Privacy policy
Only the German version of this text is legally binding. This translation is provided for information only. German version
Last updated: 05.11.2026
When you visit our online shop, GOLDSTEIN.SHOP®, personal data are collected. Personal data are data by which you can be personally identified. This privacy policy explains which data are specifically collected and what they are used for. It also explains how and for what purpose this takes place.
Goldstein Ventures GmbH (hereinafter referred to as GOLDSTEIN.SHOP®) takes the protection of your data very seriously. Your personal data are treated confidentially and in accordance with the Swiss Federal Act on Data Protection (DSG) and this privacy policy. Please note that data transmission over the internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
How are your data collected?
On the one hand, your data are collected when you provide them to us, for example via a contact form or when placing an order. Other data are recorded automatically by our IT systems when you visit the website - above all technical data (for example internet browser, operating system or time of the page view). These data are recorded automatically as soon as you visit our website.
What are your data used for?
Some of the data are collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour. Mandatory fields for data entry are only used where they are necessary for the provision or performance of a service, for example for processing a purchase contract or for subscribing to the newsletter.
Note on the use of cookies and analysis tools
When you visit our website, your browsing behaviour may be evaluated statistically. This is done using analysis programs and cookies. Cookies are small text files that are stored locally in the browser of the site visitor. Details of the categories used, the individual services and your choices can be found in section 3 of this policy.
1. General information and mandatory information
1.1 Controller
Data processing in this online shop (GOLDSTEIN.SHOP®) is carried out by the shop operator:
Goldstein Ventures GmbH
Selmattenstrasse 25
8215 Hallau
Switzerland
Managing Director: André Schulze
UID: CHE-453.780.812
VAT No.: CHE-453.780.812 MWST
CH-ID: CH-440-4038088-5
EHRA-ID: 1524334
Customer service contact: kontakt@goldstein.shop, Tel. 071 695 2000
1.2 Your consent to data processing
Some data processing operations are only possible with your express consent (in particular the cookie categories Statistics and Marketing, see section 3). You may withdraw consent already given at any time with effect for the future - for cookies via the “Cookie Settings” link in the footer area of the website, and for other consents informally by e-mail to kontakt@goldstein.shop. The lawfulness of the processing carried out until the withdrawal remains unaffected by the withdrawal.
1.3 Right to lodge a complaint with the competent supervisory authority
In the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority. For data processing by private companies in Switzerland, this is the Federal Data Protection and Information Commissioner (EDÖB):
Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (EDÖB)
Feldeggweg 1, 3003 Bern, Switzerland
www.edoeb.admin.ch
1.4 Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. A direct transfer to another controller will only take place where this is technically feasible.
1.5 SSL and TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar begins with “https://” and a padlock symbol is displayed.
1.6 Information, rectification, erasure
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, their origin and recipients and the purpose of the processing, as well as a right to rectification, restriction or erasure of these data. To do so, please contact the address given in section 1.1. You also have the right to lodge a complaint with the competent supervisory authority (see section 1.3).
2. Server log files
The technical provider of this online shop, Shopify Inc. (150 Elgin Street, Suite 800, Ottawa, ON K2P 1L4, Canada), automatically collects and stores information in server log files that your browser transmits automatically:
- IP address
- Time of the request
- Type of request
- Client information (type, version)
- Operating system
These data are not combined with other data sources.
2.1 Storage period
These log files go back a maximum of 31 days.
2.2 Processing on behalf
We have concluded a data processing agreement with Shopify Inc.
2.3 Legal basis
The legal basis for this processing is the Swiss Federal Act on Data Protection (DSG); it serves the performance of a contract or pre-contractual measures as well as our legitimate interest in the secure and functional operation of the website.
3. Cookies and consent management
When you visit our shop, cookies and comparable technologies are used. Cookies are small text files that are stored on your device and enable your browser to be recognised.
We distinguish between three categories:
- Necessary - essential for the shopping basket, checkout, login and security. These cookies are set without consent, as the shop does not function without them.
- Statistics - helps us to understand how the shop is used (Google Analytics, Google Merchant Center, see section 4).
