This translation is provided for information only. The German version is legally binding.
Privacy Policy
Last updated: 2 October 2026
We are pleased about your visit and take the protection of your personal data seriously. Here you can find out which data we process when you visit premiumgeschenk.de, place an order or contact us, for what purpose, on what legal basis, and what rights you have.
1. Data controller
Roman Lukiyanov, SilberKosmos – Premium Geschenkideen
Faleska-Meinig-Str. 126, 09122 Chemnitz, Deutschland
Phone: +49 371 272 989 33 · E-mail: shop@premiumgeschenk.de
We have not appointed a data protection officer because we are not legally required to do so. If you have any questions about data protection, please write to us at the e-mail address given above.
2. General information
Legal bases. We process data for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), for compliance with legal obligations such as retention obligations (Art. 6(1)(c) GDPR), on the basis of our legitimate interests (Art. 6(1)(f) GDPR) and, where we ask for it, on the basis of your consent (Art. 6(1)(a) GDPR, § 25 Abs. 1 TDDDG). You can withdraw your consent at any time with effect for the future.
Storage period. We delete data as soon as the purpose no longer applies. We retain contract and invoice data in accordance with the provisions of tax and commercial law (accounting vouchers eight years, books and annual financial statements ten years, commercial and business letters six years).
Recipients and processors. We use service providers who process data on our behalf and are contractually bound (Art. 28 GDPR). They are named in the following sections.
Transfers to third countries. Some service providers are located in the USA or other countries outside the EU or transfer data there. We base such transfers on an adequacy decision of the EU Commission (for the USA: EU-US Data Privacy Framework, provided the recipient is certified) and additionally on the standard contractual clauses of the EU Commission (Art. 46(2)(c) GDPR).
3. Provision of the online shop (Shopify)
Our shop runs on the Shopify platform. The provider for merchants in Europe is Shopify International Limited, Dublin, Ireland. When pages are accessed, Shopify processes technically necessary data (e.g. IP address, date and time, page accessed, browser, operating system) as well as all data that you enter in the shop (shopping cart, customer account, order). The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in a secure, functioning shop (Art. 6(1)(f) GDPR). Shopify may also transfer data to Shopify Inc. in Canada (adequacy decision) and to sub-processors in the USA. Further information: Shopify’s privacy policy.
4. Order, customer account and contract processing
For your order, we process your name, delivery and billing address, e-mail address, telephone number where applicable, the goods ordered, your engraving text, and payment and shipping data (Art. 6(1)(b) GDPR). A customer account is optional; there you can view your orders and your wishlist. You can have your account deleted at any time, provided that no retention obligations prevent this.
For processing, we use additional applications within Shopify for invoices and delivery notes, shipping labels, forms and automated workflows. Only the order data required for the respective step is processed.
5. Payment
Your payment data is processed directly by the payment service providers; we do not receive complete card or account details.
- Credit card, Shop Pay, Apple Pay, Google Pay and local payment methods: processed via Shopify Payments (Shopify International Limited, Dublin, in cooperation with Stripe Payments Europe, Limited, Dublin). For Apple Pay and Google Pay, the terms of Apple or Google respectively also apply.
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxemburg.
- Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Schweden. Depending on the option selected, Klarna checks your identity and creditworthiness and may involve credit reference agencies for this purpose. Details can be found in Klarna’s privacy notice, which is displayed when you make your selection.
- Prepayment and PayPal.Me: We process the details you provide with the bank transfer or payment in order to allocate your payment.
The legal basis is Art. 6(1)(b) GDPR and, for credit checks, additionally Art. 6(1)(f) GDPR.
6. Shipping
For delivery, we pass on your name and delivery address to the commissioned shipping company: Deutsche Post / DHL, UPS or FedEx. We only transmit your e-mail address or telephone number if you have consented (e.g. for announcing the delivery) or if the shipping company requires it for customs clearance and delivery of shipments outside the EU or of express deliveries (Art. 6(1)(b) GDPR).
7. Contact
E-mail and contact form. When you write to us, we process your details in order to handle your enquiry (Art. 6(1)(b) or (f) GDPR). We prepare draft replies with the support of an AI (Claude by Anthropic). Before doing so, we remove name, e-mail address, telephone number and engraving texts; every reply is checked and approved by us. We send reply e-mails via the Resend service. For internal notifications about new enquiries, we use a Telegram channel that only we can access.
