Privacy Policy (B2B)

1. Controller Information

The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is the operator specified in the legal notice (Legal Advice / Impressum) of this website.

2. Collection and Processing of Business Contact Data

When you visit our website, communicate with us, or request services/offers as a business partner, representative, or employee of a company, we collect and process business-related personal data, including:

• Name and job title / function within your organization
• Business contact details (company address, business email address, phone number)
• Communication records and contractual data necessary for business correspondence and order processing

3. Contact Form

When you contact us using the contact form on this website, we collect the information you provide, including:

• Your name (optional)
• Company name (optional)
• Email address (required)
• Phone number (optional)
• Areas of interest selected in the form (e.g. bracelets, harnesses, belts, earrings, chokers or other products)
• Budget information (optional)
• The content of your enquiry

We process this information solely to respond to your enquiry, assess potential business opportunities, and communicate with you regarding your request.

The legal basis for processing is Art. 6 (1) (b) GDPR, where your enquiry relates to taking steps prior to entering into a contract or establishing a business relationship. In other cases, processing is based on Art. 6 (1) (f) GDPR, where we have a legitimate interest in responding to business enquiries and maintaining professional contacts.

The information submitted through the contact form is stored in our website's content management system (Statamic) and transmitted to us by email. Website hosting and email services are provided through our hosting provider. The data is processed only to the extent necessary to handle your enquiry.

We retain contact form submissions only for as long as necessary to process your enquiry and any resulting business relationship. If no business relationship develops, the information will be deleted when it is no longer needed, unless statutory retention obligations or other legitimate legal reasons require longer storage.

4. Purpose and Legal Basis of Data Processing

We process personal data based on the following legal grounds under Art. 6 (1) GDPR:

• Art. 6 (1) (b) GDPR: Pre-contractual measures, execution, and performance of B2B contracts.
• Art. 6 (1) (c) GDPR: Compliance with statutory, commercial, and tax obligations (e.g., retention periods under German commercial law HGB and tax law AO).
• Art. 6 (1) (f) GDPR: Legitimate interest in maintaining business relationships, corporate communication, and direct marketing to existing business partners.

5. Data Transfer and Third Parties

We do not sell or rent your business data. Data is shared with third parties only when necessary for contract performance (e.g., shipping providers, IT service providers, legal or tax advisors) or required by applicable laws.

6. Data Storage and Retention

Personal business data will be stored as long as necessary for the fulfillment of the underlying business relationship or as mandated by statutory retention requirements (typically 6 to 10 years for accounting documents under German law).

7. Rights of Data Subjects

In accordance with Chapter III of the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / "Right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise any of these rights, please contact us using the contact details provided in our Impressum.

###8. Security
We implement appropriate technical and organizational security measures (TOMs) to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties.