Privacy policy

Last updated: 29 September 2026

VIVIANNASCHMUCK operates this shop and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a personalised shopping experience (the ‘Services’). VIVIANNASCHMUCK is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use or disclose personal data when you visit or use the website, make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our terms and conditions and this Privacy Policy, this Privacy Policy takes precedence with regard to the collection, processing and disclosure of your personal data.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you confirm that you have read this Privacy Policy and agree to the collection, use and disclosure of your data as described in this Privacy Policy.

What personal data do we collect or process?

When we use the term ‘personal data’, we are referring to information that identifies you or another person or that can be directly associated with you. Personal data does not include information that is collected anonymously or that has been anonymised in such a way that it cannot identify you or be attributed to you. Depending on how you interact with the Services, where you live and as permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences drawn from this personal data:

• Contact details including name, postal address, billing address, delivery address, telephone number and email address.
• Financial information including credit card, debit card and financial account numbers, payment card information, financial account information, transaction details, method of payment, payment confirmation and other payment details.
• Account information including username, password, security questions, configurations and settings.
• Transaction information including the items you view, add to your cart, add to your wish list or buy, return, exchange or cancel, as well as your past transactions.
• Communications with us including the information you provide when communicating with us, for example when you send an enquiry to customer support.
• Device information including information about your device, browser or network connection, IP address and other unique identifiers.
• Usage information including information about your interaction with the Services, including how and when you interact with or browse the Services.

Sources of personal data

We may collect personal data from the following sources:

• Directly from you Among other things, we collect data when you create an account, access or use the Services, communicate with us or otherwise provide us with your personal data.
• Automatically through the Services Among other things, we collect data from your device or when you use our products or services or visit our website, and through the use of cookies and similar technologies.
• From our service providers Among other things, we collect data when we engage service providers to enable certain technologies and when they collect or process your personal data on our behalf.
• From our partners and other third parties

How do we use your personal data?

Depending on how you interact with us or which of the Services you use, we may use personal data for the following purposes:

• Providing, tailoring and improving the Services. We use your personal data to provide you with the Services. This includes, among other things, performing our contract with you, processing your payments, fulfilling your orders, saving your configurations and the items you are interested in, sending notifications relating to your account, creating, maintaining and otherwise managing your account, arranging shipping, facilitating returns and exchanges, enabling you to submit reviews and creating a personalised shopping experience for you, for example by recommending products based on your purchases. This may also include using your personal data to better tailor and improve the Services.
• Marketing and advertising. We use your personal data for marketing and advertising purposes, for example to send marketing and advertising communications by email, SMS or post and to show you online advertising for products or services on the Services or other websites, including on the basis of items you have previously purchased or added to your cart, as well as other activity relating to the Services.
• Security and fraud prevention. We use your personal data to authenticate your account, to provide a secure payment and shopping experience, to detect, investigate or take action against possible fraudulent, illegal, unsafe or malicious activity, to protect public safety and to keep our Services secure. If you choose to use the Services and register an account, you are responsible for protecting your account login details. We strongly recommend that you do not share your username, password or other access details with anyone else.
• Communicating with you. We use your personal data to provide you with customer support and effective services, to respond to your enquiries promptly and to maintain our business relationship with you.
• Legal reasons. We use your personal data to comply with applicable law or to respond to lawful legal process, including requests from law enforcement or regulatory authorities, to investigate or take part in civil investigations, potential or actual litigation or other adversarial proceedings, and to investigate potential breaches of our terms or policies or to enforce those terms and policies.

How do we disclose personal data?

