Privacy Policy

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Grüner Baum GmbH
Vorstädter Str. 32, 55276 Oppenheim, Deutschland
E-Mail: info@gruner-baum.de
Telefon: +49 163 351 3031

2. Hosting & Provision

This website is operated on the infrastructure of Cloudflare, Inc. Cloudflare processes technically necessary connection data (IP address, timestamp, user agent, requested URL) as part of the provision. Processing is based on our legitimate interest in secure and performant provision (Art. 6 (1) (f) GDPR). Data is kept in the EU region (EEUR) where possible.

A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare, which also includes the Standard Contractual Clauses (SCC) for third-country transfers.

3. Server Logs

When you visit our pages, technical data (IP address, time, browser, operating system, referrer, HTTP status code) is automatically collected and stored for a short period. Storage is carried out to ensure operational security and prevent misuse (Art. 6 (1) (f) GDPR). No merging with other data takes place.

4. Contact

When you contact us by e-mail or telephone, the information provided is stored for processing the enquiry (Art. 6 (1) (b) or (f) GDPR). Through the EU GPSR enquiry form we collect your name, company, e-mail address, the products you describe, country of manufacture, sales channel and your message. The purpose is solely to answer your enquiry and to prepare an offer. The details are transmitted through our own server infrastructure in the EU (Finland) and delivered by e-mail via Brevo (Sendinblue SAS, France) as processor. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in handling enquiries). The data is deleted once it is no longer required for achieving the purpose, at the latest after the expiry of statutory retention periods.

5. Cookies

We only use technically necessary cookies (e.g. for session management). These are required for the website to function and are based on § 25 (2) No. 2 TDDDG. No consent is required for this.

Should we use analytics or marketing cookies in the future, we will obtain your prior consent via a consent banner (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

6. Your Rights

You have the following rights vis-à-vis us:

• Information about processed data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure ("right to be forgotten", Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of given consent with effect for the future (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate.

7. Storage Duration

We store personal data only as long as necessary for the respective purposes or as required by statutory retention obligations (e.g. §§ 147 AO, 257 HGB, generally 6 or 10 years).

8. Changes to this Policy

We adapt this privacy policy when changes to our processing or the legal situation require it. The version currently published on this page applies.

As of: September 2026