Privacy Policy

Last updated: 23 August 2026

Galina Hartinger Jewelry GmbH respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect and process personal data when you visit our website, contact us about a jewellery piece, submit a corporate or custom jewellery enquiry, or otherwise communicate with us through this website.

1. Data Controller

The controller responsible for the processing of personal data on this website is:

Galina Hartinger Jewelry GmbH
Am Golfplatz 1
7431 Bad Tatzmannsdorf
Austria

E-mail: galinahartinger@gmail.com

Further company information can be found in our Imprint.

2. Personal Data We Collect

Depending on how you use our website, we may process the following categories of personal data:

your name;
your e-mail address;
information and messages voluntarily submitted through our contact or enquiry forms;
information relating to a jewellery piece about which you make an enquiry;
company and business contact information submitted in connection with corporate enquiries;
logos, design materials, specifications or other information voluntarily provided in connection with corporate or custom jewellery projects;
technical information generated when you use our website, such as IP address, browser and device information and cookie-related information.

We process personal data only to the extent necessary for the respective purpose.

3. Jewellery Enquiries

Our website allows you to request information about individual jewellery pieces.

When you submit an enquiry, we process the information you enter into the form, in particular your name, e-mail address and message.

To identify the jewellery piece concerned, the enquiry may also automatically include information about the selected product, such as its product name and displayed price.

We use this information to identify and respond to your enquiry, communicate with you about the jewellery piece and, where requested, take steps towards a possible purchase or individual arrangement.

The legal basis for this processing is Art. 6(1)(b) GDPR where processing is necessary to take steps at your request prior to entering into a contract.

Where applicable, processing may also be based on our legitimate interest in responding to and documenting customer enquiries pursuant to Art. 6(1)(f) GDPR.

4. Corporate and Custom Jewellery Enquiries

Our website includes a Corporate section for companies, organisations and other professional clients interested in bespoke jewellery, corporate gifts, awards, pins, medals, bracelets or other individually developed jewellery projects.

When you contact us regarding a corporate or custom project, we may process information including:

your name and contact details;
company or organisation name;
information about the requested project;
logos, trademarks, images or other design materials supplied by you;
requested quantities, materials, gemstones, dimensions or other product specifications;
information required to prepare a visualisation, concept or quotation;
correspondence relating to the enquiry, quotation, development or potential order.

We process these data in order to respond to your enquiry, develop requested concepts or visualisations, prepare quotations and, where applicable, negotiate, conclude and perform a contract.

The legal basis is Art. 6(1)(b) GDPR where processing relates to pre-contractual measures or a contract.

Where a person contacts us on behalf of a company or organisation, processing of their business contact information may also be based on our legitimate interest in conducting and documenting business communications pursuant to Art. 6(1)(f) GDPR.

Please only submit logos, images, files and other materials that you are authorised to provide to us.

5. Contact and Correspondence

If you contact us by e-mail or through a website form, we process the information you provide in order to respond to your communication and handle your request.

Depending on the nature of your enquiry, processing is based on Art. 6(1)(b) GDPR in connection with contractual or pre-contractual communication or Art. 6(1)(f) GDPR based on our legitimate interest in responding to and documenting business communications.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are technically necessary for the website to function correctly. Where permitted by law, these cookies may be used without your consent.

Other cookies, including functional, analytics or marketing cookies where applicable, are used only in accordance with your choices and where the required consent has been obtained.

When you visit our website, you can manage your preferences through our cookie consent system.

You can also change or withdraw your cookie consent at any time through the Cookie Settings available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Website Platform and Hosting

This website is created and operated using services provided by Wix.com Ltd. and/or its affiliated companies.

Wix provides technical infrastructure and services required for the operation of the website, which may include hosting, website functionality, forms, security, data storage and other technical services.

In connection with these services, personal data may be processed through Wix systems and infrastructure.

Depending on the particular processing activity, Wix may process personal data on our behalf or process certain data in accordance with its own applicable privacy terms.

8. Legal Bases for Processing

Depending on the particular processing activity, we process personal data on the following legal bases:

Art. 6(1)(a) GDPR – Consent
Where you have given consent, in particular for non-essential cookies or similar technologies.

Art. 6(1)(b) GDPR – Contract and pre-contractual measures
Where processing is necessary to respond to your request before entering into a contract or to perform a contract.

Art. 6(1)(c) GDPR – Legal obligation
Where processing or retention is necessary to comply with applicable legal obligations.

Art. 6(1)(f) GDPR – Legitimate interests
Where processing is necessary for our legitimate business interests, such as responding to business communications, documenting enquiries, maintaining the security and functionality of our website and protecting against misuse, provided that your interests or fundamental rights and freedoms do not override those interests.

9. Recipients of Personal Data

We do not sell your personal data.

Where necessary for the operation of our website, handling of enquiries or fulfilment of legal and contractual obligations, personal data may be made available to appropriate service providers or recipients.

These may include, where applicable:

website hosting and technology providers;
Wix and associated technical service providers;
e-mail and communication service providers;
IT service providers;
professional advisers such as accountants or legal advisers;
public authorities or other recipients where disclosure is required by law.

Service providers processing personal data on our behalf are used subject to the applicable data protection requirements.

10. International Data Transfers

Some technology and service providers used in connection with our website may process personal data outside Austria or outside the European Economic Area (EEA).

Where personal data are transferred outside the EEA, such transfers are made only where a valid transfer mechanism under applicable data protection law is available, for example an adequacy decision or appropriate safeguards in accordance with the GDPR.

11. Data Retention

We retain personal data only for as long as necessary for the purpose for which they were collected and for as long as required by applicable statutory retention obligations.

Enquiries and correspondence may be retained for the period necessary to process the enquiry and, where appropriate, afterwards for documentation, contractual or legal purposes.

If an enquiry results in a business transaction, relevant contractual, accounting and business records may be retained for the applicable statutory retention periods.

Data that are no longer required and are not subject to a legal retention obligation will be deleted or anonymised as appropriate.

12. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or unlawful disclosure.

However, no method of transmission or storage over the internet can guarantee absolute security.

13. Your Rights

Under the GDPR, subject to the applicable legal requirements, you have the right to:

request information about the processing of your personal data;
obtain access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive personal data in a portable format where the requirements for data portability are met;
withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

14. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In Austria, the competent supervisory authority is:

Österreichische Datenschutzbehörde
(Austrian Data Protection Authority)

15. Contact Regarding Data Protection

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact: