Privacy

1. Privacy at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?
Your data is collected, on the one hand, by you providing it to us, e.g. in the contact form. Other data is collected automatically when you visit the website by our IT systems (technical data such as browser, operating system, time of the page view).

What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used for statistical reach measurement, exclusively with your consent given via the cookie banner.

What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. For this and for any further questions, you can contact us at any time at the address provided in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

External hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the servers of the host. This may concern, above all, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).

The following host is used:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host.

3. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. We point out that data transmission over the internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Information on the responsible body

The body responsible for data processing on this website is:

Mein Juwelier
Owner: Nebahat Yildiz
Wengengasse 33
89073 Ulm
Phone: 0172 7145874
E-mail: meinjuwelier@mail.de

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal message by e-mail to us is sufficient for this. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is based (Baden-Württemberg).

SSL or TLS encryption

For security reasons, this site uses SSL or TLS encryption (HTTPS). You can recognise an encrypted connection by the fact that the browser address bar shows „https://“ and the lock symbol appears.

4. Data collection on this website

Cookies and consent

Our website uses exclusively technically necessary cookies as well as, subject to your express consent via the cookie banner, cookies and tracking pixels for reach measurement. You can call up your consent again at any time via the „Cookie settings“ link in the footer and change or withdraw it; alternatively, you can delete the data stored in your browser.

Server log files

The provider of the pages automatically collects and stores information in server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR.

Own reach-anonymous statistics (cookieless)

To improve our offering, we collect anonymised usage data (pages visited, approximate device type, referral source) using self-operated, data-minimising statistics. This measurement works entirely without cookies and stores no IP address. To distinguish between visits, only a daily changing, non-reversible check value is formed from the IP address, browser identifier and date; cross-page or cross-day recognition or any personal reference is therefore not possible. The data is processed exclusively on our server (Hetzner, Germany) and not passed on to third parties. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in cookieless, privacy-friendly reach measurement); no access to information on your device within the meaning of § 25 TDDDG takes place. The aggregated analyses are deleted after 14 months at the latest.

Error monitoring (Sentry)

Where activated, we use the service Sentry (Functional Software, Inc., San Francisco, USA) for technical stability, which collects technical diagnostic data (e.g. error message, browser type, accessed address) only in the event of an error. A recording of your session („Session-Replay“) does not take place. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable, secure operation); the transfer to the USA takes place on the basis of the EU-US Data Privacy Framework.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. The data is stored in our PostgreSQL database on the Hetzner server; in addition, a confirmation e-mail is sent to you via the service provider Resend (see below).

Legal basis: Art. 6(1)(b) GDPR (contract initiation) or Art. 6(1)(a) GDPR (consent via checkbox in the form). We do not pass on this data without your consent.

The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions (in particular retention periods) remain unaffected.

Enquiry by e-mail, telephone or WhatsApp

If you contact us by e-mail, telephone or WhatsApp, your enquiry, including all resulting personal data (name, enquiry, telephone number if applicable), will be stored and processed by us for the purpose of handling your request. Legal basis: Art. 6(1)(b)/(f) GDPR.

5. Processors and external services

Resend (e-mail dispatch)

For sending confirmation and notification e-mails, we use the service Resend of Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. A data processing agreement (DPA) has been concluded with Resend; the transfer to the USA takes place on the basis of the EU-US Data Privacy Framework certification. Legal basis: Art. 6(1)(b)/(f) GDPR.

Google Analytics 4 (only after consent)

If you have given your consent via the cookie banner, we use Google Analytics 4 of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, for statistical reach measurement. IP addresses are anonymised. You can withdraw your consent at any time. Legal basis: Art. 6(1)(a) GDPR.

Google Places (reviews)

Where activated, we embed reviews from our Google Business Profile via the Google Places API. The provider is Google Ireland Ltd. The data is retrieved server-side and cached for 12 hours; there is therefore no direct data transfer from the visitor to Google.

Online appointment booking

Via the contact page, you can book an appointment yourself. We process and store the data provided (name, e-mail, telephone, request, selected appointment and an optional message) exclusively on our own server in Germany in order to confirm and carry out the appointment. No transfer to third parties or to third countries takes place. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measure). You will receive a confirmation by e-mail; it is sent via our e-mail service provider (see the section on making contact).

To protect the booking form against automated requests (bots), we use „Cloudflare Turnstile“ of Cloudflare, Inc. In order to check whether the input comes from a human, your IP address is transmitted to Cloudflare; according to the provider, Turnstile does without cookies and without any analysis for advertising purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in defending against abuse).

6. Fonts

We use the fonts „Inter“ and „Cormorant Garamond“ via next/font. These are permanently built into our hosting when the website is built. There is no connection to Google Fonts or external servers when the page is accessed.

7. Your rights at a glance

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact us using the contact details provided in the legal notice.

Last updated: May 2026 · Template adapted to our tech stack (Hetzner hosting, Resend, GA4 after consent).