0 Cart

No products in the cart.

Nest 0

1. Overview and Data Controller Identity

horticove operates www.horticove.com and respects the privacy rights of visitors and customers across Germany and the European Union. Under applicable European data protection legislation, including the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), horticove acts as the data controller responsible for the collection, processing, and storage of personal information collected through this website.

—

2. Legal Basis and Purpose of Data Processing

Personal information is collected and processed strictly to fulfill commercial orders, provide customer service support, maintain operational efficiency, and comply with legal obligations.

The legal bases for processing personal data include:

  • Contractual Necessity (Article 6(1)(b) GDPR): Processing required to process purchases, maintain store operations, manage customer inquiries, and deliver purchased items.
  • Legal Compliance (Article 6(1)(c) GDPR): Processing required to satisfy statutory financial, accounting, tax, and commercial regulations in Germany and the European Union.
  • Legitimate Interests (Article 6(1)(f) GDPR): Technical maintenance, digital optimization, standard website protection, and system performance management.

—

3. Information Collected

When interacting with www.horticove.com, the following standard information categories may be collected:

  • Identity & Contact Details: Full name, email address, billing address, shipping address, and telephone number.
  • Transaction Details: Ordered items, order dates, payment totals, and commercial interactions.
  • Technical Log Data: IP address, browser information, language settings, system type, referral URLs, and standard visit logs.

—

4. Payment Processing and Third-Party Data Transmission

Payment processing on www.horticove.com is handled directly by Stripe as our designated third-party payment infrastructure provider.

When an order is placed, transaction data is transmitted directly to Stripe via encrypted protocols to process funds. The information shared with Stripe includes payment instrument details, transaction totals, billing details, and order identification markers. horticove does not store raw credit card numbers or account credentials on its own servers.

Data processing by Stripe is governed by Stripe’s privacy documentation and standard European compliance frameworks.

—

5. Data Retention Periods

Personal information is retained only for as long as necessary to fulfill the primary collection purposes or as required by European and German statutory obligations:

  • Order and Transaction Data: Retained for up to 10 years following completion of the transaction to satisfy mandatory German commercial (HGB) and fiscal (AO) record-keeping obligations.
  • Customer Inquiry Logs: Retained for up to 3 years from the final communication to ensure accurate service history and dispute management.
  • Technical Log Files: Retained for a standard technical window of up to 30 days before systematic deletion or anonymisation.

Upon expiry of the designated retention periods, data is erased or anonymized in accordance with regulatory standards.

—

6. International Data Transfers

Where data transfers outside the European Economic Area (EEA) occur through processing partners such as Stripe, such transfers are carried out under approved protection mechanisms, including European Commission Standard Contractual Clauses (SCCs), ensuring an equivalent level of data protection.

—

7. Rights of Data Subjects

Under European data protection laws, individuals residing in Germany and the European Union possess specific rights regarding their personal data:

  • Right of Access (Article 15 GDPR): Request confirmation and copy of personal data currently processed.
  • Right to Rectification (Article 16 GDPR): Request correction of inaccurate or incomplete records.
  • Right to Erasure (Article 17 GDPR): Request deletion of data where legal retention obligations no longer apply.
  • Right to Restriction of Processing (Article 18 GDPR): Request limitation of data processing under specific legal conditions.
  • Right to Data Portability (Article 20 GDPR): Request transfer of personal data in a standard, structured, machine-readable format.
  • Right to Object (Article 21 GDPR): Object to processing based on legitimate interests.
  • Right to Lodge a Complaint: Lodge a supervisory complaint with a competent Data Protection Authority in Germany or your EU member state of residence.

To exercise any of these rights, contact plant@horticove.com.

—

8. Cookies and Technical Analytics

www.horticove.com uses functional and analytical technical cookies necessary for essential navigation, shopping basket stability, and site usability. Non-essential tracking cookies are deployed only with explicit consent through the site banner controls.

—

9. Data Security Infrastructure

horticove implements appropriate technical, physical, and organisational controls designed to safeguard personal data against unauthorized access, loss, or alteration. System access is restricted strictly to operational needs.

—

10. Policy Updates and Inquiries

This Privacy Policy may be updated periodically to reflect changes in operational procedures or legal requirements. Updated versions will be published directly on www.horticove.com.

For questions concerning data processing, contact:
Email: plant@horticove.com

Powered by CookieAdmin