Privacy policy

1. Changes to this Privacy Policy

We may update this policy periodically. The current version will always be available on this page.

2. How we collect and use personal data

We process data to provide our services, improve our offerings, and fulfill legal obligations. This includes information provided directly by you and usage data via cookies.

3. Web Analytics & Advertising

We use Google Analytics 4 (GA4) and Google Ads only with your consent (Consent Mode v2). You may revoke your consent at any time via the cookie settings.

4. Information obtained from third parties

We receive data from service providers (e.g., Shopify) and payment processors to facilitate your orders.

5. Purposes of processing

Order processing, shipping, returns, marketing (with consent), security, customer service, as well as the fulfillment of tax and accounting obligations.

6. Cookies

Details about cookies can be found at shopify.com/legal/cookies. You can control these via your browser settings.

7. Sharing personal data

We share your data with necessary service providers (e.g., logistics partners, payment processors). To fulfill our legal accounting and tax obligations (Art. 6 (1) (c) GDPR), we transmit billing and transaction data to our accounting software (e.g., sevDesk) as well as to our appointed tax advisory firm and competent authorities (e.g., the tax office).

8. Data processing when using the digital withdrawal function (withdrawal button)

Description and scope of the data processing. If you exercise your statutory right of withdrawal and use the digital withdrawal function provided on our website (the “Withdraw contract” button or an equivalent wording) for this purpose, we process the data you enter in the confirmation form. This function is provided technically via the Shopify extension “Revoq”, which links the data directly with our shop system. This necessarily includes:

• your full name
• data identifying the contract concerned (e.g. order number, customer number or order date)
• your e-mail address (or another chosen means of electronic communication) for the purpose of transmitting the legally required acknowledgement of receipt.

In addition, when the withdrawal is submitted, the current date, the time and your IP address are recorded automatically for technical reasons and in order to comply with statutory documentation obligations.

Legal basis for the data processing. The processing of your data within the digital withdrawal process is carried out in order to comply with a legal obligation to which we are subject as the operator (Art. 6 (1) (c) GDPR), in particular the statutory obligation to provide a digital withdrawal function under the applicable national provisions (in Austria the Fern- und Auswärtsgeschäfte-Gesetz [FAGG], in Germany § 356a BGB). The recording of the IP address and time stamp also serves our legitimate interest (Art. 6 (1) (f) GDPR) in being able to demonstrate, on a durable medium and in the event of a dispute, the proper receipt of the withdrawal.

Storage period. The data collected in connection with the withdrawal is stored for as long as is necessary for processing the withdrawal and for complying with the applicable national commercial and tax retention periods of the respective EU Member State. The log data of the submission process (such as the IP address) is deleted as soon as it is no longer required to demonstrate proper transmission.

9. Third-party websites

Linked sites have their own policies. We are not responsible for their content.

10. Children's data

We do not knowingly collect data from individuals under the age of 16.

11. Security & Retention

Data is protected according to modern standards. We store your data only as long as necessary for the purpose of collection. Please note that due to statutory retention requirements under § 132 of the Austrian Federal Fiscal Code (BAO), we are obligated to retain all accounting records (such as invoices and payment receipts) for a period of 7 years.

12. Your Rights

Access, erasure, rectification, data portability, and objection. However, the deletion of tax-relevant data can only take place after the statutory retention period has expired.

13. Complaints

Please contact us directly or reach out to the relevant supervisory authority (Austrian Data Protection Authority).

14. International transfers

We use EU Standard Contractual Clauses (SCC) for data transfers outside of Europe.

15. Contact

Email: info@rosefinejewellery.com
Phone: +43 681 81295103
Responsible: Rosé. Fine Jewellery.