Privacy policy

Data controller

Silvio Lindstedt und Maik Gräfendorf GbR
Pappelweg 27, 39576 Stendal, Germany
[email protected]

Access data when visiting the website

When you visit this website, our hosting provider automatically collects technical access data (e.g. IP address, date/time, page requested), as is technically necessary to operate a web server. This data is used exclusively to ensure stable, secure operation and is not combined with any other data source. We do not use analytics or tracking tools, and no cookies for marketing or statistics purposes.

Beta waitlist (double opt-in)

When you sign up for the WurzelLotse beta, we process the following data:

• Email address
• selected segment (balcony, garden, or both), if provided
• the timestamp of your consent and — after confirmation — the confirmation timestamp
• a cryptographically hashed version of your IP address (not the IP address itself), used to prevent abusive repeat signups

We process this data to maintain the waitlist and to inform you once the beta starts. For legal reasons (German UWG § 7(2) no. 3), every signup is confirmed via double opt-in: after signing up, you receive an email with a confirmation link. Your signup is only complete once you click it; we never contact unconfirmed addresses further, and they are deleted automatically once the confirmation window expires.

The legal basis is your consent (Art. 6(1)(a) GDPR); proof of the double opt-in confirmation and the abuse-prevention IP hash rely on our legitimate interest (Art. 6(1)(f) GDPR). We use our hosting provider, netcup GmbH, as a data processor to send confirmation and update emails; we do not share your data with any other third party.

We retain your data until you withdraw your consent, or until the beta phase ends and further storage is no longer necessary. You can withdraw your consent at any time by emailing the contact address above; we will delete your data promptly.

Your rights

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• request correction of inaccurate data (Art. 16 GDPR)
• request erasure of your data (Art. 17 GDPR)
• request restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)

To exercise these rights, contact us at the address above. You also have the right to lodge a complaint with a data protection supervisory authority.