Privacy

General information

Unless otherwise stated below, providing personal data is neither required by law nor contract and is not necessary to conclude a contract. You are not obliged to provide the data. Not providing it has no consequences unless otherwise specified for the processing operations described below.

Personal data means any information relating to an identified or identifiable natural person.

Controller

The controller responsible for data processing is:
Henning Schwab
Schwab-Stirnadel GmbH & Co. KG
Schwarzwaldstr. 80
66482 Zweibrücken
Deutschland

Telephone: +49 6337 9390881
Email: kontakt@exotenherz.de

Server log files and provision of the website

You can visit the publicly accessible pages of Exotenherz Pflanzenwelt without providing information about yourself. On each request, your browser sends technically necessary data to our web server, web host or IT service provider. This may include in particular the requested page or file, request date and time, amount of data transferred, notification of a successful request, browser type and version, operating system, previously visited page, IP address and requesting provider.

Processing serves to provide a secure, stable and error-free website, defend against attacks and analyse technical faults. The legal basis is Article 6(1)(f) GDPR (DSGVO). Our legitimate interest lies in the security, functionality and user-friendly provision of our online offering.

Recipients may include our web host and technical IT service providers acting as processors. Log data is deleted once it is no longer required for the stated purposes. Longer storage occurs only where a security incident needs to be investigated or legal obligations require it.

Search and plant finder

Search terms and filters are evaluated within your browser. Pflanzenwelt does not transmit them to us or combine them into a personal search profile. Loading the page files needed for search only generates the server log files described above.

Plant book and local browser storage

When you select plants for your personal plant book, we store the selected plant identifiers, their order and your choice of “Info”, “Care” or “Info & Care” in your browser’s local storage. This storage is necessary for the plant-book function you expressly request to work across page visits. It takes place pursuant to § 25 Abs. 2 Nr. 2 TDDDG. Stored information is not transmitted to our server.

The selection remains stored on your device until you remove plants or delete website data or local browser storage in your browser. You can also use the plant book without persistent storage if your browser prevents storage; your selection may then no longer be available on a later visit.

Personal text, your own photograph and PDF creation

Book title, recipient name, dedication, sender name and a voluntarily selected personal photograph are processed exclusively in your browser’s working memory. The photograph is checked and reduced there and assembled with the selected plant information into a PDF file. These personal contents are not transmitted to Pflanzenwelt’s server.

Loading plant images, font files and care information for PDF creation generates the usual server log files. The personal PDF is created locally in your browser and downloaded by you to your device. Personal entries and the photograph are removed from working memory when the page is reloaded or closed. You then manage a saved PDF yourself on your device.

Newsletter

Registration for the Pflanzenwelt newsletter has not yet been enabled. Simply displaying a form or preview does not constitute a completed newsletter registration.

Brevo has been selected for the planned email delivery. Before registration is enabled, we will set out here the registration and sending data actually processed, the service providers used, retention periods and the confirmation and unsubscribe procedures. Selecting Brevo alone does not mean that the service is already configured or activated.

For a newsletter already offered in the Exotenherz shop, the shop’s privacy information published there applies.

Contact by email

If you contact us by email, we process the data you provide, particularly your name, email address and message content, only to the extent needed to handle and answer your enquiry.

If contact serves to take pre-contractual steps, such as advice relating to a prospective purchase, or concerns an existing contract, processing is based on Article 6(1)(b) GDPR (DSGVO). In other cases it is based on Article 6(1)(f) GDPR (DSGVO), arising from our legitimate interest in handling and answering your enquiry. In this case, you may object to processing on grounds relating to your particular situation.

Data is deleted once your enquiry has been fully dealt with and no legal retention duties or legitimate reasons require further storage.

Fonts, images and external links

Fonts, page graphics and plant images are delivered from our own web server. Pflanzenwelt uses no advertising or analytics pixels, social-media plugins or embedded videos from external providers. The anonymous page-view and action counters on our own server are described in the following section.

Links to the Exotenherz shop, specialist sources, Facebook, Instagram and other external offerings only establish a connection with the respective provider when you click the link. From that point, the provider processes data under its own responsibility. Its privacy information applies.

Anonymous page-view and action counters

To improve Pflanzenwelt, we count on our own server how often a public page is viewed, plants are saved for the plant book, a book preview is opened or a PDF or HTML file is requested, and how often a link to the Exotenherz shop is clicked. Only aggregate counts by public page identifier, calendar day and hour in the Europe/Berlin time zone are stored. For published articles, this page identifier consists of their fixed public address with article ID and slug (the readable part of the article address). Other URL parameters, search terms and personal information are not included in these counters. Individual events are not stored as a history.

