Source: https://www.21diamonds.nl/pages/data-bescherming/
Timestamp: 2019-04-24 15:47:08+00:00

Document:
The data controller is the natural or legal person, authority, institution or other body (in our case: legal person) that alone or together with others decides on the purposes and means of processing personal data.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. General Data Protection Regulation (GDPR) serves as the legal basis.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. The person responsible reserves the right to store further data to prevent cyber attacks; in this case, IP addresses may be blacklisted so that it is no longer possible to access our website. In such a case, a user's IP address will be kept for a maximum of one month.
Creation of a wish list.
As a user you have the possibility to cancel the registration at any time. All you need to do is send an informal request to the person responsible (for contact details, see section 1). You can change the data stored about you at any time. For this purpose, we provide a function within the scope of the customer account.
There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, only the data entered in the input mask will be transmitted to us and stored.
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. In all other respects a revocation of the consent and a contradiction of the storage can be addressed informally by inquiry to 21Diamonds GmbH (contact data see Ziff. 1). All personal data stored in the course of contacting us will be deleted in this case.
When you place an order via our homepage, we collect the personal data required to carry out this process. We pass this data on to logistics service providers as far as this is necessary to process the contract. We will pass on the data provided by you for processing the payment transaction to the credit institution named by you, insofar as this is necessary for the execution of the payment transaction. We work together with various payment service providers, which we will discuss in more detail below.
The legal basis for the collection and dissemination of this data is Art. 6 para. 1 lit. b GDPR.
We use the online payment service PayPal. Payments can be made through PayPal accounts, which are virtual private or business accounts. In addition, PayPal offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and provides buyer protection services.
If you select "PayPal" as a payment option in our online shop during the order process, personal data is automatically transmitted to PayPal. By selecting this payment option, you consent to the transfer of personal data required for payment processing.
The purpose of data transmission is to process payments and prevent fraud. We will transfer personal data in particular if there is a legitimate interest in the transfer. The personal data exchanged between PayPal and us may be transferred by PayPal to credit agencies. The purpose of this transmission is to verify identity and creditworthiness.
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR.
You have the option to revoke your consent to the handling of personal data by PayPal at any time. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing.
We use the online payment service Amazon Payments. When using this service, a user's data stored in an existing Amazon account is used to perform a payment transaction for an external site. This saves the user from entering payment and address data on the external page.
The European operating company of Amazon Payments is Amazon Payments Europe S.C.A. 5, Rue Plaetis, 2338 Luxembourg, Luxembourg.
If you select "Amazon Payments" as a payment option in our online shop during the order process, personal data is automatically transmitted to Amazon Payments. By selecting this payment option, you consent to the transfer of personal data required for payment processing.
The purpose of data transmission is to process payments, prevent fraud and simplify payment transactions. We will transfer personal data to Amazon Payments in particular if there is a legitimate interest in the transfer. The personal data exchanged between Amazon Payments and us may be transferred by Amazon Payments to credit agencies. The purpose of this transmission is to verify identity and creditworthiness.
Amazon Payments may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of Amazon Payments.
You have the right to revoke your consent to Amazon Payments handling your personal data at any time. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing.
We use the online payment service BillPay. This service makes it possible to pay the purchase price by invoice, direct debit or in instalments.
The operating company is BillPay GmbHG, Zinnowitzer Str. 1, 10115 Berlin, which belongs to the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).
We will only pass on the data provided by you within the framework of the order process to BillPay GmbH if and to the extent that this is necessary for the processing of the payment transaction. The legal basis for the transfer of this data is Art. 6 para. 1 lit. b GDPR.
BillPay may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of BillPay. This can be in particular the company GiroSolution AG, Hauptstraße 27, 88699 Frickingen. The legal basis for the transfer of this data is Art. 6 para. 1 lit. b GDPR.
You have the option to revoke your consent to BillPay to handle your personal data at any time. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing.
We cooperate with the online payment service IMMEDIATELY. If you use this service, transfer the online PIN of your bank account as well as a specific TAN to Sofort GmbH, which then checks your account balance and thus the probable success of the transaction and subsequently sends us a transaction confirmation.
The operating company is SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, which belongs to the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).
We pass on the data provided by you within the scope of the order process only then and only insofar to the IMMEDIATE GmbH, as this is necessary for the processing of the payment process.
The legal basis for the transfer of this data is Art. 6 para. 1 lit. b GDPR.
We work together with the online payment service Adyen.
The German operating company of Adyen is Adyen GmbH, Hackescher Markt 4, Building 44, 10178 Berlin.
If you select "Adyen" as payment option in our online shop during the order process, personal data is automatically transmitted to Adyen. By selecting this payment option, you consent to the transfer of personal data required for payment processing.
The personal data transmitted to Adyen is generally first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing. Personal data in connection with the respective order are also necessary for the processing of the purchase contract.
The purpose of data transmission is to process payments and prevent fraud. We will transfer personal data in particular if there is a legitimate interest in the transfer. The personal data exchanged between Adyen and us may be transferred by Adyen to credit agencies. The purpose of this transmission is to verify identity and creditworthiness.
