Privacy Policy

This English translation is provided for your convenience only. Only the German version of this privacy policy is legally binding.

Protecting your personal data matters to us. In this privacy policy, as required by Art. 13 and 14 of the General Data Protection Regulation (DSGVO, known in English as the GDPR), we explain which personal data we process when you visit our online shop at https://jd-parfums.de and when you place an order. It also explains why we process the data, on what legal basis, who we pass it to and what rights you have.

We receive most data directly from you. Some data comes from third parties: from Google if you sign in with your Google account (section 5.2), and from our payment service provider Mollie, which tells us about your payment (section 7).

1. Controller and contact

The controller responsible for data processing in this online shop within the meaning of Art. 4 Nr. 7 DSGVO is the operator of the online shop:

JD Parfums
Saar-Park Center
Stummplatz 1
66538 Neunkirchen
Germany

E-mail: info@jd-parfums.de
Phone and WhatsApp: +49 176 76787301

If you have questions about data protection or want to exercise your rights, you can contact us at any time using the details above or through our contact form.

2. General information and legal bases

Personal data is any information relating to an identified or identifiable natural person, such as a name, postal address, e-mail address or IP address. We process personal data only where this is necessary to run our online shop, process your orders and answer your enquiries, or where another legal basis applies.

We ourselves do not use any analytics or tracking services or any marketing cookies. We do not send newsletters or carry out credit checks.

Depending on the purpose, we rely on the following legal bases:

• Art. 6 Abs. 1 lit. a DSGVO: your consent, which you can withdraw at any time with effect for the future
• Art. 6 Abs. 1 lit. b DSGVO: performing a contract with you, or taking steps at your request before entering into a contract
• Art. 6 Abs. 1 lit. c DSGVO: complying with legal obligations, in particular record-keeping obligations under commercial and tax law
• Art. 6 Abs. 1 lit. f DSGVO: protecting our legitimate interests or those of third parties, unless your interests or fundamental rights and freedoms override them
• § 25 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, the German Telecommunications and Digital Services Data Protection Act): storing information on your device or accessing information already stored there, for example through cookies, requires your consent (Abs. 1), unless this is strictly necessary to provide a service you have expressly requested (Abs. 2)

Each of the following sections states which legal basis applies.

3. Hosting and server log files

Our online shop runs on a server provided by Contabo GmbH, Welfenstraße 22, 81541 München, Germany (“Contabo”). The data is stored in a data centre in the European Union. Contabo processes the data on our behalf.

Each time you visit our website, the web server automatically records information sent by your browser and stores it in what are known as server log files:

• IP address of the device making the request
• date and time of access
• page or file requested (URL)
• the page visited before (referrer URL), if your browser sends it
• browser and operating system used (user agent)
• HTTP status code (for example, whether the request succeeded)

We need this data to deliver the website, keep it stable and secure, and detect and fend off errors and attacks. We do not combine the log data with other data sources or use it for marketing. The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is the secure and reliable operation of our online shop.

We delete the log data as soon as we no longer need it for these purposes. If we need to investigate a specific security incident, we keep the relevant data until the incident has been cleared up.

More information: Contabo GmbH privacy policy

4. Cookies

Cookies are small text files that your browser stores on your device. Our online shop sets only technically necessary cookies, without which the shop would not work:

• fleetcart_session: holds a random session ID that we use to match your shopping cart, login status and checkout progress to you. Lifetime: 120 minutes after your last activity.
• XSRF-TOKEN: protects forms against cross-site request forgery (CSRF) attacks. Lifetime: 120 minutes.
• show_cookie_bar: remembers that you have closed the cookie notice. Lifetime: 400 days.

These cookies are strictly necessary for us to provide the service you have requested. Under § 25 Abs. 2 Nr. 2 TDDDG, they may therefore be stored on your device without your consent. We base the related processing of personal data on Art. 6 Abs. 1 lit. b and f DSGVO. Our legitimate interest is a secure, working online shop.

