Data Protection

Data Protection

1.Privacy at Goluckyin

Protecting your privacy is very important to us. We therefore proceed in all data processing operations (e.g. collection, processing and transmission) in accordance with the statutory provisions of European and German data protection law.

2. Name and address of the person responsible


3. What data do we need from you to use our website? What data is collected and stored during use?

Personal data is any information relating to an identified or identifiable natural person ("data subject"), such as your name, address, telephone number, date of birth, bank details and IP address.

In principle, we only collect and use personal data from our users to the extent that this is necessary to provide a functioning website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies in such cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by statutory provisions.

usage data

When using our websites, the following data is logged, with the storage serving exclusively internal system-related and statistical purposes, so-called usage data:

Names of the pages accessed, the browser used, the operating system and the requesting domain, date and time of access, search engines used, names of downloaded files and the customer's anonymized IP address. E-commerce data (ordered products, price, quantity)

The data is also stored in the log files of our system. This does not affect the IP addresses of the user or other data that enable the data to be assigned to a user. This data is not stored together with other personal data of the user.

The legal basis for the temporary storage of the data is Article 6 (1) (f) GDPR.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.


On our website we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data is processed as part of the registration process:

Full name of the customer or full company name, e-mail address, address (billing and possibly different delivery address, optionally the data of the parcel shop), telephone number and optionally date of birth

At the time of registration, the following data is also stored:

Login date and time
Date and time when the account was created
IP address

The legal basis for processing the data is Article 6(1)(a) GDPR if the user has given their consent.

If the registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Article 6 (1) (b) GDPR.

Registration is in the interest of the user for easier ordering, as the order data stored in the customer account can be conveniently accessed for future orders. If you as a user do not want a customer account to be created, you can also order from us as a guest.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

This is the case during the registration process to fulfill a contract or to carry out pre-contractual measures if the data is no longer required for the execution of the contract. Even after the conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

Continuing obligations require the storage of personal data during the contract period. In addition, warranty periods must be observed and the storage of data for tax purposes. It is not possible to determine which storage periods are to be adhered to in general, but must be determined for the respective concluded contracts and contracting parties on a case-by-case basis.

As a user, you can cancel the registration or change the data stored about you at any time at

If the data is required to fulfill a contract or to carry out pre-contractual measures, the data can only be deleted prematurely if there are no contractual or legal obligations to the contrary.

contact form

We have a contact form available for you on our website, which you can use to conveniently contact us electronically and address your concerns to us. We only collect your name and email address via the contact form.

Your consent will be obtained for the processing of the data during the sending process and reference will be made to this data protection declaration.

Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

We only use your data to process your request and can contact you for this purpose using the contact details provided. This data is not used for advertising purposes or passed on to third parties.

The legal basis for the processing of data transmitted via the contact form or in the course of sending an email is Article 6 Paragraph 1 Letter f of the GDPR. If contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

The processing of the personal data from the input mask serves us solely to process the contact. If contact is made by e-mail, this is also the necessary legitimate interest in the processing of the data.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

The user has the option at any time to revoke his consent to the processing of personal data via If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

All personal data that was saved in the course of making contact will be deleted in this case.

4. How will my data be used and, if necessary, passed on to third parties and for what purpose?

We use the personal data you provide to answer your inquiries and to process your order in our online shop. We only use your data to check your creditworthiness if we pay in advance for your order, e.g. when ordering on account.

Your personal data will only be passed on or otherwise transmitted to third parties if the transmission is necessary for the purpose of contract processing or for billing purposes or to collect the fee (e.g. shipping company or payment service provider) or you have expressly consented. We are also entitled to pass on personal data for collection purposes and reserve the right to exchange data with business protection organizations (e.g. Schufa); this of course only if the legal requirements for this are met.

Occasionally, we will ask you to provide information anonymously as part of surveys. We need this in order to make the offer more interesting for you and to be able to offer our information up to date again and again. These surveys are of course voluntary, your details will be collected anonymously and treated confidentially. An identification of users is excluded.

payment processing

For payment processing in our online shop, we use the payment systems of the external payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PAYPAL”). If you want to pay via PayPal, for example, a connection to the online payment system you have selected will be automatically established via a technical interface. The payment data you provide will be transmitted to the payment service provider via an encrypted connection exclusively for the purpose of payment processing and stored and processed there. The data is also processed exclusively for the aforementioned purpose of processing the payment of your order, whereby the payment data from PAYPAL must be forwarded to the bank you specified in order to initiate and authorize the payment transaction. If you select one of the payment systems mentioned as the payment method, PAYPAL will direct you directly to the respective payment system via an interface; there you authorize the payment process yourself by entering your access data there.

Cash on delivery payments can be processed via DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn or DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg. The purpose of the transmission is to carry out payment processing.

The legal basis for processing the data is Art. 6 (1) (b) GDPR.

shipping service provider

Ordered goods are delivered in cooperation with logistics service providers, transport companies and partners. The following data can be transmitted to them for the purpose of delivery, tracking or notification of the ordered goods: first name, last name, postal address, e-mail address, telephone number, optional: information from the parcel shop.

The legal basis for processing the data is Article 6 Paragraph 1 Letter b) GDPR.

