Privacy Policy

1. Data Controller

The party responsible for processing personal data on this website in accordance with the General Data Protection Regulation (GDPR / DSGVO) is:

Crottendorfer Haushaltswaren Produktions GmbH

Oberwiesenthaler Str. 10 b

09474 Crottendorf

Germany

Phone: +49373448560

Email: furniture@flatpackmate.com

Website: www.flatpackmate.com

2. Overview of Data Processing

We take the protection of your personal data seriously. We process personal data solely in compliance with applicable European Union and German data protection legislation, including Regulation (EU) 2016/679 (GDPR) and the German Telecommunications-Telemedia Data Protection Act (TDDDG).

Personal data refers to any information relating to an identified or identifiable natural person.

3. Data Collection and Usage

We collect and process personal data only when necessary to provide our website functionality, communicate regarding service enquiries, generate quotes, manage bookings, and execute assembly requests.

A. Server Log Files

When visiting our website, your browser automatically transmits information to our server logs. This may include:

  • IP address
  • Date and time of the request
  • Browser type and version
  • Operating system used
  • Referrer URL

Legal Basis: Article 6(1)(f) GDPR (Legitimate Interest in ensuring web stability and technical operational security).

B. Contact Forms and Service Enquiries

When you submit an enquiry form to request an evaluation, quote, or booking:

  • Data collected: Name, email address, phone number, physical address (where assembly service is requested), and communication details relevant to the assembly request.
  • Purpose: To evaluate service specifications, provide accurate quotes, process initial deposits, and schedule on-site assembly appointments.
  • Legal Basis: Article 6(1)(b) GDPR (Performance of a contract or taking steps prior to entering into a contract).

C. Payment Processing

To process payments securely for service deposits and final balances, payment transactions are conducted via secure, PCI-DSS compliant payment service providers.

  • Data processed: Payment information (such as credit/debit card details, billing address, transaction amount) is transmitted directly to payment service providers over encrypted connections.
  • Purpose: Payment authentication and order settlement.
  • Legal Basis: Article 6(1)(b) GDPR (Performance of a contract) and Article 6(1)(c) GDPR (Compliance with legal tax and accounting obligations).

4. Storage and Retention of Data

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable German statutory retention obligations (e.g. commercial and tax retention periods under the German Commercial Code (HGB) and the German Fiscal Code (AO), which may require retention for up to 10 years).

Once retention requirements expire, relevant data is deleted or anonymised in accordance with data protection rules.

5. Sharing Data with Third Parties

Your personal data is not transferred to third parties except in the following limited circumstances:

  • Service Execution: To technical infrastructure providers, communication platforms, or assembly personnel necessary to fulfill your booked service.
  • Legal Obligation: If required by law, statutory court order, or official regulation pursuant to Article 6(1)(c) GDPR.

All data processors are carefully selected, bound by data processing agreements (Article 28 GDPR), and required to maintain appropriate technical and organizational measures to safeguard data confidentiality.

6. Data Security Measures

We implement appropriate technical and organisational security measures (including SSL/TLS encryption for website transmission) to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. While we employ industry-recognised standards to protect information, electronic communications and internet transmission systems inherently carry standard operational risks.

7. Your Statutory Rights under the GDPR

Subject to statutory requirements, you have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): Right to obtain confirmation as to whether your personal data is being processed and access to that data.
  • Right to Rectification (Art. 16 GDPR): Right to request correction of inaccurate personal data.
  • Right to Erasure (Art. 17 GDPR): Right to request deletion of your personal data where statutory grounds apply.
  • Right to Restriction of Processing (Art. 18 GDPR): Right to request restricted processing under specific statutory circumstances.
  • Right to Data Portability (Art. 20 GDPR): Right to receive personal data provided to us in a structured, commonly used format.
  • Right to Object (Art. 21 GDPR): Right to object to processing based on legitimate interests (Art. 6(1)(f) GDPR).
  • Right to Withdraw Consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at furniture@flatpackmate.com.

You also have the right to lodge a complaint with a competent supervisory authority in the European Union, specifically in the Member State of your habitual residence, place of work, or place of the alleged infringement.

8. Updates to This Privacy Policy

We reserve the right to amend this Privacy Policy to ensure compliance with updated statutory requirements or operational changes. The latest version will always be accessible on this page.