Because we use only strictly necessary cookies, we do not need your consent. Our cookie notice is for your information only. It has two buttons, “Decline” and “Accept”, and both simply close the notice. “Accept” does not switch on any extra cookies or services. “Decline” does not stop content from the other providers named in sections 7, 12, 13 and 14 from loading. We do not set analytics or marketing cookies. Services from other providers that are embedded in our pages may set their own cookies, for example the Google Maps map on the contact page (section 14.1) or Mollie on its payment page (section 7).

You can delete or block cookies in your browser settings at any time. If you do, however, you will not be able to use the shopping cart, login or checkout. For more details, see our Cookie Policy.

5. Customer account and signing in with Google

5.1 Customer account

You can also order as a guest, so creating a customer account is optional. You can create an account by registering, or during checkout by ticking “Create an account?” and choosing a password. For the account, we process in particular your name, e-mail address, phone number and password, and any addresses you save.

Your customer account shows your orders and reviews. You can also manage your profile and addresses there and keep a wishlist. We store the data for these features in your account. After you register, we send you a welcome e-mail.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO. We store the data for as long as your customer account exists. At present, you cannot delete your account yourself from within the account. To delete it, please send a short message to info@jd-parfums.de. We will then delete your account without undue delay, unless statutory retention obligations prevent this (see section 18). Any order data we still have to keep will be blocked from all other use.

5.2 Signing in with Google

You can also sign in with your Google account (“Google Sign-In”). This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Data is sent to Google only if you choose to sign in with Google. Once you confirm, Google sends us your name, e-mail address and profile picture. We use these details to create your customer account or to link you to your existing account. In the process, Google learns that you are signing in to our online shop and receives technical data such as your IP address.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO, because we are providing the sign-in method you chose for your customer account. Signing in with Google is optional. You can also register with an e-mail address and password. Google may also transfer data to Google LLC in the USA (see section 16).

More information: Google privacy policy

6. Orders and contract processing

When you order from our online shop, we process the data we need to handle the purchase contract:

• e-mail address and phone number
• first name and last name
• billing address (street and house number, postcode, town or city, country)
• a different delivery address, if you provide one
• your order note and any coupon code you redeemed, if applicable
• order details such as order number, order date, items ordered, prices, shipping costs, payment method and payment status

We use this data to accept and process your order. This includes shipping the goods, matching your payment to your order, keeping you informed about your order and its status, and issuing the invoice. We also use it to handle questions, withdrawals from the contract, returns and statutory warranty claims. We use your phone number to contact you with questions about your order and its delivery, and so that your parcel can be delivered (see section 8).

The legal basis is Art. 6 Abs. 1 lit. b DSGVO. Where commercial and tax law requires us to keep order and invoice data, we process it on the basis of Art. 6 Abs. 1 lit. c DSGVO. For details on how the contract is concluded, see our Terms and Conditions.

If you order as a guest, we use your data only for that order and keep it only as required by law. Sections 13 and 14 explain how the address search and the phone number field in the checkout form work.

7. Payment processing via Mollie

All payments are processed exclusively by the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands (“Mollie”). Once you have submitted your order, we redirect you to Mollie’s payment page, where you choose a payment method such as iDEAL, PayPal, Mastercard or Visa.

For the payment, we send Mollie the necessary order details, in particular the order number, amount and currency. You enter your card or bank details directly with Mollie. Mollie tells us whether and when your payment has been received. Depending on the payment method, Mollie also provides us with further payment information, such as the payer’s name, the account number used (IBAN) or truncated card details. We do not receive full card details.

Depending on the payment method, Mollie passes data to the payment services involved, such as card networks, banks or PayPal. Mollie processes some of your data under its own responsibility, for example to comply with legal obligations (such as anti-money-laundering rules) and to prevent fraud. In doing so, Mollie and the payment services involved may run their own automated checks.

Our checkout page also loads a script from Mollie (js.mollie.com). This sends your IP address and technical information about your browser to Mollie.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO. Loading the Mollie script on the checkout page is additionally based on Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is secure payment processing.

More information: Mollie privacy policy

8. Shipping via Sendcloud

We use the shipping platform of Sendcloud B.V., Stadhuisplein 10, 5611 EM Eindhoven, Netherlands (“Sendcloud”), to send parcels. To ship your order, we send Sendcloud your name, delivery address, e-mail address and phone number, together with the order value and, where applicable, the order number and details of the items ordered (item ID, quantity, weight and value). We use this data to create the shipping label. Sendcloud processes this data on our behalf.

