Data protection - Golf House

Company

Data protection at www.golfhouse.com

Data protection is a matter of trust and your trust is important to us. The data processing of Golf House Direktversand GmbH, represented by the managing directors Frank Ewers, Ralph Anstoetz (hereinafter also "we" or "us") as responsible persons in the sense of Art. 4 No. 7 GDPR is of course based on the legal provisions.

Your information

This data usage notice informs visitors and customers who conclude contracts on our website about the collection, processing and use of data when visiting, registering and concluding contracts, as well as about rights of objection, revocation and other rights to which you are entitled as a person affected by the collection and use of data.

I. What do we do with your personal data?

1. What is personal data

2. Data use for contract processing

3. Data storage, customer account

4. Contacting

5. Data use for advertising

6. Right of revocation and objection to advertising

7. Deletion and blocking

8. Publishing ratings on our website

II. data collection during the visit of our pages

1. Technical information and cookies

2. Profiling of users

3. Details on web analysis and advertising

4. Right of objection and revocation for user profiles and cookies

5. Social Plugins

6. Social media

III. How do we protect your personal data?

1. General protection measures

2. Protection of your payment data

IV. Which rights do I have?

1. Right to confirmation and access

2. Right to correction

3. Right to deletion (right to be forgotten)

a) Conditions for deletion

b) Comprehensive right to be forgotten

c) Exceptions to deletion

4. Right to restriction of processing

5. Right to data portability

6. Enforcement of your rights

V. Which consents have I given?

I. What do we do with your personal data?

1. What is personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "relevant person"). A name is not necessarily required for identifiability. Indirect identifiability is also sufficient, e.g. by means of assignment to an identification number, to location data, to an online identifier or to one or more special characteristics. It is therefore a question of your identity. This includes, for example, your name, but also your telephone number, your address, and other data that you provide to us.

Many legal bases for our data processing can be found in the European General Data Protection Regulation (GDPR), its text and the associated recitals which you can find, for example, here. In the following notes, we refer to corresponding regulations as the respective legal basis for our processing.

2. Data use for contract processing

If you make an inquiry with us or conclude a contract with us, we require and process certain data, such as the details of the intended or made order, your address, email address and payment processing data for the pre-contractual examination, contract processing and any subsequent warranty or guarantee processing (see as a basis Art. 6 para. 1 sentence 1 lit b GDPR). In the context of order and payment processing, the service providers used by us (e.g. logistics companies, payment intermediaries) receive the necessary data about you or the order. We cannot accept orders without the corresponding accurate information.

In addition, commercial and tax law requires us to archive data from completed transactions for the duration of the statutory retention periods. The legal basis for the corresponding data uses is Art. 6 para. 1 lit. c GDPR.

3. Data storage, customer account

Your specific order data will be stored by us. You can register with us (email address and password). With the registration you get access to data stored by us about your person and about your orders, among other things.

If you would like to close your access again, please use one of the contact options below.

Please note that even if you close your account, your data will continue to be stored by us and used for the specified purposes (such as order processing).

For your right to object to the use of data for advertising, see I. point 6.

4. Contact

If you contact us via our contact options (e.g. via email or the contact form), we will store your name and contact details as well as your request. The data is used to process your request and to communicate with you. We use your email in order to be able to answer you by email (legal basis Art. 6 para. 1 sentence 1 lit a and b GDPR). For questions about specific orders or if you want us to do something for you personally, we need your real name. For other questions, you can also provide a pseudonym. If your request has finally been dealt with and there are no other storage obligations, the data will be deleted again.

5. Use of data for advertising

We are interested in maintaining the customer relationship with you, acquiring new customers, reactivating old customers and sending our customers information and offers. In order to exercise these legitimate interests, we process your data on the basis of Art. 6 (1) (f) of the GDPR (also with the help of service providers) in order to provide you with information and personalized offers from us and to improve our information and offers.

In our advertising measures, we pursue the interest of protecting you as far as possible from unwanted advertising or advertising that is not in line with your interests. In order to be able to take your interests into account, we include such data in the selection of information of which you know that we are aware. This is, for example, your previous purchases in our stores. Orders, information you have already received or your reactions to corresponding promotional information on postal advertising or our newsletters and email information. Where it is technically and economically feasible for the pursuit of the purposes, we separate corresponding data from your person in order to protect your interests, pseudonymize them and form groups (clusters) before an evaluation, in which the individual information is merged.

For your right of objection and revocation against the following data use for advertising purposes, see I. point 6.

We use the following data on the basis of the above mentioned legal basis without asking you separately for your consent.

- Postal advertising

We use your first and last name, your postal address and - if we have received this additional information from you - your title, academic degree and date of birth to send you offers and information about our company and our services and products by mail if, after evaluating the data provided at the beginning of this section, we expect that this information is in your interest.

- Email advertising for our own similar offers

If we receive your email address in connection with the sale of goods, we will use the email address to advertise our own similar products. You can also object to any promotional use at any time without incurring any costs other than the transmission costs according to the basic rates. In the commercial sector, we use the telephone number for advertising purposes even in the case of presumed consent.

