Privacy notice for the online shop
Supplementary to the website privacy policy, which also describes your rights as a data subject.
Controller
Flockenhaus GmbH & Co. KG, Frankfurter Str. 5, 36124 Eichenzell, Germany · Phone +49 661 72881 · office@flockenhaus.de
Orders
When you order in the shop, we process the details from the order form (company, contact person, address, delivery address, e-mail address, phone number, VAT ID, customer number, ordered items and remarks) to process the order, answer queries and issue invoices. The legal basis is Art. 6(1)(b) GDPR (contract and pre-contractual measures) and Art. 6(1)(c) GDPR (commercial and tax law obligations).
The order is sent by e-mail to us and as an acknowledgement to you. A copy is also stored in a directory on our web server that is blocked from external access, so that no order is lost. We delete the data when it is no longer needed and no statutory retention periods (up to 10 years under German commercial and tax law) apply.
For intra-Community supplies, the VAT ID you enter is checked via our server against the EU VAT Information Exchange System (VIES, European Commission) as you type; only the VAT ID is transmitted. The response (valid/invalid, company name and address where available) can be used to fill in the form. For German postcodes your browser queries the place name from the OpenPLZ service (openplzapi.org); only the postcode is transmitted. When you type a company name (4 characters or more), your browser requests address suggestions from the OpenStreetMap geocoder Photon (photon.komoot.io, komoot GmbH, Potsdam, Germany); only the text you typed is transmitted. The suggestions are optional (Art. 6(1)(b) GDPR).
Shipping and payment
For delivery we pass on the name and delivery address to the carrier (GLS, TNT/FedEx or Deutsche Post). If you choose PayPal, your e-mail address and the invoice amount are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. The legal basis is Art. 6(1)(b) GDPR.
Customer account
Existing customers can sign in so that their address is filled in automatically. Customer data (e-mail address, name, address, phone number and an encrypted password) are stored in a database at our hosting provider. For the duration of the session the shop sets a technically necessary session cookie (“fhshop”), which is deleted when the browser is closed. Orders are also possible without signing in. We will delete your customer account on request – a short message to office@flockenhaus.de is sufficient.
Cart and saved address
The contents of your cart are stored only in your browser (local storage) so that they are retained between pages. If you choose “Remember address on this device” at checkout, your address is also stored only in your browser (consent, Art. 6(1)(a) GDPR). You can revoke this at any time by unticking the box on your next order or clearing the site data in your browser. We do not use analytics or advertising cookies.
Hosting
Shop and database are operated by our hosting provider STRATO (Otto-Ostrowski-Straße 7, 10249 Berlin, Germany) under a data processing agreement (Art. 28 GDPR).