- Marketing - serves to measure the success of advertising (Google Ads) and to embed external content such as our review widget (Trustami, see section 11).
The Statistics and Marketing categories only become active once you have expressly consented in the cookie banner. You can change or withdraw your selection at any time via the “Cookie Settings” link in the footer area of the website; the lawfulness of the processing carried out until the withdrawal remains unaffected.
Our analysis tool Umami (section 5) is deliberately excluded from this consent, as it works without cookies and does not store any personal data.
4. Google Analytics, Google Ads and Google Merchant Center
Following your consent in the cookie banner (Statistics or Marketing category), we use the following services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), technically integrated via the native Shopify integration “Google & YouTube”:
- Google Analytics 4 - web analytics for evaluating user behaviour and optimising our offering (Statistics category).
- Google Merchant Center - synchronisation of our product data for display in Google services (Statistics category).
- Google Ads - measuring the success of advertising campaigns (conversion tracking, remarketing) (Marketing category).
The data generated in this process are transferred to and stored on Google servers, including in the USA. Google LLC is certified under the Swiss-U.S. Data Privacy Framework, which provides for adequate protection for the transfer of personal data from Switzerland to the USA.
These services are only activated once you consent to the respective category in the cookie banner. You can change or withdraw your selection at any time via “Cookie Settings”.
Further information: Google's privacy policy and settings for ad personalisation at myadcenter.google.com.
5. Web analytics with Umami
We use Umami for the statistical evaluation and improvement of our online shop. The Umami instance used for us is operated by netvalue GmbH, Selmattenstrasse 25, 8215 Hallau, Switzerland, as processor. Processing takes place on servers in the Netherlands (European Union).
Umami sets no cookies and stores no personal data - it therefore deliberately runs independently of the cookie selection in section 3. An activated “Do Not Track” signal from your browser is nevertheless respected.
The following are recorded: public page paths visited, time of the visit, the referring domain (only the domain, not the full URL), browser, operating system, device type, screen size, language and an approximate location (country, region, town). The IP address is processed only for technical transmission and to derive the location statistics, but is not stored in the Umami analytics database. For counting purposes, technical identifiers that change over time are generated, not permanent identifiers.
No names, e-mail addresses, order contents or customer account data are transmitted to Umami. Account pages, shopping basket, checkout, order pages and internal search pages are excluded from this integration. URL search parameters and URL fragments are not transmitted.
The evaluation serves exclusively for our shop statistics. We do not combine these data with customer accounts or orders and do not use them for personalised advertising. The data are deleted as soon as they are no longer required for statistical evaluation in the course of our regular review.
6. Newsletter
6.1 Newsletter data
If you would like to receive our newsletter, we require your e-mail address and confirmation that you agree to receive it. Further data are collected only on a voluntary basis and are used exclusively for sending the requested information.
Your data are stored until you unsubscribe and are then deleted. Data stored for other purposes remain unaffected by this.
6.2 Content of the newsletter
We send newsletters only with your consent. They contain information on news from our company, such as promotions, partnerships and product presentations.
6.3 Double opt-in and proof
Subscription takes place using the double opt-in procedure: after subscribing, you will receive an e-mail with a confirmation link. Only once you click on this link are you subscribed to the newsletter. Your consent and its time are stored in your customer profile in Shopify so that we can prove the subscription.
6.4 Newsletter service
We send our newsletter using Shopify Messaging (formerly Shopify Email), a service of our shop system provider Shopify (see section 9). For this purpose, your e-mail address and your consent status are stored in your customer profile at Shopify; no other newsletter service provider is used. Shopify's privacy policy can be found at shopify.com/legal/privacy.
6.5 Processing on behalf
Shopify processes the newsletter data on our behalf within the framework of the data processing agreement concluded with Shopify (see section 2.2). In this context, data may also be processed outside Switzerland, in particular in Canada and in the USA.
6.6 Subscription data
To subscribe, it is sufficient to provide your e-mail address.
