Privacy Policy

1. Controller

The controller for the data processing on this website is:

Radiant Garden e. K.
Owner: Romario Muza
Am Heilbrunnen 50
72766 Reutlingen
Germany
Email: info@radiantgarden.io

We are not required to appoint a data protection officer.

2. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers located in Germany (EU). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

When you open the site, the web server automatically processes technically necessary data transmitted by your browser:

• IP address
• date and time of access
• page or file requested
• volume of data transferred
• browser type and operating system (user agent)

This data is required to deliver the site and to keep it stable and secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and uninterrupted operation). This data is not merged with any other data source. The log files are deleted automatically after 14 days at the latest.

3. Web analytics with OpenPanel

This website uses OpenPanel, a web analytics service, to evaluate the use of the site statistically and to improve what we offer. OpenPanel works without cookies and without cross-site recognition. No data is collected that would allow individuals to be identified directly.

Recognition is cookie-free and relies on an identifier calculated on the server (a hash of the IP address, the browser identification and a key that changes daily). No device fingerprinting takes place, and no persistent identifier is stored on your device.

The following in particular is recorded:

• pages requested and page views
• approximate origin (derived from the IP address, which is not stored permanently)
• device type, browser and operating system used
• outgoing links clicked
• visibility of individual page sections and scroll depth

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in data-minimising, cookie-free audience measurement. The analytics service is operated by OpenPanel AB, Sankt Eriksgatan 100, 113 31 Stockholm, Sweden, as a processor; a data processing agreement pursuant to Art. 28 GDPR is in place with the provider. The analytics data is stored on servers of Hetzner Online GmbH in Germany and deleted after 24 months. Backups remain within the European Union.

To load the analytics script and to transmit the events, your browser calls the domain openpanel.dev. These public endpoints sit behind Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, acting as a content delivery network and protective layer. In doing so, Cloudflare processes the data arising in transit, in particular your IP address and details of the request. Servers within the European Union are used for this. Access from the United States cannot be ruled out entirely; any such transfer is based on the European Commission's standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

You may object to the processing of your data for analytics purposes at any time with effect for the future (Art. 21 GDPR). To do so, please contact us at the address given above. This website also honours the “Do Not Track” (DNT) and “Global Privacy Control” (GPC) signals automatically. If either signal is enabled in your browser, no analytics take place.

4. Storage on your device

This website does not set any cookies.

If you have enabled “Do Not Track” or “Global Privacy Control” in your browser, we show a short notice once per browser session telling you that we honour that signal. So that the notice does not reappear on every page view, the site stores a single entry in your browser's session storage for this purpose. The entry contains no personal data, applies only to the current browser tab and is deleted when that tab is closed. It is strictly necessary in order to provide this function within the meaning of § 25(2) no. 2 TDDDG and therefore does not require consent.

5. Contacting us

If you contact us by email, we process the information you provide in order to handle your enquiry. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for contract-related enquiries. The data is deleted once it is no longer required for that purpose.

6. Contact form

One contact form is available on this website. Submissions go to our own endpoint on the infrastructure named in section 2. No service provider outside the host named there is involved.

The following is transmitted:

• name and email address
• optionally, company and your message
• the page language you selected, so that we can reply in the right language

We process this data in order to handle your enquiry and to get in touch with you. The legal basis is Art. 6(1)(b) GDPR where the enquiry serves to initiate or perform a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data is deleted once it is no longer required for that purpose and no statutory retention obligations prevent deletion.

Providing the data is voluntary, but necessary in order to answer you: without it we cannot respond to your enquiry. There is no statutory or contractual obligation to provide it.

To prevent spam, the form contains a field invisible to you that only automated scripts fill in. If it is filled in, we discard the submission without storing it.

7. Appointment booking

We use Odoo's appointment booking to arrange meetings. The “Book an appointment” button is a plain link: no data is transmitted to Odoo and no content is loaded from there unless you click it. Only when you click it do you leave this website.

On the booking page we process the data you provide in order to arrange, confirm and hold the appointment:

• name and email address
• where applicable, phone number, company and your message
• the appointment slot and time zone you selected

The legal basis is Art. 6(1)(b) GDPR where the appointment serves to initiate or perform a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in straightforward scheduling). Providing the data is voluntary; without it the appointment cannot be arranged. You can alternatively reach us by email at any time.

The booking page is operated by Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium, as a processor; a data processing agreement pursuant to Art. 28 GDPR is in place with the provider. When you open the booking page, Odoo sets a strictly necessary session cookie as well as a cookie storing the language you selected. The appointment data is deleted once it is no longer required for that purpose and no statutory retention obligations prevent deletion.

8. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as a right to object (Art. 21). To exercise them, please contact us at the address given above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

9. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.