Tree Planting Tour 2025 – Secure your spot now: Learn more: Learn more

Privacy Policy

Welcome to our website. We are very pleased about your interest in our company. Our privacy policy explains the nature, scope, and purpose of the collection and processing of personal data when visiting and using our online presence, the associated websites, functions, and contents, as well as external online presentations.

Our privacy policy is based on terms used by the European General Data Protection Regulation (GDPR) and the new Federal Data Protection Act (BDSG-new).

§ 1 Information about the collection of personal data

  1. Personal data refers to all data that can be attributed to you personally, e.g., name, address, email addresses, user behavior.
  2. The responsible party according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is PLANT-MY-TREE®, Managing Director: Sören Brüntgens, Amselstr. 5, 45134 Essen, Tel: +49 (0) 20830675805, Email: info@plant-my-tree.de (see our imprint).
  3. When contacting us via email or a contact form, the data you provide (your email address, possibly your name and phone number) will be stored by us to answer your questions. The legal basis for this is Art. 6 para. 1 lit. b) GDPR. The data collected in this context will be deleted when they are no longer necessary for storage or their processing will be restricted if legal retention obligations exist.
  4. If we rely on commissioned service providers for certain functions of our offering or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the defined criteria for the storage duration.
  5. You can contact our data protection officer as follows: Prof. Dr. Hans-Hermann Dirksen, LIEBENSTEIN CONFIDENTIAL GmbH, Eschersheimer Landstr. 351, 60320 Frankfurt am Main, Phone: +49 69 2729-5921, Fax +49 69 2729-5923, Email: mail@liebenstein-confidential.de

§ 2 Your Rights

  1. You have the following rights with regard to your personal data:
  1. According to Art. 15 GDPR, the right to request confirmation as to whether the relevant data is being processed and to request information about this data, as well as further information and a copy of the data.
  2. According to Art. 16 GDPR, the right to request the completion of your data or the correction of incorrect data concerning you.
  3. According to Art. 17 GDPR, the right to request that the relevant data be immediately deleted, or alternatively, according to Art. 18 GDPR, the right to request the restriction of the processing of the data.
  4. According to Art. 20 GDPR, the right to request that the data you have provided be received by you in a structured, commonly used, and machine-readable format and to request its transmission to other responsible parties.
  5. According to Art. 77 GDPR, the right to file a complaint with the competent supervisory authority.

§ 3 Collection of personal data when visiting our website

  1. When using the website for informational purposes only, i.e., when you do not register or provide us with any other information, we only collect the personal data that your browser transmits to our server.
  2. When you want to view our website, we collect the following data, which are technically necessary for us to display the website and ensure its stability and security (the legal basis is Art. 6 para. 1 S. 1 lit. f) GDPR):
  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

§ 4 Cookies

  1. In addition to the data mentioned above, cookies will be stored on your computer when you use our website. Cookies are small text files that are assigned to your browser and stored on your hard drive, through which specific information flows to the entity setting the cookie (here by us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the overall internet offering more user-friendly and effective.
  2. Use of cookies:
  1. This website uses the following types of cookies, the scope and functionality of which are explained below:
  2. Transient cookies (see b)
  3. Persistent cookies (see c).
  4. Transient cookies are automatically deleted when you close the browser. This includes session cookies, which store a session ID, allowing different requests from your browser to be assigned to the same session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.
  5. Persistent cookies are automatically deleted after a predetermined duration, which can vary depending on the cookie. You can delete cookies in your browser’s security settings at any time.
  6. The legal basis for processing personal data using technically necessary cookies is Art. 6 para. 1 lit. f) GDPR. The legal basis for processing personal data using cookies for analysis purposes and ad control or evaluation is § 25 para. 1 TTDSG or Art. 6 para. 1 S. 1 lit. a) GDPR.
  7. You can configure your browser settings according to your preferences, such as rejecting third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.

