Privacy Policy
Last Updated: August 17, 2026
At groakin.com, operated by Ariane Ernst Jewelry GmbH, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit or use our website, purchase our women’s jewelry and accessories, contact us, subscribe to our communications, or otherwise interact with our services.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the applicable provisions of the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), the German Telecommunications and Digital Services Data Protection Act (TDDDG), and other applicable data protection laws.
1. Data Controller
The controller responsible for processing your personal data on this website is:
Ariane Ernst Jewelry GmbH
Website: groakin.com
Address: Bilker Allee 81, 40219 Düsseldorf, Germany
Phone: +49 211 3982497
Email: guidance@groakin.com
If you have any questions concerning the processing of your personal data or wish to exercise your data protection rights, please contact us using the information above.
2. Personal Data We Collect
Depending on how you use our website, we may collect the following categories of personal data:
2.1 Information You Provide Directly
When you create an account, place an order, contact us or otherwise provide information to us, we may collect:
-
First and last name
-
Billing address
-
Shipping address
-
Email address
-
Telephone number
-
Account login information
-
Order and transaction information
-
Product preferences
-
Information included in customer service communications
-
Any other information you voluntarily provide to us
We only request information that is reasonably necessary for the relevant purpose.
2.2 Order and Transaction Information
When you purchase products from us, we may process information such as:
-
Order number
-
Products purchased
-
Order date
-
Order value
-
Billing and delivery information
-
Payment status
-
Refund and return information
-
Customer service records relating to your order
Payment card details may be processed directly by the relevant payment service provider. Where payment information is handled by a third-party payment provider, we may not receive or store the complete payment card number.
2.3 Technical and Usage Information
When you visit our website, certain technical information may be automatically processed, including:
-
IP address
-
Date and time of access
-
Browser type and version
-
Operating system
-
Device information
-
Referring website
-
Pages visited
-
Website interactions
-
Technical log information
This information is primarily used to operate, secure and improve our website.
3. Purposes of Processing
We may process personal data for the following purposes:
-
To provide and operate our website;
-
To process and fulfil orders;
-
To arrange delivery of purchased products;
-
To process payments and refunds;
-
To provide customer service;
-
To respond to enquiries and requests;
-
To manage customer accounts;
-
To process returns, exchanges and complaints;
-
To prevent fraud, abuse and security incidents;
-
To maintain and improve website functionality;
-
To understand website usage and improve our services;
-
To send marketing communications where legally permitted and, where required, with your consent;
-
To comply with legal and regulatory obligations;
-
To establish, exercise or defend legal claims;
-
To protect the rights, property and security of our business, customers and website.
4. Legal Bases for Processing
Depending on the circumstances, we process personal data on one or more of the following legal bases under Article 6 GDPR:
4.1 Performance of a Contract
Processing may be necessary to enter into or perform a contract with you, including:
-
Processing orders;
-
Processing payments;
-
Arranging delivery;
-
Handling returns and refunds;
-
Providing customer support relating to your purchase.
4.2 Legal Obligations
We may process personal data when necessary to comply with legal obligations, including accounting, tax, consumer protection and record-keeping requirements.
4.3 Legitimate Interests
We may process personal data where necessary for our legitimate interests, provided that these interests do not override your fundamental rights and freedoms.
Such interests may include:
-
Website security;
-
Fraud prevention;
-
IT and network security;
-
Business administration;
-
Customer service;
-
Improvement of our products and website;
-
Establishment or defence of legal claims.
4.4 Consent
Where required by law, we will process personal data based on your consent.
For example, consent may be required for certain:
-
Marketing emails;
-
Non-essential cookies;
-
Analytics technologies;
-
Advertising technologies;
-
Personalised marketing activities.
You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
5. Cookies and Similar Technologies
Our website may use cookies and similar technologies to provide essential website functions, remember preferences, analyse website usage and, where permitted, support marketing activities.
