Privacy Policy
1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.
1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Rose & Hugh. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.
2) DATA COLLECTION WHEN VISITING OUR WEBSITE
If you use our website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
-
The website you visited
-
Date and time of access
-
Amount of data sent in bytes
-
Source/reference from which you accessed the site
-
Browser used
-
Operating system used
-
IP address used (if applicable: in anonymized form)
The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
3) COOKIES
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some cookies we use are deleted after the end of the browser session (session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies).
Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. Cookies may be used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit).
If personal data is processed by cookies implemented by us, processing is done in accordance with Art. 6 (1) (b) GDPR to execute the contract, or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in optimal website functionality and user-friendly design.
We may work with advertising partners who help make our website more interesting. Cookies from partner companies may be stored on your device when visiting our website (third-party cookies). If we work with such partners, you will be informed individually about the use of cookies and scope of collected data.
You can set your browser to inform you about cookies and decide individually whether to accept or reject them. Each browser differs in its cookie management. Guidance can be found here:
-
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
-
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
-
Chrome: https://support.google.com/chrome/answer/95647?hl=de
-
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
If you do not accept cookies, website functionality may be limited.
4) CONTACTING US
When you contact us (e.g., via contact form or email), personal data is collected. The data collected in the contact form is visible in the form itself. This data is stored and used exclusively to respond to your request or for contacting you and associated technical administration. Legal basis: Art. 6 (1) (f) GDPR.
If your contact aims at concluding a contract, the legal basis is Art. 6 (1) (b) GDPR. Your data will be deleted once your request has been fully processed, provided no statutory retention periods apply.
5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION
Personal data will be collected and processed if provided for contract execution or when opening a customer account (Art. 6 (1) (b) GDPR). Data collected is visible in the respective forms.
Customer accounts can be deleted at any time by contacting us at rosehughjewelry@gmail.com. Data is stored and used to process contracts, then blocked for tax/commercial retention periods and deleted afterward unless you consented to further use.
6) USE OF YOUR DATA FOR DIRECT MARKETING
6.1 Email newsletter registration
If you register for our newsletter, we will send you information about our offers. Only your email is required; other data is optional. We use double opt-in to confirm your consent.
You can withdraw consent at any time. Your email will be removed from our newsletter list immediately upon unsubscribing unless further use is legally permitted.
6.2 Newsletter for existing customers
If you provided your email during purchase, we may send you offers for similar products. Legal basis: Art. 6 (1) (f) GDPR. You can object at any time; transmission costs are at standard rates.
7) DATA PROCESSING FOR ORDER PROCESSING
7.1 Your data may be shared with delivery companies or payment institutions as required for order fulfillment (Art. 6 (1) (b) GDPR).
7.2 Payment service providers:
-
PayPal: Payment details are shared with PayPal for processing. Credit checks may occur; see https://www.paypal.com/de/webapps/mpp/ua/privacy-full
-
SOFORT: Payment processed via SOFORT GmbH; data shared only as required. See https://www.klarna.com/sofort/datenschutz
8) CONTACTING US FOR A REVIEW REMINDER
We may send a one-time review reminder via email if you consented during/after purchase (Art. 6 (1) (a) GDPR). Consent can be withdrawn at any time.
9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS
We use social plugins (Facebook, Google+, Instagram) via Shariff solution, which opens the social site in a separate window to enhance data protection.
-
Facebook: https://www.facebook.com/policy.php
-
Instagram: https://help.instagram.com/155833707900388/
10) ONLINE MARKETING
10.1 DoubleClick by Google
Used for targeted advertising. See https://www.google.de/policies/privacy/
10.2 Google AdWords Conversion Tracking
Tracks clicks on ads for conversion statistics; no personal identification. Opt-out: https://www.google.com/settings/ads/plugin?hl=de
11) WEB ANALYSIS SERVICES
Google Analytics (Universal) with anonymized IP and optional User-ID. Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de
12) RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING
Facebook Pixel and Google AdWords Remarketing used with consent (Art. 6 (1) (a) GDPR). Opt-out for cookies possible via:
-
Facebook: https://www.aboutads.info/choices/
13) RIGHTS OF THE DATA SUBJECT
Includes rights to information, rectification, erasure, restriction, objection, data portability, and complaints to a supervisory authority (Arts. 15–21 GDPR).
14) DURATION OF STORAGE OF PERSONAL DATA
Determined by statutory retention periods. Data is deleted once no longer required for contract fulfillment and no legitimate interest exists in continued storage.