§ 5 Additional Functions and Services of Our Website

  1. In addition to using our website for informational purposes, we offer various services that you can use if you are interested. For this, you will generally need to provide additional personal data, which we will use to provide the respective service, and for which the previously mentioned principles of data processing apply.
  2. The personal data you enter will be collected and stored exclusively for internal use by the responsible party and for its own purposes. The responsible party may transfer data to one or more service providers, for example, a courier service, who will also use the personal data solely for internal purposes, attributable to the responsible party.
  3. By registering on the website of the responsible party, the IP address assigned to the data subject by the Internet Service Provider (ISP), the date, and the time of registration are also stored. The storage of this data is necessary to prevent misuse of our services, and these data may be used, if necessary, to clarify any criminal offenses. Therefore, the storage of this data is necessary to secure the responsible party. This data will not be passed on to third parties unless there is a legal obligation to do so or the transfer serves criminal prosecution.
  4. We may use external service providers to process your data. If we disclose, transmit, or grant access to your data to other persons and companies (processors or third parties), this will only occur on the basis of a legal permission (e.g., if the transfer of data to third parties, such as payment service providers, is required for contract fulfillment under Art. 6 para. 1 lit. b) GDPR), if you have consented, if there is a legal obligation, or based on our legitimate interests (e.g., when using agents, web hosts, etc.).
  5. If we commission third parties to process data based on a "data processing agreement," this will be done in accordance with Art. 28 GDPR. These service providers are carefully selected and commissioned by us, bound to our instructions, and regularly monitored.
  6. Furthermore, we may share your personal data with third parties if participation in actions, contests, contracts, or similar services is offered jointly with partners. You will receive more detailed information about this when providing your personal data or below in the description of the offer.
  7. If we process data outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries), or if this happens within the context of the use of third-party services or disclosure/transmission of data to third parties, this will only occur if it is necessary to fulfill our (pre-)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Otherwise, we will process or have data processed in a third country only if the conditions of Art. 44 et seq. GDPR are met.

§ 6 Legal Basis for Processing

  1. Art. 6 para. 1 S. 1 lit. a) GDPR serves as the legal basis for processing operations where we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the fulfillment of a contract to which the data subject is a party, as is the case for processing operations required for the delivery of goods or provision of other services or counterservices, the processing is based on Art. 6 para. 1 S. 1 lit. b) GDPR.
  2. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example, in cases of inquiries about our products or services.
  3. If our company is subject to a legal obligation requiring the processing of personal data, such as for tax obligations, the processing is based on Art. 6 para. 1 lit. c) GDPR.
  4. In some cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. For example, this would apply if a visitor to our premises were injured and their name, age, health insurance data, or other vital information needed to be transferred to a doctor, hospital, or other third parties. In this case, the processing would be based on Art. 6 para. 1 lit. d) GDPR.
  5. Additionally, processing operations may be based on Art. 6 para. 1 lit. f) GDPR. This legal basis applies to processing operations not covered by the aforementioned legal bases if the processing is necessary to safeguard the legitimate interests of our company or a third party, provided the interests, fundamental rights, and freedoms of the data subject do not outweigh them. Such processing operations are allowed because they are specifically mentioned by the European legislator, who argued that a legitimate interest might exist if the data subject is a customer of the responsible party (Recital 47 sentence 2 GDPR).
  6. If the processing of personal data is based on Art. 6 para. 1 lit. f) GDPR, our legitimate interest is the conduct of our business for the benefit of the well-being of all our employees and shareholders.

§ 7 Objection or Withdrawal Against the Processing of Your Data

  1. If you have given consent for the processing of your data, you can withdraw it at any time. Such withdrawal does not affect the lawfulness of the processing of your personal data before you expressed the withdrawal to us.
  2. If we base the processing of your personal data on a legitimate interest, you can object to the processing. This is the case if the processing is not necessary for the fulfillment of a contract with you, as described in the subsequent descriptions of the functions. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as carried out by us. In case of your justified objection, we will review the situation and either stop or adjust the data processing or show you our overriding legitimate reasons for continuing the processing.
  1. Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your advertising objection using the following contact details: PLANT-MY-TREE®, Managing Director: Sören Brüntgens, Hochstraße 1, 45472 Mülheim, Tel: +49 (0) 20830675805, Email: info@plant-my-tree.de.

