data protection

Basics

This data protection declaration is intended to inform users of this website about the type, scope and purpose of the collection and use of personal data by the website operator “Sucre Fine Jewelry, Hohenzollernstraße 7, 80801 Munich, Tel: 0049 89 34018666, Email: office@sucre- jewelry.de”.

The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with legal regulations. Since changes to this data protection declaration may be made due to new technologies and the constant development of this website, we recommend that you read the data protection declaration again at regular intervals.

Definitions of the terms used (e.g. “personal data” or “processing”) can be found in Art. 4 GDPR.1.

1. Information about the collection of personal data and contact details of the person responsible

1.1 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sucre Fine Jewelry, Hohenzollernstraße 7, 80801 Munich, Tel: 0049 89 34018666, Email: office@sucre-jewelry.de. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or. TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.

2. Access data when visiting the website www.sucre-jewelry.de

We, the website operator or site provider, collect data about access to the website based on our legitimate interest (see Art. 6 Para. 1 lit. f. GDPR) and store this as “server log files” on the website server. The following data is logged like this:

Website visited Time at time of access Amount of data sent in bytes Source/reference from which you accessed the page Browser used Operating system used IP address used

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3. Range measurement & cookies

3.1 We collect information about your use of our website www.sucre-jewelry.de by using so-called browser cookies. These are small text files that are stored on your data carriers and which store certain settings and data for exchange with our system via your browser. A cookie typically contains the name of the domain from which the cookie data is sent, as well as information about the age of the cookie and an alphanumeric identifier. Cookies enable our systems to recognize the user's device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard drive of the respective user's computer. The use of cookies increases the user-friendliness and security of this website.

3.2 The cookies we use only store data about your use of the website. This is not done by assigning you personally, but by assigning an identification number to the cookie (“cookie ID”). The cookie ID is not combined with your name, your IP address or similar data that would enable the cookie to be assigned to you.

3.3 Common browsers offer the setting option not to allow cookies. Note: It is not guaranteed that you will be able to access all functions of this website without restrictions if you make appropriate settings.

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenjagd-desktop?redirectslug=cookies-erlauben-und-ablehne&redirectlocale=de
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/mdm/mdmf7d5714d4/web
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

3.4 We use cookies to protect our legitimate interest in improving our website and being able to offer you a better and more tailored service. They enable us to recognize your computer when you return to our website and thereby:

store information about your preferred activities on the website in order to tailor our website to your individual interests;

to store your log-in details and display preferences (e.g. language);

to speed up the speed of processing your requests.

The legal basis for data processing through cookies is Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.

3.5 Cookies are stored until you delete them or the term of the respective cookie ends. In this case, the cookie is automatically deleted from your computer.

4. Contact us

If you contact us as the website operator using the contact options offered, your details will be saved so that they can be used to process and answer your query. This data will not be passed on to third parties without your consent. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR. Your data will be deleted after your request has been finally processed; this is the case if it can be seen from the circumstances that the matter in question has been finally clarified and provided that there are no legal retention obligations to the contrary.

5. Data processing when opening a customer account and for contract processing

In accordance with Article 6 Paragraph 1 Letter b of the GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the above address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked in consideration of tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or reserve the right to further use of your data as permitted by law on our part which we will inform you about below.

In addition to processing the contract, we also use the data collected from you as part of the contract processing for the purpose of informing you from time to time about new offers and promotions.

Which includes:

First name Last name Title Salutation Billing and delivery address, if applicable Additional address Packstation and DHL Customer number E-mail address Billing and payment details Date of birth, telephone number if applicable.

6. Use of your data for direct advertising

The following information relates to the processing of personal data for advertising purposes. The GDPR declares such data processing on the basis of Article 6 paragraph 1 letter f) to be fundamentally conceivable and a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether storage is necessary for advertising purposes.

6.1 Advertising purposes of Sucre Fine Jewelry and third parties If you have concluded a contract with us, we will treat you as an existing customer. In this case, we process your postal contact details without specific consent in order to send you information about new products and services. We process your email address in order to send you information for our own, similar products unless you have given specific consent. You can object to this service at any time in each customer information at the end of the information.

