Legal & Privacy

1. Data Controller

Neatseasonlab is the data controller responsible for processing personal data collected through www.neatseasonlab.com, in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection legislation.

Contact Details

Company Name: [XXX]

Trading Brand: Neatseasonlab

Email: infra@neatseasonlab.com

Business Address: [XXX]

Telephone: [XXX]

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact details: name, email address, telephone number and billing or delivery address.
• Order information: purchased items, order number, transaction amount, order status and related correspondence.
• Payment information: transaction references, payment status and relevant billing details. Card details are handled through the applicable payment processing arrangements.
• Technical records: IP address, browser information, access logs and information necessary to operate the website.
• Customer enquiries: information submitted through email, telephone or website contact forms.

We collect only data relevant to the purposes described in this policy.

3. Purposes and Legal Bases

We process personal data for the following purposes:

• Order processing and fulfilment: to manage purchases and fulfil contractual obligations under Article 6(1)(b) GDPR.
• Payment processing: to receive and reconcile payments and manage refunds under Article 6(1)(b) GDPR.
• Customer service: to respond to enquiries and address order-related matters under Article 6(1)(b) or Article 6(1)(f) GDPR, as applicable.
• Legal and accounting obligations: to maintain records and comply with applicable statutory requirements under Article 6(1)(c) GDPR.
• Website operation and misuse prevention: to maintain website records and address relevant operational concerns under Article 6(1)(f) GDPR, where our legitimate interests are not overridden by your rights.
• Optional cookies and communications: where consent is required, processing takes place under Article 6(1)(a) GDPR and applicable electronic privacy legislation.

Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Payment Processing by Stripe

We use Stripe as a payment processor to facilitate payment transactions for purchases made through our website.

During checkout, relevant information may be transmitted to Stripe, including your name, billing details, email address, transaction amount, order reference and payment-related information required to process the transaction.

Stripe processes personal data in accordance with its applicable contractual terms and privacy policy. Depending on the processing activity, Stripe may act as a data processor on our instructions or as an independent data controller for its own purposes, including compliance with legal obligations and the management of payment-related risks.

We do not use payment card details for purposes unrelated to the transaction. For further information about Stripe’s processing activities, please consult Stripe’s Privacy Policy.

5. Disclosure to Other Recipients

Personal data may be disclosed to the following categories of recipients where necessary and lawful:

• Stripe and relevant payment service providers.
• Delivery and order fulfilment providers.
• Website hosting, maintenance and customer communication providers.
• Accountants, legal advisers and other professional service providers where required.
• Courts, public authorities and regulatory bodies where disclosure is required by law.

We disclose only information relevant to the applicable purpose and require service providers acting on our behalf to comply with applicable data protection obligations.

6. International Data Transfers

Where personal data is transferred outside the European Economic Area, we ensure that an applicable transfer mechanism is in place where required by the GDPR. This may include an applicable European Commission adequacy decision or appropriate safeguards, such as Standard Contractual Clauses.

Information about relevant safeguards may be requested by contacting us using the details in this policy.

7. Data Retention Periods

We retain personal data only for as long as necessary for the relevant purpose, subject to applicable statutory retention requirements.

• Customer enquiries: generally up to 3 years after the end of the calendar year in which the matter was concluded, where needed to address potential legal claims.
• Order and transaction records: retained for the applicable statutory accounting and tax periods. Depending on the record type, German law may require retention for 8 or 10 years.
• Commercial correspondence: generally retained for 6 years where the statutory retention rules apply.
• Website access and operational logs: generally retained for up to 90 days, unless a longer period is necessary to investigate an incident or comply with a legal obligation.
• Consent records: retained for as long as necessary to demonstrate compliance and address related legal claims.
• Payment records held by Stripe: retained in accordance with Stripe’s applicable retention practices and legal obligations.

When the applicable retention period expires, personal data will be erased or anonymised unless continued retention is legally required or necessary to establish, exercise or defend legal claims.

8. Cookies and Similar Technologies

Our website may use essential cookies required for functions such as maintaining a shopping basket and processing an order.

Optional analytics, advertising or other non-essential cookies will be used only where the required consent has been obtained. You may manage your preferences through the available cookie settings.

Third-party services, including payment-related services, may use cookies or similar technologies where applicable. Their processing is governed by the relevant service terms and privacy information.

9. Your Data Protection Rights

Subject to the conditions and exceptions under applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete information.
• Request erasure of personal data.
• Request restriction of processing.
• Receive certain personal data in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with a competent data protection supervisory authority.

Requests may be submitted to infra@neatseasonlab.com. We may request proportionate information to verify your identity before acting on a request.

You may also lodge a complaint with the competent supervisory authority, including the relevant German data protection authority where applicable.

10. Data Protection and Confidentiality

We apply organisational and technical measures appropriate to the nature of the personal data and the risks associated with processing. Access to personal data is limited to those who require it for relevant business purposes, subject to applicable obligations.

No method of electronic transmission or storage is entirely free from risk.

11. Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices of independent third-party websites. Please review their privacy policies before submitting personal information.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our data processing activities or applicable legal requirements. The revised version will be published on our website with an updated revision date where appropriate.

13. Contact

For questions concerning this Privacy Policy or the processing of your personal data, please contact:

Neatseasonlab

Company Name: [XXX]

Email: infra@neatseasonlab.com

Business Address: [XXX]

Telephone: [XXX]