Privacy Policy

At Glazenestpot, operated by ANIMA Garden GmbH, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, www.glazenestpot.com (the “Site”), and purchase our products.

1. DATA CONTROLLER
   The data controller responsible for the processing of your personal data under European data protection laws is:

ANIMA Garden GmbH

Frauenthal 15, 20149 Hamburg, Germany

Email: flowerpot@glazenestpot.com

Telephone: +49 40 480590

2. LEGAL BASIS FOR DATA PROCESSING
   We process personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The processing of data occurs under the following legal frameworks:

Art. 6(1)(b) GDPR: Processing is necessary for the performance of a contract to which you are a party, specifically for managing, processing, and delivering your orders.

Art. 6(1)(c) GDPR: Processing is necessary for compliance with legal obligations to which we are subject, such as statutory commercial and tax retention requirements.

Art. 6(1)(f) GDPR: Processing is necessary for the purposes of our legitimate business interests, provided that your fundamental rights do not override those interests (e.g., maintaining stable website operations and preventing fraudulent activity).

3. CATEGORIES OF DATA COLLECTED
   When you engage with our Site, we collect specific categories of information necessary to facilitate your commercial transactions:

Identity Data: First name, last name.

Contact Data: Billing address, shipping address, email address, and telephone number.

Transaction Data: Details concerning payments made by you and specific items purchased from our product range.

Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform used to access the Site.

4. DATA RECEIVERS AND PAYMENT PROCESSING
   To execute our contractual obligations, your data is transferred to verified operational partners strictly on a need-to-know basis (such as standard logistics providers and technical infrastructure hosts).

Stripe Payment Services
All financial transactions on our Site are processed via our external payment processing partner, Stripe. When you proceed to checkout, your payment details are transmitted directly to Stripe. Stripe acts as an independent data controller or joint controller regarding your financial transaction data.

The personal data transferred to Stripe includes your name, contact details, transaction total, and payment method details. This transfer is strictly necessary for the fulfillment of your contract under Art. 6(1)(b) GDPR. Stripe processes this information in compliance with international financial regulations and European data protection standards. For further details on how Stripe manages and stores your personal information, please review the Stripe Privacy Policy directly via their official channels.

5. DATA RETENTION PERIODS
   We store your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with mandatory statutory retention periods under German and European law.

Contractual Data: Data collected for order fulfilment is retained for the duration of the active business relationship.

Commercial and Fiscal Retention: Under the German Commercial Code (HGB § 257) and the German Fiscal Code (AO § 147), specific business documentation, including invoices, bookkeeping records, accounting vouchers, and relevant customer communication, must be retained for a mandatory period of ten (10) years.

Technical Log Data: Server logs and standard technical data collected for network maintenance and stability are retained for a brief period, typically not exceeding thirty (30) days, unless an active investigation requires a longer duration.

Upon the expiry of these legal retention windows, the corresponding data is permanently erased or rendered completely anonymous.

6. DATA SECURITY
   We have implemented rigorous technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Access to your personal data is restricted to authorized personnel who require the information to perform their specific operational duties. While we maintain industry-standard protocols to mitigate digital risks, transmissions over the internet can never be assumed to be entirely immune from external interference; we therefore continuously evaluate and update our security infrastructure to maintain optimal protective standards.
7. YOUR STATUTORY RIGHTS
   Under the GDPR, European residents possess specific, enforceable rights regarding their personal data. You may exercise any of the following rights by contacting us at flowerpot@glazenestpot.com:

Right of Access (Art. 15 GDPR): The right to request information regarding the personal data we hold about you.

Right to Rectification (Art. 16 GDPR): The right to demand the immediate correction of inaccurate or incomplete personal data.

Right to Erasure (Art. 17 GDPR): The right to request the deletion of your personal data, provided the data is no longer required for statutory compliance or the defense of legal claims.

Right to Restriction of Processing (Art. 18 GDPR): The right to restrict the processing of your data under specific statutory conditions.

Right to Data Portability (Art. 20 GDPR): The right to receive your data in a structured, commonly used, and machine-readable format.

Right to Object (Art. 21 GDPR): The right to object to data processing based on our legitimate interests (Art. 6(1)(f) GDPR).

Furthermore, pursuant to Art. 77 GDPR, you have the right to lodge a formal complaint with a competent data protection supervisory authority. In Germany, this can be addressed to the regulatory authority responsible for Hamburg: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.

8. AMENDMENTS TO THIS POLICY
   We reserve the right to modify this Privacy Policy as required by evolving legal mandates or operational adjustments. Any updates will be published directly on this page with an updated revision date.