Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are delighted that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Aysen Babalik, Élysée Diamonds, Verbrüderungsring 12H, 21493 Schwarzenbek, Germany, Tel.: +4915259427678, Email: support@elysee-diamonds.com. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited
Date and time of access
Amount of data sent in bytes
Source/reference from which you arrived at the page
Browser used
Operating system used
IP address used (if applicable, in anonymised form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Your data is not passed on or otherwise used. However, we reserve the right to subsequently check the server log files should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the padlock symbol in your browser bar.

3) Hosting & Content Delivery Network

3.1 Shopify

For hosting our website and displaying page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Shopify

We use a content delivery network from the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data may also be transferred to:

Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service allows us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing takes place to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For data transfers to the USA, the data recipient has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted again after the browser is closed (so-called "session cookies"), while others remain on your device for longer and enable page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of your web browser's cookie settings.

If personal data is also processed through individual cookies used by us, this processing is carried out either pursuant to Art. 6(1)(b) GDPR to perform the contract, pursuant to Art. 6(1)(a) GDPR in the case of consent given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of your visit to the site.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Getting in Touch

5.1 Reviews.io

We use the services of the following provider for review reminders: REVIEWS.io 2020 GmbH, Skalitzer Str. 104, 10997 Berlin, Germany

Solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, further customer data to the provider so that it can contact you with a review reminder by email.

You may withdraw your consent at any time with effect for the future, either towards us or the provider.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

5.2 Trusted Shops

We use the services of the following provider for review reminders: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany

You may withdraw your consent at any time with effect for the future, either towards us or the provider.

We are jointly responsible with the provider for the processing described above pursuant to Art. 26 GDPR. The agreement on joint controllership can be viewed here: https://help.etrusted.com/hc/de/articles/4402587369105-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

5.3 WhatsApp Business

You have the option of contacting us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (e.g. an order you have placed), we store and use the mobile number you use on WhatsApp, as well as - if provided - your first and last name, pursuant to Art. 6(1)(b) GDPR, in order to process and respond to your inquiry. On the basis of the same legal ground, we may also ask you via WhatsApp to provide further data (order number, customer number, address or email address) in order to be able to assign your inquiry to a specific matter.

If you use our WhatsApp contact for general inquiries (e.g. regarding our range of services, availability or our website), we store and use the mobile number you use on WhatsApp, as well as - if provided - your first and last name, pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data is always used solely to respond to your inquiry via WhatsApp. It is not passed on to third parties.

Please note that WhatsApp Business is given access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have themselves been in contact with us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, pursuant to Art. 6(1)(a) GDPR, to the transmission of their WhatsApp phone number from the address books of their chat contacts when first using the app on their device by accepting WhatsApp's terms of use. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thereby excluded.

Please refer to WhatsApp's privacy notice for the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your related rights and settings options to protect your privacy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have entered into a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

Within the scope of the processing described above, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

5.4 When you contact us (e.g. via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your inquiry and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided no statutory retention obligations apply.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data continues to be collected and processed to the extent necessary in each case if you provide it to us when opening a customer account. Please refer to the input form on our website for the data required to open an account.

Your customer account can be deleted at any time by sending a message to the controller's address given above. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via the account have been fully performed, no statutory retention periods apply, and we no longer have a legitimate interest in continued storage.

7) Use of Customer Data for Direct Marketing

7.1 Signing Up for Our Email Newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing further data is voluntary and is used to be able to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive the newsletter once you have expressly confirmed your consent to receiving it by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when signing up for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this in a manner permitted by law and about which we inform you in this notice.

7.2 Shopping Cart Reminders by Email

If you abandon your purchase with us before completing your order, you have the option of being reminded once by email of the contents of your virtual shopping cart.

The only mandatory information required to send this reminder is your email address. Providing further data is voluntary and may be used to be able to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you will only receive a notification once you have expressly confirmed your consent in this regard by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR for sending a shopping cart reminder. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when signing up for our email notification service is used strictly for the intended purpose.

You can unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted from our distribution list set up for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this in a manner permitted by law and about which we inform you in this notice.

8) Data Processing for Order Fulfilment

8.1 To the extent necessary for contract fulfilment for delivery and payment purposes, the personal data we collect is passed on pursuant to Art. 6(1)(b) GDPR to the commissioned transport company and the commissioned credit institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when ordering in order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the intended purpose of communications about updates owed by us, and are processed by us only to the extent necessary for the respective information.

8.2 - Anthropic Claude

To provide our services, we use artificial intelligence software from the following provider: Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland

Information you provide within the scope of a contractual relationship may be fed into the provider's software in order to organise, analyse, aggregate, modify, evaluate or prepare it for the provision of our service.

Information may also be transmitted to: Anthropic PBC, USA

The collection and further processing of this information is carried out strictly for the purpose of contract performance. Processing for the purposes of training and further development of the provider's AI language models is expressly excluded.

To the extent that personal data is also subject to the processing, it is carried out on the basis of our legitimate interest in the efficient design of our services and the optimal use of existing resources and technologies pursuant to Art. 6(1)(f) GDPR.

We have entered into a data processing agreement with the provider that ensures the protection of personal data processed by the provider and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
- Google Cloud AI

To provide our services, we use artificial intelligence software from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Information may also be transmitted to: Google LLC, USA

We have entered into a data processing agreement with the provider that ensures the protection of personal data processed by the provider and prohibits unauthorised disclosure to third parties.

Further legal notices as well as Google's privacy policy can be found at https://cloud.google.com/privacy?hl=de
- Google Gemini

To provide our services, we use artificial intelligence software from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Information may also be transmitted to: Google LLC, USA

We have entered into a data processing agreement with the provider that ensures the protection of personal data processed by the provider and prohibits unauthorised disclosure to third parties.

Further legal notices as well as Google's privacy policy can be found at https://support.google.com/gemini/answer/13594961?hl=de
- OpenAI

To provide our services, we use artificial intelligence software from the following provider: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland

We have entered into a data processing agreement with the provider that ensures the protection of personal data processed by the provider and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

8.3 Use of Payment Service Providers

- Apple Pay

If you choose the "Apple Pay" payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the "Apple Pay" function of your device running iOS, watchOS or macOS, by charging a payment card stored in "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. To authorise a payment, you must enter a code you have previously set, as well as verify using the "Face ID" or "Touch ID" function of your device.

For the purpose of payment processing, the information you provided during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before it is transmitted to the payment service provider of the payment card stored in Apple Pay in order to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After payment has been made, Apple sends your device account number as well as a transaction-specific, dynamic security code to the originating website to confirm that payment was successful.

Where personal data is processed in connection with the transmissions described above, this is carried out exclusively for the purpose of payment processing pursuant to Art. 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, your Mac and the authorising device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that could be used to identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone's settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".

For further information on data protection with Apple Pay, please visit the following website: https://support.apple.com/de-de/HT203027
- Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method from the provider for which you make advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information about the content of your order will be passed on pursuant to Art. 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method for which the provider advances payment (e.g. purchase on invoice or in instalments, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, where applicable, details of an alternative payment method).

In order to safeguard our legitimate interest in determining our customers' creditworthiness, this data is passed on by us pursuant to Art. 6(1)(f) GDPR to the provider for the purpose of a credit check. Based on the personal data you have provided as well as further data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment method you have selected can be granted with regard to payment and/or default risks.

To reach a decision as part of the application review, in addition to the provider's internal criteria, identity and creditworthiness information from the following credit reporting agencies may also be taken into account pursuant to Art. 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). To the extent score values are included in the credit report result, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may nevertheless remain entitled to process your personal data insofar as this is necessary for the proper processing of payment.
- PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider for which you make advance payment, your payment data provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information about the content of your order will be passed on pursuant to Art. 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method for which we advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, where applicable, details of an alternative payment method).

In such cases, in order to safeguard our legitimate interest in determining your creditworthiness, this data is passed on by us pursuant to Art. 6(1)(f) GDPR to the provider for the purpose of a credit check. Based on the personal data you have provided as well as further data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment method you have selected can be granted with regard to payment and/or default risks.

This website uses PayPal Checkout, an online payment system offered by PayPal that combines PayPal's own payment methods with local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay Later" via PayPal, we pass your payment data on for the purpose of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). This disclosure is made pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay Later" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit reporting agencies pursuant to Art. 6(1)(f) GDPR on the basis of PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). To the extent score values are included in the credit report result, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may nevertheless remain entitled to process your personal data insofar as this is necessary for the proper processing of payment.

If the PayPal payment method "purchase on invoice" is available and selected, your payment data is initially transmitted to PayPal to prepare the payment, whereupon PayPal forwards this data to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis in each case is Art. 6(1)(b) GDPR. In this case, RatePay carries out an identity and credit check in its own name to determine creditworthiness in accordance with the principle already described above, and passes on your payment data to credit reporting agencies on the basis of its legitimate interest in determining creditworthiness pursuant to Art. 6(1)(f) GDPR. A list of the credit reporting agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

If you use a local third-party payment method, your payment data is initially passed on to PayPal pursuant to Art. 6(1)(b) GDPR to prepare the payment. Depending on your selection of an available local payment method, PayPal then transmits your payment data pursuant to Art. 6(1)(b) GDPR to the relevant provider in order to carry out the payment:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- Blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- EPS (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further data protection information, please see PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full

8.4 Electronic Withdrawal Function for Distance Contracts

Consumers who enter into contracts on this website for which a statutory right of withdrawal exists have the option of declaring withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.

When using the withdrawal function, in addition to details identifying the contract to be withdrawn from, further personal information such as the consumer's first and last name and email address must be provided or confirmed.

The collection of this information and its transmission to us is carried out pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for the proper processing of the withdrawal. Also on the basis of Art. 6(1)(b) GDPR, the personal data provided is used to confirm receipt of the withdrawal declaration by email. A further legal basis for the processing is Art. 6(1)(c) GDPR. We are legally required to provide an electronic withdrawal function for paid consumer distance contracts.

9) Tools and Other Information

Cookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. Upon visiting the site, users are shown the "cookie consent tool" in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking a box. Through the use of the tool, all cookies/services requiring consent are only loaded once the respective user has given the corresponding consent by ticking the relevant box. This ensures that such cookies are only set on the respective user's device if consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. In principle, no personal user data is processed in this respect.

Should personal data (such as the IP address) nevertheless be processed in an individual case for the purpose of storing, assigning or logging cookie settings, this is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in lawful, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

A further legal basis for the processing is also Art. 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective user's consent.

Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.

10) Rights of the Data Subject

10.1 Applicable data protection law grants you the following data subject rights (rights to information and intervention) against the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions of exercise:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the relevant legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods exist for data processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this notice regarding specific processing situations, stored personal data will otherwise be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 03.09.2026, 20:06:48

Country/region

Language

Privacy policy

1) Introduction and Contact Details of the Controller

2) Data Collection When Visiting Our Website

3) Hosting & Content Delivery Network

4) Cookies

5) Getting in Touch

6) Data Processing When Opening a Customer Account

7) Use of Customer Data for Direct Marketing

8) Data Processing for Order Fulfilment

9) Tools and Other Information

10) Rights of the Data Subject

11) Duration of Storage of Personal Data