We only make the following uses after we have asked you for your consent outside of this declaration. Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose.

(Acceptance of these notes does not yet constitute consent on your part to the corresponding use of your data for advertising purposes!)

- Email advertising with separate consent

If you have registered separately for our newsletter, your email address and, if applicable, other personal data that you voluntarily provided to us during registration (e.g. your name for addressing purposes) will be used for our own advertising purposes and, if applicable, for advertising partner offers contained in the newsletter.

We statistically evaluate when such an email is opened and, if applicable, which information offers and with what intensity these meet with interest (for example, when a link is called up). The evaluation is used to improve the delivery times and optimize the content of our offers and promotional information.

- Evaluation reminder by email

If we receive your email address in connection with the sale of goods, we use the email address to ask you to rate previously purchased goods or services. You can object to promotional use at any time without incurring any costs other than the transmission costs according to the basic rates. In the commercial sector, we use the telephone number for advertising purposes in the case of presumed consent.

We only make the following uses after we have asked you for your consent outside of this declaration. Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose.

(Acceptance of these instructions does not yet constitute consent on your part to the corresponding use of your data for advertising purposes!)

- Email advertising with separate consent

If you have registered separately for our newsletter, your email address and, if applicable, other personal data that you voluntarily provided to us during registration (e.g. your name for addressing purposes) will be used for our own advertising purposes, including the request to evaluate goods or services previously purchased by you from us and, if applicable, for advertising partner offers contained in the newsletter.

We statistically evaluate when such an email is opend and, if applicable, which information offers and with what intensity these meet with interest (for example, when a link is opend). The evaluation is carried out to improve the delivery times and optimize the content of our offers and promotional information.

- Use of your data when visiting our pages

Insofar as we collect data or have data collected with the help of web analysis tools and use web advertising tools, we will inform you in detail about this under II. Data collection when visiting our pages. There you will also learn how you can use your right to object and what technical options are available to you to counteract data collection.

6. Right of revocation and objection to advertising

Of course, you can object to the use of your data for advertising purposes (see I. point 3 and point 5) at any time - even if this use is legally permissible without your consent - by sending us an informal message or revoking any consent you have given. Objection and revocation will stop any future use. Uses that precede the assertion of your right remain unaffected. Of course, we do not charge any separate costs for an objection or revocation. (In particular, if you notify us by email, you will not incur any costs other than the transmission costs according to the prime rates of your provider). Simply send your objection or revocation to one of the contact options listed at the end of this notice.

In each of our promotional emails and newsletters, you will receive a notice with an address or a link to simply unsubscribe from this information.

Please take into account that in individual cases, advertising may still reach you despite objection or revocation. Not in all cases advertising can still be stopped with reasonable effort before the next mailing or a comparable other measure will reach you.

Your objection options also extend to profiling (profiling, cf. on the term II. point 2) and the use of data collected during visits to our websites for direct advertising purposes. We explain the technical options for exercising the right of objection and preventing the collection of data in detail in the information on the web tools used under II. point 3. "Details on web analysis and advertising". If you exercise your right to object, we will no longer process the collected data for these purposes.

Further information on your rights can be found under IV. What rights do I have?

7. Deletion and blocking

Your personal data will be stored until the stated purposes have been achieved or as long as we have a legitimate interest in storing it.

After that, the data will be deleted unless otherwise agreed with you or if there are legal archiving obligations (e.g. due to commercial or tax law). If archiving is required by law, the data will be blocked from other access. These documents will be deleted and destroyed after expiration of the legal retention periods as part of regular actions in accordance with data protection law.

If you have consented to the collection, processing and use of your data, we store and use your data indefinitely until revoked or the purpose for which you gave your consent no longer applies. Thereafter, the consent and processing data will be archived until the statute of limitations expires (regularly three years) for legal defense purposes (legal basis Art. 17 para. 3 lit. e GDPR).

If you no longer wish to receive advertising from us, we will use your name, address and, if applicable, email address for blocking purposes in corresponding lists with which we match our advertising measures so that you no longer receive any further advertising. Deletion in this sense therefore initially means that your data is blocked in our systems, in particular for advertising and marketing activities (legal basis Art. 6 para. 1 lit. f GDPR). The data will - if necessary - continue to be processed for purposes other than advertising, for example in the context of contract processing and, if necessary, warranty as well as commercial and tax law documentation (legal basis Art. 6 para. 1 lit. b u. c GDPR).

II. Data collection when visiting our pages

1. Technical information and cookies

You can visit our site without providing any personal information. When you visit our websites, even if this is done via a link in a newsletter or an advertisement, for example, certain data is nevertheless collected and stored in so-called log files. Recorded - even if the visit is made via newsletter links or advertising links on the Internet, if necessary - only access data without direct personal reference, such as

- the Internet page from which we are visited

- the page that is opend

- Type and version of your browser,

- Time and date of access

- the operating system on which the browser is running

- the name of your internet service provider

- the internet address of the person accessing the site (IP address)

- products and content in which the visitor is interested and the degree of interest, such as duration, frequency, interaction with forms, navigation elements and links

It is not possible for us to draw any conclusions about you on the basis of this data, and we do not merge the above data with your personal data without your consent.

