Thank you for your interest on our website. The protection of your privacy is very important to us. In the following, we will inform you about the collection of personal data when using our website. Personal data is all data that can be personally related to you, e.g. name, address, email addresses, user behaviour.
The person/body responsible pursuant to Art. 4(7) of the General Data Protection Regulation (GDPR) is
JuwelKerze JewelCandle GmbH
You can contact our data protection officer at firstname.lastname@example.org or via our postal address by adding “Data Protection” to the address.
You can only use our websites for information purposes, i.e. you cannot register or provide us with information in any other way. In this case, we only collect the personal data that your browser transmits to our server. We only collect access data in so-called server log files, such as the name of the requested file, date and time of retrieval, transferred data volume, browser type and version number and the IP address of the requesting computer. These data are technically required in order for us to display our website to you and to ensure stability and security. The IP addresses collected by us will be deleted or made anonymous after your usage of the website has ended. The legal basis for this is Article 6(1), lit. f GDPR.
Data collection and use for contract processing and enquiries
We collect personal data when you voluntarily provide it to us in connection with your order or when contacting us (e.g. via contact form or email). Which data is collected can be seen in the respective input forms.
We use the data provided by you to process contracts and answer your enquiries. Following complete processing of the contract or answering of your enquiries, your data will be blocked for further use and deleted after expiry of the storage periods under tax and commercial law, unless you have expressly consented to further use of your data. The legal basis is Article 6(1), lit. b of the GDPR when the contract is to be implemented; the legal basis for general enquiries is Article 6(1) lit. f of the GDPR. Otherwise, the legal basis is Article 6(1), lit. a GDPR (consent). The legal basis for storage due to statutory retention obligations is Article 6(1), lit. c GDPR.
Data collection and transfer when using our web shop, shipping and payment
If you would like to place an order in our web shop, it is necessary for the conclusion of the contract, that you enter the personal data needed to complete your order. The information required for the execution of the contracts is marked separately; any further information is voluntary. We process the data provided by you to carry out your order. For this purpose, we can pass on your payment data to our house bank. (Article 6(1), lit. b GDPR)
For the fulfilment of the contract we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. As part of the processing of payments, the selected payment service providers who bear responsibility in this respect collect the necessary payment data themselves. We do not collect any account or credit card data ourselves and do not receive these from the payment service providers. The data protection declaration of the respective payment service provider applies in this respect. When paying via PayPal, this is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. When paying by credit or debit card, the payment data are processed by Computop Wirtschaftsinformatik GmbH, Schwarzenbergstr. 4, 96050 Bamberg. The collection of the payment data via SOFORT transfer takes place via Sofort GmbH, Theresienhöhe 12, 80339 Munich.
We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, after two years we limit the processing of your data, i.e. your data will only be used to comply with legal obligations.
Use of data when registering for the email newsletter
With your consent you can subscribe to our newsletter, which we use to inform you about our current offers. The advertised goods and services are named in the declaration of consent. For the registration to our newsletter we use the so-called “double opt-in procedure”. This means that after your registration we will send you an email to the specified email address in which we ask you to confirm that you would like the newsletter to be sent to you. In addition, we store also the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The only mandatory information required for the newsletter to be sent is your email address. Following your confirmation, we will save your email address for the sole purpose of sending you the newsletter. The legal basis is Article 6(1) lit. a GDPR. You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. Please use the link contained in each newsletter to help us immediately unsubscribe you.
Data collection when using the review function
In our shop you have the possibility to review our products. Your rating will be published with your first name. If you do not want your name to be published, we recommend that you use a pseudonym instead of your real name. When you submit a review, we will continue to store your IP address and your email address. This storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. The legal basis is Article 6(1) lit. f GDPR.
Data collection when participating in our competitions
We will process your data when you participate to our competitions on social media. Your data will be used by JewelCandle to contact the winners, deliver and follow up on prize deliveries. We will process the following categories of personal data: name, address, email address and telephone number.
Data collected by JewelCandle will be forwarded to third parties only to provide you with the services mentioned above, particularly to shipping suppliers for delivery of prizes.
The collection and processing of your personal data is based on your consent given when choosing to participate in a competition. You have the right to withdraw your consent for the processing of your data at any time. In this case, JewelCandle won’t be able to provide you with the services mentioned above.
