European Commission's standard data protection clauses. Further information (Insights data information) can be found here.
Instagram (by Meta) is offered by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is typically transmitted to and stored on servers of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. There is no adequacy decision of the European Commission for the USA. Our cooperation with them is based on the European Commission's standard data protection clauses. Further information (Insights data information) can be found here.
YouTube is offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google about your use of our online presence on YouTube is typically transmitted to and stored on servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. There is no adequacy decision of the European Commission for the USA. Our cooperation with them is based on the European Commission's standard data protection clauses.
Pinterest is offered by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). Information automatically collected by Pinterest about your use of our online presence on Pinterest is typically transmitted to and stored on servers of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. There is no adequacy decision of the European Commission for the USA. Our cooperation with them is based on the European Commission's standard data protection clauses.
9. Contact Information and Your Rights
9.1 Your Rights
As a data subject, you have the following rights:
- Under Article 15 of the GDPR, the right to request information about the personal data we process about you to the extent specified therein;
- Under Article 16 of the GDPR, the right to demand the immediate correction of inaccurate or completion of your personal data stored by us;
- Under Article 17 of the GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation;
- for reasons of public interest, or
- to assert, exercise, or defend legal claims;
- Under Article 18 of the GDPR, the right to request the restriction of the processing of your personal data, to the extent
- the accuracy of the data is contested by you;
- the processing is unlawful, but you oppose its erasure;
- we no longer need the data, but you need it to establish, exercise, or defend legal claims, or
- you have objected to processing pursuant to Article 21 of the GDPR;
- Under Article 20 of the GDPR, the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, or to request its transmission to another controller;
- Under Article 77 of the GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your habitual residence or workplace or at our company headquarters.
Right to Object
To the extent that we process personal data to protect our legitimate interests as explained above, you may object to such processing with future effect. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is for other purposes, you have the right to object only on grounds relating to your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is for the assertion, exercise, or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In such a case, we will no longer process your personal data for this purpose.
9.2 Contact Information
For questions regarding the collection, processing, or use of your personal data, inquiries, corrections, restrictions, or deletions of data, as well as the withdrawal of granted consent or objection to a specific data use, please contact us directly using the contact information provided in our imprint (Legal notice).