Privacy Policy (GDPR)
Privacy Policy
Version 2.1 - In compliance with EU Regulation 2016/679 (GDPR).
1. Data Controller
The data controller is Weedo Lifestyle & Media GmbH.
Address: Machtlfinger Str. 21, 81379 Munich
Email: info@house-of-seeds.de
Phone: +49 89 30707996
2. Types of Data Collected
We collect and process the following categories of data:
- Identification Data: First name, last name, date of birth (for age verification).
- Contact Data: Shipping address, email address, phone number.
- Financial Data: Payment information securely handled by our providers (Stripe/PayPal).
- Technical Data: IP address, browsing data, cookies (see Cookie Policy).
3. Purposes and Legal Bases
We process your data for:
- Contract Execution: To process and ship the order (Art. 6.1.b GDPR).
- Legal Obligations: For tax invoicing and fraud prevention (Art. 6.1.c GDPR).
- Legitimate Interest: For site security and service improvement.
- Consent: For sending newsletters and personalized marketing (Art. 6.1.a GDPR).
4. Recipients and Third Parties
Data is never sold to third parties. It is shared exclusively with necessary partners:
| Category | Entity | Purpose |
|---|---|---|
| Platform | Shopify Inc. | Hosting and e-commerce management |
| Payments | Stripe / PayPal | Secure transactions |
| Logistics | DHL / UPS / Poste | Package delivery |
| Marketing | Klaviyo / Shopify Mail | Promotional communications |
5. Retention Period
- Tax data: 10 years (legal requirement).
- Marketing data: until consent is withdrawn (maximum 24 months from last interaction).
6. Your Rights (Art. 15-22 GDPR)
You have the right to access your data, request correction, deletion ("right to be forgotten"), restriction, or portability. You also have the right to object to automated decisions (Art. 22). To exercise your rights, write to info@house-of-seeds.de. You may file a complaint with the Privacy Authority (www.garanteprivacy.it).