The carrier that delivers your parcel receives your name and delivery address. Depending on the carrier, it also receives your e-mail address or phone number so that it can tell you in advance when your parcel will arrive or contact you if there is a delivery problem. The carrier processes this data under its own privacy policy.

The legal basis for creating the shipping label and delivering your parcel is Art. 6 Abs. 1 lit. b DSGVO. Where we pass your e-mail address and phone number to the carrier for delivery notifications, the legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is smooth delivery, with advance notice to you of when your parcel will arrive. You can object to this disclosure at any time (see section 20), for example by e-mailing info@jd-parfums.de. We will then pass on only your name and delivery address for your parcels.

More information: Sendcloud privacy policy

9. Sending e-mails via Zoho Mail

We send you the following e-mails about your order and your customer account:

• the order confirmation or invoice
• notifications when your order status changes (for example to pending, pending payment, processing, completed, on hold, cancelled or refunded)
• a welcome e-mail after you register

We send these e-mails from info@jd-parfums.de through Zoho Mail, an e-mail service of Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands (“Zoho”). The data is processed in a data centre in the EU. Zoho processes the data on our behalf. The data involved is your e-mail address, your name and the content of each message, such as your order details. The rest of our e-mail correspondence with you, such as replies to your enquiries, also goes through Zoho Mail. For possible access from countries outside the EU, see section 16.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO, and Art. 6 Abs. 1 lit. f DSGVO for the technical sending of the e-mails. Our legitimate interest is reliable and secure e-mail communication. We do not send advertising e-mails or newsletters.

More information: Zoho privacy policy

10. Contacting us

10.1 Contact form

You can send us a message through our contact form. For this, we process your e-mail address, the subject, your message and any other information you choose to include in it. We use this data to handle and answer your enquiry.

10.2 E-mail and phone

If you contact us by e-mail or phone, we process your e-mail address or phone number, your name (if you give it) and the content of your enquiry for the same purpose.

10.3 WhatsApp

Every page has a button you can use to message us on WhatsApp. The button is a simple link to wa.me. Merely visiting our pages does not send any data to WhatsApp. Your data reaches the provider, WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (a Meta group company), only once you click the button and use WhatsApp.

From that point, WhatsApp processes your data under its own privacy policy, in particular your phone number, profile name, connection and usage data, and the messages you send us. Data may also be transferred to Meta Platforms, Inc. in the USA (see section 16). We process your phone number, profile name and messages in order to answer your enquiry.

Using WhatsApp is optional. Please do not send us sensitive data via WhatsApp. You can always reach us by e-mail, by phone or through the contact form instead.

More information: WhatsApp privacy policy

10.4 Legal basis and storage period

If your enquiry concerns an order or a possible contract, the legal basis is Art. 6 Abs. 1 lit. b DSGVO. In all other cases, it is Art. 6 Abs. 1 lit. f DSGVO, and our legitimate interest is answering the enquiries we receive. We delete your enquiry once we have fully dealt with it, provided that no statutory retention obligations apply.

11. Product reviews

You can review our products, with or without a customer account. For this, we process the name you enter, your star rating, your comment and the date of the review. If you are signed in, we link the review to your customer account, where you can find it under “My Reviews”.

Reviews appear as soon as they are submitted. Anyone who visits our website can see them, together with the name you entered. You do not have to use your full name. Your first name or a pseudonym is enough. We do not check whether reviewers actually bought or used the product.

The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is sharing other customers’ experiences with people who are thinking about buying. Writing a review is optional. Your review stays published until you ask us to delete it or we remove it, for example because it breaks the law. To have a review deleted, simply send an informal message to info@jd-parfums.de.

12. Google Fonts

Our pages load fonts (“Google Fonts”) from fonts.googleapis.com and fonts.gstatic.com, which are servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). To do this, your browser connects to Google’s servers every time you open a page. This sends your IP address and technical information about your browser to Google. Data may also be transferred to Google LLC in the USA (see section 16).

