PRIVACY POLICY

§ 1 Generalities

Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will be processed by us only in accordance with the provisions of German data protection law and European Union (EU) data protection laws. In addition to processing purposes, recipients, legal bases and storage periods, the following provisions also inform you about your rights and the party responsible for processing your data. This privacy policy applies only to our websites. If you are redirected to other websites via links on our pages, please inform yourself there about the respective processing of your data.
§ 2 Data processing for the performance of the contract

(1) Purpose of processing

Your personal IDs that you provide to us during the ordering process are necessary to conclude a contract with us. You are not obliged to provide us with your personal data. However, we cannot send the goods to you without your address. For certain payment methods, we need the necessary payment data to pass on to a payment service provider commissioned by us. Therefore, the processing of your data entered in the ordering process is carried out for the purpose of fulfilling the contract.
If you send us a request for information by e-mail, via a contact form, etc. before concluding a contract, we process the data received in this way to carry out pre-contractual measures and to answer your questions about our products, for example.

(2) Legal basis
The legal basis for this processing is art. 6 para. 1 lit. b) from the GDPR.


(3) Categories of recipients
The payment service provider, the shipping service provider, the hosting provider, the goods management system, if applicable, the suppliers, if applicable (dropshipping).

(4) Duration of storage
We store the data necessary for the processing of the contract until the expiry of the legal guarantee period and, if applicable, the contractual guarantee period.
We retain the data required under commercial and tax law for the periods stipulated by law, generally ten years (cf. Article 257 HGB, Article 147 AO).
The data processed to carry out the pre-contractual measures will be deleted as soon as the measures have been carried out and it is recognized that no contract has been concluded.

§ 3 Additional information

§ 4 - Transactions - PayPal

Please note that all PayPal transactions are subject to PayPal's privacy policy:


https://www.paypal.com/de/webapps/mpp/ua/privacy-full

§ 5 Verification of credit

Please note the following data protection provisions if you decide to use Stripe's payment services:


https://stripe.com/at/privacy


§ 6 Information about cookies

(1) Purpose of processing
Technically necessary cookies are used on this website. These are small text files that are stored in or by your internet browser on your computer system. These cookies make it possible, for example, to place more products in a shopping cart.

(2) Legal basis
The legal basis for this processing is art. 6 (1) f) of the GDPR.


(3) Legitimate interest
Our legitimate interest is the functionality of our website. User data collected via technically necessary cookies is not used to create user profiles. This protects your interest in data protection.

(4) Duration of storage
Technically necessary cookies are usually deleted when the browser is closed, and permanently stored cookies have a different lifetime, ranging from a few minutes to several years.

(5) THE RIGHT TO APPEAL
If you do not want these cookies to be stored, please disable the acceptance of these cookies in your internet browser. However, this may limit the functionality of our website. You can also delete permanently stored cookies at any time through your browser.


§ 7 Social plugins from Facebook

We use social plugins from facebook.com, operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. The plugins can be recognized by the Facebook logo or by adding "Facebook Social Plugin". If, for example, you click the "Like" button or leave a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. Facebook also makes your preferences public to your Facebook friends. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. Even if you are not logged in or do not have a Facebook account, your browser transmits information (eg the website you visited, your IP address) that is stored by Facebook. For details on how Facebook handles your personal data and your rights in this regard, please see Facebook's privacy policy. If you do not want Facebook to assign the data collected about you via our websites to your Facebook account, you must log out of Facebook before visiting our websites. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, for example with "Facebook Blocker" (Facebook).

§ 8 Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us, as an operator:

1. The right to information
You can request information about your personal data processed by us in accordance with art. 15 GDPR.

2. Right of rectification
If the information concerning you is not (or is no longer) correct, you can request a rectification in accordance with art. 16 of the GDPR. If your data is incomplete, you can request its completion.

3. Right of termination
You can request the deletion of your personal data under the conditions of art. 17 of the GDPR.


4. The right to restrict processing
Within the provisions of art. 18 of the GDPR, you have the right to request the restriction of the processing of your data.

5. The right to data portability
In accordance with art. 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted another operator.

6. The right to revoke the declaration of consent under data protection legislation
In accordance with Article 7(3) of the GDPR, you have the right to withdraw your consent under data protection law at any time. This does not affect the lawfulness of processing based on consent until revocation.


7. The right to lodge a complaint with a supervisory authority
If you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State where you have your habitual residence, place of work or place of the alleged infringement), in accordance with Article 77 of the GDPR.


Please also note your right to object in accordance with Art. 21 GDPR:


a) General: a justified objection is required
If the processing of personal data concerning you is carried out
- to protect our legitimate superior interest (legal basis in accordance with art. 6 par. 1 letter f) of the GDPR) or
- in the public interest (legal basis in accordance with art. 6 par. 1 letter e) of the GDPR),

you have the right to object at any time to the processing for reasons arising from your particular situation; this also applies to the creation of profiles based on the provisions of the GDPR.
In the event of an objection, we will no longer process your personal data, unless we can demonstrate that there are legitimate and compelling reasons for the processing that override your interests, rights and freedoms, or that the processing serves to ascertain, exercise or the defense of legal rights.

b) The special case of direct marketing: a simple objection is enough
If your personal data is processed for direct marketing purposes, you have the right to object to this processing at any time and without specifying the reasons; this also applies to the creation of profiles to the extent that they are associated with such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Responsible for data processing:
Ioan Mihai Usurelu
Neubau 27
3702 Niederrußbach
business@diamondscent.ro

Privacy policy of janolaw.de