Privacy policy

Welcome!

We are glad to have you here.

Below, we provide detailed information about how we handle your data and your rights.

  1. The data controller responsible for processing your data is: Hannah Möller
    Poststraße 12
    34281 Gudensberg
    info@harmony-plants.com

  2. Access Data and Hosting
    You can visit our website without providing personal information. Each time you access a webpage, the web server automatically saves a server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the data volume transferred, and the requesting provider (access data). This log documents the access and is used solely to ensure the smooth operation of the site as well as to improve our offerings. This processing is based on Art. 6 Para. 1 S. 1 lit. f GDPR, serving our legitimate interests in a correct display of our offerings. All access data is deleted no later than seven days after the end of your visit to the website.

Hosting services by a third-party provider
As part of processing on our behalf, a third-party provider supplies us with services for hosting and displaying the website. This serves to protect our legitimate interests in a correct display of our offerings. All data collected as part of your website usage or in designated forms within the online shop are processed on its servers. Processing on other servers only takes place within the scope explained here. This service provider is located within a country of the European Union or the European Economic Area.

We use the Shopify system from Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”) to host and display the online shop based on processing on our behalf. All data collected on our website is processed on Shopify’s servers. As part of Shopify’s aforementioned services, data may also be processed further by Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. In the case of data transfer to Shopify Inc. in Canada, an adequate level of data protection is ensured through the European Commission’s adequacy decision. Further details on Shopify’s data protection can be found here: https://www.shopify.de/legal/datenschutz.

Any further processing on servers other than those mentioned here by Shopify will only take place as explained below.

  1. Data Collection and Use for Contract Processing and Creating a Customer Account
    We collect personal data when you voluntarily provide it to us as part of your order, contact with us (e.g., via contact form or email), or when creating a customer account. Mandatory fields are marked as such, as we require this data to process the contract, handle your inquiry, or create your customer account. Without this information, we cannot complete the contract or contact you. The specific data collected can be seen from the input forms used. We process the data you provide per Art. 6 Para. 1 S. 1 lit. b GDPR to process contracts and handle your inquiries. After the complete fulfillment of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the retention periods required by tax and commercial law, unless you have expressly consented to further use of your data or we are legally permitted to do so. Deleting your customer account is possible at any time, either by sending a message to the contact details mentioned below or via the function provided in the customer account.

  2. Data Disclosure
    To fulfill the contract according to Art. 6 Para. 1 S. 1 lit. b GDPR, we will pass on your data to the shipping company responsible for delivering the order, as far as this is necessary for the delivery of the goods ordered. Depending on the payment service provider you choose in the ordering process, we pass on the payment data collected for payment processing to the commissioned credit institution and, if necessary, to payment service providers we have commissioned or the selected payment service. Some payment service providers collect this data themselves, provided you create an account with them. In this case, you must log in to the payment service provider during the ordering process with your access data. The privacy policy of the respective payment service provider applies. We use payment service providers based outside the European Union. The transfer of personal data to this company only takes place to the extent necessary to fulfill the contract.

Data Transfer to Shipping Service Providers
If you have given us your express consent during or after your order, we will pass on your email address and telephone number to the selected shipping service provider based on Art. 6 Para. 1 S. 1 lit. a GDPR so that they can contact you before delivery to arrange the delivery or notify you of the shipment. This consent can be revoked at any time by contacting us or directly contacting the shipping service provider. After revoking your consent, your data will be deleted unless you expressly consent to further use of your data, or we reserve the right to use the data for purposes that are legally permitted.

Address: Harmony Plants, Hannah Möller, Poststraße 12, 34281 Gudensberg, Germany

For more details on subsequent sections, including data processing for payment services, please refer to the full privacy policy.

For any additional questions about data protection, please don’t hesitate to contact us at the provided contact information.