Here, you can adjust the settings you have made in our Cookie Consent Tool:

1. Declaration on the Duty to Inform

1.1 General

The website and the online store contained therein are operated by philoro EDELMETALLE GmbH (contact details can be found below).

We are committed to full compliance with data protection regulations. Your data will therefore be processed in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the Data Protection Act (DSG), and the Telecommunications Act 2003 (TKG 2003).

Our employees are obliged to comply with data protection regulations and to maintain the highest level of discretion as an inherent customer interest.

In this privacy policy, we inform you about the most important aspects of data processing in the context of our online presence:

1.2 Processing Purposes Website

We process your personal data for the following purposes:

  • to provide and continuously improve this website,

  • to generate usage statistics

  • to detect, prevent, and investigate attacks on our website,

  • to respond to your inquiries,

The legal basis for processing your personal data is our overriding legitimate interest (Article 6 (1) (f) GDPR).

1.3 Purchase and Sale of Precious Metals

Through our online store, you have the option to purchase precious metals from us or sell them to us. For contacting you and processing purchase contracts, we require the following information: First and last name, date of birth, telephone number, mailing address, email address and your bank details.

If the purchase process is aborted, the data stored by us will be deleted. In the event of a contract being concluded, all data from the contractual relationship will be stored for the legally required business and tax retention period (7 years).

Additionally, data including name, address, purchased goods, and purchase date will be stored until the expiration of product liability (10 years).

Please note that, for the purpose of simplifying the purchase process and enabling future contract processing, the IP data of the connection owner, along with any data you provide (name, email address, and mailing address), is stored in cookies. In addition, for the purpose of contract processing, bank details are also stored in the case of cashless transactions.

Our website uses the Headless Content Management System provided by Storyblok GmbH, Peter-Behrens-Platz 2, 4020 Linz, Austria. In particular, the images contained on our website are hosted and provided via the systems of this provider. Your IP address is transmitted to Storyblok and stored there for system-related purposes for up to seven days, with the exception of (i) the transmission of bank details to the processing bank institutions/payment service providers for the purpose of debiting or transferring the purchase price, to (ii) the transport company/shipping company commissioned by us for the shipment of the goods and (iii) to our tax advisor for the fulfillment of our tax obligations.

Data processing is carried out in accordance with the legal provisions of § 96 (3) of the Austrian Telecommunications Act (TKG) as well as Article 6 (1)(a) (consent) and/or Article 6 (1)(b) (necessary for contract fulfillment) of the GDPR.

1.4 User Profile in the Online Store

In the philoro online store, you can place orders as a guest or create a personal user profile (customer account). In your user profile, you can save your first and last name, email address (= username), your mailing address, phone number, and password of your choice for future orders. You can update your information at any time after logging in.

After registration, you will receive an email with a link that you must click to activate your user profile.

1.5 Contacting Us 

If you contact us via the form on our website or by email, your provided data (title, first and last name, and email address are required fields; title and phone number are optional) will be stored for six months for processing your request and any follow-up questions. We will not share this data without your consent.

1.6 Online Appointment Allocation/ Appointment Confirmation / Appointment Reminder / Appointment Cancellation / Customer Satisfaction Survey

We use the technologies of eTermin GmbH ('eTermin') to provide a simple appointment booking process for in-person consultations at your local branch or telephone consultations. The service provider is: eTermin GmbH, Im Wiesengrund 8, 8304 Wallisellen, Switzerland.

When you fill out the appointment form, your data will be processed exclusively for the purpose of scheduling an appointment and sending appointment-related information (e.g., appointment confirmation, reminders). The data is processed exclusively by eTermin and automatically transmitted to us via encrypted connections.

This data is stored solely for appointment scheduling purposes and will not be shared without your consent. eTermin does not disclose this data to third parties for advertising or other commercial purposes.

After booking an appointment, we will send you a confirmation email to the email address provided and, if requested, an appointment reminder.

Your data will be deleted as follows:

  • Retention period for appointment records after the appointment: 1 day

  • Retention period for contact information after the last booked appointment: 14 days

1.7 Newsletter

We also offer the option to subscribe to our newsletter. The newsletter is sent using 'CleverReach,' a newsletter distribution platform provided by CleverReach GmbH & Co. KG, Mühlenstraße 43, 26810 Rastede, Germany.

The email addresses of our newsletter recipients, as well as other data described in this notice, are stored on CleverReach servers in Germany. CleverReach uses this information to send and analyze newsletters on our behalf. Furthermore, CleverReach can use this data along with its own information to optimize or improve its own services, e.g., to technically optimize the sending and presentation of the newsletter or for business purposes, in order to determine from which countries the recipients originate. However, CleverReach does not use the data of our newsletter recipients to write to them or pass them on to third parties.

We trust in the reliability and IT and data security of CleverReach. Furthermore, we have concluded a contract with CleverReach for the processing of personal data (in accordance with GDPR). This is a contract in which CleverReach undertakes to protect our users' data, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties. You can view CleverReach's privacy policy here.

The newsletter provides information about our products and topics related to our business activities (e.g., event invitations, company news). To subscribe, only an email address is required (no names or other personal data are needed). The subscription process follows a 'double opt-in' procedure. This means that you will receive a confirmation email with a link after registering on our website. You must click this link to complete your newsletter registration. You can unsubscribe from the newsletter at any time by phone or electronically (contact details are provided below). Additionally, each newsletter includes an unsubscribe link. Revoking your consent does not affect the lawfulness of any processing that occurred prior to the revocation. Subscription and unsubscription are, of course, free of charge.

CleverReach is also used to measure the success of our newsletter marketing activities. This means that we can analyze open and click-through rates.

1.8 Customer Portal – Registration

As part of the registration process, we collect personal data. The personal data required for registration, such as first name, last name, and mobile phone number for two-factor authentication, will be stored. Details regarding the collection, processing, and use of personal data during registration can be found in the portal terms of use of philoro EDELMETALLE GmbH, which are available during registration and through the portal.

2. Cookies

Our website uses so-called cookies. These are small text files stored on your device through your browser. These cookies do not cause any harm.

We use cookies to make our services more user-friendly. Cookies help facilitate navigation on our website, allow you to resume browsing where you left off during your last visit, and store your preferences and settings. Cookies cannot access, modify, or read any other files on your device. Most of the cookies used on this website are so-called session cookies. These are automatically deleted when you leave our website. Some cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser upon your next visit.

If you do not wish to allow cookies, you can configure your browser to notify you before a cookie is set, allowing you to accept them only on a case-by-case basis.

Disabling cookies may limit the functionality of our website.

2.1 Instructions for deleting cookies in popular browsers can be found here:

3. Web Analysis

3.1 Google Analytics

Our website uses functions of the web analytics service Google Analytics (Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland). This service uses cookies to analyze how users interact with our website. The information generated by these cookies is transmitted to and stored on the provider’s servers.

You can prevent this by configuring your browser settings to block cookie storage.

We have entered into a corresponding contract with the provider to ensure compliance with data protection regulations.

Your IP address is collected but immediately pseudonymized. This means that only approximate localization is possible.

Data processing is carried out based on § 96 (3) of the Austrian Telecommunications Act (TKG) and Article 6 (1) (a) (consent) and/or (f) (legitimate interest) of the GDPR.

Our legitimate interest under the GDPR is to improve our website and services. Since we value user privacy, all user data is pseudonymized.

User data is retained for 14 months before being automatically deleted.

3.2 Hotjar

We use Hotjar to better understand our users' needs and to optimize the experience and offerings on our website. Hotjar’s technology helps us gain insights into user interactions (e.g., time spent on specific pages, clicked links, user preferences) so that we can improve our services based on user feedback. Hotjar utilizes cookies and other tracking technologies to collect data on user behavior and device details, in particular, the IP address of the device (collected and stored in an anonymized format during website use), screen size, device type (unique device identifiers), browser information, location (country only) and preferred language settings. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling any of the data collected on our behalf.