The IP address is made available by our hoster, but for data protection reasons it is overwritten with an "x" after 7 days and thus anonymized.

We have also tried to shorten the IP address so that it is difficult or almost impossible for certain partners who collect this IP address as part of their services to trace it back to your person.

If we include third-party content on our pages (e.g. embedded films or other information), these receive your IP address for this purpose alone, as otherwise the content cannot be delivered to your browser.

- Cookies

We use so-called cookies on our website. Cookies are small files that are stored on your device and store certain settings and data for exchange with our system or the systems of service providers via your browser. This storage helps us to design the website accordingly for you and makes it easier for you to use, for example, by storing certain entries from you in such a way that you do not have to keep repeating them. For this purpose, cookies usually contain identification tags. This allows users and/or the browser (software for displaying Internet content) to be identified and distinguished from other users and browsers and recognized again during visits.

Many cookies are automatically deleted from your hard drive at the end of the browser session (end of session) (therefore also session cookies). However, there are also cookies that remain stored with you permanently. The expiration time is set for your convenience to a point in the future. During a further visit, it is then automatically recognized that you have already been with us and which inputs and settings you prefer (long-term cookies). Some of these cookies are used to display information specifically tailored to your interests on our website or the website of our partners.

(Consent-free cookies)

Cookies that ensure functions without which you could not use this website as intended are only used by us and their contents are not made available to third parties. We use such consent-free cookies on the basis of Art. 6 (1) lit. b GDPR.

(Other cookies)

For other cookies, a reference to this privacy policy is already made when you visit our site. In doing so, you may agree to the use of these cookies or have not used the option to opt out, here is an overview.

You can adjust your selection at any time here.

- Other integration of services and content of third parties

It may happen that third party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are integrated within this online offer. This always requires that the providers of this content (hereinafter referred to as "third-party providers") perceive the IP address of the user. Without the IP address, they could not send the content to the browser of the respective user. The IP address is thus necessary for the display of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. However, we have no influence if the third-party providers store the IP address, e.g. for statistical purposes. Insofar as this is known to us, we inform the users about it.

- Your technical objection options

Regardless of the set duration, you can manually delete cookies in your browser. In some browser settings, the acceptance of cookies is preset without restrictions. You can allow or prohibit temporary and stored cookies independently in the security settings of your browser. In addition to browser settings that generally disable the automatic setting of cookies, you can also disable cookies by setting your browser to block cookies from a specific domain, e.g. "googleadservices.com". This setting then prevents the execution of corresponding services that set cookies from this domain.

Some web services work with opt-out cookies. A web analytics service, for example, then recognizes from the cookie you set (hereinafter referred to as a "blocking cookie") that you do not want the data to be collected. We have listed the options for setting a blocking cookie separately for the web services we use under II. point 3. Google, for example, allows corresponding settings at https://myaccount.google.com/intro. Possibilities for numerous other networks to make advertising settings are available at http://www.youronlinechoices.com/de/praferenzmanagement/ or find out about many advertising measures and deselect them at http://optout.aboutads.info/ and or http://optout.networkadvertising.org.

If you use a mobile device, you can activate the "No ad tracking" (iOS) or "Disable personalized advertising" (Android) setting on the device with the corresponding operating system. This is to prevent the advertising ID (a non-personal device identifier) from being used to provide interest-based advertising.

If you use the option in your browser to delete all cookies or set blocking cookies, remember that you may then have to make the corresponding settings or set blocking cookies again!

Accepting cookies is not a prerequisite for visiting our online offer. However, if you do not accept or deactivate cookies, certain options (e.g. services, purchase options, a shopping cart storage and information) on our site may not be available to you and some web pages may not be displayed correctly.

If you wish to enter into contracts with us, you must accept certain cookies. If you do not wish to do so, then no contract can be concluded.

You can find more information about the use of cookies on the pages of the Bundesverband Digitale Wirtschaft (BVDW) e.V.

http://www.meine-cookies.org

If you do not wish cookies to be used, then you can exercise your rights to do so by technical means, which we have explained to you under II. point 1. "Your technical objection options" or for specific cookies, please read our notes under II. point 3.

2. Profiling of users

The law recognizes the formation of automated data collections on a person under the term profiling. According to Art. 4 No. 4 GDPR, profiling is any kind of automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning the job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location of such natural person.

We create pseudonymous user profiles, i.e. user profiles that are separated from identifiers relating to your person, in order to be able to draw conclusions about interests in our content and offers through an evaluation and to tailor corresponding information and offers to users with corresponding interests. Furthermore, we use the information to improve data security, to counter attacks on our systems and, if necessary, to support law enforcement authorities in the event of attacks on our systems or other criminal acts.