§ 8 Use of Blog Functions

  1. In our blog, where we publish various posts on topics related to our activities, you can leave public comments. Your comment will be published with your provided username. We recommend using a pseudonym instead of your real name. Providing a username and email address is required, all other information is optional.
  2. When you leave a comment, we will also store your IP address, which we will delete after one week. This storage is necessary to defend against liability claims in cases of potential illegal content being published. We need your email address to contact you if a third party claims your comment is unlawful. The legal grounds are Art. 6 para. 1 S. 1 lit. b) and f) GDPR. Comments will not be checked before publication. We reserve the right to delete comments if they are challenged as unlawful by third parties.

§ 9 Use of Our Portal

  1. If you wish to use our portal, you must register by providing your email address, a self-chosen password, and your freely chosen username. There is no requirement for your real name; pseudonymous use is possible. We use the so-called double-opt-in process for registration, i.e., your registration is only complete once you confirm it via a confirmation email sent to you for this purpose by clicking on the included link. If you do not confirm within 24 hours, your registration will be automatically deleted from our database. Providing the aforementioned data is mandatory, while other information may be voluntarily provided by you when using our portal.
  2. When you use our portal, we store the data necessary to fulfill the contract, including payment details, until you permanently delete your account. Additionally, we store the voluntarily provided data for the duration of your use of the portal, unless you delete it earlier. You can manage and modify all information in the secure customer area. The legal basis is Art. 6 para. 1 S. 1 lit. f) GDPR.
  3. When using the portal, your data may become accessible to other portal participants depending on the contractual service. Non-registered members will not receive any information about you. For all registered members, your username and photo will be visible, regardless of whether you have made them public. In contrast, your entire profile with the data you have made public will be visible to all members you have confirmed as personal contacts. If you make content accessible to your personal contacts that you do not send via a private message, this content may be visible to third parties, depending on whether your personal contact has granted permission. If you post in public groups, the content will be visible to all registered members of the portal.
  4. To prevent unauthorized access to your personal data, especially financial data, the connection is encrypted using TLS technology.

§ 10 Use of Our Forum

  1. Our forum can be read without requiring registration. If you wish to actively participate in the forum, you must register by providing your email address, a self-chosen password, and a freely chosen username. There is no requirement for your real name; pseudonymous use is possible. We use the so-called double-opt-in process for registration, i.e., your registration is only complete once you confirm it via a confirmation email sent to you for this purpose by clicking on the included link. If you do not confirm within 24 hours, your registration will be automatically deleted from our database.
  2. When you register for a forum account, we store all information you provide in the forum, including public posts, wall entries, friendships, private messages, etc., until you cancel your account, in order to operate the forum. The legal basis is Art. 6 para. 1 S. 1 lit. f) GDPR.
  3. If you delete your account, your public statements, especially forum posts, will remain visible to all readers. However, your account will no longer be accessible and will be marked as “[Guest]” in the forum. All other data will be deleted.
  4. The forum is also accessible via the mobile app WhatsApp for iOS/Android/Windows Phone. If you install the mobile app, the use of your data is subject to the mobile app provider. Through the mobile app, your username, password, and possibly private messages will be transferred between the forum and the mobile app, but not to the app provider's servers. The use is subject to WhatsApp’s privacy policy, WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, https://www.whatsapp.com/legal/?eea=1#privacy-policy.

§ 11 Newsletter

  1. With your consent, you can subscribe to our newsletter, which we use to inform you about our current interesting offers. The advertised goods and services are listed in the consent form.
  2. For newsletter registration, we use the so-called double-opt-in process. This means that after registering, we send you an email to the provided email address asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Additionally, we store the IP addresses you used and the times of registration and confirmation. The purpose of this process is to be able to prove your registration and, if necessary, clarify any misuse of your personal data.
  3. The only mandatory information for sending the newsletter is your email address. [The provision of other data, marked separately, is voluntary and used to address you personally.] After your confirmation, we will store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 S. 1 lit. a) GDPR.
  4. You can revoke your consent to receive the newsletter at any time and unsubscribe. You can revoke it by clicking on the link provided in every newsletter email or by sending a message to the contact details listed in the imprint.