In addition to the aforementioned data, cookies are stored on your computer when you use our website to make your visit to our website attractive and to enable the use of certain functions. Cookies are small text files that are stored on your end device in accordance with the browser you use and through which certain information flows to the site that places the cookie (here, this means through us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall. The legal basis for this is Article 6(1), lit. f GDPR.
Some of the cookies we use are deleted following the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (persistent cookies). You can set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. If cookies are not accepted, the functionality of our website may be limited.
Use of Google services
Google Universal Analytics
This website uses Google Universal Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Universal Analytics uses so-called “cookies”, which are text files placed on the user’s computer, to help the website analyse how you use the site. The information generated by the cookie about the use of this website by users is usually transmitted to a Google server in the USA and stored there. IP anonymisation has been activated on this website so that the IP addresses of users of Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area are shortened before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website by the users, to compile reports on website activities and to provide the website operator with further services associated with the use of the website and the Internet. The IP address transmitted by your browser in the context of Google Universal Analytics is not merged with other Google data.
In addition, a so-called user ID is used. This is not assigned to a specific device, but to a specific user. The user ID itself is a unique, permanent and non-personalised string. This enables the behaviour of the respective user on different end devices (smartphone, tablet, notebook, etc.) to be recorded. The user ID is assigned if we can uniquely identify a user. This is usually only possible if they use a personalised area (e.g. login area in our online shop). As soon as a user logs in for the first time, we will assign them a unique user ID. This user ID is transmitted to Google in connection with Google Universal Analytics and used as a pseudonym for Google. Subsequently, the online behaviour and the user ID are transferred to Google together and linked there to profiles. Google only receives the user ID and not the information from the linked profile or other personal data of the user. The user profiles created in this way are made available to us in summarised form. We do not merge the user profiles submitted to us to create a user ID with other personal data of the user.
You may at any time object to the collection of data described above with effect for the future by using the Google Analytics browser deactivation add-on at http://tools.google.com/dlpage/gaoptout?hl=en. An opt-out cookie is set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Google AdWords Conversion Tracking
We use Google AdWords to draw attention to our attractive offers with the help of advertising materials (so-called Google AdWords) on external websites. By referring to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. We are thus interested in showing you advertisements that are of interest to you to make our website more attractive for you.
These advertising media are delivered by Google via so-called “Ad Servers”. We use ad server cookies to evaluate certain parameters for measuring success, such as the integration of ads or clicks by users. If you access our website via a Google ad, Google AdWords stores a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally.
These cookies enable Google to recognise your Internet browser. If a user visits certain pages of an AdWords customer’s website and the cookie stored on their computer has not expired, Google and the customer can recognise that the user has clicked on the ad and has been redirected to this page. Each AdWords customer is assigned a different cookie. Cookies therefore cannot be traced via the websites of AdWords customers. We do not collect and process any personal data through the aforementioned advertising measures. We only receive statistical evaluations from Google; we do not receive further data from the use of the advertising material, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected by Google with this tool and therefore inform you according to our level of knowledge: the integration of AdWords Conversion means that Google receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
You can prevent participation in this tracking procedure in various ways:
- By setting your browser software accordingly and by suppressing third party cookies, which means that you will not receive any ads from third party providers;
- By disabling cookies for conversion tracking by setting your browser to block cookies from the “www.googleadservices.com” domain, https://www.google.de/settings/ads, whereby this setting is deleted when you delete your cookies;
- By deactivating the interest-based ads of providers that are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies;
- By permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin.
We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
Google Dynamic Remarketing
In addition to AdWords Conversion, we use the application Google Dynamic Remarketing. This is a process we would like to use to contact you again. This application allows you to see our advertisements after visiting our website if you continue to use the Internet. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behaviour when visiting various websites. Google will then be able to determine your previous visit to our website. According to Google’s own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. According to Google, pseudonymisation is used for remarketing. The legal basis for the processing of your data is Article 6(1) lit. f of the GDPR.
However, if you do not wish to use Google’s remarketing feature, you can, in principle, disable it by changing the appropriate settings in http://www.google.com/settings/ads or you can deactivate the cookies in your browser.
