Privacy Policy
Privacy Policy
1) Introduction and Contact Details of the Responsible Party
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data that can be used to personally identify you.
1.2 The responsible party for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Eberhard Dötterer, Dötterer Gardening, Blaisle 1, 71691 Freiberg a.N., Germany, Tel.: +49 7141 2762-0, Fax: +49 7141 2762-40, E-Mail: info@doetterer.de. The responsible party for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When using our website purely for informational purposes, i.e., when you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:
- The website you visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to subsequently review the server log files should concrete evidence point to unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser's address bar.
3) Hosting & Content Delivery Network
3.1 For hosting our website and presenting the page content, we use a provider that provides its services exclusively on servers within the European Union, either directly or through selected subcontractors.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
3.2 Google Cloud CDN
We use a content delivery network from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
This service allows us to deliver large media files such as graphics, page content, or scripts faster over a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website according to Art. 6 para. 1 lit. f GDPR.
Data may also be transmitted to: Google LLC, USA
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your end device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your end device for a longer period and enable the storage of site settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.
If individual cookies we use also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a user-friendly and effective design of the website visit.
You can configure your browser to be informed about the setting of cookies and to individually decide on their acceptance or to exclude the acceptance of cookies for specific cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
5) Contacting Us
In the context of contacting us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your request according to Art. 6 para. 1 lit. f GDPR. If your contact aims at a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted once it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.
6) Data Processing When Opening a Customer Account
According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary when you provide us with this information when opening a customer account. Which data is required for account opening can be found in the input mask of the respective form on our website.
Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the responsible party. After deletion of your customer account, your data will be deleted as long as all contracts closed in this regard have been completely processed, there are no statutory retention periods to the contrary, and we have no legitimate interest in further storage.
7) Use of Customer Data for Direct Marketing
Sending the email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, like those already purchased from our range, via email. For this, we do not need to obtain any separate consent from you according to § 7 para. 3 UWG. The data processing is carried out solely based on our legitimate interest in personalized direct advertising according to Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send any emails.
You have the right to object to the use of your email address for the aforementioned marketing purpose at any time with future effect by notifying the responsible party mentioned at the beginning. For this, only transmission costs according to the basic tariffs will be incurred. After receiving your objection, the use of your email address for advertising purposes will be immediately discontinued.
8) Data Processing for Order Processing
8.1 As far as necessary for the contract processing for delivery and payment purposes, the personal data we collect will be forwarded according to Art. 6 para. 1 lit. b GDPR to the commissioned transport company and the commissioned credit institution.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided during the order to inform you personally in compliance with our legal obligations according to Art. 6 para. 1 lit. c GDPR. Your contact details will be used strictly for communications about updates owed by us and will be processed by us only to the extent necessary for the respective information.
For the processing of your order, we also work with the following service provider(s) who partially support us in the execution of closed contracts. Certain personal data will be transmitted to these service providers as specified in the following information.
8.2 Disclosure of personal data to shipping service providers
- DHL
As a transport service provider, we use the following provider: DHL Paket GmbH, Sträußchensweg 10, 53113 Bonn, Germany
We will provide your email address and/or telephone number according to Art. 6 para. 1 lit. a GDPR to the provider before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your explicit consent for this in the ordering process. Otherwise, we will only provide the recipient's name and delivery address to the provider for the purpose of delivery according to Art. 6 para. 1 lit. b GDPR. The transfer takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
The consent can be revoked at any time with future effect towards the responsible party mentioned above or towards the provider.
- DHL Express
As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany
We will provide your email address and/or telephone number according to Art. 6 para. 1 lit. a GDPR to the provider before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your explicit consent for this in the ordering process. Otherwise, we will only provide the recipient's name and delivery address to the provider for the purpose of delivery according to Art. 6 para. 1 lit. b GDPR. The transfer takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
The consent can be revoked at any time with future effect towards the responsible party mentioned above or towards the provider.
8.3 Use of payment service providers
- PayPal
One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method from the provider where you pay in advance, your payment data (including name, address, bank and card information, currency, and transaction number) provided during the ordering process as well as information about the content of your order will be forwarded to them according to Art. 6 para. 1 lit. b GDPR. The transfer of your data in this case is solely for the purpose of payment processing with the provider and only to the extent necessary for this.
If you select a payment method where we pay in advance, you will also be required to provide certain personal data (first name, last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable, data for an alternative payment method) during the order process.
To safeguard our legitimate interest in assessing your creditworthiness in such cases, this data will be forwarded to the provider according to Art. 6 para. 1 lit. f GDPR for the purpose of a credit check. The provider checks on the basis of the personal data you provided as well as other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option you selected can be granted regarding payment and/or default risk.
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.
9) Site Functionalities
OpenStreetMap
This website uses an online mapping service from the following provider: OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK
The online mapping service is a tool for displaying interactive (land) maps to visually present geographical information. Through the use of this service, our location is shown to you, and any geolocation is facilitated.
When calling the subpages into which the provider's map is integrated, information about your use of our website (such as your IP address) is transmitted to the provider's servers and stored there.
The processing of your personal data is carried out according to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the needs-based design of our website. If you do not agree to the future transmission of your data to the provider, there is the option to completely deactivate the provider's online mapping service by disabling the JavaScript application in your browser. The online mapping service on this website can then no longer be used.
As far as legally required, we have obtained your consent for the above-mentioned processing of your data according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with future effect. To exercise your right of revocation, please follow the above-mentioned option for making an objection.
In the event of data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
10) Rights of the Data Subject
10.1 The applicable data protection law grants you the following rights against the responsible party regarding the processing of your personal data (rights of access and intervention), with reference to the respective exercise requirements based on the legal basis mentioned:
- Right of access according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw consent granted according to Art. 7 para. 3 GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
10.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION TO THIS PROCESSING WITH FUTURE EFFECT.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING PROTECTIVE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.
11) Duration of Storage of Personal Data
The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).
When processing personal data on the basis of explicit consent according to Art. 6 para. 1 lit. a GDPR, the affected data will be stored as long as you do not revoke your consent.
If there are statutory retention periods for data processed within the framework of legal transactions or similar obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods expire, provided that it is no longer necessary for the fulfillment of the contract or for the initiation of the contract and/or we have no legitimate interest in further storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object according to Art. 21 para. 2 GDPR.
Unless otherwise specified in the other information of this declaration regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.