§ 12 Newsletter – MailChimp Newsletter Service Provider

  1. The sending of newsletters is done using the service provider “MailChimp,” a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the service provider here: https://www.intuit.com/privacy/statement/. The service provider is used based on our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR and a data processing agreement according to Art. 28 para. 3 S. 1 GDPR.
  2. The service provider may use the recipient’s data in pseudonymous form, i.e., without linking it to a user, to optimize or improve its own services, e.g., to technically optimize the delivery and presentation of the newsletters or for statistical purposes. However, the service provider does not use the data of our newsletter recipients to contact them or to share the data with third parties.

§ 13 Tracking Tools

  1. The tracking measures listed below and used by us are carried out based on § 25 para. 1 TTDSG and Art. 6 para. 1 S. 1 lit. a) GDPR. We use these tracking measures to ensure a need-based design and continuous optimization of our website. On the other hand, we use the tracking measures to statistically capture the use of our website and evaluate it for the purpose of optimizing our offerings for you. These interests are considered legitimate under the aforementioned provision.
  2. The respective purposes and categories of data processing can be found in the corresponding tracking tools.

§ 14 Use of Google Analytics

  1. For the purpose of needs-based design and continuous optimization of our pages, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), hostname of the accessing computer (IP address), and the time of the server request, is transmitted to a server of Google in the USA and stored there.
  2. The information is used to evaluate the use of the website, compile reports on website activities, and provide further services related to website and internet use for market research and needs-based design of these internet pages. This information may also be transferred to third parties if required by law or if third parties process these data on our behalf.
  3. In no case will your IP address be combined with other Google data. IP addresses are anonymized so that assignment is not possible (IP masking).
  4. You can prevent the installation of cookies by adjusting your browser software accordingly; however, we point out that in this case, you may not be able to use all the features of this website in full. Furthermore, you can prevent the collection of data generated by the cookie related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively, for mobile devices, click this link to prevent the collection by Google Analytics on this website in the future (the opt-out only works in this browser and for this domain). An opt-out cookie will be placed on your device. If you delete your cookies in this browser, you must click this link again. For further information on data protection in connection with Google Analytics, you can refer to the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).
  5. Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of service: http://www.google.com/analytics/terms/de.html, Privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and Privacy Policy: http://www.google.de/intl/de/policies/privacy.
  6. The legal basis for processing personal data using Google Analytics is your consent under § 25 para. 1 TTDSG or Art. 6 para. 1 S. 1 lit. a) GDPR.

§ 16 Use of eTracker

  1. This website collects and stores data for marketing and optimization purposes using technologies from etracker GmbH (http://www.etracker.com). Usage profiles can be created from this data under a pseudonym. Cookies may be used for this. Cookies are small text files stored locally in the cache of the user's internet browser. Cookies enable the recognition of the internet browser. The data collected by the eTracker technologies is not used to personally identify the visitor of this website and is not merged with personal data about the holder of the pseudonym without their explicit consent. Data collection and storage can be objected to at any time with effect for the future.
  2. We use eTracker to analyze and continuously improve the usage of our website. Through the statistics we obtain, we can improve our offerings and make them more interesting for you as a user. The collected data is stored permanently and analyzed pseudonymously. The legal basis for using eTracker is Art. 6 para. 1 S. 1 lit. a) GDPR.
  3. Third-party information: etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg; https://www.etracker.com/de/datenschutz.html.

§ 17 Use of Jetpack/Formerly WordPress.com Stats

  1. This website uses the web analysis service Jetpack (formerly: WordPress.com Stats) to analyze the use of our website and continuously improve it. The statistics obtained allow us to enhance our offerings and make them more interesting for you as a user. Additionally, we use the system for security measures to protect the website, e.g., to detect attacks or viruses. The legal basis for using Jetpack is Art. 6 para. 1 S. 1 lit. f) GDPR.
  2. Cookies are stored on your computer for this evaluation. The collected information is stored on a server in the USA. If you prevent the storage of cookies, please note that you may not be able to fully use this website. Preventing cookie storage is possible by adjusting your browser settings or by clicking the “Click here to Opt-out” button at http://www.quantcast.com/opt-out.
  3. This website uses Jetpack with an extension that shortens the IP addresses directly after their collection to exclude personal identification.
  4. Third-party information: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA, https://automattic.com/privacy, and the third-party tracking technology provider: Quantcast Inc., 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA, https://www.quantcast.com/privacy.

