1. Privacy at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?
Your data is collected, on the one hand, by you providing it to us, e.g. in the contact form. Other data is collected automatically when you visit the website by our IT systems (technical data such as browser, operating system, time of the page view).

What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used for statistical reach measurement, exclusively with your consent given via the cookie banner.

What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. For this and for any further questions, you can contact us at any time at the address provided in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

External hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the servers of the host. This may concern, above all, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).

The following host is used:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host.

3. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. We point out that data transmission over the internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Information on the responsible body

The body responsible for data processing on this website is:

Mein Juwelier
Owner: Nebahat Yildiz
Wengengasse 33
89073 Ulm
Phone: 0172 7145874
E-mail: meinjuwelier@mail.de

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal message by e-mail to us is sufficient for this. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

SSL or TLS encryption

For security reasons, this site uses SSL or TLS encryption (HTTPS). You can recognise an encrypted connection by the fact that the browser address bar shows „https://“ and the lock symbol appears.

4. Data collection on this website

Cookies and consent

Our website uses exclusively technically necessary cookies as well as, subject to your express consent via the cookie banner, cookies and tracking pixels for reach measurement. You can call up your consent again at any time via the „Cookie settings“ link in the footer and change or withdraw it; alternatively, you can delete the data stored in your browser.

Storage in your browser

Without consent we only store in your browser what is strictly necessary for a function you use (§ 25(2) no. 2 TDDDG). This data is not transmitted to us or to third parties:

NEXT_LOCALE (cookie): your chosen language, until you close the browser.
mj-consent-v2 (local storage): your choice in the cookie notice, until you change it or clear your browser data.
mj-merkliste-v1 (local storage): the pieces on your wishlist. They stay on your device until you remove them or send the list to us yourself via WhatsApp.

Server log files

Whenever a page is requested, our server processes technically necessary data (IP address, time, requested address, browser identifier) in order to deliver the page to you. We do not keep an access log of your visits. In technical error logs of the web server the IP address is only stored in shortened form so that it can no longer be linked to a person; these logs are continuously overwritten. Legal basis: Art. 6(1)(f) GDPR (secure and stable operation).

Own reach-anonymous statistics (cookieless)

To improve our offering, we collect anonymised usage data (pages visited, approximate device type, referral source) using self-operated, data-minimising statistics. This measurement works entirely without cookies and stores no IP address. To distinguish between visits, only a daily changing, non-reversible check value is formed from the IP address, browser identifier and date; cross-page or cross-day recognition or any personal reference is therefore not possible. The data is processed exclusively on our server (Hetzner, Germany) and not passed on to third parties. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in cookieless, privacy-friendly reach measurement); no access to information on your device within the meaning of § 25 TDDDG takes place. The aggregated analyses are deleted automatically after 14 months.

Error monitoring (Sentry)

Where activated, we use the service Sentry (Functional Software, Inc., San Francisco, USA) for technical stability, which collects technical diagnostic data (e.g. error message, browser type, accessed address) only in the event of an error. A recording of your session („Session-Replay“) does not take place. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable, secure operation); the transfer to the USA takes place on the basis of the EU-US Data Privacy Framework.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. The data is stored in our PostgreSQL database on the Hetzner server; in addition, a confirmation e-mail is sent to you via the service provider Resend (see below).

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent via checkbox in the form). We do not pass on this data without your consent.

We keep your enquiry until it has been dealt with, but no longer than 12 months after receipt; it is then deleted automatically. You can ask for deletion earlier at any time. Statutory retention obligations (e.g. after a purchase) remain unaffected.

Enquiry by e-mail, telephone or WhatsApp

If you contact us by e-mail, telephone or WhatsApp, your enquiry including all resulting personal data (name, enquiry, telephone number if applicable) will be stored and processed by us for the purpose of handling your request. Legal basis: Art. 6(1)(b)/(f) GDPR.

For messages via WhatsApp, WhatsApp Ireland Ltd. (Meta) is also involved; data may be transferred to the USA. WhatsApp's privacy notice applies. If you prefer not to use it, you are welcome to reach us by telephone or e-mail.

5. Processors and external services

Resend (e-mail dispatch)

For sending confirmation and notification e-mails, we use the service Resend of Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. A data processing agreement (DPA) has been concluded with Resend; the transfer to the USA takes place on the basis of the EU-US Data Privacy Framework certification. Legal basis: Art. 6(1)(b)/(f) GDPR.

Google Analytics 4 (only after consent)

If you have given your consent via the cookie banner, we use Google Analytics 4 of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, for statistical reach measurement. The cookies "_ga" and "_ga_*" are set (stored for up to 2 years). According to Google, full IP addresses are not stored. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Analytics data is deleted by Google after 14 months. You can withdraw your consent at any time via "Cookie settings". Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG.

Google Ads conversion measurement (only after consent)

From time to time we run ads via Google Ads (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). If you have given your consent via the cookie banner and arrived through one of our ads, Google Analytics reports to Google Ads whether a contact action followed (call, WhatsApp, appointment booking or contact form). For this, Google sets the cookie "_gcl_au" (stored for 90 days). This shows us which ads actually bring enquiries. Ads are not personalised (no remarketing). Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time via "Cookie settings". Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG.

Google Places (reviews)

Where activated, we embed reviews from our Google Business Profile via the Google Places API. The provider is Google Ireland Ltd. The data is retrieved server-side and cached for 12 hours; there is therefore no direct data transfer from the visitor to Google.

Online appointment booking

You can book an appointment yourself via the contact page. The data you enter (name, e-mail, telephone, purpose, chosen appointment and an optional message) is processed and stored on our own server in Germany in order to confirm and carry out the appointment. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). You receive a confirmation by e-mail via our e-mail provider Resend (see above). Appointment data is deleted automatically 12 months after the appointment.

Spam protection (Cloudflare Turnstile)

The contact and booking forms are protected against automated requests by "Cloudflare Turnstile" of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your IP address and technical characteristics of your browser are transmitted to Cloudflare to check whether the input comes from a human. According to the provider, Turnstile sets no cookies and does not evaluate data for advertising. The transfer to the USA is based on the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR (prevention of misuse); access to your device is strictly necessary for sending the form you requested (§ 25(2) no. 2 TDDDG).

6. Fonts

We use the fonts „Jost“ and „Cormorant Garamond“ via next/font. These are permanently built into our hosting when the website is built. There is no connection to Google Fonts or external servers when the page is accessed.

7. Your rights at a glance

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact us using the contact details provided in the legal notice.

As of October 2026