PRIVACY POLICY – GARDEN VISTA

1. Introduction

The protection of your personal data is of great importance to Garten Vista. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
Below, we explain which data we process, for what purposes, and what rights you have.

This privacy policy applies to all users and customers of
gartenvista.de and www.garten-vista.nl .

2. Responsible

Garten Vista
Schipperswall 32
6041 TC Roermond
Netherlands
KVK: 87102935
VAT ID: NL004365876B46
Email: info@gartenvista.de

3. What personal data do we process?

We process only personal data that is necessary for:

• Ordering and delivery
• Payment processing
• Customer service
• Newsletter distribution
• Website usage analysis
• Marketing activities (after consent)

This includes in particular:

• Name, address
• Telephone number
• E-mail address
• Delivery address
• Payment information (via payment service provider)
• IP address and cookie ID (only after consent)

We do not process any special categories of personal data.

4. Purposes of data processing

4.1 Ordering & Delivery

We process personal data to process and deliver orders and to fulfill contractual obligations.
For this purpose, we share data with:

• Payment service provider
• Shipping and logistics partner
• Hosting and webshop service providers

The processing takes place exclusively within the framework of our order processing.

4.2 Customer Service

When you contact us by phone, email or via a form, we use your data to process your request.

4.3 Newsletter

With your consent, we will use your email address to send you news, offers, and product information.
You can unsubscribe at any time via the unsubscribe link or by email.

4.4 Marketing & Advertising (Meta, Google Ads)

After you have given your consent via the cookie banner, we use technologies to:

• Measuring advertising
• Reach analysis
• Remarketing (Meta Pixel, Google Ads)
• Display of personalized advertising

This processing takes place exclusively after active consent in accordance with Section 25 TTDSG and Article 6 Paragraph 1 Letter a GDPR.

4.5 Web analytics (Google Analytics 4)

We use Google Analytics 4 to statistically evaluate user behavior.

The following is guaranteed:

• IP anonymization
• Data minimization
• No disclosure without a legal basis
• Processing within the EU, where possible

The analysis is only performed after cookie consent has been given.

5. Legal basis

We process your personal data on the basis of:

• Article 6 paragraph 1 letter b GDPR (performance of a contract)
• Article 6 paragraph 1 letter c GDPR (legal obligations)
• Article 6 paragraph 1 letter a GDPR (consent)
• Article 6 paragraph 1 letter f GDPR (legitimate interest, e.g. IT security)

6. Storage duration

• Order and invoice data : 7 years (legal retention requirements NL & DE)
• Customer service inquiries : 12 months
• Newsletter data : until revoked
• Analytics and marketing data : according to cookie settings (max. 26 months)
• User accounts : until the account is deleted

7. Cookies

We use cookies for:

• technical functions (necessary)
• Statistics (after consent)
• Marketing & Remarketing (with consent)

On your first visit to our website, a cookie banner will appear where you can give or refuse your consent.
Details can be found in our separate cookie notice.

8. Data sharing

We only share personal data with the following categories of recipients:

• Hosting and IT service providers
• Payment service provider
• Shipping service provider
• Email and newsletter service provider
• Analytics and marketing technologies (with consent)

All data processors operate on the basis of a GDPR-compliant data processing agreement.

9. Data security

We protect your data through technical and organizational measures, including:

• SSL encryption
• Access restrictions
• secure server infrastructure
• continuous security monitoring

10. Your rights

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 GDPR)

You also have the right to lodge a complaint with:

The Federal Commissioner for Data Protection and Freedom of Information (BfDI)
or the responsible state data protection authority in North Rhine-Westphalia .

Please direct your inquiries to:
info@gartenvista.de

11. Changes to this privacy policy

We reserve the right to amend this privacy policy if legal requirements or our internal processes change.
The most current version can be found on our website.