WEBSITE PRIVACY NOTICE

This Privacy Policy describes how your personal data is processed in accordance with the Regulation (EU) 2016/679 - General Data Protection Regulation (“GDPR”) when you visit or make a purchase from www.gobicashmere.com (the “Website”) or subscribe to the GOBI newsletter.

The Controller in relation to the processing of your personal data on www.gobicashmere.com, in connection with any purchases and the distribution of the GOBI Newsletter is GOBI Cashmere Europe GmbH, Office & Logistics Center, Genshagener Str. 27, Halle 4, 14974 Ludwigsfelde, Germany (“GOBI“ or „we“).

You may contact us by e-mail at support-4@gobicashmere.com or by mail under the address above.

We process your personal data only for specific purposes and provided there is a legal basis for such processing.

When you visit our website, we automatically collect certain technical information about your device which it automatically sends to us, including information about your web browser, IP address, time zone, service provider referring/exit pages and date/time stamps. Some of these data collections occur through the use of cookies (however, for these purposes we only use essential cookies which are necessary to display our website properly; cf. Sec. 6 for more details). The processing of this information is necessary to establish a technical connection between our servers and your device and to display the website to you (Art. 6 para. 1 lit. b GDPR).

After the termination of the website session, we retain this data in so-called logfiles. The processing is necessary for the purpose of our legitimate interest in preventing or investigating criminal or fraudulent behaviour on our websites (art. 6 para. 1 lit. f GDPR). Generally, we keep logfiles for up to 1-4 weeks.

If you create a GOBI customer account, we process the personal data provided to offer you the functionalities of the customer account in accordance with our terms of service. Mandatory personal data to offer you a customer account are your e-mail address, your name and address. The legal basis for such processing is performance of a contract because it is necessary to provide you with the customer account.

If you also provide your phone number voluntarily, we process it to pursue our and your interest in maintaining an additional communication method.

We store your account data for as long as your account exists. After you deleted your account, we delete your account data after a time period of 10 days.

In case you place an order, we use the personal data from your customer account to fulfil your order (art. 6 para. 1 lit. b GDPR). Besides your contact and shipping information (name and address) we process the shipping method (Standard or Express) and the payment method you chose. This data is necessary to establish and perform the purchase agreement concluded with you.

If you pay by credit card, we process your card number, name on card, expiration data and security code. Legal basis for such processing is art. 6 para. 1 lit. b GDPR because the processing is necessary to perform our purchase agreement the way you want it.

Please note that we use the payment provider you chose of according bank to process Credit Card Payments. This makes it necessary to share your credit card details and the amount payable with the payment provider. Legal basis for such processing is art. 6 para. 1 lit. b GDPR because the processing is necessary to perform our purchase agreement the way you want it.

If you chose to use Sofort bank transfer for your payment, you are rerouted to the website Klarna.com where you are able to fulfil your payment. The Klarna Bank AB is sole controller in relation to the data processing that is necessary for the Klarna services. To establish those payment methods, we transfer the relevant payment data, such as items bought, prices and discounts used, to Klarna Bank AB. The purpose of such processing is to perform our purchase agreement, including the payment method you desire (art. 6 para. 1 lit. b GDPR).

If you chose the express checkout option, you are rerouted to the provider you chose. Please note that the payment provider is the sole controller for the data processing in connection with the functionalities of the service. The payment provider transfers to us the data we need to process your order, such as your shipment details. We do not receive any payment data from the provider. To establish those payment methods, we assign our claim against you from your order to the payment provider and transfer certain payment related data, such as the amount payable, the goods purchased and discounts provided. Legal basis for such processing and transfer is art. 6 para. 1 lit. b GDPR as it is necessary to provide you with the payment method you desire in course of performing our contract.

We process the data received to fulfil your purchase in accordance with your order (art. 6 para. 1 lit. b GDPR). We store all purchase related personal data for 1 month.

When you contact us using our contact form, we process the personal data you provide to handle your request. The basic information we need to process your request are your name e-mail address, country of residence, subject and description of request and case origin. In case your request relates to a purchase you made, the legal basis for the processing activities related to the handling of your request is to perform our contract (art. 6 (1) lit. b GDPR). If you request any other information, we pursue our and your legal interest to fulfil your request (art. 6 (1) lit. f GDPR).

