This Privacy Policy explains how personal data is collected, used and retained when you visit www.gardencarecraft.com, submit an enquiry, request an appointment or purchase an at-home garden plant care service.
1. Data Controller
Business Name: Gardencarecraft
Address: Birkenallee 104/106, 49076 Osnabrück, Germany
Email: content@gardencarecraft.com
Telephone: +49 1702865590
Website: www.gardencarecraft.com
Gardencarecraft operates the website and the related services directly.
2. Personal Data We Collect
Depending on how you use the website, we may process information such as:
- Name and contact details;
- Email address and telephone number;
- Service address and appointment information;
- Information supplied when requesting or purchasing a service;
- Order, booking and transaction-related information;
- Communications and enquiries submitted to us;
- Technical information required for the operation and protection of the website, such as IP address, browser type and access information.
We only request information that is reasonably relevant to the applicable enquiry, booking, service or website operation.
3. Purposes of Processing
Personal data may be processed for the following purposes:
- responding to enquiries and customer communications;
- arranging and administering service appointments;
- processing orders and related payments;
- providing the requested services;
- managing customer accounts or booking records where applicable;
- handling cancellations, refunds, complaints and service enquiries;
- maintaining appropriate business and transaction records;
- meeting applicable legal and accounting requirements;
- maintaining the proper operation of the website and identifying misuse or technical issues.
Personal data will not be used for purposes incompatible with those described in this Privacy Policy unless another lawful basis permits or requires such processing.
4. Legal Bases
Where applicable, personal data are processed on one or more of the following legal bases under Article 6 GDPR:
- Contractual necessity: where processing is required to respond to a request, arrange an appointment or perform a requested service;
- Legal obligation: where processing is required to comply with applicable legal, accounting or regulatory requirements;
- Legitimate interests: where processing is reasonably necessary for the administration, operation and protection of the website and business, provided that such interests are not overridden by the individual’s rights and interests;
- Consent: where consent is specifically requested and is the appropriate legal basis.
Where processing relies on consent, consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. Service and Deposit Information
The prices displayed on the website are deposit amounts only, unless a particular service page expressly states otherwise.
Information relating to an enquiry, booking or deposit may be processed to administer the requested service, maintain transaction records and communicate relevant appointment or service information.
The amount displayed as a deposit should not be interpreted as the complete service price unless expressly stated on the relevant service information.
6. Website Cookies and Similar Technologies
The website may use cookies and similar technologies that are necessary for website functionality, session management, preferences and other legitimate website operations.
Where applicable law requires consent for non-essential cookies or similar technologies, those technologies will only be used after the required consent has been obtained.
Further information may be provided in the website’s separate Cookie Policy.
7. Payment and Transaction Information
When an order is placed, information necessary to process and record the transaction may be handled in accordance with the applicable payment process.
We do not intentionally retain complete payment card numbers or card security codes in our ordinary business records.
Transaction-related information may be retained where necessary for order administration, accounting, legal obligations, customer service or the establishment, exercise or defence of legal claims.
8. Disclosure of Personal Data
Personal data may be made available only where reasonably necessary for the purposes described in this Privacy Policy, including to:
- service and website providers acting on our behalf;
- providers involved in website hosting, technical maintenance or communication services;
- payment and transaction service providers where required to process an order;
- professional advisers where reasonably required;
- public authorities or other recipients where disclosure is required by law.
Where another organisation processes personal data on our behalf, appropriate contractual and legal requirements will apply where required by applicable data protection law.
9. International Transfers
Where personal data are transferred outside the European Economic Area, such transfer will be carried out only where a lawful transfer mechanism under applicable data protection law is available, such as an adequacy decision or appropriate safeguards.
Information concerning applicable safeguards may be requested using the contact details provided in this Privacy Policy.
10. Data Retention
Personal data are retained only for as long as reasonably necessary for the purposes for which they were collected, including the performance and administration of services, customer communications, accounting obligations and applicable statutory retention periods.
Different categories of information may therefore be retained for different periods.
When personal data are no longer required and no legal obligation or legitimate reason for continued retention applies, they will be deleted or otherwise appropriately disposed of.
11. Your Data Protection Rights
Subject to the conditions and limitations established by applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request erasure of personal data;
- request restriction of processing;
- object to certain processing;
- request data portability where applicable;
- withdraw consent where processing is based on consent.
Requests concerning personal data may be submitted to:
Email: content@gardencarecraft.com
We may take reasonable steps to verify the identity of the person making a data protection request where this is necessary to protect personal data from unauthorised disclosure.
The GDPR requires controllers to facilitate the exercise of these rights and to provide information concerning applicable processing in a clear and accessible manner.
12. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you consider that the processing of your personal data does not comply with applicable data protection law.
For matters concerning processing carried out in Germany, complaints may be directed to the competent German supervisory authority responsible for the relevant jurisdiction.
13. Data Security and Access Control
Reasonable organisational and technical measures are applied to protect personal data against unauthorised access, unlawful processing, accidental loss and inappropriate disclosure.
Access to personal information is limited according to legitimate business requirements.
No website or electronic transmission method can eliminate every potential risk, and personal data will therefore be handled in accordance with applicable data protection requirements and appropriate organisational procedures.
14. Children’s Data
The website is intended for general customers and is not directed specifically at children.
We do not knowingly request personal data from children where such collection is not permitted under applicable law.
15. Changes to This Privacy Policy
This Privacy Policy may be updated where necessary to reflect changes in applicable law, website operations, services or data processing practices.
The current version will be published on this page together with its latest update date.
16. Contact
For questions concerning this Privacy Policy or the processing of personal data, please contact:
Gardencarecraft
Birkenallee 104/106
49076 Osnabrück
Germany
Email: content@gardencarecraft.com
Telephone: +49 1702865590
Website: www.gardencarecraft.com