Privacy Policy

As of: August 10, 2026

The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data we process when you visit our online shop, place an order, use a customer account, contact us, or use other functions of our website.

1. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Birgie GmbH
Sonnige Höhe 11
44894 Bochum
Germany

Managing Director: Mustafa Cetinkol
Phone: +49 162 516 65 34
E-mail: info@siriusdiamant.de

2. General Legal Bases for Data Processing

We process personal data only if there is a legal basis for doing so.

Depending on the processing, the following legal bases may be considered in particular:

Art. 6(1)(a) GDPR – if you have given us your consent;
Art. 6(1)(b) GDPR – if the processing is necessary for the performance of a contract or for taking steps prior to entering into a contract;
Art. 6(1)(c) GDPR – if the processing is necessary for compliance with a legal obligation;
Art. 6(1)(f) GDPR – if the processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, unless your interests, fundamental rights, and fundamental freedoms override these.

3. Shopify as Shop and Hosting Platform

Our online shop is operated using the e-commerce platform Shopify.

Shopify provides us with, among other things, the technical infrastructure for the online shop, checkout, orders, customer accounts, communication functions, and other e-commerce features.

In this context, the following data may be processed in particular:

IP address and technical connection data,
browser and device information,
visited pages and interactions with our shop,
shopping cart and order data,
name and contact details,
billing and shipping address,
payment and transaction information,
customer account and login information,
communication and support information.

Personal data of customers in the European Economic Area is initially processed by Shopify International Limited in Ireland as part of the Shopify services. Shopify may use affiliated companies and other service providers as part of its international infrastructure.

To the extent that Shopify processes personal data on our behalf, this is done on the basis of existing data protection agreements with Shopify. In certain cases, Shopify may also process personal data on its own responsibility.

Further information on data protection at Shopify can be found at: Shopify Consumer Privacy Policy .

4. Accessing Our Website and Technical Log Data

When you access our online shop, technically necessary information is processed automatically. This may include, in particular:

IP address,
date and time of access,
accessed pages or files,
referrer URL,
browser type and version,
operating system,
device and connection information.

The processing is performed, in particular, to provide the website technically, to ensure stability and security, to detect errors, and to prevent misuse or attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our online shop.

5. Cookies and Similar Technologies

Our online shop uses cookies and similar technologies, such as local storage technologies, pixels, or comparable identifiers.

Technically Necessary Technologies

Certain cookies and similar technologies are required to provide functions of our online shop that you have explicitly requested. These include, for example, functions for:

shopping cart and checkout,
login and customer account,
security and fraud prevention,
saving language settings,
technically necessary session functions.

To the extent that accessing information on your device or storing it is strictly necessary, this is done in accordance with Section 25(2) of the German Telecommunications-Telemedia Data Protection Act (TDDDG). The subsequent processing of personal data is carried out primarily on the basis of Art. 6(1)(b) or (f) GDPR, depending on the purpose.

Analysis and Marketing Technologies

Where consent is required for analysis and marketing technologies, such non-technically necessary cookies or comparable technologies will only be used after you have provided your consent via our data protection or cookie settings.

The legal basis for storing or accessing information on your device in these cases is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.

You can change or revoke your consent at any time with effect for the future via the data protection or cookie settings offered on our website.

6. Orders and Contract Execution

When you place an order with us, we process the data necessary for the performance of the sales contract. This includes, in particular:

name,
billing and shipping address,
e-mail address,
telephone number (if applicable),
ordered products and product options,
order number,
payment method and payment status,
shipping and delivery information,
details regarding engravings or custom-made items (if applicable).

The processing is performed for the purposes of handling your order, payment processing, delivery, customer communication, processing returns, complaints, warranty and service cases, as well as for compliance with legal obligations.

The legal bases are Art. 6(1)(b) GDPR and, to the extent that legal storage or documentation requirements exist, Art. 6(1)(c) GDPR.

7. Customer Account

You can use a customer account in our online shop. In doing so, we process the data you provide and data generated in connection with the account, such as:

name and contact details,
login and account information,
shipping and billing addresses,
order history,
account settings.

The processing serves the purpose of providing and managing your customer account and its associated functions.

The legal basis is Art. 6(1)(b) GDPR.

You may request the deletion of your customer account, provided that no legal retention obligations or other legal reasons prevent the deletion of specific data.

8. Payment Processing

For payment processing, we transmit the required data to the payment service provider selected by you. The payment methods actually available to you are displayed during checkout.

The legal basis for processing data required for payment processing is generally Art. 6(1)(b) GDPR.

PayPal

If you select PayPal as your payment method, the data required for payment processing is transmitted to PayPal.

For customers in the European Economic Area, the following provider is primarily responsible:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg

PayPal processes personal data for purposes including payment processing as well as fraud and risk prevention in accordance with its own privacy policy.

Further information: PayPal Privacy Policy .

Klarna

If you select a payment method offered via Klarna, the data required for payment processing is transmitted to Klarna.

Klarna Bank AB (publ)
Sveavägen 46
111 34 Stockholm
Sweden

In connection with the payment methods offered, Klarna may perform identity, payment, fraud prevention, risk, and, if applicable, credit checks in accordance with its own privacy information.

Further information: Data protection at Klarna .

9. Shipping and Delivery

To deliver your order, we transmit the data required for delivery to the transport company commissioned with the shipment.

This may include, in particular, your name, shipping address, shipment information, and, if required for the respective delivery or requested by you, your e-mail address or telephone number.

The legal basis is generally Art. 6(1)(b) GDPR.