We use appropriate web analytics tools to analyze user behavior. You can find out more below under "Details on web analysis and advertising".

You can also object to the creation of profiles with personal data and the further use of profile data for advertising purposes and revoke any consent you have given in this regard (see I. point 6). The exercise of the option to object to profiling by web analysis and advertising measures - insofar as these work with personal data - is carried out by technical measures, which we have explained to you above under II. point 1 in general and below under II. point 3 in each case for the corresponding advertising tools.

3. Details on web analysis and advertising

Web analysis tools

(Google Analytics)

This website uses Google Analytics for web analysis. This is a service provided by Google Ireland Limited ("Google"), a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies." The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on computers. It is not excluded that in the process the data processing takes place outside the scope of application of EU law.

For your protection, we have made settings whereby Google cuts the last part of the IP addresses of visitors to our website who have IP addresses from the EU or one of the contracting states to the egreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In addition, we have concluded an order processing agreement with Google.

By means of identification, for example when logging in to Google services, the data listed above can also be collected and used across devices. This means that it can be recorded, for example, that you start your visit to us on a PC and continue it on a mobile device, and the data from both devices can be linked.

Google will use this information for the purpose of evaluating your use of the website on our behalf, compiling reports on website activity for website operators and providing us with other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. The deletion of Analytics data is set to 50 months.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website and the services we provide.

- Use of demographic characteristics with Google Analytics

Google offers the function "demographic characteristics" This allows compilations to be generated on page visitors with statements on age, gender and interests.

Google obtains this data from interest-based advertising and from visitor data from third-party providers. The data is not assigned to a specific person and is anonymized.

- Your technical objection options

If you do not want information about your website visit to be transmitted to Google Analytics, you have the option of installing a "deactivation add-on" for your browser. You can download this add-on here (insert link on http://tools.google.com/dlpage/gaoptout?hl=en ).

If you do not wish to receive interest-based advertising, you can disable the use of cookies by Google for these purposes by going to https://myaccount.google.com/intro. You can also disable the use of cookies by Google by downloading and installing the plug-in provided there via the following link: https://support.google.com/My-Ad-Center-Help/answer/12155656?visit_id=638130900121156530-564911435&rd=1&hl=en.

Alternatively, or within browsers on mobile devices, you can object to the use of Google Analytics by using the following link. By activating the link, an opt-out cookie will be set to prevent the collection by Google Analytics within this website in the future. Please note that this opt-out cookie only works in this browser and only for this domain. As soon as you delete your cookies in this browser, you must click the link again: Disable Google Analytics.

Econda

For the purpose of demand-oriented design as well as optimization of this website, anonymized data is collected and stored by solutions and technologies of econda GmbH, Eisenlohrstr. 43, 76135 Karlsruhe, Germany (http://www.econda.de) and user profiles are created from this data using pseudonyms. For this purpose, cookies may be used that enable the recognition of an Internet browser. As part of the "cross-sell", your user profile is linked to your customer account / profile. This enables us to send you individualized offers tailored to your interests and to adjust the presentation in our webshop accordingly.

Your protection options
You can object to the data processing under the following link: https://www.econda.de/en/data-protection/revocation-for-data-storage/

Mouseflow

This website uses Mouseflow, a web analytics tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (with anonymized IP address only). This creates a log of mouse movements, mouse clicks and keyboard interaction, with the intention of randomly replaying individual visits to this website as so-called session replays as well as evaluating them in the form of so-called heatmaps and deriving potential improvements for this website. The cookie generated by Mouseflow is deleted after a period of 90 days. The data collected by Mouseflow is not personal and will not be disclosed to third parties and will be stored for a period of 3 months. The storage and processing of the collected data takes place within the EU. If you do not wish to have your data collected by Mouseflow, you can object to this on all websites that use Mouseflow by clicking on the following link:

https://mouseflow.com/opt-out/

4. Right of objection and revocation for usage profiles and cookies

Among other things, according to Art. 21 (4) GDPR, you have the right to object to the creation of user profiles, especially if they are created for advertising purposes. You can revoke consent to the setting and use of cookies at any time with effect for the future. Previous uses remain unaffected. We will no longer evaluate any personal data thereafter. We have explained how you can object technically in the information on data collection under the heading "Your technical objection options".

If you have any questions about the technical objection options listed above or our other protective measures, please feel free to contact us (see below for contact details).

5. Social Plugins

Privacy policy for our Facebook page at www.facebook.com/golfhouse.de

1. Data use by Facebook
2. Cookies
3. Our use of data
4. Your rights and more information

1. Data use by Facebook

When you visit our site on Facebook, you are generally subject to the data protection provisions of facebook.com (operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; Board of Directors: Gareth Lambe, Shane Crehan; registered in Ireland (Companies Registration Office); commercial register number 462932 - hereinafter: "Facebook"). Information on the content and purpose of the storage and processing of your data can be found in the privacy policy of Facebook https://www.facebook.com/about/privacy/.

