Information on data protection

§ 1 General
§ 2 Definitions
§ 3 Name and address of the person responsible for processing
§ 4 Storage of access data in server log files
§ 5 Registration and opening of a customer account
§ 6 Collection of general data
§ 7 Cookies und Consent Manager
§ 8 Use of data when registering for the e-mail newsletter
§ 9 Use of data for postal advertising and your right of objection
§ 10 Security information
§ 11 Use of Google Analytics 4
§ 12 Matomo, formerly Piwik
§ 13 Use of web fonts
§ 14 Evaluation reminder by e-mail
§ 15 Integration of the Trusted Shop Trustbadge
§ 16 Contact
§ 17 Routine deletion and blocking of personal data
§ 18 Rights of the data subject
§ 19 Right to object
§ 20 Data processing for order processing
§ 21 External services
§ 22 Regulations for the provision of personal data
§ 23 Legal basis of the processing


Information on data protection

§ 1 General

We are pleased about your interest in our online shop "loveyourdiamonds" (in the following also called "loveyourdiamonds").

By means of this privacy policy we would like to inform you about the type, scope and purpose of the personal data we collect, use and process. In addition, this privacy policy informs you as a data subject about your rights.

A use of the websites of loveyourdiamonds is basically possible without any indication of personal data. However, if a person concerned wants to use special services of this shop via the internet site, such as placing an order, a processing of personal data might be necessary or a registration with us might be required.

The processing of personal data, such as name, address, email address or phone number of a person concerned, is always in accordance with the German Data Protection Act (DSGVO).

If it is necessary to process personal data and there is no legal basis for such processing, the consent of the person concerned is generally obtained.


§ 2 Definitions

The data protection declaration of loveyourdiamonds is based on the terminology used in the Data Protection Regulation (DSGVO).

In order to ensure that this privacy policy is easy to read and understand for you, the terms used are explained in advance:

a) personal data personal
data is information that serves to identify a person (hereinafter "data subject"). A natural person is regarded as identifiable if he or she can be assigned, in particular by means of an identifier such as a name, an identification number, location data, and the like.

b) data subject
data subject means any identified or identifiable natural person whose personal data are processed by the controller.

c) Processing
Processing means any operation or set of operations, performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Pseudonymisation P
seudonymisation means that you remain anonymous as long as no further data is consulted.

e) Controller or data controller
The controller or data processor is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

f) Third party
Third party means any natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data

g) Consent
Consent means any freely given, informed and unequivocal expression of will by the data subject in a specific case, in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.


§ 3 Name and address of the data controller

The data controller within the meaning of the Data Protection Basic Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Love your Diamonds
Owner Mrs. Anja Alt
Hirtengäßchen 15
D-91583 Schillingsfürst

Tel.: +49 (0) 9868 - 959 2527
E-Mail: info@loveyourdiamonds.de

VAT ID: DE297773388

Website: https://www.loveyourdiamonds.de


§ 4 Storage of access data in server log files

You can visit our website without giving any personal information. We only store access data in so-called server log files, such as the name of the requested file, date and time of the request, transferred data volume and the requesting provider. These data are evaluated exclusively to ensure the trouble-free operation of the site and to improve our offer and do not allow us to draw any conclusions about your person.


§ 5 Registration and opening of a customer account

The use of loveyourdiamonds can be done without providing personal data or registration. But you have the possibility to register with us by providing personal data. Loveyourdiamonds can also view personal data after a registration. You can find out which data is collected during the registration process in the corresponding form. A registration is basically only necessary when a contact is made or an order is to be processed.


§ 6 Collection of general data

Loveyourdiamonds collects a number of general data and information with every visit of the site by a person concerned. In principle, this does not include personal data. The collection can be done with or without registration.

For example, the type of browser used, the date and time of access to the website, the internet protocol address (IP) and similar information can be collected. When using this general data and information, no conclusions can be drawn about the person concerned. Such information can, if requested, be passed on by us to law enforcement authorities.


§ 7 Cookies and Consent Manager

The Internet pages of loveyourdiamonds.de use cookies. These are small text files that are stored on the user's end device via the Internet browser and contain certain information. Cookies enable a user-friendly, functional and technically error-free use of our website.

Some of the cookies used are technically necessary. These cookies are necessary to provide essential functions of the website, such as placing products in a shopping cart or recognizing a session when changing pages. These technically necessary cookies are set automatically and cannot be deactivated.

We use a consent manager for all non-essential cookies - especially those for analysis or marketing purposes. When you visit our website for the first time, you can use this to specify which types of cookies you wish to consent to. Consent is voluntary, not required for the use of the site and can be adjusted or revoked at any time via the Consent Manager.