Cookies may include:
Necessary Cookies
These cookies are required for the basic operation and security of the website, including functions such as shopping cart management, checkout and session management.
Preference Cookies
These cookies may remember choices such as language, currency or other website preferences.
Analytics Cookies
Where enabled, analytics technologies may help us understand how visitors use our website and identify opportunities to improve performance and usability.
Marketing Cookies
Where enabled and legally permitted, marketing technologies may be used to measure advertising effectiveness or provide more relevant advertising.
Where consent is legally required for non-essential cookies or similar technologies, such technologies will only be activated after you provide the appropriate consent.
You can withdraw or change your cookie preferences through the cookie consent mechanism provided on our website.
For electronic communications and access to information stored on a user’s device, we comply with applicable German requirements, including the TDDDG.
6. Website Hosting and Server Logs
Our website is hosted on servers operated by a hosting provider.
When you access our website, technical information may be processed in server logs. This may include your IP address, date and time of access, browser information and technical request information.
Processing of server log information may be necessary to:
-
Deliver the website;
-
Maintain technical stability;
-
Detect and prevent security incidents;
-
Protect our website against abuse;
-
Diagnose technical problems.
Where appropriate, such processing is based on Article 6(1)(f) GDPR.
7. Accounts and Registration
If you create a customer account, we process the information necessary to create and maintain your account.
This may include:
-
Name;
-
Email address;
-
Login credentials;
-
Address information;
-
Order history.
You are responsible for keeping your account credentials confidential.
You may request deletion of your account subject to legal retention obligations.
8. Orders and Contract Processing
When you place an order, we process the personal information required to fulfil your purchase.
This may include your name, address, email address, telephone number, order details and payment status.
We use this information to:
-
Confirm your order;
-
Process payment;
-
Prepare and dispatch products;
-
Provide delivery information;
-
Handle returns and refunds;
-
Communicate with you about your order.
The relevant processing is generally necessary for the performance of the contract under Article 6(1)(b) GDPR.
9. Payment Processing
Payments may be processed through third-party payment service providers.
Depending on the payment method selected, your payment information may be transmitted directly to the relevant payment provider.
The payment provider may process personal data in accordance with its own privacy policy and applicable legal requirements.
We recommend reviewing the privacy information of the payment provider you choose before completing your transaction.
We do not intentionally store complete payment card information on our own systems unless this is specifically necessary and legally permitted.
10. Shipping and Delivery
To fulfil your order, we may provide relevant information to shipping and logistics service providers.
This may include:
-
Name;
-
Delivery address;
-
Telephone number, where necessary;
-
Email address, where necessary;
-
Order information.
The information is used solely to facilitate delivery, tracking, delivery notifications and related customer service.
11. Customer Service and Communication
If you contact us by email, telephone or another available communication method, we may process the information you provide to respond to your enquiry.
This may include:
-
Name;
-
Email address;
-
Telephone number;
-
Order number;
-
Message content;
-
Other information voluntarily provided.
The legal basis may be the performance of a contract, steps taken at your request before entering into a contract, legitimate interests or compliance with legal obligations, depending on the circumstances.
12. Marketing Communications
If you subscribe to our newsletter or other marketing communications, we may use your email address to send information about products, promotions, new collections and other relevant updates.
Where consent is required, marketing communications will only be sent after obtaining your consent.
You may unsubscribe at any time by:
-
Using the unsubscribe link contained in the relevant email; or
-
Contacting us at guidance@groakin.com.
Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.
13. Data Sharing and Recipients
We may disclose personal data to carefully selected service providers where necessary to operate our business and provide our services.
These may include:
-
Website hosting providers;
-
IT and technical service providers;
-
Payment service providers;
-
Shipping and logistics companies;
-
Customer service providers;
-
Email and communication service providers;
-
Analytics providers;
-
Marketing service providers, where applicable;
-
Professional advisers;
-
Legal and accounting service providers;
-
Public authorities where legally required.
