Privacy Policy

Data protection is a subject of special importance for heraeus-gold.hk. Heraeus collects, holds, processes and uses personal data exclusively in compliance with legal requirements and in accordance with appropriate technical and organizational data security measures.

This Privacy Policy provides information of the types of personal data collected and processed by Heraeus and how Heraeus processes and uses the personal data which are generated when Customers access the heraeus-gold.hk. This Privacy Policy applies only to the heraeus-gold.hk and not to any other website or platform as operated and/or maintained by any of the Heraeus companies.

Background

Heraeus Metals Hong Kong Limited (hereinafter referred to as “Heraeus” or “Operator”), whose address is Room 2111-2113, 21/F Peninsula Square, 18 Sung On Street, Hunghom, Kowloon, Hong Kong operates under www.heraeus-gold.hk a retail business B2C webshop, heraeus-gold.hk exclusively for individual customers (hereinafter referred to individually as “Customer” and collectively as "Customers") in Hong Kong Special Administrative Region and acts as the business partner of Customers in transactions concluded through the heraeus-gold.hk.

Heraeus is committed to comply with the applicable data protection legislation in Hong Kong Special Administrative Region and any other relevant jurisdictions in order to protect the personal data of Customers.

Customers have the right to protect their own interests as the data subject in accordance with applicable laws and regulations, including but not limited to request confirmation of whether their data is being held and/or processed, to revoke their consent for data processing if personal data is processed on the basis of consent, to object to the data processing at any time, to request the deletion, correction and restriction of their personal data. To access for a copy of, review, correct or delete personal data held by the Operator, please contact the Operator at the e-mail of dataprotection@heraeus.com. While the Operator will make reasonable efforts to accommodate the said requests, the Operator also reserves the right to impose certain restrictions and requirements on such requests from time to time, to the extent that it is allowed and/or required by applicable laws.

If there are any questions, comments or concerns about this Privacy Policy or the data protection/privacy practices or data processing of the heraeus-gold.hk, please contact the Heraeus Data Protection Officer at the e-mail of dataprotection@heraeus.com.  

1. How Heraeus collects data through heraeus-gold.hk and what Heraeus collects

Heraeus will collect from Customers personal data for the purpose of their participation in, access to or use of the services and products offered on heraeus-gold.hk.

The personal data to be collected and held by the Operator includes such as first names and last names of Customers, their phone numbers and e-mail addresses, as well as their billing and delivery addresses. Customers’ identification information (identification document type and number) may be collected and processed if the Operator conducts the identification procedure according to the Terms and Conditions of heraeus-gold.hk. The Operator may also collect and process order details of Customers.

Heraeus uses Microsoft Azure Southeast Asia-Singapore, located at 1 Marina Boulevard, Singapore, which stores and processes personal data in data centers within Singapore on behalf of the Operator. The Operator will satisfy and procure such storage provider to satisfy any and all conditions for cross-border data transmission in accordance with applicable laws and regulations.

2. How Heraeus uses the data collected

Heraeus holds, processes and uses the data obtained through heraeus-gold.hk to enable Customers to utilize the services offered on heraeus-gold.hk and to conclude legal transactions with Heraeus, to enhance relevant experience with heraeus-gold.hk and its functions, to store login data of Customers, to communicate with Customers, to processing orders of Customers, to conduct identity verification where necessary, to enforce all service conditions or other agreements in connection with the heraeus-gold.hk, and to provide Customers with the requested services.

Heraeus undertakes to use the data collected through the operation of heraeus-gold.hk only for the purpose of creating and maintaining the aforementioned services. No further use is made of such data beyond what is outlined in this section or otherwise without the Customers’ requisite consent.

3. How Heraeus retains and deletes the data collected

Any data collected from Customers through heraeus-gold.hk will only be stored for as long as it is necessary for the purpose it was collected in accordance with applicable laws and regulations. The data that Heraeus stores is erased as soon as it is no longer required for the purpose for which it was collected and provided that its erasure does not breach any statutory storage requirements.

If the data of Customers is not erased because it is required for other legally permissible purposes, its processing is restricted. This means that the data is blocked and is not processed for other purposes. This applies, for example, to data of the Customers which must be retained for reasons relating to applicable commercial or tax law.

4. Where and to whom personal data may be transferred

• • Transfer of data to third parties

Heraeus transfers data to third parties in accordance with legal provisions and/or pursuant to judgements or orders of court or competent government authorities.

• • Heraeus may share personal data of Customers with other Heraeus companies, whether in Hong Kong Special Administrative Region, in Singapore, in Germany or elsewhere, for the purpose of creating and maintaining the services offered on heraeus-gold.hk.
    