6.2 Advertising tailored to your interests So that you only receive advertising information that is supposedly of interest to you, we categorize and supplement your customer profile with further information if necessary. Both statistical information and information about you are used for this purpose. The aim is to provide you with advertising that is tailored to your actual or perceived needs and not to bother you with useless advertising. Your address and order data will be processed by us for our own marketing purposes.

7. Data processing for order processing

7.1 In order to process your order, we work with the service provider(s) below. These service providers support us partially or completely in the implementation of the concluded contracts. We transfer certain personal data to these service providers in accordance with the following information.

The personal data we collect will be passed on to the transport company commissioned with the delivery, in our case DHL, as part of the contract processing, to the extent that this is necessary to deliver the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, provided this is necessary for payment processing. If payment service providers are used, we will provide explicit information about this below. The legal basis for passing on the data is Article 6 Paragraph 1 Letter b GDPR.

7.2 Use of payment service providers (payment service providers)

Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or, if offered - “purchase on account” or “payment in installments” via PayPal, we pass on your payment details to PayPal (Europe) Sarl et Cie, SCA, 22-24 as part of the payment processing Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or, if offered - “purchase on account” or “payment in installments” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values ​​(so-called score values). To the extent that score values ​​are included in the results of the credit report, they are based on a scientifically recognized mathematical statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. Further data protection information, including information about the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to this processing of your data at any time by sending a message object to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

8. Use of social media: Social plugins

8.1 Facebook plugins with 2-click solution Our website uses so-called social plugins (“plugins”) from the social network Facebook, which are operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”) is operated.

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the page using a so-called “2-click” solution. You can recognize deactivated plugins because they have a gray background. This integration ensures that when you access a page on our website that contains such plugins, no connection is established with the Facebook servers. Only when you activate the plugins and thus give your consent to the data transfer in accordance with Article 6 Paragraph 1 Letter a of the GDPR will your browser establish a direct connection to the Facebook servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the amount of data that Facebook collects using the plugins. As far as we know, Facebook receives information about which of our websites you have currently and previously accessed. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page on our website even if you do not have a profile on Facebook or are not currently logged in. The information collected (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed there to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to Facebook.

Facebook Inc., based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which ensures compliance with the data protection level applicable in the EU.

The purpose and scope of data collection and the further processing and use of the data by Facebook as well as your related rights and setting options to protect your privacy can be found in Facebook's data protection information: http://www.facebook.com/policy.php

8.2 Google+ plugins with 2-click solution

Our website uses so-called social plugins (“plugins”) from the social network Google+, which is operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the page using a so-called “2-click” solution. You can recognize deactivated plugins because they have a gray background. This integration ensures that when you access a page on our website that contains such plugins, no connection is established to the Google+ servers. Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Article 6 Paragraph 1 Letter a of the GDPR will your browser establish a direct connection to the Google+ servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Google+. We have no influence on the amount of data that Google+ collects using the plugins. As far as we know, Google+ receives information about which of our websites you have currently and previously accessed. By integrating the plugins, Google+ receives the information that your browser has accessed the corresponding page on our website even if you do not have a profile on Google+ or are not currently logged in. The information collected (including your IP address) is transmitted from your browser directly to a Google+ server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Google+ server and stored there. The information is also published on Google+ and displayed there to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to Google+.

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which ensures compliance with the data protection level applicable in the EU. The purpose and scope of data collection and the further processing and use of the data by Google as well as your related rights and setting options to protect your privacy can be found in Google's data protection information: https://www.google.com/intl/de/policies/privacy /

8.3 Twitter plugins with 2-click solution

Our website uses so-called social plugins (“plugins”) from the microblogging service Twitter, which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”).

