This Privacy Policy informs users of the nature, scope, and purpose of the processing of personal data on the website www.ledgeandfold.com.
The Data Controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR / DSGVO) and applicable German data protection laws is:
Company Name: [Please Insert Your Registered German Company Name, e.g., ledgeandfold GmbH / Inhaber Name]
Registered Address: [Please Insert Your Street Address, House Number, Postcode, City, Germany]
2. Collection and Processing of Personal Data
We collect and process personal data only when necessary to fulfill contractual obligations, provide website functionality, or comply with statutory retention requirements.
A. Order Processing & Customer Support
When you purchase balcony products (such as balcony railing shelves, hanging baskets, foldable shelving, cushion covers, or storage bags) or contact us, we process:
Order Details: Items purchased, order reference, transaction metadata.
Legal Basis: Article 6(1)(b) GDPR (performance of a contract or preliminary measures).
B. Payment Processing via Stripe
To facilitate transaction processing, payment data is passed to our third-party payment service provider:
Payment Provider: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
Data Processed: Payment instrument details, transaction amounts, billing information, IP address, and browser metadata.
Payment data is transmitted directly to Stripe via encrypted protocols. We do not store full credit card numbers or sensitive payment credentials on our servers. The processing by Stripe is carried out for order execution and fraud prevention purposes.
Legal Basis: Article 6(1)(b) GDPR (contract performance) and Article 6(1)(f) GDPR (legitimate interest in processing secure transactions).
3. Data Retention & Storage Periods
Personal data is retained only for as long as necessary to achieve the specific processing purpose, or as required under applicable statutory storage obligations:
Contractual Data: Personal data relating to customer orders is retained for the duration of the contractual relationship.
Statutory Retention Periods: Pursuant to German commercial and tax law (Section 257 German Commercial Code – HGB and Section 147 German Tax Code – AO), accounting documents, invoices, and relevant commercial communications are retained for 6 to 10 years.
General Enquiries: Customer communications not resulting in a contract are retained for up to 6 months from the date of the last contact, unless further storage is necessary to resolve ongoing queries.
Upon expiration of the mandatory retention periods, the corresponding data is routinely deleted or anonymised in accordance with statutory rules.
4. Data Transfer to Third Parties
Your personal data is not transferred to third parties for commercial or marketing purposes. Personal data is disclosed only to service providers who assist in operating our store (such as IT hosting, logistics, and payment processing), strictly under standard data processing agreements in compliance with Article 28 GDPR.
5. Rights of the Data Subject
Under the General Data Protection Regulation (GDPR), you hold the following rights regarding your personal data:
Right of Access (Article 15 GDPR): Request confirmation as to whether your data is being processed and obtain details regarding such processing.
Right to Rectification (Article 16 GDPR): Request the correction of inaccurate or incomplete personal data.
Right to Erasure (Article 17 GDPR): Request the deletion of personal data, subject to statutory retention obligations.
Right to Restriction of Processing (Article 18 GDPR): Request the restriction of processing under specified statutory conditions.
Right to Data Portability (Article 20 GDPR): Receive personal data provided to us in a structured, standard, machine-readable format.
Right to Object (Article 21 GDPR): Object to data processing based on legitimate interests on grounds relating to your particular situation.
To exercise any of these rights, please contact us via email at cashier@ledgeandfold.com. You also retain the right to lodge a complaint with a competent supervisory authority for data protection in Germany or the EU.
6. Data Security
We employ appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, alteration, or disclosure. However, transmission of information over the internet carries inherent risks, and no method of transmission or storage can be considered entirely free from risk.
We use cookies to measure marketing efforts and improve our services. Please review the cookie settings and confirm your choice.
