Information on data protection

§ 1 General
§ 2 Definitions
§ 3 Name and address of the person responsible for processing
§ 4 Storage of access data in server log files
§ 5 Registration and opening of a customer account
§ 6 Collection of general data
§ 7 Cookies
§ 8 Use of data when registering for the e-mail newsletter
§ 9 Use of data for postal advertising and your right of objection
§ 10 Security information
§ 11 Use of Google (Universal) Analytics for web analysis
§ 12 Matomo, formerly Piwik
§ 13 Use of Facebook, Google+, Twitter and Instagram Plugins
§ 14 Use of web fonts
§ 15 Evaluation reminder by e-mail
§ 16 Integration of the Trusted Shop Trustbadge
§ 17 Contact
§ 18 Routine deletion and blocking of personal data
§ 19 Rights of the data subject
§ 20 Right to object
§ 21 Data processing for order processing
§ 22 External services
§ 23 Regulations for the provision of personal data
§ 24 Legal basis of the processing


Information on data protection

§ 1 General

We are pleased about your interest in our online shop "loveyourdiamonds" (in the following also called "loveyourdiamonds").

By means of this privacy policy we would like to inform you about the type, scope and purpose of the personal data we collect, use and process. In addition, this privacy policy informs you as a data subject about your rights.

A use of the websites of loveyourdiamonds is basically possible without any indication of personal data. However, if a person concerned wants to use special services of this shop via the internet site, such as placing an order, a processing of personal data might be necessary or a registration with us might be required.

The processing of personal data, such as name, address, email address or phone number of a person concerned, is always in accordance with the German Data Protection Act (DSGVO).

If it is necessary to process personal data and there is no legal basis for such processing, the consent of the person concerned is generally obtained.


§ 2 Definitions

The data protection declaration of loveyourdiamonds is based on the terminology used in the Data Protection Regulation (DSGVO).

In order to ensure that this privacy policy is easy to read and understand for you, the terms used are explained in advance:

a) personal data personal
data is information that serves to identify a person (hereinafter "data subject"). A natural person is regarded as identifiable if he or she can be assigned, in particular by means of an identifier such as a name, an identification number, location data, and the like.

b) data subject
data subject means any identified or identifiable natural person whose personal data are processed by the controller.

c) Processing
Processing means any operation or set of operations, performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Pseudonymisation P
seudonymisation means that you remain anonymous as long as no further data is consulted.

e) Controller or data controller
The controller or data processor is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

f) Third party
Third party means any natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data

g) Consent
Consent means any freely given, informed and unequivocal expression of will by the data subject in a specific case, in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.


§ 3 Name and address of the data controller

The data controller within the meaning of the Data Protection Basic Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Love your Diamonds
Owner Mrs. Anja Alt
Hirtengäßchen 15
D-91583 Schillingsfürst

Tel.: +49 (0) 9868 - 959 2527
E-Mail: info@loveyourdiamonds.de

VAT ID: DE297773388

Website: https://www.loveyourdiamonds.de


§ 4 Storage of access data in server log files

You can visit our website without giving any personal information. We only store access data in so-called server log files, such as the name of the requested file, date and time of the request, transferred data volume and the requesting provider. These data are evaluated exclusively to ensure the trouble-free operation of the site and to improve our offer and do not allow us to draw any conclusions about your person.


§ 5 Registration and opening of a customer account

The use of loveyourdiamonds can be done without providing personal data or registration. But you have the possibility to register with us by providing personal data. Loveyourdiamonds can also view personal data after a registration. You can find out which data is collected during the registration process in the corresponding form. A registration is basically only necessary when a contact is made or an order is to be processed.


§ 6 Collection of general data

Loveyourdiamonds collects a number of general data and information with every visit of the site by a person concerned. In principle, this does not include personal data. The collection can be done with or without registration.

For example, the type of browser used, the date and time of access to the website, the internet protocol address (IP) and similar information can be collected. When using this general data and information, no conclusions can be drawn about the person concerned. Such information can, if requested, be passed on by us to law enforcement authorities.


§ 7 Cookies

The websites of loveyourdiamonds use cookies. Cookies are text files, which are stored on a computer system via an internet browser.

Cookies enable the visited websites and servers to distinguish the individual browser of the person concerned from other internet browsers that contain other cookies. A specific Internet browser can be recognized and identified by means of the unique cookie ID.

The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter his or her access data each time he or she visits the website, as this can be done by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in the online shop. The online shop uses a cookie to remember the articles that a customer has placed in the virtual shopping cart.

The person concerned can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies.


§ 8 Use of data when registering for the e-mail newsletter

If you register for our newsletter, we use the data required for this purpose or data provided separately by you to send you our e-mail newsletter regularly in accordance with your consent. You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or by using a link provided for this purpose in the newsletter.


§ 9 Use of data for postal advertising and your right of objection

Furthermore, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you in the course of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in summarized lists and to use it for our own advertising purposes, e.g. to send you interesting offers and information on our products by post. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.


