1. Introduction and Data Controller
This Privacy Policy sets out how Berghausener Blumentopf GmbH & Co. KG (“we”, “us”, or “our”) collects, uses, and protects the personal data of visitors and customers interacting with our website, www.terranestpot.com (the “Site”). We are committed to respecting your privacy in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Union and relevant state privacy laws in the United States.
For the purposes of applicable data protection legislation, the Data Controller responsible for your personal data is:
Berghausener Blumentopf GmbH & Co. KG
HRB: Amtsgericht Düsseldorf HRA 22811
Address: An der Landstr. 12–14, 40764 Langenfeld
Email: flowerpot@terranestpot.com
Phone: +49 217375555
2. Information We Collect
We collect personal data that you voluntarily provide to us when placing an order, contacting customer support, or browsing the Site. This may include:
- Contact and Identity Information: Full name, billing address, shipping address, email address, and telephone number.
- Transaction Data: Details about the products you have ordered from us.
- Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, and operating system used to access the Site.
3. Payment Processing
We do not collect, retain, or store your complete payment card details. All payment transactions on the Site are processed and managed entirely by Stripe. Stripe acts as a separate data controller regarding your payment information and processes your financial data in accordance with their own strict regulatory obligations. For further information regarding how your payment details are handled, please review the Stripe Privacy Policy directly.
4. How We Use Your Data
Your personal data is processed lawfully and transparently for the following specific purposes:
- To fulfil and deliver your orders, including managing payments and providing shipping updates.
- To respond to your inquiries and provide customer support.
- To comply with our legal and regulatory obligations under German, European, and United States law.
- To detect and mitigate fraudulent activity.
5. Data Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and to satisfy any legal, accounting, or reporting requirements.
- Commercial and Tax Records: In accordance with German commercial and tax legislation (Handelsgesetzbuch – HGB, and Abgabenordnung – AO), we are legally mandated to retain order, invoice, and transaction data for a period of up to ten (10) years.
- General Correspondence and Contracts: Data relating to general customer inquiries and contracts is typically retained for the duration of the statutory limitation period, which is three (3) years under standard civil law, unless a longer retention period is otherwise required by applicable EU or US law.
- Once the applicable retention periods expire, your personal data will be securely deleted or anonymised.
6. International Data Transfers
As we serve customers in both Europe and the United States, your personal data may be processed outside of the European Economic Area (EEA). When transferring data internationally, particularly to processors such as Stripe in the US, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to maintain a commensurate level of data protection.
7. Data Protection Measures
We implement appropriate technical and organisational measures to guard your personal data against unauthorised access, accidental loss, alteration, or disclosure. However, please acknowledge that no method of data transmission over the internet or electronic storage is entirely without vulnerability, and we cannot warrant the absolute protection of your digital information.
8. Your Statutory Rights
Depending on your geographical location (such as the EU/UK or specific US states like California), you hold the following rights regarding your personal data:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request corrections to any inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data, subject to our overriding legal retention obligations outlined in Section 5.
- Right to Restrict Processing: You may request a limitation on how we process your data.
- Right to Data Portability: You may request the transfer of your data to another organisation.
- Right to Opt-Out of Sale: We confirm that we do not sell your personal data to third parties.
To exercise any of these rights, please contact us at flowerpot@terranestpot.com. We will respond to your request within the timeframe stipulated by applicable law.
9. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at our discretion to reflect changes in legal requirements or our operational practices. The updated version will be published on this page with a revised “Effective Date”.