Privacy policy
At Gibui, we confidentiality and data protection is a high priority. This data protection declaration informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR). You must read the privacy policy before submitting your personal data to Gibui Jewellery.
Data controller and contact information
The data controller for your personal data is:
Astrid Biemel
Neubauerstrasse 10
65193 Wiesbaden
Germany
E-mail address: info@gibui-jewellery.com
Link to imprint: https://www.
1. If you visit our website
This section sets out the policy of Gibui`s processing of personal data regarding users of Gibui`s
website www.gibui-jewellery.com
Types of data processed
- Inventory data (e.g., names, addresses).
- Contact data (e.g., e-mail, telephone numbers).
- Content data (e.g., text input, photographs, videos).
- Usage data (e.g., web pages visited, interest in content, access times).
- Meta/communication data (e.g., device information, IP addresses).
Purpose of the processing
Your personal data may be processed for the following purposes:
Product and service development
Statistics and analysis
Cookies
Gibui uses cookies on our website and applications. Gibui may collect, process and store the following personal data about you via cookies when you visit our website or applications:
IP adress
Hardware, software and internet browser used to access our website
Date and time of your access to our website or applications
Time zone
Browsing history
We use cookies to collect the personal data stated above. You can find more information regarding our use of cookies in our cookie information xxxx
Your personal data may be processed for the following purposes:
Product and service development
Statistics and analysis
Legal basis
Gibui will mainly process your personal data based on the following legal basis:
Legitimate interests: The processing of your personal data will be based on our legitimate interest in, for instance, conducting statistics, analysis, marketing activities (where consent is not required), as well as improving and developing our products and services (Article 6 (1) (f) of the GDPR).
Consent: In some cases, we need your consent, e.g. in order for us to place cookies on your devices (Article 6 (1)(a) of the GDPR).
Retention period
Your personal data will be deleted when it is no longer needed for one or more of the purposes mentioned above. Please refer to our cookie information banner on our website for information about the expiry of cookies placed on your device.
The personal data may, however, be processed and stored for a longer period of time if anonymised.
For booking of private appointments and other inquiries:
Types of personal data:
When you use the contact form on our website or otherwise contact or communicate with us, Gibui collects, processes and stores the following personal data from you:
Name, e-mail address, telephone number.
What your inquiry or communication is about
Date and time of your request
Other personal data that you provide in the course of your inquiry or communication with us. We recommend that you do not submit sensitive personal information unless it is absolutely necessary in connection with your inquiry. If you submit sensitive or otherwise confidential personal data by e-mail, we recommend that you use encryption.
Purposes of the processing:
Your personal data may be processed for the following purposes:
Handling of your inquiry
General communication with you
Marketing in general
Customer service statistics and analysis
Legal basis
Gibui will mainly process your personal data based on one or more of the following legal bases:
Legitimate interests: The processing of your personal data will be based on our legitimate interest in, for instance, conducting statistics, analysis and developing our products and services as well as our legitimate interest in promoting our brand and sending marketing material (where consent is not required) (Article 6 (1) (f) of the GDPR).
Contractual obligation: Contractual obligation: If your inquiry concerns conclusion of a (potential) contract with Gibui we process your personal data to make arrangements prior to the conclusion of the contract (Article 6 (1) (b) of the GDPR).
Retention period
Your personal data will be kept for 2 years from your last inquiry.
2. Customers
Types of personal data:
When you purchase an item from Gibui , we collect, process and store the following personal data about you:
Contact information such as name, email address, address and phone number
Billing address and shipping address
Payment information
Order number
Time and date of your purchase
Information about your order, such as which items you have purchased or any special remarks you have submitted in relation to your order
Delivery information, such as when your purchased items were delivered
Order/purchase history
Whether you return the purchased items and, if so, when you return them
Complaints or notices of defects
Purposes of the processing:
Your personal data may be processed for the following purposes:
Fulfillment of orders
Customer service
Marketing in general
Statistics and analytics
Legal basis
Gibui will mainly process your personal data based on one or more of the following legal bases:
Legitimate interests: The processing of your personal data will be based on our legitimate interest in providing customer service, conducting statistics and analysis for developing our products and services as well as our legitimate interest in promoting our brand and sending marketing material (where consent is not required) (Article 6 (1) (f) of the GDPR).
Contractual obligation: We process your personal data to fulfill the order you have placed with Gibui (Article 6 (1) (b) of the GDPR).
Retention period
Your personal data will be kept for 3 years from your last purchase.
The personal data contained in the accounting records are retained for 10 years after the end of the financial year and deleted thereafter. The retention period was determined based on the retention regulations of Section 147 of the German Fiscal Code ( AO ) and Section 257 of the German Commercial Code ( HGB ) and thus with a view to compliance with applicable law.
3. If you visit Gibui`s profile on social media
This section sets out the policy for Gibui`s processing of personal data collected via Gibui`s profile on social media.
Gibui and the providers of social media are joint data controllers for the processing of your personal data collected when you visit the Gibui profile on social media. Gibui complies with the guidelines of the European supervisory authorities concerning joint data controllership and, using the applicable tools the best way possible, Gibui attempts to ensure that you receive information on the processing of your personal data when you visit Gibui profile on social media.
Gibui has a profile on the following social media:
Instagram (Meta Platforms Ireland Ltd.)
Instagram Privacy Policy is available here:
https://help.instagram.com/519522125107875/?maybe_redirect_pol=0
Manage your privacy settings on Instagram in “privacy settings” under “settings”
Google’s privacy policy is available here:
https://policies.google.com/privacy
Collection of personal data
Depending on your conduct on the social media, Gibui and the provider of the social media in question may retrieve the following personal data about you:
Your "likes" or other reactions expressed on Gibui`s profile.
Comments left by you on Gibui’s profile.
Your visits to Gibui’s profile.
Age, gender, relationship status, place of work, lifestyle, geographical information and fields of interest
Purpose of the processing
Gibui may process your personal data for the following purposes:
To communicate with you if you comment on our posts or send us a direct message
Improve our products and services, including our profile on social media
Statistics and analytics
Legal basis
Gibui will mainly process your personal data based on the following legal bases:
Legitimate interests: We may process your personal data on the basis of our legitimate interests in being able to improve Gibui’s products and services (Article 6 (1) (f) of the GDPR).
The providers of the social media process, among other things, your personal data to enable them to improve their advertisement system and to provide Gibui with statistics, which the provider, for example, works out on the basis of your visit to Gibui’s profile on the social media in question, with a view to advertising and customising the activities on the profile. The providers of the social media process your personal data as a consequence of their legitimate interests, including their interest in providing innovative, customised, secure and profitable services (Article 6 (1) (f) of the GDPR).
Consent: The providers of social media may also processes your personal data in accordance with your consent, which you are entitled to withdraw at any point in time via the settings on the website of the social media in question (Article 6 (1) (a) of the GDPR).
Retention period
Your personal data will be retained by Gibui for two years from your interaction with Gibui on social media. Gibui does not delete reviews, comments, likes or other interactions you leave publicly on our profile. You may delete such expressions or interactions by removing your review, comment, like or other interaction from our profile.
Please refer to the privacy policy of the provider of the relevant social media for information on their retention of your personal data.
Anonymized personal data may be kept for a longer period of time.
Who do providers of social media share your personal data with?
The providers of social media may, among other things, share your personal data with the following categories of recipients:
Other undertakings in the group which the provider of the social media in question is a part of
Externally with partners providing analytical services
Advertisers
Other individuals using our profile or fan page on the social media in question
Surveying partners
Researchers and academics
For more information on the parties with whom the providers of social media share your personal data, we refer to the providers’ general privacy policies.
Your personal data may be transferred by the providers of social media to recipients outside the EU/EEA in accordance with the European data protection standards applicable from time to time. You may read more in the providers of social media’s general privacy policies.
Disclosure to other data controllers and sharing with data processors
To fulfill the purposes described above we may provide access to your personal data for third parties who, on the basis of a contractual relationship with Gibui, provide relevant services, e.g. IT-providers, email providers. Such service providers will only process personal data in accordance with our instructions pursuant to the data processor agreements entered into.
Aside from above, it is a general rule that your personal data is not disclosed to a third party without your permission. However, under certain circumstances and in accordance with applicable law, we may need to disclose your personal data to
Police
Lawyers
Auditors
Courts
Public authorities
Prospective buyers
Affiliated companies
If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA which does not have an adequate level of protection, such transfer will be based on the EU Commission’s standard contracts or binding corporate rules.
4. Your rights:
You have the right to access the personal data we process about you.
You have the right to object to our collection and further processing of your personal data.
You have the right to have your personal data rectified and deleted, with certain statutory exceptions, including the Bookkeeping Act.
You have the right to request us to restrict the processing of your personal data.
Under certain circumstances you may also request to receive a copy of your personal data as well as the transmission of your personal data which you have provided us with to another data controller (data portability)
You may, at all times, withdraw any consent you may have given. We will then delete your personal data, unless we can continue the processing on another basis.
Questions or complaints
If you have any questions in relation to this privacy policy or if you wish to make a complaint in connection to our processing of your personal data, please contact us:
Gibui
Astrid Biemel
Neubauerstrasse 10
65193 Wiesbaden
Germany
Email: info@gibuijewellery.com
If your complaint is not resolved by us and you wish to proceed with the case, you can send your compliant to the supervisory authority in your country. A list of European supervisory authorities is available here: https://edpb.europa.eu/about-edpb/about-edpb/members_en
5. Changes to the privacy policy
We reserve the right to make changes to this privacy policy from time to time. When updated, the date at the bottom of the privacy policy will be updated accordingly. The, at all times, applicable privacy policy will be available at our website.
....
April 2022