Privacy Policy

1. Data Controller

The controller responsible for data processing on this website is:

Berlin Gems Co., Ltd.
BIS Building, Floor 2, Phase 2, Room 2D8B
119 Mahesak Road, Suriyawongse
Bangrak, Bangkok 10500
Thailand

Telephone: +66 86 772 5231
Email: webshop@berlingems.com
Website: www.berlingems.com

Represented by: Rinrada Luangmatcha (Managing Director)

2. General Information on Data Processing

We process personal data exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR), insofar as it applies to our business activities.

Personal data means any information relating to an identified or identifiable natural person.

3. Hosting

This website is hosted by an external service provider:

Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723
United States

When you visit our website, Vercel collects various log files (such as your IP address, browser type, and the date and time of access). This data is technically necessary to provide the website and to ensure its stability and security.

Processing is carried out on the basis of Article 6(1)(f) GDPR (our legitimate interest in the secure and reliable provision of our website).

Vercel is established in the United States. Personal data (in particular IP addresses contained in log files) may therefore be transferred to the United States. Vercel is certified under the EU–US Data Privacy Framework (DPF). The European Commission has determined that U.S. companies certified under the DPF provide an adequate level of data protection. Vercel's certification can be viewed at:
https://www.dataprivacyframework.gov

In the event of a violation of the DPF, you may submit a complaint through the DPF dispute resolution process or to the competent EU data protection authority.

EU Representative pursuant to Article 27 GDPR

In accordance with Article 27 GDPR, we have appointed the following representative within the European Union:
Handelsvertretung Herkt GmbH

4. Collection and Processing of Personal Data

We collect personal data when you voluntarily provide it to us, for example when:

• placing an order;
• contacting us.

In particular, we process:

• Name
• Address
• Email address
• Telephone number (where provided)
• Payment information
• Order information

The processing is carried out for the performance of a contract pursuant to Article 6(1)(b) GDPR.

5. Payment Service Provider – Stripe

We use the following payment service provider to process payments:
Stripe Payments Europe Ltd.

When payments are made via Stripe, payment information (such as credit card details and transaction data) is transmitted directly to Stripe.

Stripe may also transfer personal data to the United States. Stripe is certified under the EU–US Data Privacy Framework (DPF), thereby ensuring an adequate level of data protection.

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

Further information is available at:
https://stripe.com/privacy

6. Transfer of Personal Data to Third Countries (Thailand)

Our company is established in Thailand.

Personal data may be transferred to Thailand as part of the performance of a contract (for example, in connection with orders, customer communications, and support services).

Thailand is considered a third country under the GDPR for which the European Commission has not adopted an adequacy decision. Accordingly, transfers are made on the basis of appropriate safeguards, in particular contractual safeguards (Standard Contractual Clauses), where required.

7. Data Retention

Personal data will only be retained for as long as necessary for the purposes for which it was collected or as required by applicable statutory retention periods.

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access to your personal data (Article 15 GDPR)
• Right to rectification of inaccurate personal data (Article 16 GDPR)
• Right to erasure (“right to be forgotten”) (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object to processing (Article 21 GDPR)
• Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (Article 22 GDPR)

This right does not currently apply to our services, as we do not use fully automated decision-making or profiling systems.

You also have the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. In general, the competent authority will be the data protection supervisory authority in your EU Member State of residence.

9. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.

In general, the competent supervisory authority is the authority responsible for your place of residence within the European Union.

11. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against manipulation, loss, destruction, or unauthorised access.

12. Cookies and Tracking Technologies

12.1 Categories of Cookies

This website uses the following categories of cookies:

• Necessary Cookies – These cookies are technically required for the basic functionality of the website. Without them, the ordering process cannot be completed.
• Analytics Cookies – We use Google Analytics to measure page views, session duration, and user navigation through the website.
• Marketing Cookies – These cookies are only placed after you have provided your explicit consent.

12.2 Google Analytics

We use Google Analytics with IP anonymisation.

Your IP address is shortened within the European Union or the European Economic Area before any transfer to the United States. Where data is transferred to other third countries, additional anonymisation measures are applied where appropriate.

Opt-out: You may prevent Google Analytics from collecting your data by adjusting your preferences through our Cookie Consent Tool.

12.3 Cookie Banner

When you first visit our website, you will be presented with a Cookie Consent Banner that allows you to consent to or reject individual categories of cookies.

Your consent choices are recorded for documentation purposes.

You may withdraw or modify your consent at any time through the Cookie Settings available on our website.

12.4 Cookie Retention

Necessary cookies are deleted when your browsing session ends.

Analytics cookies are retained for 14 months.

13. Newsletter

• If you subscribe to our newsletter, we process your email address solely for the purpose of providing the newsletter service.
• The legal basis for processing is your consent pursuant to Article 6(1)(a) GDPR.
• Subscription is carried out using the double opt-in procedure. After registering, you will receive a confirmation email that must be confirmed before you begin receiving the newsletter.
• The newsletter is distributed through Mailchimp. Personal data is transferred to third countries only where appropriate safeguards, including certification under the EU–US Data Privacy Framework (DPF), are in place.
• You may unsubscribe at any time by clicking the unsubscribe link contained in every newsletter or by contacting us at webshop@berlingems.com.

Upon unsubscribing, we will delete your email address without undue delay unless we are legally required to retain it.

14. Currency of this Privacy Policy

This Privacy Policy is currently valid and was last updated in July 2026.