Each time you visit our Facebook page, especially when you trigger the programs automatically integrated on Facebook pages (such as the "Like" button), you transmit information about yourself to Facebook. We would like to point out that due to the data storage by Facebook, there is a risk that your personal data will also be transferred to the USA and stored and processed there, as the parent company, Facebook Inc. is based in the USA. Facebook is solely responsible for this type of data processing.

Facebook also uses your data, i.e. also the fact that you have looked around on our fan page, for market research and advertising purposes. This means that Facebook creates extensive profiles from this data about you, which are then used to show you interest-based advertising within your timeline, for example.

A detailed description of the respective data processing by Facebook and also the opt-out options can be found in the following documents from Facebook:

Privacy Policy: www.facebook.com/about/privacy/,
Opt-Out: www.facebook.com/settings?tab=ads
and www.youronlinechoices.com.

2. Cookies

Facebook sets cookies on its site under its own responsibility. When you log in to Facebook, Facebook can read data about you and your interaction with our site, which may be stored in cookies. Cookies are small files that are stored on your hard drive and store certain settings and data for exchange with Facebook's system via your browser. The time for the duration of storage may be set to a few years. Regardless of the set duration, you can also manually delete cookies in your browser or configure your browser to automatically delete cookies when you close the browser. Most browsers accept cookies by default. You can independently allow or prohibit cookies in the security settings.

Accepting cookies is generally not a prerequisite for visiting our online offer. If you disable Facebook cookies, certain options offered by Facebook may not be available to you on our site and content may not be displayed or may not be displayed correctly. You can find more information about Facebook cookies and possible settings for them here www.facebook.com/policies/cookies/.

3. Our use of data

The processing of data on this Facebook page is based on an agreement on joint processing of personal data with Facebook. Facebook and Golf House Direktversand GmbH are therefore joint controllers within the meaning of Art. 26 GDPR.

Golf House Direktversand GmbH
Schnackenburgallee 149
22525 Hamburg, Germany

Email: privacy@golfhouse.com

Tel.: (+49) 040 4313610

Managing Directors: Frank Ewers, Ralph Anstoetz
Commercial Register: HR B 18544, Hamburg Local Court
VAT ID: DE 118556553
Tax ID: 45/725/00204

Entries on Facebook: We use your personal data only in that they appear - as provided by Facebook, for example, for the operation of the social plugins - on our Facebook page (legal basis Art. 6 para 1 lit b GDPR). Thus, under one of our posts, if you press the "Like" button, the indication, "[username] likes this" appears. Your username is thus displayed. In addition, a thumbnail of your profile picture is also displayed.

Your comments, which you can enter via the "Comment" function, will also appear on our page, as provided by Facebook, with notification of your user name as well as the image of the profile picture you have posted. This information is also visible to people who are not "friends" with you on Facebook. In addition, these notices may also be enabled for visitors to our site who are not logged into Facebook. Facebook is not a platform for sharing confidential information with us, especially about your health or similar information. You should treat posts and comments on our page as you would other public posts.

Contacting us
If you contact us via our electronic contact options, we will store your message. Other messages, such as those sent by email or post, will also be stored. The personal data contained therein will be used to process your request and to communicate with you (legal basis Art. 6 para. 1 lit. b GDPR).
After your request has been finally processed, it will be deleted, unless otherwise agreed with you or legal archiving obligations exist (e.g. due to commercial or tax law). Archived messages are deleted after the archiving periods have expired or after our interest in archiving for legal defense purposes has ceased to exist (regularly after any claims have become time-barred).
Please note that we have no influence on or knowledge of whether Facebook also actually deletes the messages when we remove them from our Facebook inbox.

Technical data collection at Facebook
Furthermore, Facebook provides anonymized statistics to the operators of company pages, i.e. also to us, without being asked.

It is about anonymized data, such as

Page activities
Page views
Number of subscribers
"Like" votes
Reach
Interactions, such as clicks on certain information, elements or links. A reference to your person does not result from this for us. We use the statistical data presented to us, based on the interest in improving the offer on our social media appearances and websites and their design and maintaining security, as well as in cooperation with authorities in the event of violations (legal basis is Art. 6 para. 1 lit. c and f GDPR).

Placement of advertising on Facebook
We place advertisements on Facebook and use statistical data that we receive from Facebook to determine a target group-specific delivery. A reference to your person does not result from this for us. Facebook provides you with information on the settings you can make for advertisements on Facebook and other pages, insofar as these are controlled by Facebook (https://www.facebook.com/about/privacy/ there under "Kontrolle über Facebook-Werbeanzeigen").

Sweepstakes on Facebook
If we organize sweepstakes on Facebook, we use the participant data we receive only for the purpose of conducting the sweepstakes and, if necessary, to notify winners. Personal data of winners will only be published in abbreviated form with first name, abbreviated last name and city (example: "Bernd K. from Bonn").
You can also object to the use of your data during participation in a competition. The use of data prior to receipt of the objection remains unaffected. However, your participation ends upon receipt of your objection. There is no possibility of winning.
We would like to point out that Facebook is not associated with the organization of the competition and that the competition is in no way sponsored, supported or organized by Facebook. Golf House Direktversand GmbH is responsible for the implementation and lawful running of the competition.
We also adhere to Facebook's guidelines on the use of data in promotions. According to this, personal chronicles and connections to friends/girlfriends may not be used for the organization of promotions.

4. Your rights and further information

You have a right to object in the event of personal data being used for promotional purposes, in particular for direct advertising. You also have a right to information about the personal data we process about you, as well as the right to correct, supplement or delete it, or to restrict processing.
You also have a right to data portability, if the rights and freedoms of third parties are not affected. This applies to the data you have provided to us, which we have processed on the basis of effective consent or to enter into or fulfill an effective contract. Your rights may be tied to the fulfillment of legal requirements and may be limited as a result. If you have any questions about data protection, please contact us at privacy@golfhouse.com. In addition, you have, among other things, the right to lodge a complaint with the supervisory authority responsible for data protection, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

If you wish to exercise your right to information or other data subject rights in relation to Facebook's data processing, we advise you to assert these directly against Facebook. This is the most effective way to exercise your rights, as only Facebook has access to its users' data and can therefore take appropriate measures and provide information directly.

You can find more information about your rights under section "IV. What rights do I have?".

Privacy policy for the Instagram account "golfhouse_direktversand"

The account is responsibly operated by Golf House Direktversand GmbH (hereinafter "we"). The operation is carried out as a general information medium, in particular on topics related to fabrics, curtains, wallpaper, sun protection, flooring, furniture. We use both the technical platform and the services of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: Instagram) for the service offered on Instagram.

I. Data processing by Instagram
You can find Instagram's detailed privacy policy, which informs you about data processing and the rights you are entitled to at the following link: https://help.instagram.com/519522125107875 We have no influence on the type, scope and purposes of the data processing carried out by Instagram. We also have no influence on the use or disclosure of personal data by Instagram. There are also no effective control options here.
With the use of Instagram, your personal data is collected, transferred, stored, disclosed as well as used by Instagram and thereby transferred to the United States of America (USA), Ireland and any other country in which Instagram does business and stored and used there. You can find out which data is specifically affected by this in Instagram's privacy policy.

II. Data processed by us via Instagram
Processing is carried out by us within the framework of the Instagram account when you react to our posts (e.g. by a "Like" or "Share" or a reply to a post). In such a case, we are informed by Instagram about the action taken including mention of the account name. This data may be used by us to compose a response. Personal data is also collected and processed if you write us a message directly via Instagram or an email. Then we also use this data to send you a reply.
We process personal data beyond the Instagram account we operate in the following cases. If you request in a message that we contact you by other means outside of the Instagram account and provide us with relevant contact information (e.g., address, phone number, or email address), we will transfer that data to our corporate systems so that we can contact you accordingly as part of our business.
When sending a direct message, please note that Instagram may scan the content of the messages. Your personal data will be stored until the stated purposes have been achieved or for as long as we have a legitimate interest in storing it.
After that, it will be deleted unless other agreements have been made with them or there are legal archiving obligations (e.g. due to commercial or tax law). If archiving is required by law, the data will be blocked from other access. These documents will be deleted and destroyed after expiration of the legal retention periods as part of regular actions in accordance with data protection law.

III. Your rights
As a person affected by data processing, you may assert legally determined rights.

1.Right to confirmation and access
Pursuant to Art. 15 GDPR, you have the right to request confirmation whether your personal data is being processed. In the event that we process such data, you have the right to receive information about your stored data free of charge. The information includes information on
a) the purposes of processing;
b) the categories of personal data processed;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations;
d) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
e) the existence of a right to rectify or erase the personal data concerning him or her or to have the processing restricted by the controller or to object to such processing;
f) the existence of a right of appeal to a supervisory authority;
g) if the personal data are not collected from the relevant person: Any available information on the origin of the data;
h) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the relevant person. Furthermore, the relevant person shall have the right to obtain information as to whether personal data have been transferred to a third country or to an international organization. If this is the case, the relevant person also has the right to obtain information about the appropriate safeguards in connection with the transfer. The right to information of the relevant person pursuant to Article 15 GDPR does not exist insofar as the information would disclose information that must be kept secret according to a legal provision or by its nature, in particular because of the overriding legitimate interests of a third party.
If you have any questions regarding the collection, processing or use of personal data, information, or otherwise assert your rights, simply contact us using the contact details listed below.

2.Right to rectification
You have a right to rectification and/or completion if the processed personal data are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

3.Right of objection
Your right of objection
You have the right to object at any time, due to your particular situation, to the processing of personal data concerning you which is carried out on the basis of a balance of interests pursuant to Article 6(1)(f) GDPR; this also applies to profiling based on these provisions. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you, or the processing serves to assert, exercise or defend legal claims.

