We respect your privacy

This website uses cookies to improve user experience and analyze traffic. You can adjust your settings at any time via the "Cookie Settings" link at the bottom of the page.

Functional Cookies

These cookies are essential for the basic functions of the website and cannot be disabled. Without them, the site may not work properly.

Statistics (Google Analytics)

These cookies allow us to count visitors and traffic sources so we can measure and improve the performance of our site. All information these cookies collect is aggregated and therefore anonymous.

Marketing (Google Ads, Remarketing)

These cookies are used to make advertising more relevant to your interests. They enable features like remarketing and conversion tracking.

More details in our Privacy Policy.

Mandatory Information under Art. 12 ff. GDPR

Contact Information of the Controller (Management)

Surname: Rathgeber
First name: Gerhard

Contact Details (business)
Company: Juwelier Rieger, Owner Gerhard Rathgeber
Address: St.-Nikolaus-Platz 5, 80939 Munich, Germany
Phone: +49 89 30768229
Email: info@juwelier-rieger.de

Source of Your Personal Data

Your personal data is generally collected directly from you. Processing of the personal data you provide is necessary to fulfill contractual obligations arising from the contract concluded with us. Due to your duty to cooperate, you must provide the requested personal data; otherwise, we cannot discharge our contractual obligations.

In connection with pre-contractual steps (e.g. collecting customer details), providing your personal data is essential. If you do not supply the requested data, a contract cannot be concluded.

To deliver our services, it may be necessary to process personal data lawfully obtained from other companies or third parties, such as your business partners.

We may also process personal data from public sources (e.g. websites), provided such data is lawfully obtained and used solely for the respective contractual purpose.

Purposes and Legal Bases of Processing

The personal data you provide is processed in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):

Based on Consent (Art. 6(1)(a) GDPR)

Processing purposes arise from voluntary consent. You may withdraw your consent at any time with future effect. Consents provided before the GDPR’s effective date (25 May 2018) may also be withdrawn. Processing activities conducted prior to withdrawal remain unaffected. For example: subscribing to a newsletter or consenting to data sharing (e.g. with banks, insurers, shareholders) at your request.

To Fulfill Contractual Obligations (Art. 6(1)(b) GDPR)

The purposes of data processing include initiating pre-contractual measures preceding a formal business relationship, as well as performing obligations under the contract concluded with you.

Due to Legal Requirements (Art. 6(1)(c) GDPR) or Public Interest (Art. 6(1)(e) GDPR)

Processing purposes derive from legal obligations or serve the public interest (e.g. compliance with record-keeping duties, evidence of compliance with the business owner’s notification and information obligations).

Based on Legitimate Interests (Art. 6(1)(f) GDPR)

Processing purposes can also derive from safeguarding our legitimate interests. Data you provide may be processed beyond contract fulfillment if your interests or fundamental rights do not override our interests. Legitimate interests may include asserting legal claims, defending against liability claims, or preventing criminal activity.

Recipients of Your Personal Data

Within our company, only departments that require your data to fulfill contractual or legal obligations and are authorized to process it will have access.

To fulfill the contract, only those external parties that are legally required to receive your data—such as tax authorities, competent regulatory bodies, or courts—will receive it.

Additional recipients will only receive your data if you explicitly request it and provide consent.

We engage processors such as data center providers, IT partners, or document destruction services to assist in service delivery. They are contractually bound to comply with GDPR and BDSG requirements.

Transfer of Data to Third Countries or International Organizations

Your data will not be transferred to any third country or international organization under any circumstances. Should you expressly request such a transfer, it will only be carried out with your written consent.

Automated Decision‑Making including Profiling

We do not use any fully automated decision-making, including profiling, in processing your personal data pursuant to Art. 22 GDPR.

Duration of Processing (Deletion Criteria)

Your personal data will be processed for as long as necessary to achieve the agreed contractual purpose, and at minimum for the duration of the contractual relationship. After the contract ends, data may continue to be processed to comply with legal retention obligations or based on our legitimate interests. Once statutory retention periods expire and/or our legitimate interests cease, the data will be deleted.

Estimated retention periods for our obligations and legitimate interests:

  • Compliance with commercial and tax record‑keeping: 2 to 10 years.
  • Preservation of evidence under statutory limitation periods: up to 30 years (regular limitation period is 3 years under §§ 195 ff. BGB).

Your Rights

Right of Access (Art. 15 GDPR)

You have the right to obtain, upon request and free of charge, confirmation whether personal data about you is processed, and, if so, the purposes and categories of data.

Right to Rectification (Art. 16 GDPR)

You have the right to request the prompt correction of inaccurate personal data concerning you by the controller. In light of processing purposes, you may also request completion of incomplete data, including via supplemental statement.

Right to Erasure (“Right to Be Forgotten”) (Art. 17 GDPR)

You have the right to request deletion of your personal data without undue delay if one of the following applies:

  • The purposes for which the data was collected no longer apply.
  • You withdraw your consent and no other legal basis exists.
  • You object to the processing and no other legal basis exists.
  • Your data has been processed unlawfully.
  • Deletion is required to comply with a legal obligation under EU or member‑state law.
  • Your personal data was collected concerning information society services offered to a minor under Article 8(1).

Right to Restriction of Processing (Art. 18 GDPR & § 35 BDSG)

You have the right to request restriction of processing where one of the following applies:

  • You contest the accuracy of your personal data.
  • The processing is unlawful, but you oppose deletion.
  • Your personal data is no longer needed for processing, but you need it for legal claims.
  • You object to processing under Art. 21(1) GDPR—processing will be restricted pending verification whether the controller’s legitimate grounds override yours.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive the data you provided in a structured, commonly used, machine-readable format, and to transmit it to another controller without hindrance.

Right to Object (Art. 21 GDPR)

To exercise this right, please contact the data controller (see above).

Right to Lodge a Complaint with a Supervisory Authority (Art. 13(2)(d), 77 GDPR in conjunction with § 19 BDSG)

If you believe the processing of your data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

Withdrawal of Consent (Art. 7(3) GDPR)

If processing is based on your consent under Art. 6(1)(a) or Art. 9(2)(a) (processing of special categories of personal data), you may withdraw that consent at any time without affecting the legality of processing carried out based on consent before its withdrawal.