Privacy Policy
Veristone e.U. · Villacher Str. 75b, 9220 Velden am Wörthersee, Austria
Last updated: 7 August 2026
1. Controller
The controller responsible for the processing of personal data described in this Privacy Policy (within the meaning of the EU General Data Protection Regulation, “GDPR”) is:
Veristone e.U.
Villacher Str. 75b
9220 Velden am Wörthersee, Austria
VAT ID: ATU83098167
Email: info@veristone.eu
Phone: +43 664 1482753
If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us using the details above.
2. Scope of this Policy
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it. It applies to our website, our online and in-store sales activities, and any other services through which we collect personal data. It does not apply to third-party websites we may link to.
3. What Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
- Identity and contact data: name, postal address, email address, telephone number.
- Order and transaction data: items purchased, order value, payment method, invoice and delivery details.
- Payment data: processed by our payment service providers; we do not store full card details ourselves.
- Account data: if you create an account with us, your login credentials and order history.
- Communication data: enquiries, correspondence, and any information you provide when contacting us (e.g. for appraisals, custom orders or repairs).
- Technical and usage data: IP address, browser type, device information, and pages visited on our website, collected via cookies and similar technologies.
- Marketing preferences: if you subscribe to our newsletter or marketing communications.
4. How and Why We Use Your Data
We process personal data only where we have a valid legal basis to do so under Article 6 GDPR. We rely on the following legal bases:
Contract performance (Art. 6(1)(b) GDPR): to process and fulfil your orders, arrange delivery, handle payments, and manage returns, repairs or warranty claims.
Legal obligation (Art. 6(1)(c) GDPR): to comply with tax, accounting, anti-money-laundering, and other statutory obligations applicable to the sale of jewellery and precious stones.
Legitimate interests (Art. 6(1)(f) GDPR): to operate, secure and improve our website, prevent fraud, and communicate with customers about their orders.
Consent (Art. 6(1)(a) GDPR): for newsletter subscriptions, marketing communications, and non-essential cookies. You may withdraw your consent at any time with future effect.
5. Cookies and Website Analytics
Our website uses cookies and similar technologies. Strictly necessary cookies are required for the website to function and cannot be disabled. With your consent, we may also use analytics and other non-essential cookies to understand how visitors use our site and to improve it.
You can manage or withdraw your cookie preferences at any time through our cookie banner or your browser settings. Please note that disabling certain cookies may affect the functionality of the website
6. Sharing Your Data
We do not sell your personal data. We may share personal data with the following categories of recipients, where necessary:
- Payment service providers and financial institutions, to process payments.
- Shipping, logistics and insurance providers, to deliver and insure your order.
- IT service providers and hosting providers, who process data on our behalf under a data processing agreement.
- Independent gemmological laboratories or appraisers, where relevant to a certification, valuation or repair you have requested.
- Tax, legal and regulatory authorities, where required by law.
Where a service provider is located outside the European Economic Area, we ensure an adequate level of data protection through appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy, including to satisfy any legal, accounting, or reporting requirements (for example, statutory retention periods under Austrian tax and commercial law). Data collected on the basis of consent will be deleted once consent is withdrawn, unless a further legal basis for retention applies.
8. Your Rights
Under the GDPR, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data, where applicable.
- Request restriction of processing, in certain circumstances.
- Object to processing based on legitimate interests or for direct marketing.
- Request data portability, where technically feasible.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us using the details in Section 1. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, www.dsb.gv.at) or with the supervisory authority of your habitual residence.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our website and services are intended for adults. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.
11. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on our website, together with its date of last revision.
12. Contact
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact Veristone e.U. at the address or email given in Section 1.