§ 18 Adobe Analytics (Omniture)

  1. This website uses the web analysis service Adobe Analytics (Omniture) to analyze the use of our website and continuously improve it. The statistics obtained allow us to enhance our offerings and make them more interesting for you as a user. The legal basis for using Adobe Analytics is Art. 6 para. 1 S. 1 lit. f) GDPR.
  2. For this evaluation, cookies (as described in § 3) are stored on your computer. The collected information is stored on servers, including in the USA. If you prevent the storage of cookies, please note that you may not be able to fully use this website. Preventing cookie storage is possible by adjusting your browser settings or by clicking the “Unsubscribe” buttons at http://www.adobe.com/de/privacy/opt-out.html.
  3. This website uses Adobe Analytics (Omniture) with the settings “Before Geo-Lookup: Replace visitor’s last IP octet with 0” and “Obfuscate IP-Removed,” which shortens your IP address by removing the last octet and replaces it with a generic IP address, thus excluding personal identification.
  4. Third-party information: Adobe Systems Software Ireland Limited, Ireland, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; privacy@adobe.com; Privacy Policy: http://www.adobe.com/de/privacy/policy.html.

§ 19 Embedding YouTube Videos

  1. We have embedded YouTube videos into our online offerings, which are stored at http://www.YouTube.com and can be played directly from our website. All videos are embedded in "extended privacy mode," meaning that no data is transmitted to YouTube about you as a user unless you play the videos. Only when you play the videos, the data mentioned in paragraph 2 will be transmitted. We have no control over this data transmission.
  2. When visiting the website, YouTube receives information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in § 3 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or if no user account exists. If you are logged into Google, your data is directly associated with your account. If you do not wish to associate the data with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for advertising, market research, and/or needs-based design of its website. This evaluation is done especially (even for users who are not logged in) to deliver targeted advertising and inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, in which case you must contact YouTube to exercise this right.
  3. For more information on the purpose and scope of data collection and processing by YouTube, please refer to their privacy policy: https://www.google.de/intl/de/policies/privacy.

§ 20 Embedding Vimeo Videos

  1. Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
  2. When you visit one of our pages equipped with a Vimeo plugin, a connection is established to Vimeo's servers. This informs Vimeo which of our pages you have visited. Vimeo also obtains your IP address. This applies even if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to Vimeo's servers in the USA.
  3. If you are logged into your Vimeo account, you allow Vimeo to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your Vimeo account.
  4. For more information on how Vimeo handles user data, please refer to Vimeo's privacy policy at: https://vimeo.com/privacy. There, you will also find more information on your rights and options to protect your privacy.

§ 21 Use of Google Adwords Conversion

  1. We use Google Adwords to attract attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can determine how successful each advertising measure is based on the data from the campaigns. Our goal is to display advertisements that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.
  2. These ads are delivered by Google through so-called "Ad Servers." We use Ad Server cookies to measure certain parameters for success, such as ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (marking that the user no longer wants to be targeted). If you come to our website via a Google ad, a cookie is stored on your computer by Google Adwords. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the analysis values typically include the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (marking that the user no longer wants to be contacted).
  3. These cookies allow Google to recognize your internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was directed to this page. Each Adwords customer is assigned a different cookie. Therefore, cookies cannot be tracked across Adwords customers' websites. We do not collect or process any personal data in these advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used were particularly effective. We do not receive further data from the use of the advertising materials, and we cannot identify users based on this information.
  4. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no control over the scope and further use of the data collected by Google through the use of this tool and inform you accordingly based on our knowledge: By embedding AdWords Conversion, Google receives the information that you have called up the corresponding part of our online presence or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, the provider may collect and store your IP address.
  5. You can prevent participation in this tracking procedure in various ways: a) by adjusting your browser software settings, especially blocking third-party cookies, which means you will not receive ads from third-party providers; b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, this setting will be deleted if you delete your cookies; c) by disabling interest-based ads from providers who are part of the self-regulatory campaign "About Ads," using the link http://www.aboutads.info/choices, this setting will be deleted if you delete your cookies; d) by permanently disabling in your browsers Firefox, Internet Explorer, or Google Chrome at the link http://www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to use all the features of this offer to the fullest.
  6. The legal basis for processing your data is Art. 6 para. 1 S. 1 lit. f) GDPR. For more information on data protection at Google, please visit: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

