This privacy policy explains which personal data we process when you visit our website, contact us, buy from us or sell something to us, online or in store. We comply with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Belgian Law of 30 July 2018.
01Who is responsible?
La Mine De Diamant is a trade name of Viljdan Sulimani-Maksuti, sole proprietorship, enterprise number 0805.115.737, VAT BE0805.115.737.
Establishments: Lippenslaan 56, 8300 Knokke-Heist, Belgium · Noordzandstraat 45, 8000 Brugge, Belgium
Email: info@laminedediamant.eu
Phone: +32 486 33 31 49
We have not appointed a data protection officer, as this is not mandatory for us. For any question about your data, contact us at info@laminedediamant.eu.
02What data, why and for how long
| Situation and data | Purpose | Legal basis (Art. 6 GDPR) | Retention |
|---|---|---|---|
| Visiting the website: page visited, referring page, browser type, truncated IP address (the last part is erased on receipt) | Security, technical operation and simple visitor statistics without cookies | Legitimate interest (f) | 26 months |
| Detailed statistics, only with your consent: session ID, screen size, visit duration; Google Analytics | Understanding how the website is used and improving it | Consent (a) | Own statistics 26 months; Google Analytics at most 14 months |
| Marketing, only with your consent: Google Ads cookies | Measuring the results of our ads and showing relevant ads | Consent (a) | See our Cookie Policy |
| Contact by form, email, phone or WhatsApp: name, email, phone, message, chosen store | Answering your enquiry | Legitimate interest (f) or pre-contractual steps (b) | 2 years after the last contact |
| "Sell your bag" form: name, contact details, description and photos of the item | Making you an offer | Pre-contractual steps (b) | 2 years after the last contact; if a purchase follows, as below |
| Appointment or home visit: name, phone, email, postcode and town (for a home visit), preferred date, what you want to sell and the estimated value; we only ask for the full address by phone, when confirming | Planning your appointment and carrying out the visit | Pre-contractual steps (b) | 2 years after the last contact; if a purchase follows, as below |
| Online order: name, email, phone, delivery address, items ordered, notes, payment status (no card details) | Fulfilling and delivering your order, customer service, guarantee | Performance of the contract (b) | 10 years (accounting and tax retention obligations) |
| IP address at the time of the order | Fraud prevention | Legitimate interest (f) | 12 months |
| We buy from you (gold, jewellery, bags, watches): identity data from your ID document, address, description of the goods, price, payment details | Concluding and paying for the purchase; identification and record-keeping required by law when buying precious metals and goods from private individuals; preventing the handling of stolen goods | Legal obligation (c), contract (b) and legitimate interest (f) | 10 years |
| Google reviews: the public name (shortened on our website to first name and initial), rating, text and date of a review you post on our Google Business Profiles | Showing customer experiences on our website | Legitimate interest (f) | As long as the review is online on Google; at your request we remove it from our website sooner |
| Complaints and disputes | Handling your complaint, defending our rights | Legitimate interest (f) | Until the dispute and the limitation period end |
We do not use your data for automated decision-making or profiling that produces legal effects for you. We never sell your data.
03Who receives your data?
- Host Europe GmbH (Germany): website and email hosting, on servers in the EU (France). Processor.
- Stripe Payments Europe Ltd. (Ireland): processing of online card payments. Stripe is itself responsible for its own legal obligations (such as fraud prevention); see stripe.com/privacy.
- Google Ireland Ltd.: Google Analytics and Google Ads, only with your consent; Google Maps on the store pages, only after you click "Load map". See policies.google.com/privacy.
- WhatsApp Ireland Ltd. (Meta): if you contact us via WhatsApp, WhatsApp's terms also apply.
- Carriers: name, address and phone number to deliver your parcel.
- Our IT service provider, who maintains the website and for that purpose receives a copy of the requests sent through the website forms (via a Google Gmail address).
- Our accountant and, where necessary, our lawyer, bound by professional secrecy.
- Authorities, such as the police, the courts, the tax authorities or the Belgian Financial Intelligence Processing Unit (CTIF-CFI), where the law requires us to.
04Transfers outside the European Economic Area
Google, Stripe and Meta may transfer data to the United States. These transfers are covered by the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and/or by the European Commission's standard contractual clauses.
05Security
We protect your data with appropriate technical and organisational measures: encrypted connections (HTTPS), restricted access to the admin area, secure backups and regular updates. Card details are processed by Stripe only.
06Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to data portability, and the right to object to processing based on our legitimate interest. You can withdraw your consent at any time, for cookies via the "Cookie settings" link at the bottom of every page; this does not affect processing carried out before the withdrawal.
Send your request to info@laminedediamant.eu. We reply within one month; for complex or numerous requests this period may be extended by two months, in which case we will let you know. We may ask you to prove your identity. Data we are legally required to keep can only be erased once that retention period ends.
07Complaints
If you disagree with how we process your data, please tell us first. You can also lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels, +32 2 274 48 00, dataprotectionauthority.be, or with the supervisory authority of the EU country where you live.
08Minors
Our website is not aimed at children. We sell online only to adults and do not buy goods from minors.
09Changes
We update this privacy policy when our processing changes. The version number and date of the current version are shown at the top of this page.