You have the right to object to the processing of your personal data for direct marketing purposes at any time, with the consequence that the data will no longer be processed for these purposes.

Consents given can be revoked. You will not incur any special costs (except for transmission costs according to the prime rates of your provider). Objection and revocation of consents are effective for the future. The lawfulness of data processing in the past remains unaffected.

4.Right of deletion (right to be forgotten)

a) Conditions for deletion
You have the right to request the deletion of personal data relating to you. Please note that a right to immediate deletion (Art. 17 GDPR) ("right to be forgotten") only exists if one of the following reasons applies:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

You revoke your consent on which the processing was based pursuant to Art. 6 (1) a GDPR or Art. 9 (2) a GDPR and there is no other legal basis for the processing.

You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes pursuant to Art. 21 (2) GDPR.

The personal data concerning you have been processed unlawfully.
The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

The personal data concerning you was collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

b) Comprehensive right to be forgotten
If we have made the personal data concerning you public and we are obliged to delete it pursuant to Article 17(1) of the GDPR, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers that process the personal data that you, as the relevant person, have requested them to delete all links to, or copies or replications of, that personal data.

c) Exceptions to deletion
In addition to the above requirements, please note that the following exceptions may justify a refusal of your request for erasure:

The right to deletion does not exist insofar as the processing is necessary
a) for the exercise of the right to freedom of expression and information;
b) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the field of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
d) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right to deletion is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
e) for the establishment, exercise or defense of legal claims.

5.Right to restrict processing
You have the right to restrict processing if you dispute the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data or if you object to delete in the event of unlawful processing and instead request restriction of the use of personal data. You also have this right if we no longer need the data, you need this personal data to assert, exercise or defend legal claims. Finally, you may exercise this right if you have objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the legitimate grounds of the controller override your grounds.

If processing has been restricted, this data may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. The possibility of continued storage remains unaffected. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is cancelled.

6.Right to data portability
You also have a right to data portability of the data you have provided to us, which we have processed on the basis of effective consent or the processing of which has been necessary for entering into or fulfilling an effective contract, in a "structured, common and machine-readable format" to you. You also have the right to request direct transfer to another controller where technically feasible.

The right only exists insofar as the rights and freedoms of other persons are not affected.

7.Assertion of your rights
Please contact us if you have any questions or wish to assert your rights:

Golf House Direktversand GmbH
Schnackenburgallee 149
22525 Hamburg, Germany

Tel.: (+49) 040 4313610

E-Mail: privacy@golfhouse.com
Internet: www.golfhouse.com

Managing Director: Frank Ewers, Ralph Anstoetz
Commercial Register: HR B 18544, Hamburg District Court
VAT ID: DE 118556553
Tax ID: 45/725/00204

You can also contact our data protection officer. He is responsible in cases of complaint. You can reach our data protection officer via the following email address: privacy@golfhouse.com. In addition, if you feel that we are not dealing with your concern appropriately, you have, among other things (without prejudice to any other administrative or judicial remedy), the right to lodge a complaint with the supervisory authority responsible for data protection, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

6. Social media

You will find links to social media on our site, such as Facebook, Twitter, Pinterest and other corresponding services. We have limited the ability for you to link to our offerings there to linking to these services so that only you can determine whether these services receive data about your interests. Social plugins, i.e. programming that often transmits data to social services when you visit a page, we do not use!

III. How do we protect your personal data?

1. General protective measures

The law requires companies to create an appropriate level of data protection. In doing so, the respective risk to the data, the probability of occurrence, the state of the art and the costs, among other things, must be reconciled. We have provided for appropriate technical and organizational measures to realize the security of your data and its processing in accordance with the legal requirements. If you have any security concerns regarding data entry or any other questions or suggestions, simply contact our customer service or our data protection officer. You will find the other contact details listed again at the end of these notes.

Your personal data is transmitted securely by encryption when you place an order and when you register for your personal account. We use the SSL (Secure Socket Layer) coding system for this purpose. We secure our website and other systems by technical and organizational measures against loss, destruction, access, modification and distribution of your data by unauthorized persons. You should always keep your access information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.

2. Protection of your payment data

- Protection of card data

The payment form on which our customers enter their card data is hosted in the secure computer center of our payment service provider. This not only ensures that no employee has access to your card data, but also that the data protection standards of the card organizations are met.

- Protected data transmission

The TLS encryption process is used to transmit the data in the payment form (card number, expiration date, check digit, etc.) to our payment service provider in encrypted form.

- Access to your card number

The card number is only stored as an encrypted string at our payment service providers. The card number is generally never displayed or accessed in unencrypted form. Only within the International Card Organizations network is the card number deciphered. The card number is used, among other things, for authorizations, bookings and credits.

IV. Which rights do I have?

As a person affected by data processing, you can assert legally determined rights.