No statistics cookies, visit identifiers or device profiles are created for this purpose, and no statistical information is placed in local browser or session storage. Statistics are used only internally and are not passed to third parties. They contain no names, contact details, IP or MAC addresses, complete referring addresses, search terms, personal book text or photographs. Repeated requests are counted again. There is no attribution to individual visitors, recognition on return or calculation of unique visitor numbers. No external analytics service is used.

The aggregate figures are retained for up to 365 days; older daily figures are removed at the next statistics action or when the report is opened. Technically necessary server log files are separate and explained in the preceding section.

Shop links receive public campaign information for Pflanzenwelt and the respective article, without a personal visit identifier. Orders and revenue are not currently recorded in these Pflanzenwelt statistics. Once you switch to the shop, its privacy information applies to processing.

Optional additional visit analysis

If you expressly consent, we additionally count related page views as a visit and identify how many of these visits use the plant book or were active in the last five minutes. This measurement serves only our internal improvement of Pflanzenwelt. We do not pass measurement data to third parties, use an external analytics service or use identifiers for advertising or attribution to customer accounts.

The report stores no names, contact details, IP or MAC addresses, device profiles, personal book text or photographs. After consent, a random temporary identifier is placed in the browser’s session storage for the additional visit count. On the server, a secret key turns it into an identifier that changes daily. The original browser identifier is not stored there. For this server-side identifier, we store only the last activity time, technical limitation and repetition characteristics, and whether the plant book was used, not a history of individual pages visited. These identifiers are initially pseudonymous, not completely anonymous.

A new visit starts after more than 30 minutes without measured activity or on the next calendar day. Session entries from previous calendar days are removed at the next measurement or when the report is opened; only aggregate figures remain. These are retained for up to 365 days. The browser identifier stays only in session storage and is removed when consent is withdrawn. Your yes/no choice is stored for 180 days in a cookie without a personal identifier.

Consent is voluntary. All functions remain available without it; only the anonymous aggregate counters described above then operate. Under “Adjust visit analysis”, you can change your choice at any time or disable additional measurement with “Continue without additional measurement”. Additional measurement and storing or reading the identifier take place on the basis of your consent under Article 6(1)(a) GDPR (DSGVO) and § 25 Abs. 1 TDDDG. Technically necessary server log files remain separate.

Technically necessary login to the protected area

The administration area is intended only for authorised users. A technically necessary session cookie is used there for secure login and session management. Security-relevant login and modification operations are also logged. Processing is based on Article 6(1)(f) GDPR (DSGVO), arising from our legitimate interest in protecting the website, user accounts and editorial content. The session cookie is restricted to the administration area and is deleted at the end of the session or according to the browser’s security settings.

Recipients and transfers to third countries

Personal data is shared only where necessary for technical provision, where a legal obligation exists, where you have consented or where another legal basis permits sharing. Web-hosting and IT service providers may be employed as processors for technical operation.

Pflanzenwelt itself currently makes no intended transfer of personal data to a country outside the European Union or European Economic Area. When you voluntarily open external links, the respective provider may process data under its own terms.

Storage duration

Personal data is stored only as long as needed for the respective processing purpose. It is then deleted unless statutory retention periods, the establishment, exercise or defence of legal claims or other permissible reasons require further storage. Different periods and deletion criteria are described for the respective processing operations.

Rights of the data subject

Where the statutory conditions are met, you have in particular the following rights: access under Article 15 GDPR (DSGVO), rectification under Article 16, erasure under Article 17, restriction of processing under Article 18 and data portability under Article 20 GDPR (DSGVO).

Where processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

Right to complain to the supervisory authority

Under Article 77 GDPR (DSGVO), you have the right to complain to a data-protection supervisory authority if you believe your personal data is not being processed lawfully.

The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40
55020 Mainz
Deutschland

Telephone: +49 6131 8920-0
Fax: +49 6131 8920-299
Email: poststelle@datenschutz.rlp.de
Internet: www.datenschutz.rlp.de

Right to object

Where the processing of personal data listed here is based on Article 6(1)(f) GDPR (DSGVO), you have the right to object at any time with effect for the future on grounds relating to your particular situation. Following an objection, processing of the affected data ends unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims.

You may object at any time to the processing of personal data for direct marketing, without stating particular reasons.

Automated decisions

Pflanzenwelt currently uses no solely automated decision-making, including profiling within the meaning of Article 22 GDPR (DSGVO).

Date and changes

Date of this privacy notice: 10 October 2026. We adapt this privacy notice when functions, service providers used or legal requirements change.