Adyen may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of Adyen.
You have the possibility to revoke your consent to the handling of personal data at any time. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing.
Our website uses Google Analytics, a web analysis service provided by Google Inc. (following: Google). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will previously be reduced by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
Our site uses Google AdWords, an Internet advertising service that allows advertisers to serve ads in both Google search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define certain keywords to display an ad in Google's search engine results only when the user uses the search engine to retrieve a keyword-relevant search result. On the Google Network, ads are distributed to thematically relevant websites using an automatic algorithm and using the previously defined keywords.
If a person concerned reaches our website via a Google ad, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. What a cookie is has already been explained in paragraph 6 above. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping basket of an online shop system, have been called up on our website. The conversion cookie enables both us and Google to track whether a person who has accessed our website via an AdWords ad has generated revenue, i.e. has completed or cancelled a purchase of goods.
Since the purpose of the use of conversion cookies is to serve targeted advertising, the legal basis for data processing is set out in Art. 6 para. 1 lit. f GDPR.
Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
Furthermore, you have the opportunity to object to interest-based advertising by Google. To do this, the person concerned must access the www.google.de/settings/ads link from each of the Internet browsers they use and make the required settings there.
Our website uses the functions of Google AdWords Remarketing. Remarketing describes an advertising behavior that specifically addresses those visitors to a website who have already shown a concrete interest in the respective website in the past.
For remarketing purposes, Google leaves a cookie in your device's browser that can display personalized advertising using a pseudonymous cookie ID. Pseudonymization enables Google to manage advertisements not for a specific person, but exclusively for the owner of a cookie, without Google (or a third party) knowing who that person is.
Any further processing will only take place if you have consented to Google doing so (linking your Google Account and browser history to display personalised advertising).
To prevent the setting of cookies and their effects, see also paragraphs 6 and 11 a) above.
We use the conversion tracking technology Bing Ads from Microsoft. If you came across our site via a Bing ad, Bing Ads will place a cookie in your system. It loses its validity after 180 days. Personal identification is not possible. If the user returns to our online presence within the validity of the cookie, Microsoft and we can verify that the user was directed to our website via the Bing advertisement.
Bing is operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
This procedure serves the effective, interest-fair and personalisieren switching of advertisement. The legal basis for the processing of personal data is Art. 6 para. 1 lit. f GDPR.
Our website uses the Criteo service, which uses an algorithm to investigate the user's movement behaviour on the web. Based on the evaluation, it is possible to display personalized advertising on external pages.
The operating company is Criteo SA, 32 Rue Blanche, 75009 Paris, France.
The legal basis for data processing can be found in Art. 6 para. 1 lit. f GDPR.
The data collected in this way is not suitable for identifying a user. The data will not be passed on to third parties.
We use the so-called Facebook pixel. This serves to define the visitors to our website as the target group for certain advertising campaigns operated via Facebook. The pixel makes it possible to display our advertising campaigns only to users who have already shown a concrete interest in our online offer in the past (so-called custom audiences). This procedure also prevents our advertising from being displayed to users who are not interested in our offer and would therefore find the advertising disturbing.
Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA; in the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The data collected in this way is used by us exclusively for statistical and market research purposes, without any conclusion being possible as to the identity of the respective user. However, Facebook can identify the user by linking the data to the Facebook profile. A cookie may also be stored in your system in this context.
The legal basis can therefore be found in Art. 6 para. 1 lit. a GDPR.
However, consent is only granted if the user is 13 years of age. If you are younger, the consent of your legal guardian is required.
To prevent the setting of cookies and their effects, see also paragraphs 6 and 11 a) and b) above.
We use the services of third parties described below on our website.
Third-party providers may also set cookies in your system. In this respect, we refer to paragraph 5 (log files) and paragraph 6 (cookies) of this data protection declaration.
The data processing serves the analysis and optimization of our online offer. The legal basis is Art. 6 para. 1 lit. f GDPR.
We use the Google Maps map service provided by Google.
The operator of the Google Maps services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
In our online presence we display the "seal of approval" of Trusted Shops, which at the same time enables a perception of the ratings given for our offer.
The operating company is Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
The personal data collected when clicking on the logo will be deleted no later than seven days after the page visit. Further data transfer to Trusted Shops can only occur if you purchase a product offered by Trusted Shops or are already a registered user of Trusted Shops.
In our online presence, we display eKomi's "seal of approval", which at the same time enables a perception of the evaluations given for our offer.
The German operating company is eKomi Ltd, Markgrafenstraße 11, 10969 Berlin, Germany.
The data stored by eKomi in log files are made anonymous, i.e. an identification of a certain person is not possible.
You also have the right to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR for reasons arising from your particular situation.
Your right of objection may be limited to the extent that it is likely to make it impossible or seriously impair the realisation of the research or statistical purposes and the limitation is necessary for the fulfilment of the research or statistical purposes.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 89