    
  • Heraeus may disclose and transfer personal data of Customers to third parties including:

1. third party business partners, whether in Hong Kong Special Administrative Region, in Singapore, in Germany or elsewhere, who are engaged by Heraeus to assist with providing payment services, logistics services, customer services, accounting services, IT technical service or other related services required for operating the heraeus-gold.hk  or for other purposes necessary to meet legal requirements or contractual obligations to Customers ("Third Party Service Providers"). Third Party Service Providers are under a duty of confidentiality and contractually bound to Heraeus to use Customers’ personal data in connection with the purposes specified under Section 2 above; and
2. competent court of law, law enforcement agencies and/or regulatory bodies for compliance with applicable laws and regulations and/or pursuant to judgements or orders of the court or competent government authorities.
   • Heraeus may also transfer any data it has about Customers in connection with a restructuring of the retail business operated hereunder or a merger or sale involving all or part of Heraeus or as part of a corporate reorganization or any other change in corporate control. Heraeus will take all reasonably practicable steps to ensure that personal data of Customers shall be treated securely and in accordance with this Privacy Policy.
   • If, within the scope of this Privacy Policy, Heraeus uses content, tools or resources of other providers whose registered office is in a third region, it must be assumed that data are transferred to such third region. Third regions are regions where the laws and regulations of Hong Kong Special Administrative Region does not apply directly. Data may only be transferred to third regions if an adequate level of data protection is ensured, if Customers have given their consent or if the transfer of such data is permitted by applicable law.
3. External references and links
   References or links ("links") to the content provided by external providers must be distinguished from the content of the heraeus-gold.hk. By embedding a link to an external website ("hyperlinks"), The Operator does not endorse the same nor adopt such an external website or its content as its own. Should any infringement caused by the external website come to the attention of Heraeus, Heraeus will endeavour to immediately delete the link. However, Heraeus shall NOT in any event assume any responsibility for the availability of such external website or for any of its content. If Customers access and use such other web sites, whether via the links and/or hyperlinks available on heraeus-gold.hk or otherwise, including the content, items or services on those websites, the Customers acknowledge that they are accessing such links and/or hyperlinks solely at their own risk.

5. The Use of Cookies and Consent

Cookies are used on the heraeus-gold.hk that are required to ensure the proper functioning of the platform's services. They provide a secure login, good performance and tracking purposes. If Customers wish, Customers can limit the storage of cookies to the technical necessary cookies under "Settings".

6. Google Tag Manager

Heraeus uses Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that Heraeus can use either directly in the Customers’ browser (client-side tagging) or indirectly cloud-based (server-side tagging) to integrate tracking or statistical tools and other technologies on heraeus-gold.hk. No user profiles are created by the Google Tag Manager itself, no cookies are set or stored and no independent analyzes are carried out. The Google Tag Manager only serves to manage and display the tools integrated via it. When using the Google Tag Manager, however, Customers’ IP address is recorded, which can also be transmitted to Google's parent company in the United States.

With regard to the processing of users' personal data, reference is made to the following information on Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html

7. Google Analytics

heraeus-gold.hk uses functions of the web analysis service Google Analytics either directly in Customers’ browser (client-side tracking) or indirectly on our webserver (server-side tracking). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

Google Analytics enables the Operator to analyze the behavior of website visitors through the use of various technologies (e.g., cookies or device fingerprinting). The Operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their device. Demographic characteristics are used for analyses. The information collected by Google about the use of the website is usually transmitted to a Google server in the USA and stored there.

Customers can object to the collection and storage of your data by Google Analytics by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout. More information can be found:  https://support.google.com/analytics/answer/7667196

8. Security measures

Heraeus will take all reasonable steps to ensure the security of personal data of Customers. To prevent unauthorized access to or disclosure of Customers’ personal data, Heraeus has implemented reasonable and appropriate physical, technical and administrative measures to safeguard and secure the personal data Heraeus collects, and to protect personal data against accidental or intentional manipulation, loss, destruction and unauthorized access.

9. Changes to Privacy Policy

Heraeus reserves the right to update, revise and amend the privacy policy from time to time in order to adapt to changes in the applicable laws and regulations or to changes in our services and data processing. Customers are advised to check our website regularly for our news and updates.

Customers are requested to familiarize themselves regularly with the content of the privacy policy. Heraeus will obtain Customers’ consent for changes to the terms of this privacy policy if such consent is required by applicable law.

10. Access by minors

heraeus-gold.hk and its relevant services available are not intended for minors as defined by applicable laws in the jurisdiction of customers, and Heraeus is technically unable to identify if a Customer accessing to heraeus-gold.hk is a minor or not. If a customer is a minor under applicable laws in his/her jurisdiction, he/she is deemed to have obtained the consent of his/her parent or guardian before providing any personal data. Heraeus is further entitled to impose restrictions and requirements on any request of a minor to participate in, access to or use of the services and products offered on heraeus-gold.hk.