Privacy policy
Last updated: May 11, 2026
PRIVACY POLICY
Thank you for your interest in our online shop ADDA Germany. The protection of your personal data is important to us. We want you to feel secure when visiting our online store. Below we inform you about the collection, processing, and use of your personal data.
This Privacy Policy applies to the processing of personal data that we carry out in the context of providing our online services and online shop at [https://addagems.de](https://addagems.de).
Data Controller
The data controller responsible for data processing is:
Gemstone Garden GmbH
Schaperstrasse 12
10719 Berlin
Germany
Email: hello@addagems.de
Phone: +49 173 6263826
Contact for Data Protection Questions
If you have any questions about data protection or the exercise of your rights, you can contact us at any time using the contact details above.
Overview of Data Processing
We process your personal data primarily to operate our online shop and to offer you our products and services. Below you will find an overview of the types of data we collect and the purposes for which we use them.
Data We Collect
We process the following categories of personal data:
- Contact data (name, email address, phone number, address)
- Order data (items, quantity, price, payment details)
- Usage data (IP address, browser type, visit duration, pages visited)
- Payment data (bank details, credit card details)
- Communication data (correspondence with us)
Legal Basis for Processing
We process your personal data based on the following legal bases under Art. 6 GDPR:
a) Contract Performance (Art. 6(1)(b) GDPR)
Processing is necessary for the performance of contracts with you, particularly for processing your orders, delivering the ordered products, and processing payments.
b) Legitimate Interests (Art. 6(1)(f) GDPR)
We process your data to pursue our legitimate interests, particularly:
- To optimize our online shop and services
- To improve our products and services
- To analyze user behavior
- To ensure the security of our online presence
- To prevent fraud
These legitimate interests do not override your interests in data protection, unless they are considered more important than your interests.
c) Consent (Art. 6(1)(a) GDPR)
For certain processing activities, we obtain your explicit consent, particularly:
- For sending newsletters and marketing emails
- For using cookies and analytics tools
- For conducting surveys and reviews
You can withdraw your consent at any time with effect for the future.
Data Retention
We retain your personal data only as long as necessary for the purposes mentioned above. Specifically:
- Order and contact data: 10 years after contract termination (for tax and commercial reasons)
- Usage data: 6 months after your last visit (for security and analytical purposes)
- Payment data: 10 years after contract termination (for tax and commercial reasons)
- Newsletter data: Until you withdraw your consent
Data Transfer to Third Countries
We only transfer your data to countries with an adequate level of data protection under Art. 45 GDPR. This includes in particular:
- Transfers within the European Union
- Transfers to countries for which the European Commission has determined an adequate level of protection
We do not transfer your data to countries without an adequate data protection standard.
Cookies and Tracking Technologies
We use cookies and similar technologies to improve our online shop and provide you with a better user experience. For more information, please see our Cookie Policy.
Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights:
a) Right of Access (Art. 15 GDPR)
You have the right to obtain information about the personal data we store about you. You can in particular request information about the processing purposes, the categories of personal data, and the recipients.
b) Right to Rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data concerning you.
c) Right to Erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data if the processing is no longer necessary. Exceptions exist if processing is necessary for exercising the right of freedom of expression and information, for fulfilling a legal obligation, or for reasons of public interest.
d) Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of processing if the accuracy of the data is contested.
e) Right to Object (Art. 21 GDPR)
You have the right to object to the processing of your personal data for reasons arising from your particular situation if the processing is based on legitimate interests.
f) Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format and to transmit this data to another controller.
g) Right to Withdraw Consent (Art. 7(3) GDPR)
You have the right to withdraw your consent at any time. The withdrawal can be declared by email to hello@addagems.de.
Complaint Right (Art. 77 GDPR)
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is:
Berliner Beauftragter für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Cookies and Analytics Tools
We use Microsoft Clarity and Microsoft Advertising to analyze the usage of our online presence. These tools capture behavioral metrics, heatmaps, and session replays to improve our products/services and for marketing purposes. For more information about how Microsoft collects and uses your data, please visit the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement).
Children's Privacy
Our online store is not intended for persons under 16 years of age. We do not knowingly collect personally identifiable information from anyone under 16 years of age. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from anyone under 16 without verification of parental consent, we will take steps to remove that information from our servers.
Changes to This Privacy Policy
We reserve the right to update this Privacy Policy from time to time. The updated version will be published on our website. We recommend that you review this Privacy Policy regularly.
Last updated: May 11, 2026
In case of discrepancies, the German version shall prevail.