We primarily use the following shipping service providers:

DHL or companies of the DHL Group,
Deutsche Post AG,
United Parcel Service (UPS),
FedEx or the FedEx company responsible for the respective transport.

For international shipments, personal data may also be processed to the necessary extent by the respective shipping service providers and their partners in the shipping and destination countries involved.

10. Contact via E-Mail or Contact Form

When you contact us via e-mail or a contact form, we process the data you provide, such as:

name,
e-mail address,
telephone number (if applicable),
order number,
content of your message,
photos or files transmitted (if applicable).

The processing is performed to handle and respond to your inquiry.

If your inquiry relates to an existing contract or to pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. For other inquiries, the processing is based on our legitimate interest in efficient customer communication pursuant to Art. 6(1)(f) GDPR.

11. Contact via WhatsApp

If you voluntarily contact us via WhatsApp, we process the data you transmit to handle your request.

In this context, your telephone number, profile name, the content of your messages, as well as any images, videos, documents, or other information you transmit may be processed.

For contract-related or pre-contractual inquiries, the legal basis is Art. 6(1)(b) GDPR. For other inquiries, the processing is based on Art. 6(1)(f) GDPR.

For users in the European Economic Area, WhatsApp is offered by WhatsApp Ireland Limited. In the course of use, WhatsApp processes its own technical, account, and connection data in accordance with its privacy policy.

Further information: WhatsApp Privacy Policy .

12. Newsletter and Shopify Email

If you subscribe to our newsletter, we use your e-mail address to send you information about Sirius Diamant, our products, offers, news, and special benefits.

The legal basis is your consent in accordance with Art. 6(1)(a) GDPR.

We use functions from Shopify, in particular Shopify Email, for sending and managing our newsletter. The data required for sending the newsletter is processed via the Shopify infrastructure.

To the extent that technical delivery, opening, or interaction data is analyzed in the context of newsletter distribution and consent is required for this, such analysis only occurs within the scope of the consent provided.

You can revoke your consent at any time with effect for the future, for example, via the unsubscribe link in a newsletter or by sending a message to info@siriusdiamant.de.

The lawfulness of the processing carried out until the revocation remains unaffected.

13. Google Analytics

We use Google Analytics to analyze and improve our online shop, provided that the necessary data protection requirements are met and you have given the required consent.

The provider for the European Economic Area is, in particular, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The following information may be processed in particular:

online and cookie identifiers,
device and browser information,
approximate location information,
accessed pages and products,
interactions on our website,
origin of the website visit,
technical information about the use of our website.

To the extent that Google Analytics uses non-technically necessary cookies or comparable device access, their use is based on Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can change or revoke your consent at any time with effect for the future via our data protection or cookie settings.

Further information: Google Privacy Policy .

14. Google Ads

We use Google Ads for placing and measuring advertising campaigns, provided that the necessary data protection requirements are met.

In this context, Google Ads conversion measurements and, if activated and covered by your consent, marketing or remarketing functions may be used.

Cookies or similar technologies may be used and information about your interactions with our website may be processed, such as whether a user performed a specific action in our shop after viewing or clicking an advertisement.

The purpose of the processing is to measure and optimize our advertising campaigns and, if covered by your consent, to display relevant advertising.

Unless cookies or comparable access to your device that are technically necessary for this purpose are used, the legal bases are Section 25 (1) of the TDDDG and Article 6 (1) (a) of the GDPR.

You can change or revoke your consent at any time with effect for the future via our data protection or cookie settings.

Further information: Google Privacy Policy .

15. Recipients of personal data

We only pass on personal data if this is permitted for the fulfillment of a contract, for the fulfillment of legal obligations, on the basis of a legitimate interest, or on the basis of your consent.

Recipients or categories of recipients may in particular be:

Shop and hosting service providers, in particular Shopify,
Payment service providers, in particular PayPal and Klarna,
Shipping and logistics companies,
IT and technical service providers,
Analysis and marketing service providers, as far as permitted under data protection law,
Communication service providers,
Tax advisors, auditors, or legal advisors, as required,
Authorities or other public bodies, as far as there is a legal obligation.

16. Data transfers to third countries

Some of the service providers we use operate internationally. Therefore, it may happen that personal data is also processed outside the European Economic Area.

Insofar as personal data is transferred to a country outside the European Economic Area, this is done in accordance with the statutory data protection requirements.

Depending on the recipient and the destination country, data transfer may be based in particular on an adequacy decision of the European Commission, recognized standard contractual clauses, binding corporate rules, or other legally permissible guarantees.

Shopify points out that personal data of customers in the European Economic Area is initially processed by Shopify International Limited in Ireland and may be transferred to other countries as part of the global Shopify infrastructure under appropriate data protection safeguards.

17. Storage period

We store personal data only as long as is necessary for the respective processing purpose or as long as statutory retention obligations exist.

For contract and order data, the storage period depends in particular on the commercial and tax law retention obligations as well as statutory limitation periods.

Data from inquiries will be deleted once processing has been completed and there are no statutory retention obligations or legitimate reasons for further storage.

Data processed on the basis of consent is generally processed until the consent is withdrawn or until the respective processing purpose ceases to apply, provided no other legal basis allows or requires further storage.

18. Your data protection rights

Subject to the statutory requirements, you have the following rights in particular:

Access to the personal data we process;
Rectification of incorrect or incomplete data;
Erasure of your personal data, provided that no legal reasons prevent erasure;
Restriction of processing;
Data portability, insofar as the statutory requirements are met;
Objection to certain processing operations;
Withdrawal of consent granted with effect for the future.

Language