Service providers processing personal data on our behalf will, where required, be bound by appropriate contractual data protection arrangements.
We do not sell your personal data to third parties.
14. International Data Transfers
Some service providers may process personal data outside Germany or the European Economic Area (EEA).
Where personal data is transferred to a country outside the EEA, we will ensure that the transfer is carried out in accordance with applicable GDPR requirements.
Depending on the circumstances, transfers may be based on:
-
An adequacy decision of the European Commission;
-
Standard Contractual Clauses approved by the European Commission;
-
Other legally recognised transfer mechanisms or safeguards.
Where required, additional safeguards may be implemented.
15. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.
The retention period depends on the type and purpose of the information.
For example:
-
Order and accounting information may need to be retained to comply with statutory accounting and tax requirements;
-
Customer service information may be retained for as long as necessary to resolve the relevant matter;
-
Marketing data may be retained until you withdraw your consent or otherwise object, subject to applicable legal requirements;
-
Technical information may be retained for a limited period necessary for security and operational purposes.
After the applicable retention period expires, personal data will be deleted or anonymised unless further retention is legally required.
16. Your Data Protection Rights
Under the GDPR, you may have the following rights:
Right of Access
You may request confirmation as to whether we process your personal data and request access to relevant information.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data where the legal requirements for deletion are met.
Right to Restriction
You may request restriction of processing in certain circumstances.
Right to Data Portability
Where legally applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or request its transmission to another controller.
Right to Object
You may object to certain processing based on legitimate interests.
You may also object at any time to the processing of personal data for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect processing carried out before the withdrawal.
These rights arise from the GDPR and are subject to the conditions and limitations established by applicable law.
17. How to Exercise Your Rights
To exercise any of your data protection rights, please contact:
Ariane Ernst Jewelry GmbH
Bilker Allee 81
40219 Düsseldorf
Germany
Email: guidance@groakin.com
Phone: +49 211 3982497
Please provide sufficient information to allow us to identify your request.
We may take reasonable steps to verify your identity where necessary to protect your personal data from unauthorised disclosure.
18. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.
As our company is located in Düsseldorf, the competent supervisory authority may include:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
You may also contact the data protection supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement, where applicable.
The right to lodge a complaint with a supervisory authority is without prejudice to any other administrative or judicial remedy.
19. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against:
-
Unauthorised access;
-
Accidental loss;
-
Destruction;
-
Alteration;
-
Unauthorised disclosure;
-
Other unlawful processing.
Security measures may include access controls, encryption where appropriate, secure communication technologies, authentication mechanisms and organisational safeguards.
However, no method of transmission or electronic storage can be guaranteed to be completely secure.
20. Children’s Privacy
Our website is not specifically directed at children.
We do not knowingly collect personal data from children where such collection is prohibited by applicable law.
If you believe that a child has provided us with personal data without appropriate authorisation, please contact us so that we can take appropriate action.
21. Third-Party Websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policy of each third-party website before providing personal information.
22. Automated Decision-Making and Profiling
Unless expressly stated otherwise, we do not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.
If such processing is introduced in the future, we will provide the information required by applicable data protection law.
23. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
-
Changes in our services;
-
Changes to our data processing practices;
-
Changes in applicable laws;
-
Regulatory requirements;
-
Technical developments.
The updated version will be published on this page with an updated “Last Updated” date.
We recommend reviewing this Privacy Policy periodically.
24. Contact
If you have questions regarding this Privacy Policy, our data processing practices or your privacy rights, please contact us:
Ariane Ernst Jewelry GmbH
Bilker Allee 81
40219 Düsseldorf
Germany
Phone: +49 211 3982497
Email: guidance@groakin.com
Website: groakin.com
We are committed to handling personal data transparently, fairly and securely in accordance with applicable German and European data protection law.
Last Updated: August 17, 2026
