Privacy Policy

Privacy Policy

Person responsible for data processing: GULSUN LTD 71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM

We are happy that you are interested in our online shop. Protecting your privacy is very important to us. In the following, we inform you in detail about the processing of your data.

1. ACCESS DATA AND HOSTING

You can visit our website without providing any personal information. Each time a website is called up, the web server automatically saves the so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the call, the amount of data transferred to and from the requesting provider (access data) and documents the call. This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and to improve our offer. This serves to safeguard our overriding legitimate interests in the correct presentation of our offer in accordance with Art. 6(1)(f) GDPR (UK GDPR). All access data will be deleted at the latest seven days after the end of your visit to the website.

HOSTING The services for hosting and displaying the website are partly provided by our service providers as part of the processing on our behalf. Unless otherwise stated in this data protection declaration, all access data and all data collected in the forms provided on this website are processed on their servers. Our service providers are located and/or use servers in the USA, Canada, and other countries. Where data is transferred outside the UK/EEA, we ensure adequate protection through standard data protection clauses or adequacy decisions.

2. DATA PROCESSING FOR CONTRACT MANAGEMENT AND COMMUNICATION

2.1 DATA PROCESSING FOR CONTRACT MANAGEMENT For the purposes of contract processing pursuant to Art. 6(1)(b) GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, because in these cases we need the data to process the contract and cannot send the order without giving it. Which data is collected can be seen in the respective input forms.

Further information about the processing of your data, in particular the transfer to our service providers for ordering, payment and shipping, can be found in the following sections of this data protection declaration. After completion of the contract, your data will be restricted for further processing and deleted after the tax and commercial retention periods, unless you have expressly consented to the further use of your data.

2.2 CUSTOMER ACCOUNT We collect personal data if you voluntarily provide it to us when opening a customer account. Mandatory fields are marked as such because in these cases we need the data to open the customer account. Which data is collected can be seen in the respective login forms. We use the data you provide to process the Agreement and to process your inquiries in accordance with Art. 6(1)(b) GDPR. Deletion of your customer account is possible at any time and can be done by sending a message to the contact option described in this data protection declaration.

2.3 CONTACT As part of customer communication, when contacting us (e.g. via contact form or e-mail), we collect personal data. Mandatory fields are marked as such because in these cases we need the data to process your communication. Which data is collected can be seen in the respective input forms. After your request has been fully processed, your data will be deleted unless you have expressly consented to the further use of your data or unless we are required to retain data for legal reasons.

3. DATA PROCESSING FOR SHIPMENT PURPOSES

Insofar as it is necessary for the delivery of the ordered goods, we transmit your data to the transport service provider entrusted with the delivery in order to fulfill the contract in accordance with Art. 6(1)(b) GDPR. The same applies to the transfer of data to our manufacturers or wholesalers if they undertake the transport for us (drop shipping). These are considered transportation service providers for the purposes of this data protection declaration. Our service providers are located and/or use servers in the following countries: China, UK, USA. Our cooperation with them is based on standard data protection clauses to ensure the security of your data.

4. DATA PROCESSING FOR PAYMENT PROCESSING

When processing payments in our online store, we work with technical service providers, banks, and payment service providers.

4.1 DATA PROCESSING FOR TRANSACTION PROCESSING Depending on the chosen payment method, we transmit the data necessary for the processing of the payment transaction to our technical service providers. This serves the fulfillment of the contract pursuant to Art. 6(1)(b) GDPR.

4.2 DATA PROCESSING FOR FRAUD PREVENTION We may provide our service providers with additional data to prevent fraud and optimize our payment processes. In accordance with Art. 6(1)(f) GDPR, this serves to protect our legitimate interests in efficient payment management and fraud prevention.

4.3 IDENTITY AND CREDIT CHECK (KLARNA) If you decide to use the payment services of Klarna, we ask for your consent to transmit the data necessary to process the payment and the identity and credit check to Klarna. Klarna uses this information for a balanced decision on the establishment of the contractual relationship. You can revoke your consent at any time by contacting Klarna.

5. ADVERTISING BY E-MAIL

5.1 NEWSLETTER If you sign up for our newsletter, we will use the data required to send you our e-mail newsletter regularly based on your consent. Unsubscribing from the newsletter is possible at any time via a link provided in the newsletter or by contacting us.

5.2 NEWSLETTER DISTRIBUTION The newsletter may be sent by our service providers. Our service providers are based and/or use servers in the USA. Our cooperation with them is based on standard data protection provisions.

6. COOKIES AND OTHER TECHNOLOGIES

We use technologies, including cookies, on various pages to make visiting our website attractive and to enable the use of certain functions. Cookies are small text files that are automatically stored on your end device. We use technologies that are strictly necessary for the use of certain functions of our website (e.g. the shopping cart function). Furthermore, we use technologies for web analytics and online marketing. You can manage your cookie settings within your browser preferences.

7. USE OF COOKIES FOR WEB ANALYSIS AND ADVERTISING

We use third-party technologies on our website (such as Google Analytics and Facebook Pixel) if you have consented to this.

7.1 GOOGLE SERVICES We use technologies provided by Google Ireland Ltd. and Google LLC (USA). This includes Google Analytics for website analysis. IP anonymization is activated on our website.

7.2 FACEBOOK & INSTAGRAM SERVICES We use the Facebook Pixel provided by Facebook Ireland Ltd. This allows us to track visitor activity and serve personalized ads. Data may be transferred to Facebook Inc. in the USA.

8. SOCIAL MEDIA

Our website uses social buttons from social networks (Facebook, Instagram). These are integrated as HTML links, meaning no data is transferred until you click on them.

9. CONTACT AND YOUR RIGHTS

9.1 YOUR RIGHTS As a data subject, you have the following rights under the UK GDPR:

  • Right to access your personal data (Art. 15 GDPR).

  • Right to rectification of inaccurate data (Art. 16 GDPR).

  • Right to erasure ("right to be forgotten") (Art. 17 GDPR).

  • Right to restriction of processing (Art. 18 GDPR).

  • Right to data portability (Art. 20 GDPR).

  • Right to object to processing (Art. 21 GDPR).

Right to object If we process personal data to protect our legitimate interests, you may object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time.

9.2 CONTACT OPTIONS If you have any questions regarding the collection, processing, or use of your personal data, the rectification, restriction, or erasure of data, or if you wish to revoke any consent given, please contact us directly using the contact details provided in our Legal Notice or at the top of this page.