1. General Information and Data Controller
This Privacy Policy outlines how windowshinecrew processes personal data in compliance with the General Data Protection Regulation (GDPR) and relevant German data protection laws, including the Federal Data Protection Act (BDSG).
The data controller responsible for the processing of personal data on www.windowshinecrew.com is:
- Brand: windowshinecrew
- Address: Königstraße 10C, 70173 Stuttgart, Germany
- Email: cleaning@windowshinecrew.com
- Phone: +49 8967846723
2. Collection and Processing of Personal Data
We collect and process personal data strictly when provided voluntarily by you—such as when communicating with us via email, telephone, or through our booking forms—or when data is automatically generated during your visit to our website (e.g., technical log data necessary for website delivery and security).
3. Payment Processing via Stripe
To securely process online payments and deposits, we integrate payment services provided by Stripe. When you make a payment on www.windowshinecrew.com, your payment details (such as card data, billing address, and transaction amounts) are transmitted directly to Stripe to process the transaction.
Stripe processes this data as an independent data controller or processor in accordance with its own privacy policy and regulatory obligations. For details regarding Stripe’s data handling practices, please refer to the official privacy documentation provided on Stripe’s website.
4. Data Retention Periods
We store personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory retention obligations mandated by German law (such as the German Commercial Code – HGB, and the German Fiscal Code – AO).
- Contractual and Transactional Data: Financial records, invoices, and associated correspondence are retained for statutory retention periods of up to ten (10) years.
- General Inquiries and Communication Records: Data collected from general customer inquiries without a subsequent contract is retained for a duration of twelve (12) months, unless a longer statutory obligation applies.
- Technical Log Data: Server logs and technical access data are generally erased automatically within thirty (30) days, unless required for investigating security incidents.
5. Your Rights as a Data Subject
Under the GDPR, you possess the following rights regarding your personal data:
- Right of Access: You have the right to request confirmation as to whether or not your personal data is being processed, and access to specific information.
- Right to Rectification: You have the right to obtain the rectification of inaccurate personal data concerning you.
- Right to Erasure: You have the right to request the deletion of your personal data under specific statutory conditions.
- Right to Restriction of Processing: You have the right to restrict the processing of your data in certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a competent supervisory authority, particularly in the German federal state where you reside or where an alleged infringement took place.