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the page using a so-called “2-click” solution. You can recognize deactivated plugins because they have a gray background. This integration ensures that when you access a page on our website that contains such plugins, no connection is established to Twitter's servers. Only when you activate the plugins and thus give your consent to the data transfer in accordance with Article 6 Paragraph 1 Letter a of the GDPR will your browser establish a direct connection to Twitter's servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Twitter. We have no influence on the amount of data that Twitter collects using the plugins. As far as we know, Twitter receives information about which of our websites you have currently and previously accessed. By integrating the plugins, Twitter receives the information that your browser has accessed the corresponding page on our website even if you do not have a profile on Twitter or are not currently logged in. The information collected (including your IP address) is transmitted from your browser directly to a Twitter server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is also published on Twitter and shown to your contacts there.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no impact on the data that has already been transferred to Twitter.

Twitter Inc., based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which ensures compliance with the data protection level applicable in the EU.

The purpose and scope of data collection and the further processing and use of the data by Twitter as well as your related rights and setting options to protect your privacy can be found in Twitter's data protection information: https://twitter.com/privacy

9. Online Marketing

Use of Google AdWords conversion tracking

This website uses the online advertising program “Google AdWords” and, as part of Google AdWords, conversion tracking from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). We use Google Adwords to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our interest is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users. If you do not want to participate in tracking, you can block this use by deactivating the Google conversion tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics. We use Google Adwords based on our legitimate interest in targeted advertising in accordance with Article 6 (1) (f) GDPR.

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which ensures compliance with the data protection level applicable in the EU.

You can find further information about Google's data protection regulations at the following Internet address: http://www.google.de/policies/privacy/

You can permanently deactivate cookies for ad preferences by preventing them by setting your browser software accordingly or by downloading and installing the browser plug-in available at the following link: http://www.google.com/settings/ads/plugin ?hl=de

Please note that certain functions of this website may not be possible or may only be used to a limited extent if you have deactivated the use of cookies.

10. Web analytics services

Google Universal Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures that the IP address is anonymized by shortening it and excludes any direct reference to a person. Through the extension, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie, which will prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again):

Click here to disable Google Analytics tracking

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which ensures compliance with the data protection level applicable in the EU. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “personal data”. You can find more information about how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

11. Tools and Miscellaneous

Google Web Fonts

This site uses so-called web fonts for the uniform display of fonts, which are provided by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This gives Google knowledge that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f of the GDPR. If your browser does not support web fonts, a standard font will be used by your computer.

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which ensures compliance with the data protection level applicable in the EU.

For more information about Google Web Fonts, see:
https://developers.google.com/fonts/faq

12. User rights

12.1 As a user, you have the right to request free information about what personal data has been stored about you. You also have the right to correct incorrect data and to restrict processing or delete your personal data. If applicable, you can also exercise your right to data portability. If you believe that your data has been processed unlawfully, you can lodge a complaint with the relevant supervisory authority.

12.2 Right to information in accordance with Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing affecting you, as well as your right to be informed about what guarantees exist in accordance with Art. 46 GDPR when your data is forwarded to third countries;

12.3 Right to rectification in accordance with Art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and/or completion of incomplete data stored by us;

12.4 Right to deletion in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 Paragraph 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data that you dispute is checked, if you refuse to delete your data due to unlawful data processing and instead Request restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons relating to your particular situation as long as it is not yet clear whether our legitimate interests are reasons predominate;

Right to information in accordance with Art. 19 GDPR: If you have asserted the right to rectification, deletion or restriction of processing against the person responsible, the person responsible is obliged to inform all recipients to whom the personal data concerning you have been disclosed this rectification or deletion of the data or Restriction of processing unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

Right to data portability in accordance with Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible, to the extent that this is technically feasible;

Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. Upon revocation, we will delete the data concerned immediately unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation;

Right to complain in accordance with Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation, if you are of the opinion are that the processing of your personal data violates the GDPR.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCE OF INTERESTS BASED ON OUR OVERWHELMING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPLEX REASONS FOR THE PROCESSING THAT ARE DESIGNED TO BE PROTECTED, WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR OPT-OUT AS DESCRIBED ABOVE.

IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

13. Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal retention period (e.g. commercial and tax retention periods). After the deadline has expired, the relevant data will be routinely deleted unless it is no longer required to fulfill or initiate the contract and/or we have no legitimate interest in continuing to store it.