§ 10 Security Information

For reasons of security and to protect the transmission of confidential content, such as the requests you send us, we use SSL (Secure Socket Layer) encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http" to "https".

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

In particular your personal information, such as login data, is protected by encryption.


§ 11 Use of Google (Universal) Analytics for web analysis

This website uses Google (Universal) Analytics, a web analysis service of Google Inc. (www.google.de). Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as so-called "cookies", text files that are stored on your computer. The information generated about your use of this website is usually transferred to a Google server in the USA and stored there.

By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union or in other states that are party to the Agreement on the European Economic Area.

Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. The anonymised IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.
You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin, you can click this link to prevent the collection by Google Analytics on this website in the future. In doing so, an opt-out cookie will be stored on your end device. If you delete your cookies, you must click the link again.

Deactivate Google Analytics


§ 12 Matomo, formerly Piwik

Our website also uses Matomo (formerly Piwik), an open source software for statistical evaluation of visitor access. Matomo uses cookies, which are stored on your computer and which enable an anonymous analysis of your use of the website. A conclusion on a certain person is not possible, because your IP address is anonymized immediately after processing and before saving.


§ 13 Use of Facebook, Google+, Twitter and Instagram plugins

Our website uses so-called social plugins ("plugins") of the social networks Facebook and Google+, the microblogging services Twitter and Instagram.

These services are provided by the companies Facebook Inc, Google Inc., Twitter Inc. and Instagram LLC. ("Providers").

Facebook is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

Google+ is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Twitter is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter").

Instagram is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, Twitter or Instagram. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. Through the integration of the plugins, the providers receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile or are not logged in.

This information (including your IP address) is transmitted by your browser directly to a server of the respective provider in the USA and stored there. If you are logged in to one of the services, the providers can directly assign the visit to our website to your profile on Facebook, Google+, Twitter or Instagram. If you interact with the plugins, for example by clicking the "Like", "+1", "Twitter" or "Instagram" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network, on your Twitter or Instagram account and displayed to your contacts.

For the purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights and settings options for the protection of your privacy, please refer to the providers' data protection notices.

Facebook data protection information: http://www.facebook.com/policy.php
Google data protection information: http://www.google.com/intl/en/+/policy/+1button.html
Twitter data protection information: https://twitter.com/privacy
Instagram data protection information https://help.instagram.com/155833707900388/
If you do not want Google, Facebook, Twitter or Instagram to associate the data collected via our website directly with your profile in the respective service, you must log out of the respective service before visiting our website. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).


§ 14 Use of Web Fonts

External fonts, Google Fonts are used on these Internet pages. Google Fonts is a service of Google Inc. ("Google"). The integration of these web fonts is done by a server call, usually a Google server in the USA. This transfers to the server which of our Internet pages you have visited. The IP address of the browser of the end device of the visitor to these Internet pages is also stored by Google. You can find more detailed information in the Google data protection information, which you can call up here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/


§ 15 Evaluation reminder by e-mail

If you have given us your express consent to this during or after your order by activating a corresponding checkbox or clicking a button provided for this purpose, we will use your e-mail address for the reminder to submit an evaluation of your order via the evaluation system we use. This consent can be revoked at any time by sending a message to the contact option described below.


§ 16 Integration of the Trusted Shops Trustbadge

For the display of our Trusted Shops seal of approval and the possibly collected evaluations as well as for the offer of the Trusted Shops products for buyers after an order the Trusted Shops Trustbadge is integrated on this web page.

This serves the protection of our in the context of a balancing of interests predominant entitled interests in an optimal marketing of our offer. The Trustbadge and the services advertised thereby are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.

Other personal data is only transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case the contractual agreement met between you and Trusted Shops applies.


§ 17 Contact

Loveyourdiamonds contains information that enables a quick electronic contact to us and the direct communication with us (example "Contact" under the menu item "About us" in the upper bar). If you contact us via such a contact form, the personal data you provide will be stored automatically. You can find out which data this is from the contact form.

This data is used exclusively to answer your request. During the simple establishment of contact, this personal data is not passed on to third parties.

However, we would like to point out that, for example, further data is collected during the ordering process (e.g. address and payment information). In the course of an order process, personal data may also be passed on to third parties for internal processing (example: parcel service). Further information on this follows in this declaration.

After your contact has been processed, the transmitted data will be deleted (see also § 8).


§ 18 Routine deletion and blocking of personal data

The person responsible for processing processes and stores personal data of the data subject only for the period of processing. If the purpose of storage, a legal basis, or a storage period prescribed by law expires, the personal data is routinely blocked or deleted.


