Privacy Policy

This translation is provided for information only. The German version is legally binding. The contract language and all our correspondence (emails, orders, invoices) are German; other languages only help you understand the menus.

1. Controller

Golden Art Juwelier, owner Ayse Güzel
Rethelstraße 141
40237 Düsseldorf
Germany
Phone: +49 (0) 211 7328 4200 (also WhatsApp)
Fax: +49 (0) 211 7328 4201
Email: info@jgoldenart.de

We are not legally required to appoint a data protection officer.

2. General

We process personal data only to the extent necessary to provide our website, process orders and enquiries or comply with legal obligations. The legal bases are in particular Art. 6 (1) (b) GDPR (contract and pre-contractual measures), (c) (legal obligation), (f) (legitimate interest) and (a) (consent).

3. Website access, server log files, hosting

When you visit our website, information transmitted by your browser is processed automatically: IP address, date and time, page accessed, referrer URL, browser type and operating system. This is necessary for the secure and stable provision of the website (Art. 6 (1) (f) GDPR). Log files are deleted after 14 days at the latest unless they are needed to investigate security incidents.

Our website is hosted by the hosting provider HostArmada. The provider processes data on our behalf on the basis of a data processing agreement (Art. 28 GDPR).

To protect against attacks and for faster delivery, we use Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Connection data such as your IP address is routed via Cloudflare servers. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; EU standard contractual clauses also apply.

4. Cookies

We only use technically necessary cookies, e.g. a session cookie so that the shopping cart and customer account login work (§ 25 (2) TDDDG, Art. 6 (1) (b) and (f) GDPR). We do not use analytics or advertising cookies. Session cookies are deleted when you close the browser.

5. Orders and customer account

To process your order, we process your name, address, email address, phone number, order and payment data (Art. 6 (1) (b) GDPR). For delivery, we pass your name and delivery address to the commissioned shipping company; for payment, we pass the necessary data to the bank or payment service provider you have chosen. For cash on delivery, the courier also receives the amount to be collected.

PayPal: If you pay with PayPal, we transmit the data required for payment (name, address, email address, order amount) to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (Art. 6 (1) (b) GDPR). PayPal is itself responsible for the processing carried out there; PayPal's privacy policy applies.

A customer account is optional. You can change the data stored there at any time or request deletion of the account.

We delete your data as soon as it is no longer required for the purposes. Due to retention obligations under commercial and tax law (§ 257 HGB, § 147 AO), we keep invoices and accounting records for up to ten years (Art. 6 (1) (c) GDPR).

6. Contact

If you contact us via the contact form, email, phone or WhatsApp, we process your details to handle your enquiry (Art. 6 (1) (b) or (f) GDPR). When you contact us via WhatsApp, the data is also processed by WhatsApp Ireland Limited (Meta); please only use this channel if you agree, otherwise use email or phone.

7. Google Maps (link only)

The contact page contains a link to Google Maps. The Google website is only opened when you click the link; Google's privacy policy then applies.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7 (3)).

Right to object: Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.

9. Data security

Our website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.

As of: November 2026