In certain circumstances, we may disclose your personal data to third parties for legitimate purposes in accordance with this Privacy Policy. Such circumstances may include:

• In the case of Shopify, these are vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
• We share personal data with business and marketing partners who provide marketing services to you and show you advertising. For example, we use Shopify to support personalised advertising with third-party services based on your online activity across different merchants and websites. Our business and marketing partners use your data in accordance with their own privacy policies. Depending on where you live, you may have the right to instruct us not to share information about you for the purpose of showing you targeted advertising and marketing based on your online activity across different merchants and websites.
• When you ask us or otherwise give your consent to share certain information with third parties, for example to deliver products to you, or when you use social media widgets or login integrations.
• We share personal data with our affiliates or otherwise within our group of companies.
• In connection with a business transaction such as a merger or insolvency, to comply with applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce applicable terms of service or policies, and to protect or defend the Services, our rights and the rights of our users or others.

Payment processing and payment service providers

To process your payment, we pass the data required for this purpose (in particular name, billing and delivery address, email address, order number, order value and the payment details you enter during the ordering process) to the provider of the payment method you have chosen. The legal basis is Art. 6(1)(b) GDPR (performance of the contract). The payment service providers are independent controllers for the processing of your data in the course of payment processing; their privacy notices apply in addition.

• PayPal. If you pay via PayPal, payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxemburg. Privacy notice: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
• Shopify Payments (credit and debit card, Apple Pay, Google Pay, Shop Pay and other payment methods shown during the ordering process). Payments are processed via Shopify Payments, a service of Shopify International Limited, The Sidings, 4th Floor, Grand Canal Quay, Dublin D02 E7K8, Ireland. The payment service provider is Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland. Your card details are transmitted directly to the payment service provider during the ordering process and are not stored by us. Stripe privacy notice: https://stripe.com/de/privacy. With Apple Pay, Google Pay and Shop Pay, the respective provider (Apple, Google or Shopify) additionally processes your data in accordance with its own privacy policy.
• Klarna. If you pay via Klarna (pay by invoice, pay in instalments, pay now), you will be redirected to Klarna and conclude a contract there with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (German branch: Klarna Bank AB German Branch, Chausseestraße 117, 10115 Berlin). In doing so, Klarna collects the data required for payment processing (in particular name, address, date of birth, email address, telephone number, order and payment data and IP address) and, in order to decide whether to grant the chosen payment method, carries out an identity and credit check, for which information may also be obtained from credit reference agencies. Klarna is the independent controller for this processing. Details, including on the credit reference agencies involved and on your rights vis-à-vis Klarna, can be found in Klarna's privacy policy: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
• Payment in advance. If you pay in advance, you transfer the amount to our bank account. We process the transfer data (name, bank details, payment reference) in order to match the payment to your order; the data is stored in accordance with the retention periods under commercial and tax law.

Shipping and shipment tracking

To deliver your order, we pass your name and delivery address to the carrier commissioned with the shipment. Depending on the destination and type of shipment, we ship with Deutsche Post AG / DHL Paket GmbH (Bonn) or DPD Deutschland GmbH (Aschaffenburg); we book some of the shipping labels via the shipping platform JUMiNGO (JUMiNGO GmbH, Breslauer Platz 4, 50668 Köln), which receives your delivery data for this purpose. We only pass your email address or telephone number to the carrier insofar as this is necessary for delivery or for announcing the delivery. The legal basis is Art. 6(1)(b) GDPR.

For shipment tracking, we use the app ‘CWILL Order Tracking (Parcel Panel)’ from CWILL Inc., 201 Commonwealth Ct, Ste 220, Cary, NC 27511, USA. The app receives the order number, tracking number, name, email address, delivery address and shipment status in order to show you the shipping status on our shipment tracking page and, where applicable, to inform you by email about the progress of your shipment. The data is processed in the USA; the transfer is based on the European Commission's standard contractual clauses. The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in transparent delivery (Art. 6(1)(f) GDPR). The app is also integrated as a pixel via the Shopify ‘Customer events’ feature and, after you have given your consent, receives order events for statistical purposes. Further information: https://www.cwill.com/privacy-policy/.

Cookies, consent banner and tracking technologies

Our website uses cookies and similar technologies (e.g. pixels, local storage, tags). We use technically necessary cookies, for example for the cart, the checkout, the customer account, the language and currency settings and the security of the website, on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. We use all other cookies and technologies for statistics and marketing described in the following sections only if you have given your consent via our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). The cookie banner is provided by Shopify; your choice is stored in a cookie so that it is taken into account on subsequent visits. Our partners' statistics and marketing services are integrated via the Shopify ‘Customer events’ feature (web pixels) and only receive data after you have given your consent. Services whose script is already loaded when the page is opened operate in cookieless mode unless you have given your consent; details can be found in the sections on Google, Microsoft Clarity and Klaviyo.

You can change or withdraw your consent at any time with effect for the future by reopening the cookie settings via the ‘Cookie settings’ link in the page footer or by deleting the cookies in your browser. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Google Analytics 4

We use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). It is integrated via the Shopify sales channel ‘Google & YouTube’. Google Analytics uses cookies and similar technologies to analyse your use of the website (e.g. pages visited, time spent, device, approximate location, cart and orders). Google Analytics 4 does not store complete IP addresses. The information generated is usually transferred to and stored on servers of Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. We use the analyses to improve our offering and our website.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without your consent, the Google tag does not set any cookies or store any identifiers; it then only transmits cookieless signals without a user identifier, which Google uses exclusively for aggregated statistics (Google Consent Mode). The legal basis for this is our legitimate interest in audience measurement (Art. 6(1)(f) GDPR). User-level data is deleted after no more than 14 months. Further information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245.

Google Ads and Google Shopping

We place ads via Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and use conversion tracking and remarketing functions. If you reach us via a Google ad, Google sets a cookie that enables Google and us to recognise whether you have carried out certain actions (e.g. placed an order). We do not receive any information that would allow us to identify you personally, only statistical analyses. Remarketing allows us to show you interest-based ads on websites in the Google advertising network. Data may be transferred to Google LLC in the USA (certified under the EU-US Data Privacy Framework). Google Consent Mode also applies here: without your consent, no cookies are set and no identifiers are stored.

We transmit our product data (item name, price, image, availability) to Google Merchant Center using the app ‘Simprosys Google Shopping Feed’ from Simprosys InfoMedia, B-303, Shapath Hexa, S. G. Highway, Ahmedabad 380060, India, so that our products appear on Google Shopping; this product data feed does not contain any of your personal data. The app is also integrated as a pixel via the Shopify ‘Customer events’ feature and can transmit order events to Google to measure our Google ads; this too only takes place after you have given your consent (Consent Mode).

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). In addition, you can use https://adssettings.google.com to deactivate personalised advertising. Further information: https://policies.google.com/technologies/ads.

Meta Pixel (Facebook and Instagram)

Via the Shopify sales channel ‘Facebook & Instagram’, we use the Meta Pixel and the Conversions API of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (‘Meta’). This allows us to measure the success of our ads on Facebook and Instagram and to show interest-based ads to users who have visited our website. In the process, your IP address, device information, pages visited and order events, among other things, are transmitted to Meta; if you are logged in to Facebook or Instagram, Meta may associate this data with your account. We are joint controllers with Meta for the collection and transmission of this data (Art. 26 GDPR); Meta alone is responsible for the further processing. Data may be transferred to Meta Platforms, Inc. in the USA (certified under the EU-US Data Privacy Framework).

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Further information: https://www.facebook.com/privacy/policy; advertising settings: https://www.facebook.com/ads/preferences.

Pinterest Tag

Via the Shopify sales channel ‘Pinterest’, we use the Pinterest Tag of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. It records visits and order events in order to measure the success of ads on Pinterest and to build target audiences. Data may be transferred to Pinterest, Inc. in the USA; according to its own statements, Pinterest bases these transfers on the European Commission's standard contractual clauses.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Further information: https://policy.pinterest.com/de/privacy-policy.

Microsoft Advertising (UET tag)

We place ads via Microsoft Advertising (Bing) and for this purpose use Universal Event Tracking (UET) from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. The UET tag is integrated as a pixel via the Shopify ‘Customer events’ feature and, after you have given your consent, records page views and order events in order to measure the success of our ads and to show you interest-based ads in the Microsoft advertising network (remarketing). Data may be transferred to Microsoft Corporation in the USA (certified under the EU-US Data Privacy Framework).