§ 22 Webshop

  1. If you wish to place an order in our webshop, it is necessary to provide your personal data, which we need to process your order. Mandatory information required for processing the contracts is marked separately, while other details are optional. We process the data you provide for order processing. For this, we may forward your payment data to our bank. The legal basis for this is Art. 6 para. 1 S. 1 lit. b) GDPR.
  2. You can voluntarily create a customer account, through which we can store your data for future purchases. When creating an account under "My Account," the data you provide will be stored revocably. All other data, including your...
  3. We may also process the data you provide to inform you about other interesting products from our portfolio or to send you technical information via email.

§ 23 Payment Providers

  1. As part of contractual and other legal relationships, due to legal obligations or based on our legitimate interests, we offer affected individuals efficient and secure payment options, and we use additional payment service providers alongside banks and financial institutions (collectively referred to as "Payment Service Providers"). The data processed by the payment service providers includes account data, such as name and address, bank details, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, amount, and recipient-related details. This information is necessary to carry out the transactions. However, the data entered is only processed and stored by the payment service providers. This means that we do not receive any account or credit card information but only information confirming or rejecting the payment. In some cases, the payment service providers may transmit data to credit agencies. This transmission aims to verify identity and creditworthiness. We refer to the terms and conditions and the privacy policies of the payment service providers. The terms and conditions and the privacy policies of the respective payment providers apply to the payment transactions, which can be accessed within the respective websites or transaction applications. We also refer to these for further information and the exercise of cancellation, access, and other rights of the affected individuals.
  2. PayPal On our website, we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). When you choose to pay via PayPal, the payment data you enter is transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 S. 1 lit. a) GDPR (consent) and Art. 6 para. 1 S. 1 lit. b) GDPR (processing for the performance of a contract). You have the option to revoke your consent to the processing of your data at any time. A revocation does not affect the lawfulness of the data processing carried out before the revocation.
  1. Stripe We offer the option to process the payment through the payment service provider Stripe Inc., 510 Townsend St., San Francisco, CA 94103 (hereinafter "Stripe"). This corresponds to our legitimate interest in offering an efficient and secure payment method, Art. 6 para. 1 S. 1 lit. f) GDPR. In this context, we transmit the following data to Stripe, as far as necessary for the performance of the contract, Art. 6 para. 1 S. 1 lit. b) GDPR: name of the cardholder, email address, customer number, order number, bank details, credit card data, validity period of the credit card, credit card verification number (CVC), date and time of the transaction, transaction amount, name of the provider, and location. Stripe performs data processing activities in a dual role as both the data controller and the data processor. As a controller, Stripe uses your transmitted data to fulfill regulatory obligations. This corresponds to Stripe's legitimate interest under Art. 6 para. 1 S. 1 lit. f) GDPR and serves contract performance according to Art. 6 para. 1 S. 1 lit. b) GDPR. We have no influence on this process. For further information on objection and removal options regarding Stripe, please visit: https://stripe.com/privacy-center/legal
  2. Credit Card When paying by credit card (Visa/MasterCard), your entered payment data is processed according to Art. 6 para. 1 S. 1 lit. b) GDPR by SIX Payment Services AG and BS PAYONE GmbH, recorded, stored, and only passed on to the companies involved in the payment process. By using credit card payment, you accept the terms and conditions of the payment provider. We do not collect or store the payment data in this case. Further information can be found in the privacy policies of your credit card provider.
  1. Installment Payment We also offer installment payment on our website. For this, we use the service of Klarna. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). Klarna offers various payment options (e.g., installment purchase). If you choose to pay with Klarna (Klarna Checkout Solution), Klarna will collect various personal data from you. Details about this can be found in Klarna's privacy policy at the following link: https://www.klarna.com/de/datenschutz/. Klarna uses cookies to optimize the use of the Klarna Checkout Solution. The optimization of the checkout solution constitutes a legitimate interest within the meaning of Art. 6 para. 1 S. 1 lit. f) GDPR. Cookies are small text files that are stored on your device and do not cause any harm. They remain on your device until you delete them. Details on the use of Klarna cookies can be found at the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf. The transmission of your data to Klarna is based on Art. 6 para. 1 S. 1 lit. a) GDPR (consent) and Art. 6 para. 1 S. 1 lit. b) GDPR (processing for the performance of a contract). You have the option to revoke your consent to the processing of your data at any time. A revocation does not affect the lawfulness of the data processing carried out before the revocation.