Telephone and AI assistant “Anna”. Calls to our service number are answered by our AI assistant Anna. Anna is an AI system and introduces herself as an AI assistant at the beginning of every conversation; she confirms this at any time on request. She answers questions about products, orders and shipping and summarises your request for us. For this purpose, the conversation and your telephone number are processed by the provider ElevenLabs (USA) and stored as a call log; we receive the summary via our own server. The legal basis is Art. 6(1)(b) GDPR insofar as an order is concerned, otherwise our legitimate interest in being quickly reachable (Art. 6(1)(f) GDPR). If you do not wish to speak to an AI, please send us an e-mail.
WhatsApp. You can write to us via WhatsApp. The provider is WhatsApp Ireland Limited, Dublin. WhatsApp processes your messages and metadata in accordance with its own terms; please do not send us any sensitive data via WhatsApp. The legal basis is Art. 6(1)(b) or (f) GDPR.
8. Online withdrawal
For the online withdrawal function, we process the details you provide in the form (name, order details, e-mail address, optionally reason and statement) as well as the date and time of receipt, in order to process the withdrawal and send you an acknowledgement of receipt (Art. 6(1)(c) GDPR). The data is processed on our own server at Hetzner Online GmbH (location Falkenstein, Germany) and backed up in encrypted form.
9. Product reviews (Judge.me)
After an order, we invite you by e-mail to review the product. For this we use the Judge.me application. Your name, your e-mail address and the products ordered are processed (Art. 6(1)(f) GDPR; you can object to the invitation at any time). If you submit a review, we publish the review text, the number of stars, the date and your name in the form you have chosen (e.g. abbreviated). Your e-mail address is not published.
10. Newsletter (Klaviyo)
You will only receive our newsletter with your consent (Art. 6(1)(a) GDPR). After signing up, you confirm your e-mail address via a link (double opt-in). For sending, we use Klaviyo (Klaviyo, Inc., USA). Klaviyo evaluates whether a newsletter was opened and which links were clicked. You can unsubscribe from the newsletter at any time via the unsubscribe link in every e-mail. If you have given your consent in the shop, Klaviyo additionally records which products you view in order to send you relevant content.
11. Wishlist (Wishlist Plus)
For the wishlist, we use the Wishlist Plus application from the provider Swym. The saved products are stored and, if you are logged in or share your list, your e-mail address (Art. 6(1)(b) GDPR).
12. Cookies and consent
We use technically necessary cookies and similar technologies that are required to operate the shop (e.g. shopping cart, login, security, storing your cookie selection; § 25 Abs. 2 TDDDG, Art. 6(1)(f) GDPR). We only use all other cookies and pixels for statistics and marketing with your consent via our cookie banner (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR). You can change your selection at any time via the “Your Privacy Choices” or “Privacy settings” link in the footer.
13. Statistics and marketing (only with consent)
- Google Analytics 4 and Google Ads: Google Ireland Limited, Dublin. We measure how the shop is used and whether ads lead to purchases (conversion tracking). Online identifiers and usage data are processed in this context; a transfer to Google LLC in the USA is possible.
- Meta Pixel (Facebook and Instagram): Meta Platforms Ireland Limited, Dublin. We measure the effectiveness of our ads and can create audiences for ads. We are jointly responsible with Meta for the collection of data during your visit to our site (Art. 26 GDPR); the agreement with Meta is available at facebook.com/legal/controller_addendum.
- TikTok Pixel: TikTok Technology Limited, Dublin. Measuring the effectiveness of ads on TikTok.
- Smart Pricing (Shopify): Shopify International Limited, Dublin. Shopify analyses which products are viewed, added to the cart and purchased, and gives us pricing recommendations based on this; a transfer to Shopify Inc. in Canada or the USA is possible.
- Klaviyo: see section 10.
These services are not loaded without your consent. You can withdraw your consent at any time via the privacy settings in the footer.
14. Other content and links
For internal links between our pages, we use the InterLinks application; a script is loaded from its server, which technically transmits your IP address (Art. 6(1)(f) GDPR). Links to our profiles on Instagram, Facebook, YouTube, LinkedIn and Pinterest are simple links; data is only transmitted when you click on a link.
15. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw consent at any time (Art. 7(3)). To exercise these rights, please write to us at shop@premiumgeschenk.de.
Right to object (Art. 21 GDPR): If we process your data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.
Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Sächsische Datenschutz- und Transparenzbeauftragte (Saxon Data Protection and Transparency Commissioner), Maternistraße 17, 01067 Dresden.
16. Changes
We adapt this privacy policy when our services or the legal situation change. The version published here at any given time applies.