After we fulfilled your request, we store the personal data provided for another 1-4 weeks before we delete it completely. If your request relates to a specific purchase, we store the data as long as the data in relation to the purchase.

If you subscribe to our newsletter, e.g. by ticking the respective box when creating your account we process your e-mail address and name to provide you with our newsletters. Our newsletter messages contain tracking technology that allows us to collect certain usage data, such as, when and if you opened the newsletter, if you clicked on any links or if you directly deleted it. The legal basis for the data processing is your consent, art. 6 para. 1 lit. a GDPR, which you have declare by ticking the box and verifying your e-mail address. You may withdraw your consent at any time with effect for the future, e.g. by clicking the unsubscribe link in each newsletter or by contacting us under the details above.

We store your newsletter data until you withdraw your consent.

In some cases, third parties may process your data on our behalf, e.g. because they provide certain technical services. Where this is the case, they only act on our behalf and in accordance with our instructions as our data processors (art. 28 GDPR). At the moment, we use the services of a marketing platform provider to host our web shop and to implement additional optional and mandatory functionality on the website.

Finally, we may also share your Personal Information provided that there is a legal basis for such sharing to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights

On our website, we use so-called cookies and similar technologies to collect certain data about the use of the website. Cookies are small data files that may be stored on your device and that are read by the entity placing the cookie whenever you visit our website. Thereby we process data about how you use the website, which pages you visit and what links you click, ad data and similar data. Depending on whether and which type of cookies you accept, we use the data for the following purposes:

Essential Cookies: These cookies are necessary to display our website properly, The entailed processing of personal data is thus necessary to deliver our website and all of its functionalities properly and to pursue our legitimate interest in displaying our website correctly and offer our goods and services (art. 6 para. 1 lit. b, f GDPR).

We also use certain types of optional cookies – however subject to your acceptance of these cookies:

The legal basis for the optional cookies and the data processing activities associated with them is your consent as provided for in Art. 6 para. 1 a GDPR and Sec. 25 para. 1 TTDSG. More details about the names and types of cookies allocated to each of these categories, the entities placing the cookies (i.e. those that have access to the information contained in the cookies) and the lifetime of the cookies can be found in our cookie consent manager, which you can access here.

You may revoke your consent at any time with effect for the future; e.g. by changing your settings in the cookie consent manager.

In the context of the use of the so-called Facebook pixel (classified under marketing cookies), we are a joint controller together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook) pursuant to Article 26 GDPR. The underlying arrangement setting out the roles and relationships of the joint controllers vis-à-vis the data subjects is available at theFacebook resource page. The pixel collects data about your use of our website and compares it with data from Facebook in order to display advertising from us that is tailored to you on Facebook's websites. Facebook also uses the data for its own web purposes and for third-party advertising purposes in accordance with the Facebook Data Policy.

The aforementioned processing activities may entail a transfer of your personal data to recipients in third countries, i.e. outside of the EU. For some of those countries, there is no EU Commission adequacy finding. Where this is the case, we take appropriate safeguards to ensure an adequate level of data protection, especially by concluding data transfer agreements incorporating the standard contractual clauses of the European Commission in accordance with art. 46 para. 2 lit. c GDPR and – as far as necessary – implement supplementary measures as maybe required. Please contact us if you have any additional questions or want to obtain a copy. Alternatively, we may rely on your consent to transfer personal data to a recipient in a country without an adequate level of protection (in particular for cookies set by entities in third countries, cf. Sec. 6).

You have the right to access personal data we hold about you and to ask your personal data to be rectified, erased or restricted, as well as to request data portability. You also have the right to lodge a complaint with a supervisory authority.

You also have the right to object to any processing based on art. 6 para. 1 lit. f GDPR.

If the processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal

f you want to withdraw your cookie consent, you may e.g. refer to the preference centre to withdraw your consent by adjusting your choices of cookies.

If you want to withdraw your consent to the receival of our newsletter, you can e.g. use the unsubscribe button in every newsletter or contact us via [support-4@gobicashmere.com]

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

As of October 2022