§ 24 Registration, Login, and Customer Account

  1. Customers can create a customer account. During registration, customers are provided with the required mandatory information, which is processed for the purpose of providing the customer account based on contractual obligation fulfillment. The processed data includes particularly the login information (name, password, and email address). The data entered during registration will be used for the purpose of using the customer account and its purpose.
  2. Customers will be informed via email about events relevant to their customer account, such as technical changes. If customers delete their customer account, their data related to the customer account will be deleted, subject to statutory retention obligations.
  3. As part of using our registration and login functions, as well as the customer account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the interests of the users in protection from misuse and unauthorized use. The forwarding of this data to third parties does not generally occur, unless required for enforcing our claims or there is a legal obligation.

§ 25 Deletion of Data

  1. The data processed by us will be deleted or restricted in processing in accordance with Art. 17 and 18 GDPR. Unless explicitly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer necessary for the intended purpose and no legal retention obligations prevent its deletion. If the data is not deleted because it is necessary for other legally permissible purposes, its processing will be restricted. That means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax law reasons.
  2. According to legal provisions in Germany, retention occurs in particular for 6 years in accordance with § 257 para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, business correspondence, booking documents, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, booking documents, business and commercial correspondence, documents relevant for taxation, etc.).

§ 26 Data Security

  1. We use the widely-used SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser during the visit to the website. Typically, this is 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. Whether an individual page of our website is transmitted encrypted can be recognized by the closed key or lock symbol in the lower status bar of your browser.
  2. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

§ 27 Currentness and Changes to this Privacy Policy

  1. This privacy policy is currently valid and is dated April 2022.
  2. Due to the ongoing development of our website and offers or due to changes in legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed and printed at any time on the website at https://plant-my-tree.de/.

Jetzt in unter einer Stunde Klimaschutzpartner werden. Wir beraten Sie gerne und helfen Ihnen bei allen nötigen Schritten:

Vom 24. bis 31. Dezember 2024 besteht teils eine eingeschränkte Erreichbarkeit. Bitte senden Sie uns ihr Anliegen am besten per E-Mail an info@plant-my-tree.de. 

Vielen Dank für dein Verständnis und viele Grüße
Dein Team von PLANT-MY-TREE®

Verdopplungs-aktion

Vom 10.10.2023 bis 20.10.2023 verdoppeln wir jeden Baum im Klimaschutz-Paket!
Werden Sie jetzt PLANT-MY-TREE® Klimaschutz-Partner und leisten Sie ganz einfach den doppelten Beitrag.

Achtung: Schnell sein lohnt sich!
Die Aktion ist auf 10.000 Bäume begrenzt.

Liebe Kunden, liebe Partner,
aufgrund einer technischen Umstellung in unserem Shop kann es aktuell in Einzelfällen zu Problemen in der technischen Abwicklung kommen. Falls etwas nicht wie gewohnt funktioniert, gib uns bitte Bescheid. Wir helfen Dir gerne individuell weiter: info@plant-my-tree.de.

Vielen Dank für Ihr Verständnis und viele Grüße
Ihr Team von PLANT-MY-TREE®