Last updated: 25 September 2026

1. General Information

We take the protection of your personal data very seriously. We process your personal data in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data when you visit and use our website at https://www.the-plantasaurus.com (the “Site”).

Personal data means any information relating to an identified or identifiable natural person (e.g., name, email address, IP address).

2. Controller (Verantwortlicher)

The controller responsible for data processing on this Site is:

The Plantasaurus
Angelene Ullner
10435 Berlin
Deutschland

Phone: 030 23307554
Email: hello@the-plantasaurus.com

As a sole proprietor (Einzelunternehmer), I am personally responsible for data processing.

3. Data Protection Officer

I am not required to appoint a data protection officer under Art. 37 GDPR. For data protection matters, you can contact me directly using the contact details above.

4. Types of Data We Process and Purposes

4.1 Server Log Files

When you visit the Site, your browser automatically transmits certain information to our hosting provider (Squarespace). This information is temporarily stored in so‑called server log files.

The following data is collected automatically:

• IP address of your device

• Date and time of access

• Time zone difference to GMT

• Name and URL of the accessed page

• Amount of data transferred

• Browser type and version

• Operating system and interface

• Language and version of the browser software

• Referrer URL (the page from which you accessed our Site)

Purpose and legal basis:
This data is processed to ensure the security and stability of the Site, to detect and prevent attacks, and to optimise our web presence. The legal basis is Art. 6(1)(f) GDPR (legitimate interests in secure and functional operation).

Storage duration:
Log files are deleted as soon as they are no longer needed for the stated purposes, typically after a short period (e.g., 7–30 days), unless further storage is required for security or legal reasons.

4.2 Contact Requests (Email / Contact Form)

Our Site uses a contact form provided by Squarespace. When you submit the form, the data you enter (e.g., name, email address, message, and any additional fields you configure) is transmitted to us and stored to process your inquiry.

Data categories collected via the contact form may include:

• Name

• Email address

• Phone number (if you choose to provide it)

• Message content and any attachments (if enabled)

• IP address and timestamp of submission (processed by Squarespace for security and spam prevention)

We may also be contacted via the email address provided in the Impressum. In that case, the data you send by email (e.g., name, email address, message content) is stored and processed.

Purpose and legal basis:
Processing is necessary to respond to your inquiry and, where applicable, to prepare or perform a contract (e.g., plant consulting services). The legal basis is:

• Art. 6(1)(b) GDPR if the contact relates to the initiation or performance of a contract;

• otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to your request).

If you give explicit consent for a specific purpose (e.g., follow‑up communication or storage beyond what is necessary), the legal basis is Art. 6(1)(a) GDPR.

Storage duration:
Your data will be deleted once your request has been fully processed and there are no further legal retention obligations. Statutory retention periods (e.g., under the German Commercial Code (HGB) or Tax Code (AO)) may require us to keep certain data for up to 10 years.

4.3 Hosting by Squarespace

Our website is hosted by Squarespace, Inc. (and/or its affiliates), which provides the technical infrastructure for the Site.

When you visit the Site, Squarespace processes certain data on our behalf (e.g., IP address, log files, form submissions) as a processor under Art. 28 GDPR. We have concluded a data processing agreement with Squarespace to ensure compliance with GDPR requirements.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure, reliable website) in conjunction with Art. 28 GDPR.

International transfers:
Squarespace may transfer data to servers outside the European Economic Area (EEA). In such cases, Squarespace relies on appropriate safeguards such as the EU Standard Contractual Clauses to ensure an adequate level of data protection.

5. Cookies and Similar Technologies

Our Site uses only technically necessary cookies and similar technologies that are essential for the functioning of the Site (e.g., session management, security). These do not require your consent under German law.

We do not currently use:

• Tracking or analytics cookies (e.g., Google Analytics)

• Advertising or marketing cookies

• Third‑party tracking pixels

If we introduce any non‑essential cookies in the future, we will inform you and, where required, obtain your consent via a cookie banner.

6. Disclosure of Data to Third Parties

We do not sell or rent your personal data.

We may share your data with:

• Service providers acting as processors on our behalf (e.g., Squarespace for hosting, email providers for communication). These providers are contractually bound to process data only according to our instructions and in compliance with GDPR.

• Authorities, if we are legally obliged to do so (e.g., tax authorities, law enforcement).

Beyond this, we only transfer data if you have given explicit consent or if it is necessary to perform a contract with you.

7. Data Retention

We store personal data only for as long as necessary to fulfil the stated purposes or as required by law.

In particular:

• Server log files: deleted after a short period (typically 7–30 days), unless needed for security or legal reasons.

• Contact data: deleted after your request is fully handled, unless statutory retention obligations apply (e.g., under German commercial or tax law, up to 10 years for certain business correspondence).

After the retention period expires, the data is routinely deleted unless further processing is required for legal claims or statutory obligations.

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You may request confirmation as to whether and which personal data we process about you, and obtain a copy.

• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.

• Right to erasure (Art. 17 GDPR): You may request deletion of your data, subject to legal exceptions (e.g., retention obligations).

• Right to restriction of processing (Art. 18 GDPR): You may request that we limit the processing of your data under certain conditions.

• Right to data portability (Art. 20 GDPR): You may receive your data in a structured, commonly used, machine‑readable format and, where technically feasible, request transmission to another controller.

• Right to object (Art. 21 GDPR): You may object to processing based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.

• Right to withdraw consent (Art. 7(3) GDPR): If processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise these rights, please contact us using the details in section 2.

9. Right to Lodge a Complaint

If you believe that our processing of your data violates data protection law, you have the right to lodge a complaint with a supervisory authority.

In Germany, you can contact the Berlin Data Protection Authority:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin
Deutschland
Website: https://www.datenschutz-berlin.de

You may also contact the supervisory authority in the EU member state where you reside or work.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page will be revised accordingly. We recommend reviewing this page periodically.

11. Contact

If you have any questions about data protection or this Privacy Policy, please contact:

The Plantasaurus
Angelene Ullner
10435 Berlin
Deutschland

Email: hello@the-plantasaurus.com