Privacy Policy
1. Controller
Crown of the Palm UG (haftungsbeschränkt)
Rebmannsweg 3
79539 Lörrach, Germany
Email: info@crownofthepalm.de
Phone: +49 176 6871 0912
2. General information
We only process personal data of our users insofar as this is necessary to provide a functional website as well as our content and services. Processing is regularly only carried out with the user's consent or where data processing is permitted by law.
3. Legal bases for data processing
- Art. 6 (1)(a) GDPR — consent
- Art. 6 (1)(b) GDPR — contractual or pre-contractual measures
- Art. 6 (1)(c) GDPR — legal obligation
- Art. 6 (1)(f) GDPR — legitimate interest
4. Hosting
This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) on its global edge infrastructure (typically EU data centres). Technical access data is processed on the basis of Art. 6 (1)(f) GDPR. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Cloudflare is subject to the EU-US Data Privacy Framework.
5. SSL/TLS encryption
This site uses SSL/TLS encryption for security reasons.
6. Cookies
This website uses only technically necessary cookies (§ 25 (2) no. 2 TTDSG). No analytics or marketing cookies are used.
7. Contact and inquiry form
When you contact us we process your name, company, email, phone (optional), the content of your inquiry and B2B fields (country, volume, grade, port, INCO term, required certifications). Purpose: handling your inquiry and any subsequent business relationship. Legal basis: Art. 6 (1)(b) and (f) GDPR. Storage: until your inquiry is resolved, at most 6 months after last contact, subject to legal retention obligations.
8. Formspree (form processing)
The inquiry form is submitted via Formspree (Formspree, Inc., 251 Little Falls Drive, Wilmington, DE 19808, USA). A data processing agreement under Art. 28 GDPR is in place. See formspree.io/legal/privacy-policy.
9. Google Web Fonts
This site uses Google Fonts for consistent typography. On page load, your browser fetches the fonts from Google's servers (typically EU edge). Legal basis: Art. 6 (1)(f) GDPR. See policies.google.com/privacy.
10. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21), withdrawal of consent (Art. 7(3)) and to lodge a complaint with a supervisory authority (Art. 77). The competent supervisory authority is the Landesbeauftragte für den Datenschutz Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, Germany.
11. Last updated
[TO BE FILLED — month, year].