Use of Facebook services
Use of Facebook Social Plugin
Our website uses social plugins (“plugins”) from Facebook. The plugins can be identified by one of the Facebook logos (white “f” on blue tile or a “thumbs up” sign) or are marked with the suffix “Facebook Social Plugin”. The list and the appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins
We offer you the possibility to communicate directly with the provider of the plug-in via the button. The plug-in provider will only receive the information that you have accessed the corresponding website of our online offer if you click on the marked field and thereby activate it. The access data mentioned above in this data protection policy will also be transmitted. In the case of Facebook, according to the provider in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data will be transmitted to Facebook and stored in the USA. Since the plug-in provider collects data via cookies, we recommend that you delete all cookies using your browser’s security settings before clicking on the plug-in. We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider. The legal basis for the use of the plug-ins is Article 6(1) lit. f GDPR.
The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you click the activated plug-in button and link to e.g. the website, the plug-in provider will also save this information in your user account. We recommend that you log out regularly after using a social network, but especially before activating the plug-in button, as this prevents the plug-in provider from associating you with your profile.
Further information on data collection:
Facebook has signed up to the EU-US Privacy Shield
If you are a Facebook member and do not want Facebook to collect data about you via our website and link it to your membership data stored on Facebook, you must log out of Facebook before visiting our website. It is also possible to block Facebook plug-ins with add-ons for your browser, for example “Facebook Blocker”.
Facebook Custom Audiences
Furthermore, the website uses the remarketing function “Custom Audiences” of Facebook. This allows users of the website to see interest-based advertisements (“Facebook ads”) when visiting the social network Facebook or other websites that also use the process.
This provides a direct connection to the Facebook servers when you visit our website. We have no control over the extent and further use of the data collected by this tool and therefore inform you according to our level of knowledge: with the integration of Facebook Custom Audiences, Facebook receives information that you have visited the corresponding website of our Internet presence or that you have clicked on an ad from us. If you are registered with a Facebook service, Facebook can associate your visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and store your IP address and other identifying information.
The deactivation of the “Facebook Custom Audiences” function is available for logged in users at https://www.facebook.com/settings/?tab=ads#_=_.
The legal basis for the processing of your data is Article 6(1) lit. f of the GDPR. For more information about Facebook’s data processing, please visit https://www.facebook.com/about/privacy.
Web fonts from Adobe Typekit
This website uses so-called web fonts provided by Adobe Typekit for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
To do so, your browser must connect to the Adobe Typekit servers. This will enable Adobe Typekit to know that your IP address has been used to access our website. The use of Adobe Typekit web fonts is in the interest of a uniform and appealing presentation of our online offers. The legal basis for this is Article 6(1), lit. f GDPR.
If your browser does not support web fonts, a default font is used by your computer.
For more information about Adobe Typekit web fonts, see https://typekit.com/ and the Adobe Typekit Privacy Statement: https://www.adobe.com/uk/privacy/policies/typekit.html
You have the following rights towards us regarding personal data concerning you:
- Right to information: At any time, you have the right to request information about the personal data we have collected from you. You can send an email to email@example.com to obtain information about your personal data.
- Right to rectification: At any time, you have the right to request rectification of your personal data if the information is incorrect, including to complete your incomplete personal data.
- Right to erasure: At any time, you have the right to erase any personal data collected and processed by JewelCandle by indicating the data submitted in the request, except for the following situations:
– you have an ongoing matter with our Customer Service
– you have an open order which has not yet been fully shipped
– if you have made any purchase on our website, we will keep your personal data regarding this transaction for accounting purposes
– if you are suspected of or have misused our services within the last year before your purchase
- Right to restriction: You have the right to ask JewelCandle to restrict the processing of your data in certain cases, to temporally suspend the processing of the data or to keep it for longer if necessary.
- Right of objection to the processing: you have the right to object to the processing of your personal data if that processing is based solely on JewelCandle’s interests. JewelCandle will not continue to process your personal data unless we can demonstrate legitimate grounds for that due to legal claims, or a contract currently running between you and JewelCandle.
- Right to data portability: In the case where JewelCandle processes your data within your agreement, you have the right to receive the personal data that you made available for us in a structured and commonly used format.
JuwelKerze JewelCandle GmbH
Latest update: 13 June 2018