§ 8 Use of data when registering for the e-mail newsletter

If you register for our newsletter, we use the data required for this purpose or data provided separately by you to send you our e-mail newsletter regularly in accordance with your consent. You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or by using a link provided for this purpose in the newsletter.


§ 9 Use of data for postal advertising and your right of objection

Furthermore, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you in the course of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in summarized lists and to use it for our own advertising purposes, e.g. to send you interesting offers and information on our products by post. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.


§ 10 Security Information

For reasons of security and to protect the transmission of confidential content, such as the requests you send us, we use SSL (Secure Socket Layer) encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http" to "https".

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

In particular your personal information, such as login data, is protected by encryption.


§ 11 Use of Google Analytics 4

If you have given your express consent via our Consent Manager, we use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us to better understand user behavior on our website and to optimize our content and offers accordingly.

As part of Google Analytics 4, cookies are set to analyze your use of the website. The IP addresses of users are anonymized by default so that they cannot be directly linked to a person. The IP address is not merged with other Google data.

The information generated on the basis of your use of the website may be transmitted to and stored by Google on servers in the United States. Google is certified under the EU-U.S. Data Privacy Framework, which guarantees an appropriate level of data protection.

The legal basis for the use of Google Analytics 4 is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future via the Consent Manager.

Note: We do not use advanced features such as Google Signals or personalized advertising as part of Google Analytics.


§ 12 Matomo, formerly Piwik

Our website also uses Matomo (formerly Piwik), an open source software for statistical evaluation of visitor access. Matomo uses cookies, which are stored on your computer and which enable an anonymous analysis of your use of the website. A conclusion on a certain person is not possible, because your IP address is anonymized immediately after processing and before saving.


§ 13 Use of Web Fonts

External fonts, Google Fonts are used on these Internet pages. Google Fonts is a service of Google Inc. ("Google"). The integration of these web fonts is done by a server call, usually a Google server in the USA. This transfers to the server which of our Internet pages you have visited. The IP address of the browser of the end device of the visitor to these Internet pages is also stored by Google. You can find more detailed information in the Google data protection information, which you can call up here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/


§ 14 Evaluation reminder by e-mail

If you have given us your express consent to this during or after your order by activating a corresponding checkbox or clicking a button provided for this purpose, we will use your e-mail address for the reminder to submit an evaluation of your order via the evaluation system we use. This consent can be revoked at any time by sending a message to the contact option described below.


§ 15 Integration of the Trusted Shops Trustbadge

For the display of our Trusted Shops seal of approval and the possibly collected evaluations as well as for the offer of the Trusted Shops products for buyers after an order the Trusted Shops Trustbadge is integrated on this web page.

This serves the protection of our in the context of a balancing of interests predominant entitled interests in an optimal marketing of our offer. The Trustbadge and the services advertised thereby are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.

Other personal data is only transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case the contractual agreement met between you and Trusted Shops applies.


§ 16 Contact

Loveyourdiamonds contains information that enables a quick electronic contact to us and the direct communication with us (example "Contact" under the menu item "About us" in the upper bar). If you contact us via such a contact form, the personal data you provide will be stored automatically. You can find out which data this is from the contact form.

This data is used exclusively to answer your request. During the simple establishment of contact, this personal data is not passed on to third parties.

However, we would like to point out that, for example, further data is collected during the ordering process (e.g. address and payment information). In the course of an order process, personal data may also be passed on to third parties for internal processing (example: parcel service). Further information on this follows in this declaration.

After your contact has been processed, the transmitted data will be deleted (see also § 8).


§ 17 Routine deletion and blocking of personal data

The person responsible for processing processes and stores personal data of the data subject only for the period of processing. If the purpose of storage, a legal basis, or a storage period prescribed by law expires, the personal data is routinely blocked or deleted.