5.References to external social network services

On our websites we link to the social media platforms Facebook, Instagram, Pinterest, Google+, YouTube and Twitter. This is done via a corresponding symbol on our websites, which is marked with the corresponding logo of the respective social media platform and behind which there is a corresponding link to our corresponding social media page. Social plugins (such as the Facebook "Like" button) are not included.

Our references to the social media services do not transmit any of your data to these services. These are normal hyperlinks via which no data transmission takes place on a regular basis. If you click on the link, you will be forwarded directly to our social media presence on the respective social media service. A data transmission only takes place if you are logged into your user account of the corresponding social media service. You can then link or share content from our websites directly with the social media service or, in the case of YouTube, watch the videos on our YouTube channel. The respective social media service may find out what content you have viewed on our websites.

Responsible for the social media services linked by us are exclusively:

for Facebook and its website, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;
for Instagram and its website, Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;
for Pinterest and its website, Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA;
for Google+ and its website, Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA;
for YouTube and its website, YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA;
for Twitter and its website, Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA;

Further information about the purpose and scope of the data collection and about the further processing and use of your data by the respective social media service can be found in the data protection regulations of the respective service. These are available online:

Google+ and YouTube:
Under the links mentioned you will also find information about setting options to protect your privacy and about your further rights regarding the collection, processing and use of your data by the respective social media service.

You are responsible for the data transmission to the aforementioned social network services, as you become active yourself by logging into your respective social network account and following the respective link and thus initiate the subsequent data processing by the respective social network service.

6. Advertising by e-mail (e.g. e-mail newsletter)

You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us.

1.Email address
2. Salutation, first name, surname (optional)

In addition, the following data is collected during registration:

1. IP address of the calling computer
2. Date and time of registration

Your consent will be obtained for the processing of the data as part of the registration process and reference will be made to this data protection declaration.

If you purchase goods or services on our website and enter your e-mail address, this can subsequently be used by us to send a newsletter. In such a case, only direct advertising for your own similar goods or services will be sent via the newsletter.

There is no transfer of data to third parties in connection with data processing for sending newsletters. The data will only be used to send the newsletter.

The legal basis for the processing of the data after the user has registered for the newsletter is Article 6(1)(a) of the GDPR if the user has given their consent.

The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG. In this regard, e-mail advertising takes place on this legal basis. You can object to the use for advertising purposes by clicking on the unsubscribe link in the newsletter. There are no additional transmission costs according to the basic tariffs.

The collection of the user's e-mail address serves to deliver the newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.

The subscription to the newsletter can be canceled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.

This also enables a revocation of the consent to the storage of the personal data collected during the registration process.

7.Newsletter tracking

We use so-called newsletter tracking in our e-mail messages. This results in an evaluation of the opening rate of the e-mails and a click evaluation within the newsletter. We use this technique to determine the level of interest in certain topics and to measure the effectiveness of our communication efforts. This is also our legitimate interest according to Art. 6 Para. 1 lit. f GDPR. This data is segmented and stored anonymously. We do not share this data with anyone, and we make no attempt to associate the "click-throughs" with individual email addresses. The individual user data will be deleted after the creation of the anonymous overall evaluation - after 18 months at the latest.

8.When you use our website, a cookie is stored on your computer. What does that mean?

We use so-called cookies on our websites. Cookies are small amounts of data in the form of text information that the web server sends to your browser. These are only stored on your hard drive. Cookies can only be read by the server that previously stored them and receive information about what you viewed on a website and when. Cookies themselves only identify your computer's IP address and do not store any personal information, such as your name. The data stored in the cookies are not linked to your personal data (name, address, etc.).

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The specific cookies used on our site can be found here. There you will also find information on the intended use and storage period.

The user data collected in this way is pseudonymized by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the user.

You can decide for yourself whether to allow cookies. On the one hand, by changing your browser settings (usually found under "Options" or "Settings" in the browser menus), you have the choice of accepting all cookies, being informed when a cookie is set, or rejecting all cookies. On the other hand, you can use the banner, which is displayed the first time you visit our website and refers to this data protection declaration, to decide whether you want to give us your consent to the setting of cookies or reject this.

The legal basis for the processing of personal data using technically necessary cookies and cookies for analysis purposes is Article 6 Paragraph 1 lit. f GDPR.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change.

The user data collected by technically necessary cookies are not used to create user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer.

Our legitimate interest in the processing of personal data in accordance with Article 6 (1) (f) GDPR also lies in these purposes.

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

9. Disclosure of Personal Information to Third Parties
The data will only be passed on to third parties within the scope of the clauses described above and within the scope of the purposes described therein. Data will not be sent beyond this without your prior express consent. However, we reserve the right to transmit data to third parties without consent if this is necessary to avert threats to public order or for criminal prosecution. Of course, data will then only be passed on on the basis of an existing authorization basis from the requesting party. If one of the last-mentioned reasons applies, the personal data you have stored will be passed on to the responsible law enforcement and supervisory authority in particular.

Your personal data will not be passed on to third parties beyond this, especially not for advertising purposes. We will therefore not use your stored data for advertising or marketing measures and will not sell them to third parties either, unless you give us your express consent beforehand.

10.Changes to this Privacy Policy

We reserve the right to change this data protection declaration for given reasons and without prior notice. Therefore, please inform yourself regularly on this page about possible changes to this data protection declaration.