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). In addition, for advertising from Microsoft, you can use https://account.microsoft.com/privacy/ad-settings to deactivate personalised advertising. Further information: https://privacy.microsoft.com/de-de/privacystatement.

Microsoft Clarity

We use Microsoft Clarity, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Clarity records how visitors use our website (mouse movements, clicks, scrolling behaviour, pages visited) and uses this to create heatmaps and session recordings. Entries in form fields are masked in the process. We use these analyses to improve the user-friendliness of our website. Data may be transferred to Microsoft Corporation in the USA (certified under the EU-US Data Privacy Framework).

The Clarity script is loaded when the page is opened and is informed of your consent via Shopify's customer privacy feature. Without your consent, Clarity operates in cookieless mode: no cookies are set and no identifiers are stored; the analysis is then limited to the individual page view and cannot be linked to other page views or to you personally (Art. 6(1)(f) GDPR, legitimate interest in an aggregated analysis of usage). Only after you have given your consent does Clarity set cookies and combine your page views into a session (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Further information: https://privacy.microsoft.com/de-de/privacystatement and https://clarity.microsoft.com/terms.

Live statistics (RealtimeStack)

We use the app ‘RealtimeStack: Live Analytics’ from the provider Spritefish, Furesøparkalle 33, 3460 Birkerød, Denmark. The app is integrated as a pixel via the Shopify ‘Customer events’ feature and, after you have given your consent, records which pages and products you view, what you search for and which items you add to your cart or order, together with your approximate location (based on your IP address) and the source of your visit. We use this analysis to see how our shop is used and where visitors run into difficulties (e.g. broken links or sold-out items). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Further information: https://wally.v3.realtimestack.com/privacypolicy.html.

Newsletter and marketing emails (Klaviyo)

If you subscribe to our newsletter (via the sign-up form on our website or the corresponding tick box during the ordering process), we use your email address and, if provided, your name to send you regular information about our products, promotions and news. Sign-up via the form uses the double opt-in procedure: you will receive an email in which you must confirm your sign-up. We log the sign-up, the confirmation, the time and your IP address so that we can prove your consent. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time via the unsubscribe link in every email or by sending a message to kontakt@viviannaschmuck.de; your data will then be deleted from the mailing list unless statutory retention obligations prevent this.

After a purchase, we also send you emails with care instructions for your piece of jewellery and with recommendations for similar products from our range, for example on the anniversary of your engraving or in the month of your birthstone. The legal basis is our legitimate interest in looking after our customers and in advertising our own similar products (Art. 6(1)(f) GDPR, § 7(3) UWG). If you start an order, enter your email address and do not complete the purchase, we may remind you of your selection by email; likewise, we may remind you of products you have viewed, provided you have consented to the recording of your usage behaviour in the cookie banner. The legal basis is our legitimate interest in completing orders that have been started (Art. 6(1)(f) GDPR). You can object to all advertising emails at any time, for example via the unsubscribe link in every email; we will then not send you any further advertising emails.

To send and analyse these emails, we use Klaviyo, a service of Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02111, USA. Klaviyo records whether and when emails were opened and which links were clicked in order to measure the success of our campaigns and to tailor content. Klaviyo sign-up forms are also integrated on our website. The Klaviyo script is loaded when the page is opened; your usage behaviour on our website (e.g. products viewed, cart) is only recorded and linked to your newsletter profile by means of a cookie if you have given your consent in the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG); in doing so, Klaviyo takes into account the consent recorded via Shopify. Klaviyo is certified under the EU-US Data Privacy Framework; the European Commission's standard contractual clauses also apply. Further information: https://www.klaviyo.com/legal/privacy/privacy-notice.