For more information, please visit the ‘About Hotjar’ section on Hotjar’s Help Page.

3.3 Google Remarketing

Our website uses the Remarketing function provided by Google LLC. (Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland). This feature enables us to display targeted advertisements to visitors of our website within the Google advertising network. To facilitate this, your browser stores cookies on your device.

If you do not wish to participate in Google Remarketing, you can disable it (www.google.com/settings/ads).

3.4 Google Maps

When using the corresponding function, we use the Google Maps API service on our pages. This service is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By integrating the service on our site, at least the following data is transmitted to Google LLC: IP address, time of website visit, screen resolution of the visitor, website URL (referrer), browser identifier (user agent) and search terms. The data transfer takes place regardless of whether you have a user account with Google via which you are logged in or whether you do not have a user account. If you are logged in, this data will be assigned directly to your account. If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button. Google LLC stores this data as user profiles and processes it for advertising, market research and/or the customized design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. For more details on the purpose and scope of data collection and processing by Google LLC, please visit www.google.at/intl/de/policies/privacy. We do not collect or process the information concerned.

3.5 Online Social Media Presence

Our online presence on social networks and platforms serves as a means of communication and information for interested parties and customers.

Typically, user data is processed for market research and advertising purposes, such as creating user profiles. These profiles may be used to display user interest-based advertisements. To achieve this, cookies may be stored on users' devices, allowing platforms to track usage behavior and interests. In some cases, data may also be stored across multiple devices (particularly for logged-in users of the respective platform). This allows us to conduct targeted advertising campaigns and perform anonymized analyses of our online presence.

The processing of personal data is based on our legitimate interest in effectively informing and communicating with users (Article 6 (1) (f) GDPR). If users are asked for their explicit consent (e.g., by ticking a checkbox or confirming a button), then consent serves as the legal basis for processing (Article 6 (1)(a), Article 7 GDPR).

Below, we provide information on data transfers to third countries (i.e., outside the European Union (EU) or the European Economic Area (EEA)) based on provider-specific processing policies and opt-out options.

3.6 YouTube Videos

We have integrated YouTube videos on our website, which are stored on 'www.youtube.com' and can be played directly from our site. These videos are embedded in 'enhanced privacy mode', meaning that no data is transmitted to YouTube unless you actively play the videos. Only when you start a video will YouTube cookies be stored on your device, and data will be transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which operates YouTube. When playing videos stored on YouTube, at least the following data is transmitted to Google Ireland Limited: IP address and cookie ID, the specific address of the page accessed by us, browser language setting, system date and time of access and identifier of your browser. The data transfer takes place regardless of whether you have a user account with Google via which you are logged in or whether you do not have a user account. If you are logged in, this data will be assigned directly to your account. If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button. YouTube or Google Ireland Limited stores this data as usage profiles and uses it for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (also for users who are not logged in) for the purposes of providing customized advertising and to inform other users about activities on our website. You have the right to object to the creation of such a user profile, whereby you must contact Google as the operator of YouTube to exercise this right. For more details on the purpose and scope of data collection and processing by Google Ireland Limited, please visit www.google.at/intl/de/policies/privacy. We do not collect or process the information concerned.

4. Your Rights Regarding Personal Data 

You are entitled, among other things (under the conditions of applicable law), (i) to check whether and which personal data we have stored about you and to receive copies of this data, (ii) to request the right to correct, supplement or delete your personal data if it is incorrect or not processed in accordance with the law, (iii) to request us to restrict the processing of your personal data, and (iv) in certain circumstances to object to the processing of your personal data or to revoke the consent previously given for the processing, (v) to request data portability, (vi) to recognize the identity of third parties to whom your personal data is transferred and (vii) to lodge a complaint with the competent authority. (in Austria, the data protection authority, https://www.dsb.gv.at).

You can reach us using the following contact details:

philoro EDELMETALLE GmbH

Währinger Straße 26

1090 Vienna

Austria

Phone: +43 (0) 505 79 1000

Fax: +43 1 997 14 72 100

E-Mail: [email protected]

As of: June 2024