Privacy Policy

1. Controller

The party responsible for data processing on this website is:
MINA GmbH, represented by Managing Director Hasan Yilmaz
August-Bebel-Platz 1, 47169 Duisburg, Germany
Phone: +49 203 519 399 01 · Email: info@mina-juwelier.de

2. General Information

This website provides information about our shop, contact options, newsletter registration and calculators. No online sales take place.

3. Hosting and Server Log Files

When you access this website, our hosting provider automatically stores information in server log files: IP address, date and time of access, page visited, amount of data transferred, browser type and operating system. This serves the secure and stable operation of the site. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest). A data processing agreement pursuant to Art. 28 GDPR exists with the hosting provider. Provider: ALL-INKL.COM, Hauptstraße 68, 02742 Friedersdorf.

4. Contacting Us

We process your subject, name, email address, optional telephone number and message to answer your enquiry. Transfer to our web server uses HTTPS. The server passes the message to our host’s email system for delivery to info@mina-juwelier.de. End-to-end email encryption is not promised. Message contents are not stored in a separate website database. Enquiries remain in the mailbox for as long as needed for handling and any applicable retention obligations. The legal basis is Article 6(1)(b) GDPR for contractual enquiries, otherwise Article 6(1)(f) GDPR for responding to enquiries.

5. Form and spam protection

Forms use an essential session cookie (mina_form), a security token, an invisible checking field and server-side sending limits. The cookie contains a random identifier and is restricted to the API area. A hash of the IP address and time window is used to limit requests; entries expire after one hour and are deleted on subsequent accesses. No Cloudflare Turnstile script is loaded. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in secure operation and abuse prevention.

6. Newsletter

Newsletter registration uses a confirmation email followed by active confirmation (double opt-in). We store email address, language, request and confirmation times, consent-text version and technical confirmation/unsubscribe keys in a database outside the public web directory. Unconfirmed registrations expire after 48 hours and are removed on subsequent accesses. Confirmed registrations remain until unsubscribe. Unsubscribing deletes the active subscriber record and its delivery logs. Campaign identifier, email and delivery time are retained for technical purposes for at most one year. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw it at any time using the unsubscribe link or by emailing info@mina-juwelier.de. Delivery uses our host’s email system.

7. Google Maps

Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and OpenStreetMap (OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, UK) load only after you click “Load map”. Your IP address and browser details are then transmitted to the selected provider. Processing outside the EU, particularly in the USA for Google, is possible. The legal basis is consent under Article 6(1)(a) GDPR. “Close map” ends the embed; it does not recall data already transmitted. Details: https://policies.google.com/privacy and https://osmfoundation.org/wiki/Privacy_Policy. External route links take you away from this website.

8. Precious Metal Prices (external services)

Indicative metal prices are fetched server-side from gold-api.com and daily exchange rates from ExchangeRate-API (open.er-api.com), with temporary caching. Your browser contacts only our server for these requests; your IP address is not forwarded to the quote providers. Calculator inputs are processed locally in your browser and are not sent to us. External source links contact the provider only when clicked.

9. Language and site search

Language follows the page URL. No browser local storage is used for language selection. Site search uses a local index; search terms are not sent to an external search service.

10. SSL/TLS Encryption

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by „https://“ in your browser's address bar.

11. Your Rights as a Data Subject

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

13. Validity and Changes

Updated: 25 September 2026. This notice describes the functions implemented in this website package.