Privacy Policy

1. Controller

The data controller for this website is:

Jacqueline Mergler
midnightplant
Pappelweg 5
51373 Leverkusen
Germany

2. Collection and Storage of Personal Data When Visiting the Website

When you visit this website, information is automatically collected by Shopify and the hosting provider and stored in server log files. This includes, in particular:

IP address,
Date and time of access,
Browser type and version,
Operating system used,
Referrer URL,
Name of the retrieved file.

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on a legitimate interest in the technical provision and security of the website.

3. Hosting and Shop System by Shopify

This website is operated via Shopify. The provider is:

Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify processes personal data to provide the online shop. This may involve the transfer of data to third countries. Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest in the economical and secure operation of the website).

Further information can be found in Shopify's privacy policy:
https://www.shopify.com/de/legal/datenschutz

4. Contact Form and Contacting Us

If you send me inquiries via the contact form or by email, your details, including the contact information you provide, will be stored for the purpose of processing the inquiry and for any follow-up questions.

Processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR.

5. Orders in the Online Shop

When you place an order via this website, personal data necessary for the execution and processing of the order will be processed. This includes, in particular:

Name,
Billing and shipping address,
Email address,
Payment data,
Order data.

Processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for the fulfillment of the contract.

Statutory retention periods remain unaffected.

6. Instagram

Functions of Instagram are integrated into this website. The provider is:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

When visiting the website, personal data may be processed through the use of Instagram functions.

Further information can be found in Instagram's privacy policy at:

https://privacycenter.instagram.com/policy

7. Cookies

This website uses cookies. Some cookies are technically necessary to provide the website correctly. Other cookies are only set with your consent.

Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. f GDPR (legitimate interest).

8. SSL or TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.

9. Rights of the Data Subjects

You have the right at any time to:

Information in accordance with Art. 15 GDPR,
Rectification in accordance with Art. 16 GDPR,
Erasure in accordance with Art. 17 GDPR,
Restriction of processing in accordance with Art. 18 GDPR,
Data portability in accordance with Art. 20 GDPR,
Object in accordance with Art. 21 GDPR,
Lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR.