Privacy Policy

1. Introduction & Data Controller

This Privacy Policy outlines how www.festivesceneset.com (operated under the brand festivesceneset, located in Germany) collects, processes, and protects personal data in compliance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

For the purposes of data protection legislation, the data controller responsible for the processing of your personal information is:

• Brand Name: festivesceneset
• Website: www.festivesceneset.com
• Contact Email: scene@festivesceneset.com
• Registered Location: Germany

2. Information We Collect

We collect and process only the necessary personal data required to facilitate our custom event and festive scene decoration services. This information includes:

• Contact Information: Name, email address, telephone number, and event location details provided during communication or booking inquiries.
• Transaction Information: Details regarding service quotes, custom project specifications, and payment confirmation status.
• Technical Data: Standard server log information, IP addresses, browser types, and access timestamps collected automatically during website visits to ensure operational security.

3. Purpose & Legal Basis for Processing

Personal data is processed strictly in accordance with legal grounds established under Article 6 of the GDPR:

• Contractual Necessity: Processing is necessary for the performance of our custom service agreements, managing quotations, and coordinating project execution.
• Legal Compliance: Processing is required to fulfill statutory commercial, tax, and record-keeping obligations under German law.
• Legitimate Interests: Processing is conducted to maintain website security, prevent fraud, and ensure efficient customer communication.

4. Payment Processing via Stripe

To securely process financial transactions for our services, we utilize Stripe as our designated payment gateway and service provider.

When you make a payment, your financial details (such as credit card information or payment authorization data) are transmitted directly to Stripe. Stripe processes your data as an independent payment processor in strict adherence to PCI-DSS standards and applicable European data protection regulations. We do not store full credit card credentials on our local servers. For further details regarding Stripe’s privacy practices, please review their official privacy policy.

5. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory legal, tax, and accounting retention periods mandated by German and European legislation:

• Tax and Accounting Records: Financial transaction data, invoices, and associated project correspondence are retained for 10 years in compliance with the German Fiscal Code (Abgabenordnung – AO) and the Commercial Code (Handelsgesetzbuch – HGB).
• Commercial Inquiries & Project Communications: General inquiries, custom proposals, and communication logs that do not result in a formal contract are retained for 2 years to manage ongoing customer relations and quality assurance, after which they are securely deleted.
• Technical Log Data: Server logs and security records are automatically deleted or anonymized after 30 days, unless required longer for the investigation of specific security incidents.

6. Your Data Protection Rights

Under Chapter III of the GDPR, European residents possess specific rights regarding their personal data:

• Right of Access: You have the right to request confirmation as to whether we process your personal data and obtain a copy of such data.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request the deletion of your personal data, provided there is no overriding legal obligation requiring its retention.
• Right to Restriction & Objection: You have the right to restrict or object to the processing of your personal data under specific statutory conditions.
• Right to Data Portability: You have the right to receive your data in a structured, commonly used format.

To exercise any of these rights, please contact us via our official email address: scene@festivesceneset.com.

7. Data Security Measures

We implement appropriate technical and organisational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. While we maintain rigorous safeguards to protect information, no electronic transmission or storage method can guarantee absolute operational invulnerability.

8. Updates to This Privacy Policy

We reserve the right to amend this Privacy Policy periodically to reflect changes in regulatory requirements or our operational processes. The updated version will be posted directly on www.festivesceneset.com with an updated revision date.