Privacy Policy

1. 1. Data Controller

   The controller within the meaning of the GDPR is:

   LT Euroflowers GmbH, Glüsingen Nr. 4, 29378 Wittingen, Germany

   Email: info@lt-euroflowers.de

2. 2. General Information

   We process personal data only to the extent necessary to provide a functional website and our content and services. "Personal data" means any information relating to an identified or identifiable natural person (e.g., name, email address, IP address). This may also apply in a B2B context, for example to contact persons at companies.

3. 3. Hosting and Server Log Files

   When you access our website, data is automatically collected by our hosting server and stored in so-called server log files. This may include in particular:

   • IP address (possibly shortened/anonymized by technical measures of the hosting provider)
   • Date and time of access
   • Accessed page/file
   • Browser type/version, operating system
   • Referrer URL (previously visited page)

   Purpose: Technical provision of the website, stability, and security (e.g., attack detection).

   Legal basis: Article 6(1)(f) GDPR (legitimate interest).

4. 4. Contact by Email

   If you contact us by email, we process the data you provide (e.g., name, company affiliation, email address, content of the inquiry) in order to handle and respond to your request.

   Legal basis: Article 6(1)(b) GDPR (taking steps prior to entering into a contract / performance of a contract) and Article 6(1)(f) GDPR (legitimate interest in efficient communication).

5. 5. Cookies and Necessary Device Access

   We use only technically necessary cookies or similar technologies required for operating the website (e.g., for technical delivery of pages or security-related functions). For non-essential cookies/technologies (e.g., web tracking), consent is generally required in Germany (Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR).

6. 6. Google Analytics

   We use Google Analytics (GA4) to statistically evaluate website usage. The provider is generally Google Ireland Limited (Ireland). Important: Google Analytics is activated only after your consent (opt-in). Without your consent, no analytics tracking takes place. In Germany, consent is typically required for Google Analytics in standard use.

   Data processed (typically): usage data, device/browser information, approximate location information (derived), interactions on the website.

   IP protection: We use privacy-friendly settings (e.g., IP masking/anonymization where technically available).

   Legal basis: Article 6(1)(a) GDPR (consent) and Section 25(1) TDDDG.

   Withdrawal / Opt-out: You can withdraw a given consent at any time with effect for the future (e.g., via your browser cookie settings or via a consent/cookie tool provided on the website, if active). Google also provides a browser add-on to disable Google Analytics.

7. 7. Recipients, Processing on Our Behalf, and Third-Country Transfers

   We use service providers (e.g., hosting) that may process personal data on our behalf (processors under Article 28 GDPR). When using Google Analytics, data transfers to third countries (in particular the USA) cannot be ruled out. Google refers, among other things, to appropriate safeguards such as Standard Contractual Clauses and certifications/mechanisms under the EU–U.S. Data Privacy Framework, where applicable.

8. 8. Storage Period

   We store personal data only as long as necessary for the respective purposes or as required by statutory retention obligations.

   Email inquiries: generally until final processing is completed; beyond that only if necessary (e.g., evidence/defense of legal claims).

   Server log files: typically only short-term to ensure security/operations.

   Google Analytics data: according to the retention periods set in Google Analytics (after consent).

9. 9. Your Rights

   • Right of access (Article 15 GDPR)
   • Right to rectification (Article 16 GDPR)
   • Right to erasure (Article 17 GDPR)
   • Right to restriction of processing (Article 18 GDPR)
   • Right to data portability (Article 20 GDPR)
   • Right to object (Article 21 GDPR), where processing is based on Article 6(1)(f) GDPR
   • Right to withdraw consent (Article 7(3) GDPR)

10. 10. Right to Lodge a Complaint with a Supervisory Authority

    You have the right to lodge a complaint with a data protection supervisory authority. For Lower Saxony (Niedersachsen), this includes: The Data Protection Commissioner for Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

11. 11. External Links

    Our website may contain links to external websites. The respective providers are responsible for the content and data protection practices of those websites.