Privacy Policy

1. Controller

The controller responsible for data processing on this website is:
JUWELIER PERNTER DI PERNTER P. & C. SAS
Via Kennedy 154, 39055 Leifers / Laives (BZ), Italien
E-mail: shop@juwelierpernter.com · Phone: +39 0471 742327

2. Your Rights

Under the GDPR, you are entitled to the following rights at any time:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7 GDPR)

An informal message to shop@juwelierpernter.com is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority (in Italy: Garante per la protezione dei dati personali).

3. Orders & Contract Processing

When you place an order in the shop, we process the data required for this (name, address, e-mail, telephone, order and payment data) in order to fulfil your purchase contract. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). We retain order and invoice data within the statutory retention periods under tax and commercial law.

4. Payment Processing (Stripe)

For card payments we use the payment service provider Stripe (Stripe Payments Europe, Ltd., Ireland). Your payment data is transmitted directly to Stripe and processed there; we ourselves do not store complete card data. No card data is collected for prepayment by bank transfer. Legal basis: Art. 6(1)(b) GDPR. Details at stripe.com/privacy.

5. Customer Account

You can optionally create a customer account to manage orders and addresses. We store the data provided there until your account is deleted. Legal basis: Art. 6(1)(b) GDPR.

6. Contact & Withdrawal Form (Resend)

If you write to us via the contact or withdrawal form, we process your details to handle your enquiry. The e-mails are sent via our service provider Resend (Resend, Inc.). Legal basis: Art. 6(1)(b) and (f) GDPR (handling the enquiry or processing a withdrawal).

7. Hosting & Database (Vercel, Neon)

This website is hosted by Vercel (Vercel Inc.); the database runs on Neon (Neon Inc.). When you visit the site, technically necessary server log data (e.g. IP address, time, page accessed) is processed to ensure operation and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

8. Cookies & Consent (Google Consent Mode v2)

We use technically necessary cookies that are required for the operation of the site (e.g. shopping cart, login). Statistics and marketing cookies as well as embedded content only load once you have given your express consent in the cookie banner (Google Consent Mode v2, default: declined). In the Statistics category we use Google Analytics 4, which is described in the next section. Legal basis: Art. 6(1)(a) GDPR (consent). You can adjust your selection at any time: Cookie settings.

9. Web Analytics with Google Analytics 4

To measure how our site is used, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The analytics script (gtag.js) is only loaded once you have expressly accepted the Statistics category in the cookie banner. Without your consent, nothing is loaded from Google and no analytics cookies are set. This is enforced by Google Consent Mode v2, which sets every category to denied by default.

With your consent we analyse how the shop is used. We record products viewed, the shopping cart, the start of the checkout and the completed purchase including order number and order value. IP anonymisation is active, so your IP address is processed in shortened form. In our account we have disabled the sharing of usage data with Google (data sharing for models, benchmarking and other Google products). Google signals are not enabled. As a result, there is no cross-device linking of data and no personalisation of advertising via Analytics.

Google Analytics sets the following cookies:

• _ga, lifetime 2 years
• _ga_FJP42W0X0X, lifetime 2 years

User and event data in Google Analytics 4 is deleted after 14 months. Data may be transferred to the USA. Such transfers are based on the EU-US Data Privacy Framework, under which Google LLC is certified, supplemented by the standard contractual clauses.

The legal basis is Art. 6(1)(a) GDPR (consent). You can withdraw it at any time with effect for the future via the cookie settings: Cookie settings. You can also prevent collection by Google Analytics using Google's browser add-on, available at tools.google.com/dlpage/gaoptout. Further information can be found in Google's privacy policy at policies.google.com/privacy.

10. Google Maps

On the contact page we embed a map from Google Maps (Google Ireland Ltd.). The map only loads after your consent. In doing so, data (including your IP address) may be transmitted to Google. Legal basis: Art. 6(1)(a) GDPR.

11. Disclosure to Third Parties

Your data is only disclosed insofar as this is necessary for the performance of the contract (e.g. to the shipping company and the payment service provider) or where we are legally obliged to do so. Your data is not sold.