§ 19 Rights of the data subject

As a data subject, you have the following rights loveyourdiamonds and therefore to us in relation to your personal data:

a) Right to confirmation You
can request confirmation from us at any time as to whether we are processing your personal data.

b) Right to information
You have the right to receive free information from us about the personal data stored about you. This also includes information about the purpose for which they are used, how they are used, to whom these data were also communicated (e.g. parcel service provider), whether they were deleted or corrected and similar.

c) Right to correction
Youhave the right to demand that we correct incorrect or incomplete personal data at any time.

d) Right to cancellation (right to be forgotten)
You have the right to demand from us at any time that your personal data be deleted under the conditions of Art. 17, Paragraph 1 of the DSGVO.

e) Right to limit processing
You have the rightto limit theprocessing of your personal data The condition for this is that either the accuracy of the data is disputed, and this for a period of time that allows loveyourdiamonds to verify the accuracy of the data, or the processing is unlawful and the deletion is still refused, or loveyourdiamonds no longer needs the personal data for the purposes of processing, but you do so for the purpose of asserting, exercising or defending legal claims, or you have lodged an objection against the processing according to art. 21 paragraph 1 of the Privacy Code and it is not yet clear whether the legitimate reasons on the part of loveyourdiamonds are superior to yours.

f) Right to data transfer
You have the right to receive the personal data concerning you, which have been provided to a responsible person, in a structured, common and machine-readable format. You also have the right to have this data transferred to another person in charge, if technically possible.

g) Right to withdraw your consentto the processing of personal data
You have the right to withdraw your consent to the processing of personal data at any time. The revocation shall apply in the future. The consent shall thus remain valid and in force until revocation is made.

h) Right of appeal
If you believe that the processing of personal data is in breach of the provisions of the DSGVO, you may, apart from an administrative or judicial legal order, also appeal to a supervisory authority.

§ 20 Right to object

You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, with effect for future processing. Once the objection has been made,
loveyourdiamonds will immediately stop processing your personal data. A further processing will only take place if loveyourdiamonds can prove compelling reasons for further processing worthy of protection, which outweigh your interests, rights and
freedoms, or if the further processing serves the assertion, exercise or defense of legal claims.

If your personal data are processed by loveyourdiamonds for the purpose of direct marketing, you have the right to object to the processing of your personal data at any time. After an objection, loveyourdiamonds will immediately stop processing your personal data.



§ 21 Data processing for order processing

In the course of processing your personal data, in case of an order, these data will also be passed on to the following service providers, so that the existing contracts between you and loveyourdiamonds can be fully executed. As mentioned before, these service providers include parcel service providers, who only handle your data internally.

If a delivery of the goods is agreed with you, your personal data necessary for the delivery will be requested and passed on to the company commissioned by us with the delivery. If you do not have any insight during the ordering process which transport company is involved, you can also ask us directly via loveyourdiamonds.

If necessary, your personal data will also be forwarded to the assigned credit institute during the payment process. We inform about used payment service providers as follows:

Stripe
In the course of the payment processing we use the services of Stripe. In the course of this your data will be transmitted to Stripe, 510 Townsend Street, San Francisco, CA 94103, USA.

GIROPAY
You can make use of payment via GiroPay. The data is then transmitted to GIROPAY GmbH, An der Welle 4, 60322 Frankfurt/Main, Germany.

PayPal
If you choose payment via PayPal, your payment data will be transmitted to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Sofortüberweisung
If you choose payment by Sofortüberweisung your payment data will be forwarded to the provider SOFORT GmbH Theresienhöhe 12, 80339 Munich, Germany.

Credit card
If YOU have chosen payment by credit card, your data will be forwarded to the corresponding credit institute for payment processing.

The legal basis for the forwarding of data is art. 6 para. 1 lit. b DSGVO.


§ 22 External services

In order to operate our website, we use the external services of Mantoux-Solutions(http://mantoux-solutions.com/). Mantoux Solutions, Leipziger Str. 133, 10117 Berlin, is responsible for the hosting of the e-mail system and the internet system. In the course of this, Mantoux-Solutions can also view the collected data. Your data will not be processed or passed on by Mantoux-Solutions.


§ 23 Regulations for the provision of personal data

I would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information about the contractual partner). Sometimes it may be necessary to provide loveyourdiamonds with personal data for the conclusion of a contract, which subsequently have to be processed by loveyourdiamonds.

For example, you may be obliged to provide loveyourdiamonds with personal data if a contract is concluded with you. Failure to provide the personal data would mean that the contract with you could not be concluded.


§ 24 Legal basis of processing

Art. 6 I lit. a DS-GVO serves our company as legal basis for processing operations where loveyourdiamonds obtains consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 I lit. b DS-GVO.

The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in cases of inquiries about products or services. If loveyourdiamonds is subject to a legal obligation that makes the processing of personal data necessary, for example to fulfil tax obligations, the processing is based on art. 6 I lit. c DS-GVO.

Finally, processing operations could be based on art. 6 I lit. f DS-GVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of loveyourdiamonds or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. Such processing operations are allowed to loveyourdiamonds because they are specifically mentioned by the European legislator. In this respect, he took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47 sentence 2 DS-GVO).