Legal

Privacy Policy

Processing under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Supervisory authority: BfDI.

Last updated: 28 July 2026

1. Controller

Baumschule Rheingrün
Merzhauser Straße 120
79100 Freiburg im Breisgau
Germany
Email: [email protected]
Phone: +49 761 38 47 21

2. Data we collect

  • Identity and contact details (name, email, phone) when you write to us
  • Message content and enquiry topic from the contact form
  • Technical data needed to operate the website (e.g. server logs)
  • Cookie and preference data as described in our Cookie Policy

3. Purposes and legal bases

  • Enquiries and orders — to respond to messages and prepare plant or tree supply (Art. 6(1)(b) GDPR).
  • Communication — legitimate interest in answering general questions (Art. 6(1)(f) GDPR).
  • Legal obligations — accounting and tax under German law (Art. 6(1)(c) GDPR; BDSG where applicable).
  • Analytics / marketing cookies — only with your consent (Art. 6(1)(a) GDPR).

4. Retention

We keep personal data only as long as needed for the purpose, including statutory commercial and tax retention periods in Germany. Contact messages are usually kept for up to 24 months unless a longer period is required.

5. Sharing

We do not sell personal data. We may share data with IT hosting or email providers under contract (Art. 28 GDPR), or when required by law or competent authorities.

6. Your rights

Under the GDPR and BDSG you may request access, rectification, erasure, restriction of processing, data portability, and object to certain processing. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. Email [email protected].

7. Supervisory authority

You may lodge a complaint with the German Federal Commissioner for Data Protection and Freedom of Information (BfDI) or your competent state data protection authority (Landesbeauftragte).

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Graurheindorfer Straße 153
53117 Bonn
Germany
Website: bfdi.bund.de

8. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, in line with Art. 32 GDPR.

9. Updates

We may update this policy when our practices or the law change. The latest version appears on this page.