Shop our Latest Collection of Sapphires
- Shipping Worldwide 🌍
1. Collection of Personal Data and our responsibility.
2. Data Collection on Website Visit.
3. Use of Cookies
4. Use of your Data for Webshop Registration.
5. Use of your Data for Webshop Order Processing.
6. Inquiry or Contacting Us.
7. Use of your Data for the Newsletter.
8. Use of Youtube.
9. Use of Web Analytics.
10. Use of Live Chat.
11. Rights of the person concerned.
12. Storage Duration of Personal Data.
1.1. Thank you for visiting our website. In the following, we would like to inform you about the processing of your personal data when using our website. Personal data is basically all data with which you can be personally identified.
1.2. Responsible for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is:
CEYLONS | MUNICH
Janowski & Schorr GbR
80331 München
Germany
Represented by:
Dr. Peter Janowski & Leander Schorr
Phone +49 (0) 178 6519 300
E-Mail: mail@ceylons.de
The data protection officer can be reached at:
1.3. In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e. g. SSL or TSL) via HTTPS.
Each time our website is accessed, our system automatically collects data and information that your browser transmits to our server (“server log files”). The following data, which is technically necessary for us, is collected:
The legal basis for processing is Article 6 (1) lit. f GDPR [German DSGVO] due to our legitimate interest in improving the stability and maintaining the functionality of our website.
The data will not be passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must remain stored for the duration of the session.
We reserve the right to check the server log files retrospectively if there are specific indications of illegal use. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the event of data collection for the provision of the website, this takes place when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest.
Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that it is no longer possible to assign the retrieving client. The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is consequently no possibility for the user to object.
Cookies are text files that are stored on the user’s end device. If a user retrieves a website, a cookie can be stored on the user’s operating system. Some functions of our website cannot be offered without the use of cookies. For this purpose, it is necessary that the browser is recognised even after changing pages. The user data collected through technically necessary cookies are not used to create user profiles.
In the above purposes, our legitimate interest lies in the processing of personal data in accordance with Article 6 (1) lit. f) GDPR. In addition, our website uses cookies that enable an analysis of the surfing behaviour of users (third-party cookies). You can find more information on the scope, purpose, legal basis and options for objection in the respective sections of the respective chapter of this Privacy Policy.
As a user, you have full control over the use of cookies. You can deactivate, restrict or delete the transmission of cookies by changing the settings in your internet browser. If you deactivate cookies for our website, you may not be able to use all functions of the website to their full extent.
Some of the cookies used here are deleted after you close your browser (session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser the next time you visit (persistent cookies). If cookies are accepted, they collect and process certain user information such as browser and location data as well as IP address values to the individual extent. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.
If you register as a customer with us on our webshop, your personal data will be collected and processed according to Article 6 (1) lit. b GPDR.
The scope of the data can be seen from the registration form. The data you enter is saved and used by us for the performance of the contract.
You can delete your customer account at any time. This can be done by sending a message to the address of the person responsible or, if available, directly in the customer account. In this case, we will also delete your data in accordance with tax and commercial law retention periods and delete it after these periods have expired. Only your consent to permanent storage or a legally permitted further use of data on our part can prevent this.
If you would like to place an order in our online webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to process your order.
If we commission transport companies with the delivery of your goods, we pass on the data required for the delivery of the goods to the respective transport company. For the processing of payments, we pass on your data to the commissioned bank as necessary. If we use payment service providers, you will also be informed of this in the following. The legal basis for the transfer of your data is Article 6 (1) 1 lit. b GDPR.
If you contact us using the Inquiry form, the data entered in the form is transmitted to us and saved. When you contact us by e-mail, only the data you have entered there is transmitted to us.
The data is only used to process the correspondence and your request. The legal basis for processing the data is Article 6 (1) lit. a) GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6 (1) lit. f) GDPR. If the purpose of the e-mail communication is the conclusion of a contract, then the additional legal basis for the processing is Article 6 (1) lit. b) GDPR.
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected and provided that no statutory retention requirements exist. For personal data retrieved from the inquiry form and data sent by e-mail, the data is deleted once the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been finally clarified. The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the communication cannot be continued.
You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the sign up form is transmitted to us. The only requirement hereby is that you provide your e-mail address. If you make further voluntary entries after registration, they will only be used for personal communication.The legal basis for the processing of your data after registration for the newsletter is Article 6 (1) lit. a GDPR.
When sending the registration for the newsletter, we store your IP address and the date and time of registration. The storage serves the purpose of being able to trace a possible misuse of your e-mail address.
We use the data we collect when registering for the newsletter only for the purpose of sending the newsletter. You may unsubscribe from the newsletter at any time. For this purpose, each newsletter features a corresponding link. Unsubscribing will also revoke the consent to the storage of personal data collected during the registration process.