Product reviews (Judge.me)

For product reviews, we use Judge.me, a service of Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London EC2A 2AB, United Kingdom. The reviews are displayed on our product pages via a Judge.me widget; in the process, your IP address is transmitted to Judge.me (Art. 6(1)(f) GDPR, legitimate interest in displaying customer reviews). After an order, we may ask you by email to leave a review; you submit the review via the link in this email in a form provided by Judge.me. The legal basis for the review request is our legitimate interest in quality assurance and in advertising our products (Art. 6(1)(f) GDPR); you can object to this at any time, for example via the unsubscribe link in the email or by sending a message to kontakt@viviannaschmuck.de.

If you submit a review, we process your name, your email address, the review text, the star rating and any photos or videos you upload. The review is published on our website with your name in abbreviated form; your email address is not published and is used to check whether the review comes from a buyer. The legal basis is your consent, which you give by submitting the review (Art. 6(1)(a) GDPR). Judge.me is also integrated as a pixel via the Shopify ‘Customer events’ feature and, after you have given your consent, receives order events in order to match review requests. For the United Kingdom, there is an adequacy decision by the European Commission. Further information: https://judge.me/privacy.

Contacting us and contact form

If you contact us by email, telephone or via the contact form, we process the data you provide (name, email address, telephone number if applicable, order number, message and attachments) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete enquiries as soon as they have been dealt with and no statutory retention obligations prevent this.

We provide the contact form on our website using the app ‘Powerful Contact Form Builder’ (Globo) from PowerfulForm Technology Company Limited, 19 Tuyen, Soc Son, Hanoi, Vietnam. The data entered via the form is stored on the provider's servers at Amazon Web Services and DigitalOcean in Canada, France and the USA and forwarded to us. As there is no adequacy decision by the European Commission for Vietnam, the transfer is based on the European Commission's standard contractual clauses (Art. 46 GDPR), which form part of our data processing agreement with the provider. Further information: https://powerfulform.com/pages/privacy-policy.

Chat (Shopify Inbox)

For the chat on our website, we use Shopify Inbox, a service of Shopify International Limited, The Sidings, 4th Floor, Grand Canal Quay, Dublin D02 E7K8, Ireland. If you use the chat, we process the messages you enter and, if provided, your name and email address in order to answer your enquiry; we also see technical details such as the page you are viewing and your cart so that we can help you better. The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR. We delete chat histories as soon as the enquiry has been dealt with and no retention obligations prevent this. Further information can be found in Shopify's privacy policy (link in the section ‘Relationship with Shopify’).

Protection against misuse (hCaptcha)

To protect our forms (e.g. contact form, customer account login) against misuse by automated programs, Shopify uses the hCaptcha service of Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA. hCaptcha uses characteristics such as IP address, browser information and your interaction with the form to check whether the input is made by a human; the data collected in the process is transmitted to hCaptcha. Intuition Machines, Inc. is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in protecting the website against misuse and spam (Art. 6(1)(f) GDPR). Further information: https://www.hcaptcha.com/privacy.

YouTube video

A video from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is embedded on our homepage. As soon as the video area becomes visible in your browser, the browser connects to YouTube's servers so that the video can be played. As a result, YouTube learns that you have visited our website and may set cookies; if you are logged in to YouTube, YouTube can associate the visit with your account. Data may be transferred to Google LLC in the USA (certified under the EU-US Data Privacy Framework). The legal basis is our legitimate interest in an appealing presentation of our offering (Art. 6(1)(f) GDPR). Further information: https://policies.google.com/privacy.

Links to social networks

On our website, we link to our profiles on Facebook, Instagram and Pinterest. These are simple links; no data is transmitted to these providers when you visit our website. Only when you click on a link are you taken to the website of the respective provider, to which that provider's privacy policy applies.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your access to and use of the Services in order to provide and improve the Services for you. Data that you submit to the Services is passed to Shopify and to third parties that may be located in countries other than the country in which you live, in order to provide and improve the Services for you. To protect, grow and improve our business, we also use certain enhanced Shopify features that incorporate data and information from your interactions with our shop, with other merchants and with Shopify. To provide these enhanced features, Shopify may use personal data collected through your interactions with our shop, other merchants and Shopify. In these circumstances, Shopify is responsible for the processing of your personal data, including for responding to your requests to exercise your rights regarding the use of your personal data for these purposes. Further information about how Shopify uses your personal data and what rights you have can be found in the Shopify Consumer Privacy Policy . Depending on where you live, you can exercise certain rights in relation to your personal data listed here Link to the Shopify privacy portal.