The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is a consistent and attractive presentation of our online shop.

More information: Google privacy policy

13. Content loaded via cdnjs (Cloudflare)

We use the cdnjs content delivery network to load a stylesheet for country flag icons on most pages, and a code library for the phone number field on the checkout page. cdnjs is operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). To load these files, your browser connects to Cloudflare’s servers, which sends your IP address and technical information about your browser to Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework (see section 16).

The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is making our online shop display quickly, reliably and without errors.

More information: Cloudflare privacy policy

14. Google Maps

14.1 Map on the contact page

Our contact page includes an embedded Google Maps map (maps.google.com) showing our location. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When you open the contact page, your browser automatically loads the map from Google’s servers. This sends your IP address and technical information about your browser to Google. Google may also set its own cookies and process data about your visit. If you do not want this, you can reach us by e-mail, phone or WhatsApp without opening the contact page.

The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is making our location easy to find. Data may also be transferred to Google LLC in the USA (see section 16).

14.2 Address search at checkout

When you fill in your address in the checkout form, you can let Google help you enter it. For this, we use the Google Maps Places API and the Geocoding API of Google Ireland Limited (“Google”). When you open the checkout page, your browser automatically loads the necessary code from Google Maps. This sends your IP address and technical information about your browser to Google. As you type your address, your browser sends the characters you enter to Google so that Google can suggest matching addresses. If you choose one of the suggestions, the address fields are filled in automatically. You can always enter your address without this feature.

You can also have your address determined from your device’s location. This happens only if you click the button provided for this and explicitly allow location access in your browser. Your device’s location is then sent to Google so that the matching address can be determined. You can withdraw this permission at any time in your browser settings.

The legal basis for the address search is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is convenient and accurate address entry that avoids misdirected deliveries. The legal basis for determining your location is your consent under Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG, which you give by allowing location access in your browser. Data may also be transferred to Google LLC in the USA (see section 16).

More information: Google privacy policy

15. Links to social networks

The footer of our website contains links to Facebook, Instagram, TikTok and YouTube. You can also recommend products to others using share links, for example on Facebook, X (Twitter), LinkedIn, Tumblr, WhatsApp or Telegram. All of these are ordinary links, not embedded plugins, so no data is sent to these providers when you visit our pages. Only when you click one of these links are you taken to that provider’s site, and from then on its privacy policy applies.

16. Transfers to third countries

Our hosting, payment, shipping and e-mail service providers are based in the European Union. However, personal data may be transferred to countries outside the EU and the European Economic Area (third countries), in particular the USA, in the following cases:

• to Google LLC: on every page view, because Google Fonts are loaded; when you open the contact page, because the embedded Google Maps map is loaded; when you sign in with Google; and in connection with Google’s address search at checkout
• to Cloudflare, Inc.: when content is loaded via cdnjs
• to Meta Platforms, Inc.: when you use WhatsApp
• when e-mails are sent: for operations and support, the Zoho group may also process data in non-EU countries where it operates, including the USA. This is based on the EU Standard Contractual Clauses.
• for card or PayPal payments: the payment services involved (for example Visa, Mastercard or PayPal) may, under their own responsibility, also transfer data to third countries such as the USA.

On 10 July 2023, the European Commission adopted an adequacy decision (Art. 45 DSGVO) for the USA under the EU-US Data Privacy Framework. Under this decision, companies certified under the framework are recognised as providing an adequate level of data protection. To the best of our knowledge, the US companies named above (Google LLC, Cloudflare, Inc. and Meta Platforms, Inc.) hold this certification. You can find the current list at dataprivacyframework.gov.

Where a transfer cannot rely on the adequacy decision, it is based on appropriate safeguards such as the EU Standard Contractual Clauses (Art. 46 Abs. 2 lit. c DSGVO). You can ask us for a copy of the Standard Contractual Clauses. They are also published on the European Commission’s website.

17. Recipients of personal data

We share your personal data only where this is necessary for the purposes described in this privacy policy, where the law requires us to or where you have consented. The recipients, or categories of recipients, are:

We conclude data processing agreements under Art. 28 DSGVO with service providers that process personal data on our behalf. This applies in particular to Contabo (hosting), Zoho (e-mail sending) and Sendcloud (shipping). We pass data to public bodies, such as tax or law enforcement authorities, only when the law requires us to.

18. Storage period

We keep personal data only for as long as the relevant purpose requires or statutory retention periods demand. In detail:

• Server log files: until we no longer need them to run the website securely (see section 3)
• Cookies: for the lifetimes stated in section 4
• Customer account: until we delete your account at your request
• Order, invoice and payment data: for as long as statutory retention periods require (§ 257 HGB, the German Commercial Code, and § 147 AO, the German Fiscal Code): ten years for books of account, inventories and annual financial statements, eight years for accounting records such as invoices, and six years for commercial and business letters received and sent. Each period starts at the end of the calendar year in which the document was created. Until the period ends, we block the data from being used for any other purpose.
• Contact enquiries: until we have fully dealt with your enquiry, unless retention obligations apply (for example to commercial and business letters)
• Product reviews: for as long as the review is published

When the relevant period ends, we delete the data.

19. Your rights

Under the DSGVO, you have the following rights:

• Access to the personal data we process about you (Art. 15 DSGVO)
• Rectification of inaccurate data and completion of incomplete data (Art. 16 DSGVO)
• Erasure of your data, unless legal obligations or other grounds prevent it (Art. 17 DSGVO)
• Restriction of processing (Art. 18 DSGVO)
• Data portability: you can receive the data you have given us in a structured, commonly used and machine-readable format, where the processing is based on your consent or a contract and is carried out by automated means (Art. 20 DSGVO)
• Objection to processing (Art. 21 DSGVO, see section 20)
• Withdrawal of your consent with effect for the future (Art. 7 Abs. 3 DSGVO). Processing carried out before you withdraw consent remains lawful.
• Complaint to a supervisory authority (Art. 77 DSGVO, see section 21)

To exercise your rights, simply send an informal message to info@jd-parfums.de. If we have reasonable doubts as to whether a request really comes from you, we may ask for proof of your identity to protect you.

20. Right to object under Art. 21 DSGVO

Where we process your personal data on the basis of Art. 6 Abs. 1 lit. f DSGVO (legitimate interests), you have the right to object to this processing at any time on grounds relating to your particular situation. This also applies to profiling based on that provision. If you object, we will no longer process your data. This does not apply if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed for direct marketing, you can object to this processing at any time. We will then no longer process your data for that purpose. We do not currently use your data for direct marketing.

You can send us your objection informally, for example by e-mail to info@jd-parfums.de.

21. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data infringes the DSGVO, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO). This does not affect any other administrative or judicial remedies. In particular, you can contact the supervisory authority in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is:

Unabhängiges Datenschutzzentrum Saarland (Independent Data Protection Centre Saarland)
Fritz-Dobisch-Straße 12
66111 Saarbrücken
Phone: 0681 94781-0
E-mail: poststelle@datenschutz.saarland.de
Website: www.datenschutz.saarland.de

22. Obligation to provide data

You are under no legal or contractual obligation to provide us with personal data. However, to conclude and perform a purchase contract, we need the details that the checkout form marks as required. Without them, we cannot accept or fulfil your order. All other details are optional, for example for a customer account, an order note, reviews or contact enquiries. The data that is technically transmitted whenever a page is opened (section 3) is necessary to use the website.

23. No automated decision-making

We ourselves do not use automated decision-making or profiling within the meaning of Art. 22 DSGVO. The payment services involved in your payment may carry out their own automated checks under their own responsibility, for example to prevent fraud (see section 7).

24. SSL/TLS encryption

For security reasons, our website uses SSL/TLS encryption. It protects confidential content, such as your orders, login details and contact enquiries, while it is being transmitted. You can tell that a connection is encrypted because the address in your browser starts with “https://”. When encryption is active, third parties cannot easily read the data you send us while it is in transit.

25. Changes to this privacy policy

We update this privacy policy when our online shop, the services we use or the legal requirements change. The version currently published on this page always applies.

Last updated: September 2026