Privacy policy

1. Data Controller

The controller responsible for data processing on this website is:

Sidera Jewelry
Owner: Leo Koch
Ligusterweg 17
74348 Lauffen
Germany

Email: leo.koch@sidera-jewelry.de

2. Hosting (Shopify)

Our online shop is hosted by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. When you visit the website, server log files (including IP address, date and time, and browser type) are processed automatically. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technical provision and security of the website). We have concluded a data processing agreement with Shopify (Art. 28 GDPR). Data may be transferred to group locations in Canada and the USA; such transfers are based on the adequacy decision for Canada and the EU-U.S. Data Privacy Framework, respectively.

3. SSL/TLS Encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" in the address bar.

4. Waitlist and Email Marketing

If you sign up for our waitlist via our form, we process your email address and, if provided, your name and country in order to inform you about product releases. The legal basis is your consent (Art. 6(1)(a) GDPR). Registration uses a double opt-in procedure. You can withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every email.

5. Order Processing

To process your order, we process the data you provide at checkout (name, address, email address, payment details). The legal basis is Art. 6(1)(b) GDPR (performance of a contract). We pass on your address to the commissioned shipping company for the purpose of delivery. For deliveries outside the European Union, we are additionally required to transmit your name, address and details of the goods to the customs authorities of the country of destination and to German export customs. The legal basis is Art. 6(1)(c) GDPR (compliance with a legal obligation).

6. Payment Service Providers

Shopify Payments: If you pay by credit or debit card, payment is processed via Shopify Payments. The legal basis is Art. 6(1)(b) GDPR.

PayPal: If you pay via PayPal, your payment details are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The legal basis is Art. 6(1)(b) GDPR.

7. Meta Pixel

This website uses the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland — exclusively after your consent via the cookie banner. It allows us to measure the effectiveness of our advertising. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Data may be transferred to Meta servers in the USA; such transfers are based on the EU-U.S. Data Privacy Framework. You can withdraw your consent at any time via the cookie settings.

8. Cookies

We use technically necessary cookies (e.g. for the shopping cart and login) on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies (e.g. marketing) are only set after your consent via the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

9. Storage Periods

We retain order and invoice data within the statutory commercial and tax retention periods (6 or 10 years, §§ 257 HGB, 147 AO). Waitlist data is stored until you withdraw your consent.

10. Your Rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority; the competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).