Privacy Policy

1. Controller

The controller responsible for data processing on this website is:
JUWELIER PERNTER DI PERNTER P. & C. SAS
Via Kennedy 154, 39055 Leifers / Laives (BZ), Italien
E-mail: shop@juwelierpernter.com · Phone: +39 0471 742327

2. Your Rights

Under the GDPR, you are entitled to the following rights at any time:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7 GDPR)

An informal message to shop@juwelierpernter.com is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority (in Italy: Garante per la protezione dei dati personali).

3. Orders & Contract Processing

When you place an order in the shop, we process the data required for this (name, address, e-mail, telephone, order and payment data) in order to fulfil your purchase contract. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). We retain order and invoice data within the statutory retention periods under tax and commercial law.

4. Payment Processing (Stripe)

For card payments we use the payment service provider Stripe (Stripe Payments Europe, Ltd., Ireland). Your payment data is transmitted directly to Stripe and processed there; we ourselves do not store complete card data. No card data is collected for prepayment by bank transfer. Legal basis: Art. 6(1)(b) GDPR. Details at stripe.com/privacy.

5. Customer Account

You can optionally create a customer account to manage orders and addresses. We store the data provided there until your account is deleted. Legal basis: Art. 6(1)(b) GDPR.

6. Contact & Withdrawal Form (Resend)

If you write to us via the contact or withdrawal form, we process your details to handle your enquiry. The e-mails are sent via our service provider Resend (Resend, Inc.). Legal basis: Art. 6(1)(b) and (f) GDPR (handling the enquiry or processing a withdrawal).

7. Hosting & Database (Vercel, Neon)

This website is hosted by Vercel (Vercel Inc.); the database runs on Neon (Neon Inc.). When you visit the site, technically necessary server log data (e.g. IP address, time, page accessed) is processed to ensure operation and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

8. Cookies & Consent (Google Consent Mode v2)

We use technically necessary cookies that are required for the operation of the site (e.g. shopping cart, login). Statistics and marketing cookies as well as embedded content only load once you have given your express consent in the cookie banner (Google Consent Mode v2, default: declined). Legal basis: Art. 6(1)(a) GDPR (consent). You can adjust your selection at any time: Cookie settings.

9. Google Maps

On the contact page we embed a map from Google Maps (Google Ireland Ltd.). The map only loads after your consent. In doing so, data (including your IP address) may be transmitted to Google. Legal basis: Art. 6(1)(a) GDPR.

10. Disclosure to Third Parties

Your data is only disclosed insofar as this is necessary for the performance of the contract (e.g. to the shipping company and the payment service provider) or where we are legally obliged to do so. Your data is not sold.