§ 18 Rights of the data subject

As a data subject, you have the following rights loveyourdiamonds and therefore to us in relation to your personal data:

a) Right to confirmation You
can request confirmation from us at any time as to whether we are processing your personal data.

b) Right to information
You have the right to receive free information from us about the personal data stored about you. This also includes information about the purpose for which they are used, how they are used, to whom these data were also communicated (e.g. parcel service provider), whether they were deleted or corrected and similar.

c) Right to correction
Youhave the right to demand that we correct incorrect or incomplete personal data at any time.

d) Right to cancellation (right to be forgotten)
You have the right to demand from us at any time that your personal data be deleted under the conditions of Art. 17, Paragraph 1 of the DSGVO.

e) Right to limit processing
You have the rightto limit theprocessing of your personal data The condition for this is that either the accuracy of the data is disputed, and this for a period of time that allows loveyourdiamonds to verify the accuracy of the data, or the processing is unlawful and the deletion is still refused, or loveyourdiamonds no longer needs the personal data for the purposes of processing, but you do so for the purpose of asserting, exercising or defending legal claims, or you have lodged an objection against the processing according to art. 21 paragraph 1 of the Privacy Code and it is not yet clear whether the legitimate reasons on the part of loveyourdiamonds are superior to yours.

f) Right to data transfer
You have the right to receive the personal data concerning you, which have been provided to a responsible person, in a structured, common and machine-readable format. You also have the right to have this data transferred to another person in charge, if technically possible.

g) Right to withdraw your consentto the processing of personal data
You have the right to withdraw your consent to the processing of personal data at any time. The revocation shall apply in the future. The consent shall thus remain valid and in force until revocation is made.

h) Right of appeal
If you believe that the processing of personal data is in breach of the provisions of the DSGVO, you may, apart from an administrative or judicial legal order, also appeal to a supervisory authority.

§ 19 Right to object

You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, with effect for future processing. Once the objection has been made,
loveyourdiamonds will immediately stop processing your personal data. A further processing will only take place if loveyourdiamonds can prove compelling reasons for further processing worthy of protection, which outweigh your interests, rights and
freedoms, or if the further processing serves the assertion, exercise or defense of legal claims.

If your personal data are processed by loveyourdiamonds for the purpose of direct marketing, you have the right to object to the processing of your personal data at any time. After an objection, loveyourdiamonds will immediately stop processing your personal data.



§ 20 Data processing for order processing

In the course of processing your personal data, in case of an order, these data will also be passed on to the following service providers, so that the existing contracts between you and loveyourdiamonds can be fully executed. As mentioned before, these service providers include parcel service providers, who only handle your data internally.

If a delivery of the goods is agreed with you, your personal data necessary for the delivery will be requested and passed on to the company commissioned by us with the delivery. If you do not have any insight during the ordering process which transport company is involved, you can also ask us directly via loveyourdiamonds.

If necessary, your personal data will also be forwarded to the assigned credit institute during the payment process. We inform about used payment service providers as follows:

Stripe
In the course of the payment processing we use the services of Stripe. In the course of this your data will be transmitted to Stripe, 510 Townsend Street, San Francisco, CA 94103, USA.

GIROPAY
You can make use of payment via GiroPay. The data is then transmitted to GIROPAY GmbH, An der Welle 4, 60322 Frankfurt/Main, Germany.

PayPal
If you choose payment via PayPal, your payment data will be transmitted to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Sofortüberweisung
If you choose payment by Sofortüberweisung your payment data will be forwarded to the provider SOFORT GmbH Theresienhöhe 12, 80339 Munich, Germany.

Credit card
If YOU have chosen payment by credit card, your data will be forwarded to the corresponding credit institute for payment processing.

The legal basis for the forwarding of data is art. 6 para. 1 lit. b DSGVO.


§ 21 External services

In order to operate our website, we use the external services of Mantoux-Solutions(http://mantoux-solutions.com/). Mantoux Solutions, Leipziger Str. 133, 10117 Berlin, is responsible for the hosting of the e-mail system and the internet system. In the course of this, Mantoux-Solutions can also view the collected data. Your data will not be processed or passed on by Mantoux-Solutions.


§ 22 Regulations for the provision of personal data

I would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information about the contractual partner). Sometimes it may be necessary to provide loveyourdiamonds with personal data for the conclusion of a contract, which subsequently have to be processed by loveyourdiamonds.

For example, you may be obliged to provide loveyourdiamonds with personal data if a contract is concluded with you. Failure to provide the personal data would mean that the contract with you could not be concluded.


§ 23 Legal basis of processing

Art. 6 I lit. a DS-GVO serves our company as legal basis for processing operations where loveyourdiamonds obtains consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 I lit. b DS-GVO.

The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in cases of inquiries about products or services. If loveyourdiamonds is subject to a legal obligation that makes the processing of personal data necessary, for example to fulfil tax obligations, the processing is based on art. 6 I lit. c DS-GVO.

Finally, processing operations could be based on art. 6 I lit. f DS-GVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of loveyourdiamonds or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. Such processing operations are allowed to loveyourdiamonds because they are specifically mentioned by the European legislator. In this respect, he took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47 sentence 2 DS-GVO).