Data protection
1. General
Personal data is processed when operating this website ("Website") and using the Goldie services offered through this website. This privacy policy aims to inform you as a visitor to the website and user of the Goldie services about the nature, scope, and purpose of processing personal data.
The terms used in this privacy policy (e.g., "personal data," "data processing," "pseudonymous," or "anonymous") correspond to the definitions of the General Data Protection Regulation ("GDPR"), particularly those of Article 4.
The data controller for the processing is the website operator ("we"):
Goldie GmbH
Warschauerstraße 60
10243 Berlin
Germany
2. Data Processing
The nature, scope, and purpose of processing personal data depend on the Goldie services being used. In particular, when you use our "Banking Gold" solution, we process specific data necessary for the service.
2.1. Provision of the Website
The data subjects concerning the provision of the website are all website visitors.
The legal basis for processing is Art. 6(1)(b) of the GDPR (performance of a contract). To make the website available, enable basic functions, and ensure smooth operation, it is technically necessary to process personal data. Although this primarily concerns device data, it may be possible to establish a connection to the website visitor using this data. For example, IP addresses of the devices used, identifiers of the devices, operating systems, and browsers need to be processed to establish a connection between the device and the server hosting the website and to display the content in the intended layout.
We use web fonts for the uniform display of fonts and use Google Web Fonts for this purpose. This service is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, "Google").
When a page is accessed, the website visitor's browser loads the required web fonts into the browser cache to display texts and fonts correctly.
For this purpose, the browser used by the website visitor must establish a connection to Google's servers. As a result, Google becomes aware that our website was accessed via the IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers.
If your browser does not support web fonts, a default font will be used from your computer.
The legal basis for processing is Article 6(1)(f) of the GDPR (legitimate interest). Further information about Google Web Fonts can be found on the Google Web Fonts website and in Google's privacy policy.
2.2. Website Security
Affected group in relation to website security includes all website visitors.
To ensure the security of the website, data on website access is processed as server log files. While these are generally device data, they may potentially be used to identify the website visitor. These data are compared with existing attack vectors and analyzed in case of detected attacks.
The server log file data includes: the visited webpage, the timestamp of the access, the amount of data sent in bytes, the referral source, the browser used, and the operating system used.
The data is deleted as soon as it is no longer necessary for the purpose of its collection. For server log files, the retention period is a maximum of 7 days. If data needs to be retained for evidential purposes, it will be excluded from deletion until the incident is finally resolved.
The legal basis for processing is Art. 6(1)(f) of the General Data Protection Regulation (legitimate interest).
2.3. Reach measurement and optimization of the offering
The affected group in relation to reach measurement and optimization of the offering includes all website visitors.
This website uses cookies for reach measurement and optimization of our offering. The cookies are either transmitted to the website visitor's browser by us or by third parties commissioned by us and stored there. This potentially allows for recognition of the device used. The data collected in this way is pseudonymous, and therefore, neither we nor the commissioned third parties can assign it to the website visitor. The data is also not stored together with other personal data of the website visitors. In some cases, the data is anonymized before use, making it impossible to draw any conclusions about the website visitor as a whole.
These cookies are only set once you have given us your consent. To give your consent, we provide you with a communication field at the beginning of your website visit.
The legal basis for processing is Art. 6(1)(a) of the General Data Protection Regulation (consent). A given consent can be revoked at any time with effect for the future in the cookie settings on our website. You can find the cookie settings in the OneTrust Preference Center on this website. The set cookies will be deleted.
2.3.1. Google services
We use the Google services Google Analytics, Google Analytics Remarketing, Google Ads, Google Search Ads 360, and Google Tag Manager. These services are provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA, "Google"). Google is located in the so-called third country USA, which generally lacks a level of data protection equivalent to that of the EU. Google has agreed to standard data protection clauses as an appropriate safeguard according to Art. 46 of the General Data Protection Regulation.
For more information about Google, please refer to Google's privacy policy.
2.3.2.1. Google Analytics
Google Analytics uses cookies. The information collected by these cookies is typically sent to and stored on a Google server in the United States. IP anonymization is enabled on this website, meaning that the IP address of website visitors is shortened within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. This shortening eliminates the personal identification of the IP address. The IP address transmitted by the visitor's browser is not combined with other data stored by Google.
As part of the data processing agreement between the website operator and Google Inc., Google uses the collected information to evaluate website usage and activity and provides related services.
The data collected by Google on behalf of the website operator is used to analyze the usage of the online offering by individual users, such as creating reports on website activity and improving our online services.
The cookie stored in your browser, in case of your consent, will be deleted after a maximum of 90 days.
2.3.2.2. Google Analytics Remarketing
Google Analytics Remarketing allows linking the created advertising target groups with the cross-device capabilities of Google Ads and the Google Campaign Manager. This enables displaying interest-based, personalized advertising messages on one device to visitors based on their previous usage and browsing behavior on another device. This requires the visitor to give Google appropriate consent. If consent is given, Google associates the web and app browsing history with the visitor's personal Google account for this purpose.
To support this function, Google Analytics captures Google-authenticated IDs of the website visitors, which are temporarily linked with Google Analytics data to define and create target groups for cross-device advertising.
Website visitors using a Google account can permanently opt-out of cross-device remarketing/targeting by disabling personalized advertising in their Google account settings (https://www.google.com/settings/ads/onweb/).
2.3.2.3. Google Ads (formerly AdWords) and Conversion Tracking
This website utilizes Conversion Tracking as part of Google Ads. When website visitors click on an advertisement served by Google, a conversion tracking cookie is set. These cookies expire after 30 days and are not used to personally identify website visitors. If the user visits certain pages of this website and the cookie has not expired, we can recognize that the user clicked on the advertisement and was redirected to that page. The information obtained through the conversion cookie is used to create conversion statistics for AdWords customers like us. We learn the total number of website visitors who clicked on an advertisement we served and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies website visitors.
The cookie stored in your browser, in case of your consent, will be deleted after a maximum of 90 days.
2.3.2.4. Google Search Ads 360 (formerly DoubleClick Search)
Similar to the previous paragraph, the use of Search Ads 360 allows Google and its partner sites to display ads based on previous visits to our website or other sites on the internet. The data collected in this context may be transferred to and stored on a server in the United States by Google for evaluation. Unlike Google Ads, which is limited to the Google Search Network, Google Search Ads 360 enables the exchange of ads and keywords with multiple supported search engines.
2.3.2.5. Google Tag Manager
We use the Google Tag Manager service to manage Google Analytics tracking (as mentioned above). The Google Tag Manager itself does not collect any personally identifiable information.
2.3.2.5.6 Changes to Our Privacy Policy
We reserve the right to modify this privacy policy at any time within the legal limits.
Updated: July 2022