For the purposes of the General Data Protection Regulation (GDPR) and relevant German data protection laws (including the Federal Data Protection Act – BDSG), the data controller responsible for the processing of your personal data is:
Website / Controller: www.retrofitflow.com
Brand Name: Retrofitflow
Address: Grambker Heerstraße 93 A, 28719 Bremen, Germany
Contact Email: pipes@retrofitflow.com
Phone: +49 421649280
Identity Data: Includes your full name and title.
Contact Data: Includes your service location address, billing address, email address, and telephone number.
Transaction and Booking Data: Includes details concerning your appointment bookings, selected on-site service packages, deposit payments, and billing records.
Technical and Usage Data: Includes your Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform data collected automatically when you browse our Website.
Performance of a Contract (Article 6(1)(b) GDPR): We process your identity, contact, and booking details to manage service appointments, deliver on-site pipe removal and renovation services, coordinate schedules, and fulfill pre-contractual requests.
Compliance with Legal Obligations (Article 6(1)(c) GDPR): We retain accounting records, invoices, and transaction details to comply with statutory retention periods mandated by German commercial and tax laws (e.g., Handelsgesetzbuch – HGB and Abgabenordnung – AO).
Legitimate Interests (Article 6(1)(f) GDPR): We process technical data to secure our Website, prevent unauthorized access or misuse, and ensure operational stability.
Payment Processor: Stripe Payments Europe, Ltd., operating under strict PCI-DSS security standards.
Data Processing Purpose: Payment execution, fraud prevention, and risk management.
Legal Basis: Performance of a contract (Article 6(1)(b) GDPR) and compliance with legal obligations.
For further information regarding Stripe’s privacy practices and data handling, please review their privacy policy directly.
Contractual and Transaction Records: In accordance with German commercial and tax regulations (Section 257 HGB and Section 147 AO), commercial letters, invoices, booking records, and associated transaction data are retained for 10 years.
Communication and Inquiry Records: General customer inquiries and correspondence that do not result in a formal contract are retained for 12 months following the final communication, unless ongoing legal obligations require a longer storage period.
Technical and Log Data: Automatically collected server log files and technical usage data are securely deleted or anonymized no later than 30 days after collection, unless required for investigating security incidents.
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are implemented in compliance with GDPR requirements, such as the European Commission’s Standard Contractual Clauses (SCCs).
Access: Request confirmation as to whether your data is processed and obtain a copy of your personal data.
Rectification: Request correction of inaccurate or incomplete personal data.
Erasure: Request the deletion of your personal data under specific statutory conditions (such as when data is no longer necessary for the purposes collected).
Restriction of Processing: Request the temporary suspension of data processing under specific circumstances.
Data Portability: Request the transfer of your data to you or a designated third party in a structured, commonly used format.
Objection: Object to the processing of your data when based on legitimate interests.
Withdrawal of Consent: Withdraw any previously granted consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us directly at pipes@retrofitflow.com. Furthermore, you have the right to lodge a complaint with a competent supervisory authority, such as the relevant data protection authority in Germany.
