Privacy & Data Protection Policy

1. Data Controller

The data controller for processing data on this website, in accordance with the General Data Protection Regulation (GDPR), is:

Terra & Tree
Owner: Stylianos Traoudas
Wasserhofstraße 47, 60599 Frankfurt am Main, Germany
E-mail: info@terra-tree.com
Phone: +49 17631572351
Website: https://www.terra-tree.com/el/
VAT ID No. (USt-IdNr): DE462724563

2. Legal Bases for Processing

The processing of your personal data is carried out in full compliance with the General Data Protection Regulation (GDPR / DSGVO) based on the following legal bases:

• Consent (Article 6 para. 1 lit. a GDPR): Provided you have given us explicit consent for specific purposes (e.g., Newsletter, statistical cookies).
• Performance of a Contract (Article 6 para. 1 lit. b GDPR): For processing your orders, shipping products, or responding to pre-contractual inquiries.
• Legal Obligation (Article 6 para. 1 lit. c GDPR): For compliance with tax and commercial record-keeping obligations.
• Legitimate Interest (Article 6 para. 1 lit. f GDPR): For ensuring the technical stability, security, and fraud prevention on our website.

3. Website Hosting (IONOS SE)

Our website is hosted on the secure servers of the German company IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

During your visit, IONOS automatically records technical data in server log files, such as: IP address (anonymized), date and time of access, pages visited, browser type and version, and operating system. The collection of this data is technically necessary for the stable and secure operation of our website (Article 6 para. 1 lit. f GDPR).

We have concluded an official Data Processing Agreement (DPA / AVV) with IONOS in accordance with Article 28 of the GDPR, ensuring that processing is carried out according to the highest European security standards.

4. Cookies & Google Analytics 4

Our website uses cookies for optimal functionality:

• Technically Necessary Cookies: Required for the basic operation of the online store (e.g., maintaining products in the WooCommerce shopping cart, language selection). Legal basis: Article 6 para. 1 lit. f GDPR & § 25 para. 2 TDDDG.
• Google Analytics 4 (Statistical Cookies): Provided you give your consent, we use Google Analytics 4 from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). IP anonymization is enabled by default. Data transfer to the USA is covered by the EU-US Data Privacy Framework.

Statistical analysis and marketing cookies are activated exclusively upon your explicit consent via the Cookie Banner (Article 6 para. 1 lit. a GDPR & § 25 para. 1 TDDDG). You can revoke or modify your choices at any time via the cookie settings in the footer.

5. Online Shop (WooCommerce)

For the processing and fulfillment of your orders in our store, we collect the absolutely necessary data: full name, billing and shipping address, e-mail address, and telephone number.

The processing of this data is necessary for the performance of the sales contract (Article 6 para. 1 lit. b GDPR). Order documents and tax records are retained for a period of up to 10 years, in accordance with the mandatory provisions of German tax and commercial law (§ 147 AO / § 257 HGB, Article 6 para. 1 lit. c GDPR).

6. Data Transfer to Shipping Companies (Logistics)

For the delivery of your products, we transfer your full name and delivery address to the respective cooperating courier company (e.g., DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn / DPD Deutschland GmbH / UPS). This transfer is based on Article 6 para. 1 lit. b GDPR for the performance of the contract.

Important: Your e-mail address and/or telephone number are transferred to the shipping company for the purpose of providing parcel tracking updates EXCLUSIVELY AND ONLY if you have given your explicit consent via the corresponding option at checkout, in accordance with Article 6 para. 1 lit. a GDPR. You can revoke this consent at any time with future effect.

7. Payments (Stripe) & Newsletter (Mailchimp)

Payment Processing via Stripe: For secure payment processing via credit/debit cards, Apple Pay, and Google Pay, we cooperate with Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). Payment data is transmitted exclusively encrypted (SSL/TLS) directly to Stripe for transaction execution (Article 6 para. 1 lit. b GDPR).

Newsletter (Mailchimp): For sending the Newsletter, we use the Mailchimp platform by The Rocket Science Group LLC (Intuit Inc., USA). Registration is exclusively via the Double-Opt-In method upon your explicit consent (Article 6 para. 1 lit. a GDPR). Intuit/Mailchimp is certified under the EU-US Data Privacy Framework. You can unsubscribe from the Newsletter at any time via the unsubscribe link in each e-mail.

8. Your Rights & Competent Supervisory Authority

In accordance with the GDPR, you have the following rights at any time:

• Right of Access (Article 15 GDPR): To obtain information about your data that we hold.
• Right to Rectification (Article 16 GDPR): To request the correction of inaccurate data.
• Right to Erasure (Article 17 GDPR): To request the deletion of your data (“right to be forgotten”), provided there are no legal retention obligations.
• Right to Restriction of Processing (Article 18 GDPR) & Portability (Article 20 GDPR).
• Right to Object (Article 21 GDPR) & Withdrawal of Consent (Article 7 para. 3 GDPR).

To exercise your rights, you can contact us directly at: info@terra-tree.com.

Competent Supervisory Authority: You also have the right to lodge a complaint with the competent data protection authority of the state of Hesse in Germany:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden / Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
Website: https://datenschutz.hessen.de