PRIVACY POLICY

This Privacy Policy outlines how Scheers Flowerpot GmbH (“we”) collects, uses, retains, and protects your personal data when you interact with our website (www.flexiplanterrise.com), purchase our products, or use our customer support channels.

The data controller responsible for processing your personal data strictly in accordance with the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:

Brand Name: flexibleplanterrise

Company: Scheers Flowerpot GmbH

Address: Birther Str. 6, 41372, Niederkrüchten

Telephone: 49216345846

Email: adjustable@flexiplanterrise.com

Categories of Data We Collect

To securely process your transactions and maintain the proper functioning of the website, we collect and process the following categories of personal data:

Identification and Contact Information: Name, Billing Address, Shipping/Delivery Address, Email Address, and Telephone Number.

Transaction and Purchase Information: Purchase history, product size, order specifications, and transaction settlement status (excluding complete credit card numbers).

Technical and Usage Information: Internet Protocol (IP) address, browser type and version, device identifier, time zone setting, operating system, cookie identifier, and analysis data on your browsing behavior in our store.

Communication Information: A complete record of all communications, inquiries, and feedback made through our official email or telephone lines.

Legal Basis and Purpose of Processing

We process your personal data strictly in accordance with the legal basis stipulated by the GDPR:

Performance of Contracts (Article 6, Paragraph 1(b) of the GDPR): For executing checkout transactions, processing orders, managing logistics and delivery, and providing after-sales support.

Compliance with Legal Obligations (Article 6, Paragraph 1(c) of the GDPR): For compliance with German legal requirements regarding taxation, business record keeping, and corporate accounting.

Legal Interests (Article 6, Paragraph 1(f) of the GDPR): For monitoring store traffic, optimizing user experience, detecting fraudulent payment attempts, and conducting merchant risk assessments.

3. Secure Payment Processing and Stripe Integration

All financial transactions conducted on www.flexiplanterrise.com are processed through Stripe (Stripe Technology Europe, Limited and its global affiliates). Data Transfer: Upon order completion, your payment details, billing information, and cart total are transmitted directly to Stripe via encrypted Secure Sockets Layer (SSL/TLS) protocol.

Data Minimization: Scheers Flowerpot GmbH does not store, collect, or access your private credit card number or CVV code. Stripe processes this information independently and fully complies with the Payment Card Industry Data Security Standard (PCI-DSS).

4. Cross-Border Transfers and Data Sharing

We only share personal data with necessary third-party service providers, such as payment gateways like Stripe and global courier companies like DHL, FedEx, and UPS.

International Data Transfer: As we serve consumers in Europe and the United States, your personal data may be transferred to and processed in jurisdictions outside the European Economic Area (EEA). To ensure that data receives legal and equivalent protection, all such transfers strictly comply with the Standard Contractual Clauses (SCC) approved by the European Commission or a recognized adequacy framework.

No Data Sale: We will never sell, rent, or transfer consumers’ personal data to third parties for marketing or advertising purposes.

5. Robust Technical Data Security

We implement high-standard technical and organizational security measures to protect your data from unauthorized access, damage, or disclosure. All business data entry points and checkout processes on the www.flexiplanterrise.com website are protected with industry-standard SSL/TLS data encryption.

6. Legal Data Retention Period

To comply with the German Commercial Code (HGB) and the German Tax Code (AO), we retain data only for the legally prescribed periods:

Order and transaction records: Retained for up to 10 years to fulfill German legal, tax, and mandatory accounting/auditing obligations.

Customer support inquiries: Retained for up to 24 months after the issue is resolved to process subsequent requests (unless involving longer-term legal liabilities).

Your Legal Data Rights (GDPR and US Privacy Laws)

Under the GDPR and applicable US state privacy laws (such as the CCPA), you have inalienable legal rights regarding your personal data:

Right of Access and Data Portability: Request a verified copy of your personal data.

Right to Correction: Request immediate correction of inaccurate or incomplete data.

Right to Erasure (“Right to Be Forgotten”): Request the deletion of relevant data after the statutory retention period has expired.

Right to Restrict or Oppose Processing: Oppose automated processing or analysis based on legitimate grounds.

To exercise any of the above statutory rights, please submit a formal request to our data protection team at adjustable@flexiplanterrise.com.

7. Updates to this Policy

We reserve the right to periodically revise this Privacy Policy to adapt to changes in global data protection regulations. Any updates will take effect immediately upon publication on this page.

8. Contact Information

For any questions regarding privacy, data erasure, or data protection, please contact our administration:

Address: Birther Str. 6, 41372, Niederkrüchten

Tel: 49216345846

Email: adjustable@flexiplanterrise.com