Privacy policy

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1. General information and mandatory disclosures

Data Privacy

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Information regarding the responsible person

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Anna Tarmazakova, Im Blümert 46, 73431 Aalen, Germany, E-Mail: info@soulviajewels.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Storage

Unless a more specific storage period is stated in this privacy policy, your personal data will be retained by us until the purpose for processing the data no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for retaining your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will take place once those grounds no longer apply.

Legal Bases

We process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data pursuant to Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing also takes place on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing additionally takes place on the basis of Section 25(1) of the German Telemedia Act (TMG). You can withdraw your consent at any time. If your data is required for the performance of a contract or for taking steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if it is necessary for compliance with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interest pursuant to Art. 6(1) GDPR. Information on the applicable legal bases in each individual case is provided in the following paragraphs of this privacy policy.

Recipients of personal data

As part of our business operations, we collaborate with various external parties. In some cases, this requires the transfer of personal data to these external parties. We only disclose personal data to external parties if this is necessary for the performance of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) of the GDPR, or if another legal basis permits the disclosure of data.

2. Data Collection When Visiting Our Website

You can visit our website without providing any personal information. Each time you access a page, the web server automatically saves a so-called server log file, which contains technical information such as website you visited, date and time of access, amount of data transferred in bytes, source/referrer from which you accessed the page, browser used, operating system used, IP address used (possibly anonymized) and the requesting provider (access data), and documents the access. This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our services.

This processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

Cookies

What Are Cookies?

To make your visit to our website more attractive and to enable the use of certain functions, we use various technologies, including so-called cookies, on different pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of your browser session, i.e., after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

Cookies Used on This Website

This website uses the following categories of cookies:

Strictly Necessary Cookies: Required for the website to function, including shopping cart management, checkout session, security tokens, and fraud prevention (set by Shopify). No consent is required for these cookies.

Personalization Cookies: Used to remember your preferences such as currency and language settings.

Analytics Cookies: Used by Google Analytics to analyse website usage. Only activated with your consent.

Marketing / Tracking Cookies: Used by Meta Pixel to measure ad performance and enable targeted advertising. Only activated with your consent.

Cookie Consent

When you first visit our website, a cookie consent banner is displayed. Personalization, a nalytics and marketing cookies are only activated after you give your explicit consent. You may withdraw your consent at any time by adjusting your cookie settings via the cookie consent tool on our website.

You may also configure your browser to refuse all cookies or to alert you when cookies are being placed. Please note that disabling certain cookies may affect the functionality of the website.

Registration on This Website

You can register on this website in order to use additional features on the site. We use the data entered for this purpose only for the use of the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes, such as changes to the scope of the offer or technically necessary modifications, we use the email address provided during registration to inform you accordingly.

The processing of the data entered during registration is carried out for the purpose of implementing the user relationship established by the registration and, if applicable, for the initiation of further contracts (Art. 6 para. 1 lit. b GDPR).

The data collected during registration will be stored by us for as long as you remain registered on this website and will then be deleted. Statutory retention periods remain unaffected.

Wishlist

We use your browser's local storage to save your wishlist (favourite products) on your device. This data is stored only on your device and is not transmitted to our servers. It is not linked to your personal identity unless you are logged in to your account.
You can clear this data at any time by clearing your browser's local storage or site data in your browser settings.
Data stored:

  • Product IDs and handles of items you add to your wishlist
  • No personal information is collected or stored

Wishlist data stored on your device until you clear it manually or clear browser data. We do not control this data.

Local storage (wishlist): Legitimate interest (Art. 6(1)(f)) — providing core shopping functionality requested by the user. No personal data is stored.

SSL and TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address line changing from “http://” to “https://” and by the lock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the browser’s address line changing from “http://” to “https://” and by the lock symbol in your browser bar.

With encrypted communication, the payment data you transmit to us cannot be read by third parties.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the string "https://" and the padlock symbol in your browser bar.

3. Hosting & Content Delivery Network

Our online shop is hosted and operated on the Shopify platform, provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Shopify is a tool for creating and hosting websites. When you visit our website, Shopify collects your IP address as well as information about the device and browser you are using. Shopify also analyzes visitor numbers, traffic sources, and customer behavior, and compiles user statistics. When you make a purchase on our website, Shopify also collects your name, email address, shipping and billing addresses, payment details, and other data related to the purchase (e.g., phone number, total purchase amount, etc.). For analysis purposes, Shopify stores cookies in your browser.

The use of Shopify is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

Shopify acts as our data processor within the meaning of Art. 28 GDPR. A Data Processing Agreement (DPA) is in place with Shopify. As a cloud-based e-commerce platform, Shopify processes the following categories of data on our behalf:

  • Technical access data and server logs (IP address, browser type, pages visited, time of access)
  • Customer account data (name, email address, password hash — if a customer creates an account)
  • Order and transaction data (billing and delivery address, products ordered, payment status)
  • Device and session data for fraud prevention and security purposes

Shopify may process data on servers located in the United States and other countries. Such transfers are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission and Shopify's participation in the EU-U.S. Data Privacy Framework.

For further information, please refer to Shopify's privacy policy: https://www.shopify.com/legal/privacy

4. Data Processing for Order Fulfillment

To the extent necessary for order processing for delivery and payment purposes, the personal data we collect is shared with the commissioned transport company and the responsible financial institution in accordance with Art. 6(1)(b) GDPR.

If, under a corresponding contract, we are obliged to provide updates for goods with digital elements or for digital products, we process the contact details you provided during the order in order to personally inform you in accordance with our legal obligations under Art. 6(1)(c) GDPR. Your contact details are used strictly for this purpose and processed only to the extent necessary for providing such information.

For the processing of your order, we also cooperate with the following service providers, who support us in whole or in part in fulfilling concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

Order processing

When you place an order, we collect and process personal data such as your first and last name, billing and delivery address, email address and telephone number (optional), as well as order details (products, quantities and prices) and payment information (handled by the respective payment provider – see the 'Payment Providers' section). This data is necessary for us to fulfil the contract.

Further information is available at Shopify's privacy policy: https://www.shopify.com/legal/privacy

Shipping providers

We use the following shipping provider:

We will forward your email address and/or telephone number to the shipping provider before delivery of the goods, in accordance with Article 6(1)(a) of the GDPR, for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery, in accordance with Article 6(1)(b) of the GDPR, we will only forward the recipient's name and delivery address to the shipping provider. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the shipping provider or delivery notification is not possible.

You can withdraw your consent at any time with effect for the future by contacting the data controller named above or the shipping provider.

When processing payments in our online shop, we work together with the following partners: technical service providers, credit institutions, payment service providers.

Payment providers

We integrate payment services from third-party providers on our website. If you make a purchase with us, your payment data (e.g., name, payment amount, bank details, credit card number) will be processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the individual providers apply to these transactions.

The use of payment service providers is based on Art. 6(1)(b) GDPR (contract performance) and in the interest of ensuring a smooth, convenient, and secure payment process (Art. 6(1)(f) GDPR). If your consent is requested for certain actions, Art. 6(1)(a) GDPR serves as the legal basis for data processing; consent may be withdrawn at any time with future effect.

The following payment services / payment service providers are used on this website:

Shopify Payment
Payment by credit/debit card, Apple Pay, and Google Pay is processed via Shopify Payments, which is powered by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin 2, Ireland. (hereinafter “Shopify Payments”).

When you complete a payment, your card data is transmitted directly and securely to Stripe using SSL/TLS encryption. Card data (card number, expiry date, CVV) is never stored on our servers or within Shopify's standard data storage. Shopify receives only a tokenised reference and the transaction status.

Stripe processes your data in accordance with its own privacy policy: https://stripe.com/privacy

For further information, please refer to Shopify's privacy policy: https://www.shopify.com/legal/privacy

Paypal

If you choose to pay via PayPal, you will be redirected to the PayPal platform operated by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal independently processes your payment data in accordance with its own privacy policy:

If you select a payment method where you pay in advance, your payment data provided during the order process (including name, address, bank and card details, currency, and transaction number) as well as information about your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. This data is shared solely for payment processing and only to the extent necessary.

If you select a payment method where we provide advance performance, you will be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, alternative payment details).

To safeguard our legitimate interest in assessing your creditworthiness, this data is transmitted to the provider for a credit check in accordance with Art. 6(1)(f) GDPR. Based on your personal data and additional information (such as shopping cart, invoice amount, order history, and payment experience), the provider evaluates whether the selected payment method can be granted considering payment or default risks.

The credit report may include probability values (so-called score values), which are calculated using scientifically recognized mathematical and statistical methods. Address data, among other factors, may be used in calculating these scores.

You may object to this processing of your data at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractually compliant payment processing.

Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses.
Further details can be found in PayPal’s privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full

Klarna

If you choose to pay via Klarna, you will be redirected to the Klarna platform operated by Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”).

Further details can be found in Klarna’s privacy policy at the following link: https://www.klarna.com/de/datenschutz/

If you select a payment method from the provider where you pay in advance (such as credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be transferred to the provider in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be transferred for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method where the provider pays in advance (such as invoice purchase, installment purchase, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, details of an alternative payment method).