Third-party websites and links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliate websites or are not controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such websites, including the accuracy, completeness or reliability of the information found on these websites. Information you provide in public or semi-public places, including information you share on third-party social networking platforms, may also be viewed by other users of the Services and/or users of those third-party platforms, without restriction as to its use by us or by a third party. Our inclusion of such links does not mean that we endorse the content of these platforms or their owners or operators, unless this is expressly stated in the Services.

Children's data

The Services are not intended for use by children, and we do not knowingly collect any personal data from children who have not yet reached the age of majority in your country. If you are the parent or guardian of a child who has provided us with their personal data, you can contact us using the contact details below to request the deletion of this data. As of the effective date of this Privacy Policy, we have no knowledge that we ‘share’ or ‘sell’ (as these terms are defined in applicable law) personal data of persons under 16 years of age.

Security and retention of your data

Please note that no security measures are perfect or impenetrable, and we therefore cannot guarantee ‘perfect security’. In addition, information you send to us may also be exposed to risks during transmission. We recommend that you do not use insecure channels when sending sensitive or confidential information to us.

How long we retain your personal data depends on various factors. These include, for example, whether we need the data to manage your account, to provide Services to you, to comply with legal obligations, to resolve disputes or to enforce other applicable contracts and policies.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal data. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request to the extent permitted by law.

• Right of access/information. You may have the right to request access to the personal data we hold about you.
• Right to erasure. You may have the right to request that we delete the personal data we hold about you.
• Right to rectification. You may have the right to request that we correct inaccurate personal data we hold about you.
• Right to data portability. You may have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Managing communication preferences. We may send you promotional emails. You can object to receiving these emails at any time by using the unsubscribe option included in our emails to you. If you opt out, we may still send you non-promotional emails, e.g. about your account or about orders you have placed.

You can exercise these rights where this is indicated accordingly in the Services, or by contacting us using the contact details below. More information about how Shopify uses your personal data and what rights you have, including rights in relation to data processed by Shopify, can be found at https://privacy.shopify.com/en.

You will not suffer any disadvantage whatsoever from exercising these rights. Where permitted or required by applicable law, we may need to verify your identity before we can process your requests. In accordance with applicable laws, you may appoint an authorised agent to make requests on your behalf to exercise your rights. Before we accept such a request from an agent, we will require the agent to provide proof that you have authorised them to act on your behalf. This may require you to confirm your identity directly with us. We will respond to your request promptly within the scope of applicable law.

Complaints

If you have any complaints about how we process your personal data, please contact us using the contact details below. Depending on where you live, you have the right to appeal our decision by contacting us using the contact details below or by lodging your complaint with the competent data protection authority. For the European Economic Area, there is a list of the competent data protection supervisory authorities. If you would like to view it, you can do so here.

International transfers

Please note that we may transfer, store and process your personal data outside the country in which you live.

If we transfer your personal data outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's standard contractual clauses or equivalent contracts issued by the relevant competent authority of the United Kingdom, unless the data is transferred to a country that demonstrably provides an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes to our practices or for other operational, legal or regulatory reasons. We will publish the revised Privacy Policy on this website, update the ‘Last updated’ date accordingly and give any notice required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us by telephone on +49 40 21 99 11 92, by email at kontakt@viviannaschmuck.de or by post at VIVIANNASCHMUCK, Na Wang, Landwehr 2, 22087 Hamburg, Germany. For the purposes of applicable data protection laws, we are the controller of your personal data.