Privacy Policy

1. Overview and Data Controller

Folddryhive operates the website www.folddryhive.com (hereinafter referred to as the “Website”). We are committed to protecting your personal data in strict compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

The data controller responsible for the processing of your personal data on this Website is:

Company Name: Folddryhive

Address: Sorauer Platz 5, 02943 Weißwasser, Germany

Email: rack@folddryhive.com

Phone: +49 3022005600

2. Collection and Processing of Personal Data

We collect and process personal data only when you voluntarily provide it to us (e.g., when placing an order, contacting us, or creating an account) or when it is necessary for the performance of a contract or compliance with legal obligations.

Customer Data: We process identification and contact details (such as your name, billing address, shipping address, email address, and phone number) to process, fulfill, and ship your orders for foldable drying racks.

Legal Basis: The processing of this data is based on Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

3. Payment Processing via Stripe

To process payments securely, we integrate payment services provided by Stripe. When you make a purchase, your payment details (such as credit card information, bank details, or transaction amounts) are transmitted directly to Stripe to execute the payment transaction.

Data Controller for Payments: Stripe processes your payment data as an independent data controller or processor depending on the specific transaction context, in compliance with its own privacy standards and regulatory frameworks.

Legal Basis: The integration of Stripe is necessary for the fulfillment of the sales contract in accordance with Article 6(1)(b) GDPR.

Stripe Privacy Notice: For further details regarding Stripe’s data handling practices, please review the Stripe Privacy Policy available on their official website.

4. Data Retention Periods

We store personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the fulfillment of our contractual and legal obligations.

Tax and Commercial Retention Obligations: In accordance with German commercial and tax laws (specifically § 257 HGB and § 145 AO), accounting records, invoices, and relevant contract documents are retained for 10 years. Booking vouchers and business correspondence are retained for 6 years.

Order and Account Data: Data related to active customer accounts or pending fulfillment is retained until the relevant contractual relationship is concluded and subsequent statutory limitation periods have expired.

Deletion: Once the respective retention periods expire, the corresponding data is routinely deleted or anonymized, provided it is no longer required for contract initiation or fulfillment.

5. Your Rights as a Data Subject
   Under the GDPR, you have extensive rights regarding the processing of your personal data:

Right of Access (Article 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed, and access to such data.

Right to Rectification (Article 16 GDPR): You have the right to obtain the correction of inaccurate personal data or the completion of incomplete data.

Right to Erasure (Article 17 GDPR): You have the right to request the deletion of your personal data, provided there are no statutory retention obligations or overriding legal grounds requiring continued storage.

Right to Restriction of Processing (Article 18 GDPR): You have the right to request the restriction of data processing under specific circumstances.

Right to Data Portability (Article 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object (Article 21 GDPR): You have the right to object, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interests.

Right to Lodge a Complaint: You have the right to lodge a complaint with a competent supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.

6. Data Security

We implement technical and organizational measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security procedures are continuously reviewed and updated in accordance with technological advancements and legal requirements.

7. Updates to This Privacy Policy

We reserve the right to amend this Privacy Policy to ensure it remains compliant with current legal requirements or to reflect changes to our services. The current version published on our Website applies to your visit.