Privacy Policy

§ 1 General Information

Your personal data (e.g., title, name, address, email address, phone number, bank details, credit card number) are processed by us solely in accordance with the provisions of German data protection laws and the data protection laws of the European Union (EU). The following provisions inform you about the purposes, recipients, legal basis, storage periods, and your rights as well as the controller responsible for your data processing. This Privacy Policy applies only to our website. If you are directed to other sites via links on our pages, please check the respective handling of your data on those websites.

§ 2 Data Processing for Contract Fulfillment

1. Purpose of Processing

   The personal data you provide in the order process is necessary to conclude a contract with us. Providing your personal data is not mandatory; however, without providing your address, we cannot ship the goods to you. Some payment methods require us to transmit the necessary payment data to a payment service provider. Thus, the processing of the data entered during the ordering process is done for contract fulfillment.

   If you contact us with an inquiry before concluding a contract (e.g., via email or contact form), we process the data received in this way to carry out pre-contractual measures, such as responding to your questions about our products.

2. Legal Basis

   The legal basis for this processing is Article 6(1)(b) GDPR.

3. Recipient Categories

   Payment service providers, shipping service providers, hosting providers, and potentially inventory management systems or suppliers (in the case of drop shipping).

4. Storage Duration

   Data required for contract processing is stored until the expiry of legal warranty and, if applicable, contractual guarantee periods. Data required under commercial and tax law is retained for legally specified periods, typically ten years (per § 257 HGB, § 147 AO). Data processed for pre-contractual measures is deleted once these measures have been carried out and it becomes evident that no contract will be concluded.

§ 3 Web Analytics with Google Analytics

1. Purpose of Processing

   This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," text files that are stored on your computer to analyze your website usage. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, Google will first truncate your IP address within the EU member states or other signatories to the European Economic Area agreement. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of this website's operator to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage to the website operator.

2. Legal Basis

   The legal basis for this processing is Article 6(1)(f) GDPR.

3. Legitimate Interest

   Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. To protect your privacy, this website uses Google Analytics with the "anonymizeIP()" extension, which processes IP addresses only in truncated form to exclude direct personal references.

4. Recipient Categories

   Google, partner companies

5. Transfer to a Third Country

   Google LLC, based in the USA, is certified under the EU-US Privacy Shield Agreement, ensuring compliance with EU data protection standards.

6. Storage Duration

   14 months

7. Right to Object

   You may prevent cookies from being stored by adjusting your browser settings. However, please note that doing so may prevent you from fully utilizing all features of this website. You can also prevent Google from collecting and processing the data generated by the cookie regarding your use of the website (including your IP address) by downloading and installing the browser plugin available at this link: optout. Alternatively, you can prevent Google Analytics from collecting your data by clicking here: Deactivate Google Analytics.

§ 4 Information about Cookies

1. Purpose of Processing

   This website uses technically necessary cookies—small text files stored by or on your internet browser on your computer system. These cookies enable functions like placing multiple products in a shopping cart.

2. Legal Basis

   The legal basis for this processing is Article 6(1)(f) GDPR.

3. Legitimate Interest

   Our legitimate interest is the functionality of our website. The data collected through technically necessary cookies are not used to create user profiles, thereby respecting your privacy.

4. Storage Duration

   Technically necessary cookies are generally deleted when you close your browser. Persistent cookies have a lifespan ranging from several minutes to several years.

5. Right to Object

   If you do not wish to store these cookies, please disable their acceptance in your internet browser, which may restrict the functionality of our website. You can also delete persistent cookies through your browser.

§ 5 Rights of the Data Subject

If your personal data is processed, you are a data subject under the GDPR, and you have the following rights:

1. Right of Access
   You can request confirmation from us about whether personal data concerning you is being processed.

2. Right to Rectification
   If the personal data processed about you is incorrect or incomplete, you have the right to request its correction or completion.

3. Right to Restriction of Processing

   You may request restriction of your personal data's processing under certain conditions, such as disputing the accuracy of your data or if processing is unlawful.

4. Right to Deletion
   You can request the immediate deletion of your personal data if it is no longer necessary for the purpose it was collected or if processing lacks a legal basis.

5. Right to Information
   If you have exercised your rights to rectification, deletion, or restriction of processing, we must inform all recipients of your data of these changes unless this proves impossible or involves disproportionate effort.

6. Right to Data Portability
   You have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format and to transfer this data to another controller.

7. Right to Object
   You have the right to object to your personal data being processed based on Article 6(1)(e) or (f) GDPR at any time.

8. Right to Withdraw Consent

   You have the right to withdraw your data protection consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

9. Automated Decision-Making, Including Profiling
   You have the right not to be subject to decisions based solely on automated processing, including profiling.

10. Right to Lodge a Complaint with a Supervisory Authority
    You have the right to lodge a complaint with a supervisory authority, particularly in your place of residence, workplace, or the place of the alleged violation if you believe that the processing of your personal data violates the GDPR.

Controller for Data Processing:

Bonsai-Gestaltung Sturm; Martin Sturm
Dudenhofer Str. 10
67354 Römerberg
Phone: +49 (0) 6232 6782889
info@bonsai-sturm.de