We would like to inform you about how we handle your personal data and what rights you are entitled to under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The responsibility for data processing lies with the organization Golden Hope Limited (hereinafter referred to as “we” or “us”).

Responsibilities 

Responsible for the processing of your personal data is:

Golden Hope Limited
Gerard Lim Ewe Keng, Cheah Yoke Sim

First Names House
Victoria Road, Douglas
IM2 4DF, Isle of Man
Isle of Man

Email: contact@golden-hope.com

General information on the legal basis for data processing 

“Personal data” is any information relating to an identified or identifiable natural person. We process this data in accordance with the applicable data protection laws, in particular the GDPR and the BDSG. We may only process personal data if we are legally permitted to do so.

We process personal data only with your consent, to conclude a contract with you or to respond to your request in connection with a potential business relationship, to fulfill legal obligations or to protect our legitimate interests, provided that this does not affect your interests or fundamental rights and freedoms that require the protection of personal data.

Storage period for personal data 

We only store your data for as long as is necessary to fulfill the purpose of the processing or to fulfill our contractual or legal obligations, unless otherwise stated in the following information. Statutory retention requirements may arise from commercial or tax regulations. After the end of the calendar year in which we collected the data, we will store personal data contained in our accounting documents for ten years and personal data contained in business letters and contracts for six years. Furthermore, we will store data in connection with consent requiring verification and complaints and claims for the duration of the statutory limitation periods. Data stored for advertising purposes will be deleted if you object to the processing for this purpose.

Processing in the course of exercising your rights 

If you wish to exercise your rights under Articles 15 to 22 of the GDPR, we will process the personal data you have provided in order to implement these rights and to be able to provide proof of this. We will process the data stored for the purpose of providing information and preparation exclusively for this purpose and for the purposes of data protection control and otherwise restrict the processing in accordance with Article 18 of the GDPR.

These processing operations are based on the legal basis of Article 6(1)(c) of the GDPR in conjunction with Articles 15 to 22 of the GDPR and Section 34(2) of the BDSG.

Rights of the affected person 

The General Data Protection Regulation (GDPR) guarantees every person concerned certain rights in relation to their personal data. These include:

• The right of access: very person concerned has the right to obtain from us confirmation as to whether or not personal data is being processed and to obtain information about this data, as well as further information and copies of this data.
• The right to rectification: every person concerned has the right to request the immediate correction of inaccurate personal data.
• The right to erasure (“right to be forgotten”): every person concerned has the right to request the immediate erasure of their personal data.
• The right to restriction of processing: Every person concerned has the right to request the restriction of the processing of their personal data.
• The right to data portability: Every person concerned has the right to receive the personal data concerning them, which they have provided to us, in a structured, commonly used and machine-readable format.
• The right to object: Every person concerned has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) GDPR. If we process personal data about the person concerned for the purpose of direct marketing, the person concerned may object to this processing in accordance with Art. 21 (2) and (3) GDPR.

The person concerned also has the right to complain to a supervisory authority if they believe that the processing of their personal data violates the GDPR.

The supervisory authority responsible for us is: The Information Commissioner's Office

Information on the processing of personal data 

Purpose of the processing 

We process your personal data to the extent necessary to fulfill the following purposes:

• Establishment, execution and termination of service contracts
• Operation of a website

Legal basis 

The legal basis for the processing of your personal data for the above-mentioned purposes is / are

• Performance of a contract (Art. 6 (1) (b) GDPR)
• Legitimate interests (Art. 6 (1) (f) GDPR) 

Sources of personal data 

Where personal data are not collected directly from the person concerned, the controller is obliged to inform the person concerned about the sources of these data.

• Automatic transfer for technical reasons

Categories of personal data 

If personal data are not collected directly from the person concerned, the person responsible is obliged to inform the person concerned about the categories of the data in question.

• Usage data
• Meta/Communication data

Legitimate interests 

The specification of the “legitimate interests” of the person responsible or the third party, which are pursued with the processing of personal data, refers to Art. 6 para. 1 sentence 1 lit. f DSGVO.

• The secure operation of the website for the purpose of the functional presentation of the website for all visitors.

Storage period 

We will inform you about the duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration.

• Deletion when no longer required (e.g. in the case of ongoing customer relationships, legal proceedings, etc.)

Potential consequences of non-provision 

The provision of personal data by the person concerned may be required on a statutory or contractual basis or be necessary for the conclusion of a contract. There may also be a statutory obligation to provide the data.

Failure to provide personal data could have the following consequences:

• Use of the website cannot be guaranteed.

Data recipients 

Transfer of data to a third country or international organization

A transfer of personal data to an “international organization” (within the meaning of Art. 4 No. 26 GDPR) or to controllers, processors or other recipients in a state outside the European Union (EU) and the European Economic Area (EEA) entails particular data protection risks from the perspective of the person concerned.

We transfer personal data to the following recipients outside the European Union (EU) and the European Economic Area (EEA):

• Data transfer to a third country or to an international organization does not take place and is not planned.

Adequacy decision of the EU Commission 

A transfer of personal data to a country outside the European Union (EU) and the European Economic Area (EEA) or to an international organization is permitted if the European Commission has determined that the country, territory or one or more specific sectors within that country or the international organization in question ensures an adequate level of protection.

We transfer personal data to the following recipients outside the European Union (EU) and the European Economic Area (EEA) for which an adequacy decision exists:

• Data transfer to a third country or to an international organization for which an adequacy decision of the EU Commission is present, does not take place and is also not planned.