Kremp und Blumen

Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation is:

Kremp und Blumen
Hochdorferstr. 7
79232 March

+49 7665 4499

mail@kremp-und-blumen.de

2. General information on data processing

The protection of your personal data is important to us. We only process personal data insofar as this is necessary to provide a functional website and our content and services. Processing is carried out on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Hosting

This website is hosted by Amazon Web Services (AWS) via AWS Amplify. The servers are located in Frankfurt am Main, Germany. When you visit our website, information is automatically collected by the hosting provider (so-called server log files). This includes your IP address, browser used, date and time of access, and the page visited. This data is not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in a secure and efficient web presence).

AWS Privacy Policy

4. Cookies

Our website uses one cookie to store your cookie preferences:

CookiePurposeDuration
cc_consentStores your cookie preferences (required)1 year

Additional cookies are only set if you explicitly consent in our cookie banner. You can change your settings at any time via the “Cookie settings” link at the bottom of the page. The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR. For all other cookies, Art. 6(1)(a) GDPR (consent) applies.

5. Google Maps

We use the Google Maps service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded after you have given consent in our cookie banner. When the map is loaded, your IP address is transmitted to Google. Google may also transfer this data to the USA. The transfer is based on the EU-U.S. Data Privacy Framework. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time via the cookie settings.

Google Privacy Policy

6. Newsletter

We use Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin) to send our newsletter. Brevo is a service that organises and analyses newsletter delivery. Brevo processes data within the European Union.

When you subscribe to our newsletter, the following data is transmitted to Brevo:

Registration uses a double opt-in process: after entering your data, you will receive a confirmation email. Your registration is only completed once you click the link in that email. This ensures that no one can sign up with someone else’s email address.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time by unsubscribing via the link in any newsletter email or by contacting us directly.

A data processing agreement is in place with Brevo.

Brevo Privacy Policy

7. Cloudflare Turnstile (spam protection)

To protect our newsletter form from automated abuse, we use Cloudflare Turnstile, a service provided by Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile is only loaded when the newsletter form is submitted and analyses browser characteristics to detect automated access. No marketing cookies are set. Cloudflare may receive access to your IP address and browser data. Data transfer to the USA is based on the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against spam and abuse).

Cloudflare Privacy Policy

8. Contact by email or phone

If you contact us by email or phone, the data you provide (e.g. name, email address, phone number, content of your enquiry) will be stored for the purpose of processing your request. We will not share this data without your consent. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest). The data will be deleted once the purpose of storage no longer applies.

9. Your rights

Under the GDPR, you have the following rights with respect to us as the controller:

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR. The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de

Last updated: April 2026