STAMMWERK

Privacy Policy

Last updated: July 31, 2026

1. Controller

The controller responsible for processing personal data on this website is:

STAMMWERK
Owner: Sören Heydel
Am Haselbusch 2
53925 Kall
Germany

Telephone: 0151 17860429
Email: soeren@heydel-haus.com

2. General Information

We process personal data exclusively in accordance with applicable data protection law, in particular the General Data Protection Regulation and applicable German data protection laws.

Personal data means any information by which a person can be identified directly or indirectly. This includes, for example, a name, address, telephone number, email address, IP address, and information contained in an enquiry.

3. Hosting via Netlify

This website is provided via Netlify. The platform provider is Netlify, Inc., USA.

When the website is accessed, technically necessary data may be processed. This may include in particular:

  • IP address
  • date and time of access
  • page or file requested
  • browser type and browser version
  • operating system
  • referrer URL
  • technical error and security information

The processing takes place to provide the website securely, reliably, and without technical errors and to prevent misuse and attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.

Netlify may also process data outside the European Economic Area, particularly in the United States. According to Netlify, it provides contractual data protection safeguards, including a Data Processing Agreement and appropriate mechanisms for international data transfers.

We must review and document the data protection terms available for our Netlify plan.

4. Enquiry Form and Netlify Forms

If you use our enquiry form, we process the information you enter. This may include:

  • selected language
  • first and last name
  • telephone number
  • email address
  • delivery location or postal code
  • private or business customer status
  • desired number of trees
  • desired tree size
  • desired delivery period
  • selected optional extras
  • message and special requirements
  • time of submission
  • technical transmission and security data

The data is processed to:

  • receive your enquiry
  • check availability and delivery options
  • answer follow-up questions
  • coordinate an appointment
  • prepare an individual quote
  • prepare or perform a subsequent contract at your request

The legal basis is Article 6(1)(b) GDPR insofar as processing is necessary to handle your enquiry or take steps prior to entering into a contract.

If a message is unrelated to a possible contract, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is handling and documenting business communications.

Form data is transmitted through Netlify Forms and made available in the Netlify dashboard. It may also be transmitted by notification to our business email address.

Submitting the form does not constitute a paid order. A contract is formed only when we send a specific offer and the customer expressly accepts it.

5. Contact by Email or Telephone

If you contact us by email or telephone, we process the data you provide to handle your request.

The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries. Other business communications are processed on the basis of Article 6(1)(f) GDPR.

6. Disclosure to Delivery Assistants

If a delivery date is agreed, the data required to carry out the delivery may be shared with a delivery assistant engaged by STAMMWERK.

This may include in particular:

  • name
  • delivery address
  • telephone number
  • delivery date and time
  • number and size of trees
  • delivery-related additional services
  • necessary information about access or the setup location

For a specific delivery, this may also include Laura Heydel.

Only data required for the respective delivery is shared. The data may be used solely to carry out that delivery.

The legal basis is Article 6(1)(b) GDPR.

7. Language Setting

The website offers a choice between English and German.

The selected language may be stored in the visitor’s browser using localStorage or a comparable technically necessary storage function. This allows the preferred language to remain selected when the website is visited again.

As a rule, only the selected language is stored and no directly identifying customer data is stored for this purpose.

The storage is necessary to provide the language function expressly requested by the visitor. The legal basis for any related processing of personal data is Article 6(1)(f) GDPR.

8. Instagram Link

Our website may contain a simple link to our Instagram profile.

As long as this is only a normal external link, displaying our website does not establish a direct connection to Instagram.

Only when you click the Instagram link do you leave our website. From that point, Instagram’s operator may process personal data in accordance with its own privacy information.

We do not embed an Instagram feed, Meta Pixel, Facebook plugin, tracking script, or similar Meta technology without a separate consent and privacy assessment.

9. External Fonts and Content

This website does not load Google Fonts or other external font services directly from third-party servers. Fonts are hosted locally.

We do not add Google Maps, YouTube embeds, analytics tools, advertising pixels, reCAPTCHA, external review widgets, chat tools, or other third-party embeds unless they have been separately assessed and, where required, blocked until consent is given.

10. Cookies and Similar Technologies

The website currently does not use analytics, marketing, or advertising cookies.

Technically necessary storage is used only to provide functions expressly requested by the visitor, such as retaining the selected language or securely transmitting the enquiry form.

Because no consent-requiring technologies are currently used, no consent banner is displayed. If analytics, marketing pixels, embedded third-party media, or other non-essential technologies are added later, a proper consent mechanism will be implemented before those technologies load and this Privacy Policy will be updated.

11. Recipients of Data

Depending on how the website is used, personal data may be transferred to the following categories of recipients:

  • Netlify as the hosting and form platform
  • our business email provider
  • delivery assistants engaged by STAMMWERK where required for a specific delivery
  • IT service providers where required for maintenance, security, or troubleshooting
  • authorities or other bodies where disclosure is legally required

Personal data is not disclosed for advertising purposes and is not sold.

12. International Data Transfers

When Netlify is used, personal data may be processed outside the European Union or the European Economic Area.

Where no adequacy decision exists, international data transfers are to be based on appropriate safeguards, in particular the standard contractual clauses published by the European Commission.

Further details must remain consistent with the Netlify contract, the current Data Processing Agreement, the Netlify Privacy Policy, and the services actually enabled in the Netlify account.

13. Retention Period

We store personal data only for as long as necessary for the relevant purpose.

Enquiry data that does not lead to a contract is generally deleted no later than twelve months after the enquiry has been conclusively handled, unless there are unresolved questions, claims, or other legitimate reasons for continued storage.

If a contract is formed, data may be stored for longer for contract performance and due to statutory commercial and tax retention obligations.

Netlify form entries and copies in email inboxes are reviewed regularly and deleted according to the same criteria.

14. Requirement to Provide Data

Providing the information marked as required is necessary so that we can review and answer your enquiry.

Without sufficient contact and delivery information, we may be unable to prepare a quote or arrange a delivery date.

15. Automated Decision-Making

No automated decision-making or profiling takes place.

16. Your Rights

Subject to the applicable legal requirements, as a data subject you have in particular the right to:

  • request access to your stored personal data
  • have inaccurate data corrected
  • request deletion of your data
  • request restriction of processing
  • object to processing based on legitimate interests
  • request data portability where the legal requirements are met
  • withdraw consent with effect for the future where processing is exceptionally based on consent

To exercise your rights, contact: soeren@heydel-haus.com

17. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.

For a business based in North Rhine-Westphalia, the following authority may be responsible:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia – LDI NRW

18. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, manipulation, and unauthorised access.

The website is provided exclusively over HTTPS.

Sensitive account credentials, Netlify access data, email passwords, API keys, and administrative links are never included in the public website source code.

19. Updates to this Privacy Policy

We may update this Privacy Policy if the website, the services used, or the legal requirements change.

The German version is authoritative in the event of differences in interpretation.