6.7 Statistical collection and analyses
Shopify Messaging records whether a newsletter is opened and which links in it are clicked (by means of a pixel-sized graphic or redirect links). These evaluations serve to improve delivery and our content - not to monitor individual persons.
6.8 Online viewing
Newsletters may contain a link to view them in the browser (e.g. in the event of display problems).
6.9 Cancellation/withdrawal
You can cancel receipt of the newsletter or withdraw your consent at any time - via the unsubscribe link in every newsletter or by e-mail to kontakt@goldstein.shop. A separate withdrawal of the statistical evaluation alone is not possible.
6.10 Legal basis
The data entered in the newsletter subscription form are processed exclusively on the basis of your consent. The lawfulness of processing already carried out remains unaffected by a withdrawal.
7. E-commerce
Within the framework of our online shop, we collect personal data that serve the conclusion of a purchase contract and the dispatch of our products. We collect data only if you expressly consent during the ordering process.
Data required for order processing are stored for this purpose: name, address, payment data, e-mail address, telephone number, order contents.
We pass on data strictly necessary for dispatch and order processing to service providers with whom corresponding contracts exist (see section 8). As soon as retention is no longer necessary or required by law, the data are deleted.
8. Shipping service providers
We pass on your data to shipping service providers only to the extent necessary for the performance of the contract:
Die Schweizerische Post AG
Wankdorfallee 4, 3030 Bern, Switzerland
Data protection information: post.ch
These service providers have their own data protection provisions. We recommend that you read these as well - particularly as some service providers may be based in countries with differing statutory provisions. As soon as you leave our online shop, the privacy notices of the respective external provider apply there.
9. Online shop system
We do not pass on personal data to third parties, except to service partners who require data for order processing.
Our shop is operated via Shopify Inc. (126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5). Shopify provides us with the e-commerce platform and stores customer data on secure servers. Shopify's privacy policy can be found at shopify.com/legal/privacy.
10. Payment service providers
When paying for your order, you consent to the collection and processing of your order and delivery data by the respective payment service provider:
Credit card via Stripe: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We pass on the information necessary for payment processing (name, address, payment data, invoice amount, currency, transaction number) for the performance of the contract. Information on Stripe's data protection: stripe.com/de/privacy.
TWINT: TWINT AG, Stauffacherstrasse 41, 8004 Zürich, Switzerland. General Terms and Conditions: twint.ch/agb-app, privacy policy: twint.ch/datenschutz-app.
Purchase on invoice and instalment purchase via POWERPAY: MF Group AG, Kornhausstrasse 25, 9001 St. Gallen, Switzerland. If you select POWERPAY as the payment method, we transmit the order and contact data necessary for payment processing (including name, address, date of birth, e-mail address) to MF Group AG. As this is a purchase on invoice or an instalment purchase, MF Group AG also carries out a credit check to assess creditworthiness and prevent fraud, and may obtain information from credit agencies for this purpose (e.g. the Zentralstelle für Kreditinformation ZEK, CRIF or Intrum). Data protection contact at MF Group AG: datenschutz@mfgroup.ch, privacy policy: mfgroup.ch.
11. Review service providers
Reviews of orders, products and our shop are collected via our online shop. For this purpose, we work with the following service providers:
Trustami: To display collected reviews and social media feedback, we embed the Trustami trust seal. It is only loaded once you consent to the Marketing category in the cookie banner (see section 3). When it is accessed, the web server automatically stores access data (server log file: page accessed, date/time, shortened IP address, browser type, operating system, referrer URL, requesting provider). These access data are not evaluated and are automatically overwritten no later than seven days after your page visit. Provider: Trustami GmbH, Schröderstrasse 5, 10115 Berlin. Privacy policy: trustami.com/datenschutz. You can withdraw your consent at any time via “Cookie Settings”.
Trustpilot: We may contact you by e-mail to invite you to review your order. As we work with Trustpilot A/S for this purpose, we share your name, your e-mail address and your reference number with Trustpilot for this purpose. Further information: Trustpilot's privacy policy. We may also use such reviews in other advertising materials for promotional purposes.