We use YouTube on our website. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”.
YouTube is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, hereinafter referred to as “Google”.
Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google and its subsidiary YouTube guarantee that they will follow the EU’s data protection regulations when processing data in the United States.
We use YouTube in its advanced privacy mode to show you videos. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the advanced privacy mode means that the data specified below will only be transmitted to the YouTube server if you actually start a video.
Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of our webpages on which a YouTube video is embedded.
This connection is required in order to be able to display the respective video on our website within your browser. YouTube will record and process at a minimum your IP address, the date and time the video was displayed, as well as the website you visited. In addition, a connection to the DoubleClick advertising network of Google is established.
If you are logged in to YouTube when you access our site, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting our site or make the appropriate settings in your YouTube account.
For the purpose of functionality and analysis of usage behavior, YouTube permanently stores cookies on your device via your browser. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.
Further information about the collection and use of data as well as your rights and protection options in Google’s privacy policy found at
https://policies.google.com/privacy
We use Google Analytics web analytics service for this website. Google Analytics uses cookies. They are text files that are stored on your computer and that enable analysing your use of the website. The information thereby generated about your use of this website (including the shortened IP address) is transmitted to a Google server and stored there, whereas transmission to the USA is possible.
We use Google Analytics with the “anonymizeIp()” extension, which ensures the anonymisation of the IP address by shortening it and excludes direct personal reference. Your IP address is therefore be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. In exceptional cases, the full IP address is transferred to a Google server, including in the USA, and is only shortened there.
In these exceptional cases, this processing takes place in accordance with Article 6 (1) lit. a GDPR, i. e. your express consent. On our behalf, Google uses this information to evaluate your website usage, generate reports on website activity and provide us with other services related to website activity and internet usage. Your IP address collected in this context will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser accordingly. In the event of data transfer to Google LLC based in the USA, Google LLC is certified for the US-European data protection treaty “Privacy Shield”, which guarantees compliance with the data protection standards applicable in the EU.
Google’s privacy https://support.google.com/analytics/answer/6004245?hl=de
On this website, we use the live chat system ‘Landbot (https://landbot.io/). Anonymous data is collected and stored for the purpose of web analysis and to operate the live chat system, which answers live support requests.
Usage profiles can be created from this anonymised data under a pseudonym. Cookies can also be used for this purpose. Our legitimate interest lies in effective Customer service and statistical analysis of user behaviour for optimisation purposes. The data is not used to personally identify the visitor to this website without the consent of the data subject. No data is merged with personal data about the bearer of the pseudonym.
11.1. Your Rights to Data.
The applicable data protection law grants you comprehensive data subject rights (rights to information and rights to intervene) vis-à-vis the person responsible for the processing of your personal data, about which we will inform you below:
- Right to information in accordance with Art. 15 GDPR: You can request confirmation from the person responsible as to whether personal data relating to you is being processed by the person responsible. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of other rights such as correction of the data or the existence of a right of appeal to a supervisory authority, the origin of your data (if these were not collected by us), the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to information, which guarantees according to to Article 46 GDPR when forwarding your data to third countries.
- Right to rectification in accordance with Art. 16 GDPR: You have the right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us; the correction or completion must be made immediately.
- Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you contest, is checked, if you refuse to delete your data because of inadmissible data processing and instead request the restriction of the processing of your data, if you change your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State are processed. If the restriction of processing has been restricted, you will be informed by the person responsible before the restriction is lifted.
- Right to erasure according to Art. 17 GDPR: You have the right to the immediate deletion of your personal data as long as the requirements of Art. 17 Para. 1 GDPR are met. However, this right to erasure does not exist in particular - but not exclusively - if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- Right to information according to Art. 19 GDPR: If you have exercised your right to rectification, erasure or restriction of processing, the person responsible is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of data or restriction of processing, unless this is impossible or involves a disproportionate effort effort is involved. You also have the right to be informed about these recipients.
- Right to data transferability in accordance with Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically possible;
- Right of revocation in accordance with Article 7 Paragraph 3 GDPR: You have the right to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions. You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.
- Right to complain according to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates violates the GDPR.
11.2. Your Right for Objection
You have the right to object to the processing of your data at any time with effect for the future if we process your data based on our overriding legitimate interest after a weighing of interests. If you make use of this right of objection, we will terminate the processing of your data if there are no demonstrably overriding, compelling reasons worthy of protection preventing the termination or if further processing serves to exercise or defend legal claims.
The duration of storage of personal data depends on statutory retention periods. After its expiry, we routinely delete the data if they are no longer required to fulfill or initiate a contract and/or we have no legitimate interest in further storage.
Receive unique insights on Sustainable Sapphires, Traceability and Gemstone Investment.