1. Right to confirmation and information

Pursuant to Article 15 of the GDPR, you have the right to request confirmation from us as to whether personal data concerning you is being processed. In the event that we process such data, you have the right to receive information about your stored data free of charge. The information includes details about

- the purposes of processing;

- the categories of personal data that are processed;

- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations;

- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;

- the existence of a right to obtain the rectification or deletion of personal data concerning him or her, or to obtain the restriction of processing by the controller, or a right to object to such processing;

- the existence of a right of appeal to a supervisory authority;

- if the personal data are not collected from the relevant person: Any available information on the origin of the data;

- the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the relevant person.

Furthermore, the relevant person shall have the right to obtain information as to whether personal data have been transferred to a third country or to an international organization. If this is the case, the relevant person also has the right to obtain information about the appropriate safeguards in connection with the transfer. If you have any questions regarding the collection, processing or use of personal data, or if you wish to obtain information or otherwise assert your rights, simply contact us using the contact details listed at the end of this notice.

2. Right to rectification

You have a right to rectification and/or completion, insofar as your processed personal data are inaccurate or incomplete. The data controller shall carry out the rectification without undue delay.

3. Right to deletion (right to be forgotten)

a) Conditions for deletion

You have the right to request the deletion of personal data relating to you. Please note that a right to immediate deletion (Art. 17 GDPR) ("right to be forgotten") only exists if one of the following reasons applies:

- The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

- You revoke your consent on which the processing was based pursuant to Art. 6 (1) a GDPR or Art. 9 (2) a GDPR and there is no other legal basis for the processing.

- You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes pursuant to Art. 21 (2) GDPR.

- The personal data concerning you have been processed unlawfully.

- The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

- The personal data concerning you was collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

b) Further right to be forgotten

If we have made the personal data concerning you public and we are obliged to delete it pursuant to Article 17(1) of the GDPR, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers that process your personal data that you, as the relevant person, have requested them to delete all links to, or copies or replications of, that personal data.

c) Exceptions to deletion

In addition to the above requirements, please note that the following exceptions may justify a denial of your request for deletion:

The right to deletion does not exist to the extent that the processing is necessary

- to exercise the right to freedom of expression and information;

- for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

- for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;

- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right to erasure is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or

- for the assertion, exercise or defense of legal claims.

4. Right to restriction of processing

You have the right to restriction of processing if you dispute the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data or if you object to delete in the event of unlawful processing and instead request restriction of the use of personal data. You also have this right if we no longer need the data, you need this personal data to assert, exercise or defend legal claims. Finally, you may assert this right if you have objected to the processing pursuant to Article 21 (1) GDPR and it is not yet clear whether the legitimate grounds of the controller outweigh your grounds.

5. Right to data portability

You also have the right to data portability of the data you have provided to us, which we have processed on the basis of effective consent or the processing of which was necessary to enter into or fulfill an effective contract, in a "structured, common and machine-readable format" to you. You also have the right to request direct transfer to another controller where technically feasible.

The right only exists insofar as the rights and freedoms of other persons are not affected.

6. Assertion of your rights

If you have any questions or wish to assert your rights, please contact our customer service (see below for contact details).

You can also contact our data protection officer. He is responsible in cases of complaint. You can reach our data protection officer via the following email: privacy@golfhouse.com.

In addition, if you feel that we are not dealing with your concern appropriately, you have, among other things (without prejudice to any other administrative or judicial remedy), the right to lodge a complaint with the supervisory authority responsible for data protection, in particular in the Member State of your place of residence, place of work or place of the alleged infringement.

V. Which consents have I given?

For promotional contact or certain data uses, you may have given us consent (for example, for a newsletter or services as part of a customer login, etc.). If you gave us consent, we stored the consent texts and the texts can be retrieved. To retrieve them, simply contact privacy@golfhouse.com. We will then send you the requested information by email.

Your Golf House Direktversand GmbH

Schnackenburgallee 149

22525 Hamburg, Germany

Phone number: (+49) 040 4313610

email: customerservice@golfhouse.com

www.golfhouse.com

This data protection information also represents intellectual property protected by copyright. Use by third parties - even in part - for commercial purposes is not permitted. Violations will be prosecuted. WIENKE & BECKER accepts no liability towards third parties for the completeness and up-to-dateness of the above information.

You have the right to object at any time to the processing of your personal data that is carried out on the basis of Art. 6(1)(e) or (f) GDPR; this also applies to any profiling based on these provisions (compare e.g. term II. point 2).

In the event of an objection to data processing for direct marketing (Art. 21(2) GDPR), this processing will be terminated as soon as possible after receipt of the objection (see also I. point 6. for further details)

An objection to other processing (according to Art. 21 (1) GDPR) based on Art. 6 (1) lit. e or lit. f GDPR can only be made for reasons arising from your particular situation, whereby again compelling overriding reasons worthy of protection can justify our further processing.

Consents given can be revoked (see below for contact details). You will not incur any special costs (except for transmission costs according to the prime rates of your provider).

Objection and revocation of consents are effective for the future. The legality of data processing in the past remains unaffected.