In order to protect our legitimate interest in determining the creditworthiness of our customers, we transfer this data to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. Based on the personal data you provide, as well as additional data (such as shopping cart contents, invoice amount, order history, and payment experience), the provider checks whether the payment option you selected can be granted with regard to payment and/or default risks.

In addition to internal provider criteria pursuant to Art. 6 para. 1 lit. f GDPR, identity and creditworthiness information from the following credit agencies may also be included in the decision-making process during the application review: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.

You may object to this processing of your data at any time by sending a message to us or directly to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

Bank Transfer (Überweisung)
If you choose to pay by bank transfer, we will provide you with our bank account details upon order confirmation. Your bank processes the transfer independently. We retain the payment reference for accounting and order fulfilment purposes.

5. Web Analytics Services

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses cookies to analyse how visitors use the website. The information generated by the cookie about your use of this website (including an anonymised version of your IP address) is transmitted to and stored by Google. We have enabled IP anonymisation on this website, meaning Google truncates IP addresses within EU/EEA member states before any transmission to Google servers.

Google uses this information on our behalf to evaluate the use of the website, to compile reports on website activity, and to provide other services relating to website and internet usage. The anonymised IP address transmitted by your browser is not merged with other data held by Google.

Google Analytics is only activated after you have given your explicit consent via our cookie consent banner. You may withdraw your consent at any time by adjusting your cookie settings.

You may also prevent data collection by installing the Google Analytics Opt-out Browser Add-on:
https://tools.google.com/dlpage/gaoptout

Data may be transferred to Google servers in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. For more information:
https://policies.google.com/privacy

Shopify Analytics

When you interact with our store, including adding products to your wishlist, we may collect anonymised behavioural data and send it to Shopify Analytics. This data helps us understand which products are most popular and improve your shopping experience. Data collected may include: - Products added to or removed from your wishlist - Product IDs and prices at the time of interaction - Session and device type (via Shopify's built-in analytics) Analytics data sent to Shopify: Legitimate interest (Art. 6(1)(f)) — improving our services and understanding product popularity. Data is anonymised and aggregated. Analytics data: retained by Shopify according to their data retention policy. This data is processed by Shopify Inc. in accordance with their Privacy Policy: https://www.shopify.com/legal/privacy

6. Newsletter

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter subscription form is carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may revoke your consent to the storage of the data, the email address, and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe or once the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You may object to the storage if your interests outweigh our legitimate interest.

7. Social networks

Our website uses social media buttons from social networks. These are simply embedded as HTML links, so no connection is established with the servers of the respective provider when you visit our website. Clicking on one of the buttons opens the website of the respective social network in a new browser window.

  • Instagram – operated by Meta Platforms Ireland Limited, Dublin, Ireland
  • Pinterest – operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
  • Etsy – operated by Etsy, Inc., 117 Adams Street, Brooklyn, NY 11201, USA

These links are implemented as simple text or image links. No social media plugins, buttons, or widgets are embedded on our website. Accordingly, no data is transmitted to these platforms when you visit our website — data is only transmitted to the respective platform when you actively click on a link and visit the platform.

When you visit these platforms, their own privacy policies apply. We have no influence over the data processing carried out by these third parties.

8. Contact by Email

If you contact us by email, we will store your email address and the content of your message for the purpose of processing your enquiry and following up where necessary. This data will not be shared with third parties without your consent. Legal basis: Art. 6(1)(f) GDPR – legitimate interest in processing and responding to enquiries; Art. 6(1)(b) GDPR where the enquiry relates to an existing contract. Contact data is deleted once the enquiry has been fully resolved and there is no longer any legal obligation to retain it.

9. Your Rights as a Data Subject

You have the following rights in relation to the processing of your personal data, in accordance with the GDPR:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to notification pursuant to Art. 19 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to withdraw consent pursuant to Art. 7(3) GDPR
  • Right to lodge a complaint pursuant to Art. 77 GDPR
  • Right to object pursuant to Art. 21 GDPR

If we process your personal data on the basis of our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.

If you exercise your right to object, we will stop processing the affected data. However, further processing may be reserved if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your objection as described above.

If you exercise your right to object, we will stop processing the affected data for direct marketing purposes.

10. Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – where applicable – by the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data in question will be stored until you withdraw your consent.

If statutory retention periods exist for data processed in connection with contractual or quasi-contractual obligations based on Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, unless it is still required for the performance of a contract or for taking steps prior to entering into a contract and/or we have a legitimate interest in its continued storage.

When processing personal data based on Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

When processing personal data for direct marketing purposes based on Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise specified in this privacy policy regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

11. Changes of this Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our data processing practices or applicable law. The current version is always available on our website. We recommend checking this page periodically. The date of the last update is indicated at the bottom of this document.

Last updated: 11.05.2026