Picnicstoragebasket is operated by Citrus Basket Basic GmbH. This privacy policy outlines how we collect, use, store, and process personal data when you visit www.picnicstoragebasket.com or make a purchase through the site.
Citrus Basket Basic GmbH acts as the data controller regarding personal data processed during the operation of this website and the sale of products.
- Data Controller
Company: Citrus Basket Basic GmbH
Brand: Picnicstoragebasket
Email: pavilion@picnicstoragebasket.com
Phone: +49 81063778830
Website: www.picnicstoragebasket.com
Customers may contact us via the email address above regarding any privacy-related questions.
- Personal Data We Collect
Depending on how you use our website, we may collect the following categories of personal data:
Name and contact details;
Billing and shipping addresses;
Email address;
Phone number;
Order details and purchase history;
Information provided when contacting customer service;
Payment and transaction-related information;
Website usage information (where applicable);
Information necessary to process customer requests and orders.
We collect only the information necessary for the relevant processing purposes.
- How We Use Personal Data
Personal data may be processed for the following purposes:
Processing and managing orders;
Arranging delivery of purchased products;
Communicating with customers regarding orders;
Responding to customer inquiries;
Processing returns and refunds (where applicable);
Maintaining transaction and accounting records;
Complying with applicable legal and regulatory obligations;
Establishing, exercising, or defending legal claims when necessary;
Managing and improving website operations and customer service.
We will not process personal data for purposes incompatible with those described in this privacy policy, unless permitted or required by applicable law.
- Legal Basis for Processing Personal Data
Depending on the circumstances, Citrus Basket Basic GmbH processes personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):
Performance of a contract — GDPR Article 6(1)(b)
When data processing is necessary to process orders, manage purchases, or provide customer service related to the contractual relationship. Legal Obligation — GDPR Article 6(1)(c)
When processing is necessary for compliance with applicable accounting, tax, record-keeping, or other legal obligations.
Legitimate Interests — GDPR Article 6(1)(f)
When processing is necessary for legitimate business purposes (such as maintaining business records, handling inquiries, protecting legitimate interests, and managing the website), provided that such interests are not overridden by the rights and interests of the individual.
Consent — GDPR Article 6(1)(a)
When specific processing activities require consent, personal data will be processed based on the consent provided.
Where processing is based on consent, such consent may be withdrawn at any time. Withdrawing consent does not affect the lawfulness of processing activities carried out prior to the withdrawal.
- Payment Processing
Payments made through this website are processed by Stripe.
Stripe may process personal data and transaction data necessary to facilitate payment transactions, including relevant payment details, transaction information, and information required for payment administration.
Except as permitted by applicable law, Citrus Basket Basic GmbH will not use customers’ payment information for purposes unrelated to the relevant transaction.
Stripe processes personal data in accordance with its own privacy policy and applicable data protection requirements. Customers may consult Stripe’s privacy policy for further information on how Stripe processes personal data.
- Sharing of Personal Data
Personal data may be disclosed when necessary to provide services, fulfill orders, process payments, comply with legal obligations, or manage business operations.
Depending on the circumstances, relevant information may be shared with the following parties:
Stripe (for payment processing);
Delivery and fulfillment service providers (where necessary to complete orders);
Professional advisors and service providers (when required for legitimate business purposes);
Public authorities or other recipients (where disclosure is required by law).
We do not sell customers’ personal data.
- International Data Processing
If service providers process personal data outside the European Economic Area (EEA), such processing will be conducted in accordance with applicable data protection requirements; appropriate safeguards will be implemented where necessary.
Relevant safeguards may include: adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful transfer mechanisms recognized under applicable data protection laws.
- Data Retention
Citrus Basket Basic GmbH retains personal data only for as long as necessary to achieve the purposes for which the data was collected, or as required by law.
Consequently, different categories of information may be subject to different retention periods.
Order and Customer Records
Information related to completed orders may be retained for the period necessary to manage the contractual relationship, handle customer inquiries, returns, and legal matters, and comply with applicable statutory obligations.
Accounting and Tax Records
Information contained in invoices, accounting records, and other documents subject to statutory record-keeping requirements will be retained for the applicable statutory periods.
Under current German regulations, the retention period for certain accounting records is eight years, while other commercial and tax records may be subject to retention periods of six or ten years, depending on their legal classification.
The start and end dates of applicable retention periods are determined in accordance with relevant German statutory requirements.
Customer Communication Records
Records of customer correspondence/communications may be retained for a reasonable period necessary to handle inquiries, maintain appropriate business records, or establish, exercise, or defend legal claims.
Website and Technical Records
Website-related records collected by us will be retained for a period reasonably necessary to fulfill relevant operational, administrative, or legal purposes.
Upon the expiration of the retention period, personal data will be deleted or otherwise processed in accordance with applicable data protection requirements, unless continued retention is required or permitted by law.
9. Data Minimization
Citrus Basket Basic GmbH collects and processes personal data only to the extent necessary for relevant business or legal purposes.
When information is no longer required and there is no relevant statutory retention obligation, it will be deleted or otherwise processed in accordance with applicable data protection requirements.
- Cookies and Similar Technologies
Our website may use cookies and similar technologies for purposes such as website functionality, preference settings, session management, and website administration.
Where applicable law requires consent, the relevant cookies are used only in compliance with such consent requirements.
Information regarding cookies is available via the website’s cookie settings or cookie notice.
- Data Subject Rights
In accordance with the relevant provisions of the GDPR, individuals may have the following rights regarding their personal data:
The right to request access to personal data;
The right to request the correction of inaccurate personal data;
The right to request the deletion of personal data, subject to applicable legal requirements;
The right to request the restriction of the processing of personal data, subject to applicable legal requirements;
The right to obtain personal data in a structured, commonly used, and machine-readable format, where applicable;
The right to object to specific processing activities;
The right to withdraw consent where processing is based on consent.
The exercise of the aforementioned rights is subject to the conditions and limitations prescribed by applicable law. In particular, a request for deletion may not apply if legal obligations require the continued retention of the data.
- Exercising Your Rights
To submit a privacy-related request, please contact:
Phone: +49 81063778830
Email: pavilion@picnicstoragebasket.com
Before responding, we may request the information necessary to verify the identity of the person making the request.
- Right to Lodge a Complaint
If an individual believes that the processing of their personal data violates applicable data protection laws, they have the right to lodge a complaint with the competent data protection supervisory authority.
- Data Protection and Business Records
Citrus Basket Basic GmbH maintains appropriate organizational procedures for handling customer information and business records.
Personal data is accessed and processed only for relevant business, contractual, or legal purposes.
Payment-related information processed via Stripe is subject to Stripe’s applicable processing arrangements and privacy practices.
- Changes to This Privacy Policy
This Privacy Policy may be updated as necessary to reflect changes to our website, business operations, legal requirements, or data processing activities.
The latest version will be published on this page, indicating the date of the update.
- Contact Information
If you have questions regarding this Privacy Policy or Citrus Basket Basic GmbH’s processing of personal data, please contact: