Data protection

Privacy policy

Status: July 2025


1. responsible person

bluegardens AG
Augustinusstraße 11a
50226 Frechen
Germany

Managing directors authorized to represent the company: Oliver Range, Oliver Aue
E-mail: datenschutz@bluegardens.com
Phone: +49 (0) 2234 4351 436
Website: https://www.bluegardens.com

Data protection officer: If you have any questions about data protection, please contact: datenschutz@bluegardens.com

2. general information

The protection of your personal data is important to us. This privacy policy informs you in accordance with Art. 13, 14 GDPR about how we process your personal data when you use our digital garden planning platform.

Personal data is any information relating to an identified or identifiable natural person.

3 Collection and processing of personal data

3.1 When visiting the website (without registration)

Each time you visit our website, we automatically collect the following data:

  • Technical data: IP address, browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request
  • Usage data: Pages viewed, dwell time, click paths, download volume

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)
Legitimate interest: Ensuring system security, optimization of our website, detection of misuse
Storage period: 7 days, then anonymization

3.2 When making contact

When you contact us (e-mail, telephone, contact form), we process:

  • Contact details: Name, e-mail address, telephone number, address
  • Communication data: Your message, conversation content, correspondence
  • Order data: Project details, garden specifications, preferences

Legal basis: Art. 6 para. 1 lit. b GDPR (contract initiation/fulfillment) or Art. 6 para. 1 lit. f GDPR (legitimate interest)
Storage period: Until your request has been fully processed plus 3 years for warranty purposes

3.3 When using our garden planning services

We collect data for our consulting and planning services:

  • Contact details: Name, e-mail address, telephone number
  • Project information: Garden pictures, plot descriptions, planning requests
  • Consultation data: style preferences, budget ideas, desired services
  • Communication process: Inquiries, queries, appointments

Legal basis: Art. 6 para. 1 lit. b GDPR (contract initiation/fulfillment)
Storage period: Until your request has been fully processed plus 2 years for warranty purposes

3.4 Interactive consulting and AI communication

Our platform offers interactive consulting functions through specialized communication tools:

  • Conversation data: Chat messages, questions and answers, consultation history
  • Session data: session IDs, timestamps, interaction duration
  • Preferences: communication preferences, consulting topics, appointment preferences
  • Technical data: Device information, browser data for optimal display

Service providers used: External cloud providers for AI-supported communication solutions (EU and USA)

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest) or Art. 6 para. 1 lit. a GDPR (consent)
Legitimate interest: Provision of efficient customer advice, quality assurance
Storage period: 30 days, then anonymization or deletion
Right to object: At any time by e-mail to datenschutz@bluegardens.com

3.5 Online forms and file upload

We use external form service providers for various services:

Partner application form:

  • Company data: Company name, postal code, sector, range of services
  • Contact details: Name, e-mail, telephone number
  • Qualification data: specialization, references, capacities

Garden planning upload:

  • Personal data: Name, e-mail address
  • Project data: Image files, garden descriptions, planning requests
  • Metadata: File information, upload timestamp

Service provider used: Cloud-based online form services (USA/EU)
Server locations: Specialized data centers in Germany and the USA
Data transfer: Transfer to the USA on the basis of standard contractual clauses
Legal basis: Art. 6 para. 1 lit. b GDPR (contract initiation) or Art. 6 para. 1 lit. f GDPR (legitimate interest)
Legitimate interest: Efficient data collection, secure transmission, spam protection
Storage duration:

  • Partner data: Until processing plus 2 years
  • Upload data: 90 days, then transfer to internal systems or deletion
    Security: 256-bit SSL encryption (industry standard), PCI compliance, GDPR-compliant processing

3.6 Lead forwarding to partner companies

With your express consent, we will forward your data to qualified gardening and landscaping companies:

  • Data to be passed on: Name, contact details, project description, location, budget
  • Selection criteria: Regional proximity, specialization, availability
  • Partner companies: Selected, contractually obligated specialist companies in the DACH region

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Revocation: At any time by e-mail or via your user account
Storage period: Until revocation or until project completion

4. cookies and tracking technologies

4.1 Necessary cookies

We use necessary cookies for the technical operation of our website:

  • Session cookies: Maintaining the connection, login status
  • Security cookies: CSRF protection, spam prevention
  • Function cookies: language settings, layout preferences

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)
Storage period: End of session or maximum 30 days

4.2 Analysis and optimization

With your consent, we use analysis services for website optimization:

  • Usage statistics: page views, visitor duration, conversion rates
  • Technical optimization: loading times, error analysis, performance monitoring
  • Anonymization: IP addresses are shortened, no personal identification

Tools used: Specialized web analysis service providers
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Revocation: Via cookie settings or browser settings

4.3 Marketing and reach

For targeted marketing measures, we use your consent:

  • Remarketing: Ads on third-party sites for website visitors
  • Conversion tracking: measuring the success of advertising campaigns
  • Target group analysis: Anonymized visitor interests

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Revocation: at any time via cookie settings

5. Disclosure to third parties

5.1 Processor

We work together with carefully selected service providers:

  • IT service provider: hosting, cloud services, software development
  • Form services: Online forms, file upload, lead capture (USA/EU)
  • Communication tools: AI-supported advisory systems, chat functions
  • Analysis services: Web analysis, performance monitoring
  • Payment service providers: Secure processing of transactions

All processors are contractually obliged to comply with the GDPR and are regularly reviewed.

5.2 Partner companies

Lead data is only passed on to qualified partner companies with express consent. The companies are contractually obliged to treat the data in accordance with data protection regulations.

5.3 Legal obligations

In special cases, we are obliged to disclose data:

  • Official orders with a corresponding legal basis
  • Tax retention obligations
  • Prosecution measures in the event of concrete suspicion

6. international data transmission

Some of our service providers process data outside the EU/EEA:

USA transfer: For US service providers (e.g. form services, AI communication providers), we ensure an appropriate level of data protection through suitable guarantees (standard contractual clauses, adequacy decisions).

Legal basis: Art. 44 ff. GDPR in conjunction with the corresponding transfer guarantees

7. storage period

We only store personal data for as long as is necessary for the respective purposes:

  • Websitelogs: 7 days
  • Contact requests: 3 years after settlement
  • User account: Until termination plus 3 years
  • Chat data: 30 days, then anonymization
  • Contract data: 10 years (tax retention obligation)
  • Marketing consents: Until revoked

After the storage periods have expired, the data is automatically deleted or anonymized.

8. your data protection rights

You have the following rights at all times:

8.1 Right to information (Art. 15 GDPR)

Receive free information about your stored data.

8.2 Right to rectification (Art. 16 GDPR)

Have incorrect data corrected.

8.3 Right to erasure (Art. 17 GDPR)

Request the deletion of your data if there is no longer a legitimate interest.

8.4 Right to restriction (Art. 18 GDPR)

Restrict processing under certain conditions.

8.5 Data portability (Art. 20 GDPR)

Receive your data in a structured, machine-readable format.

8.6 Right to object (Art. 21 GDPR)

Object to data processing on the basis of legitimate interests.

8.7 Revocation of consent (Art. 7 GDPR)

Withdraw your consent for the future at any time.

Contact for inquiries: datenschutz@bluegardens.com

9. complaint to the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf
Telephone: 0211/38424-0
E-mail: poststelle@ldi.nrw.de

10. data security

We protect your data through comprehensive technical and organizational measures:

10.1 Technical safety

  • SSL/TLS encryption: For all data transmissions
  • Firewalls and intrusion detection: protection against unauthorized access
  • Backup systems: Regular, encrypted data backups
  • Access controls: Role-based user rights
  • Monitoring: Continuous monitoring of system security

10.2 Organizational measures

  • Employee training: Regular data protection training
  • Access restrictions: Need-to-know principle
  • Confidentiality agreements: For all employees and service providers
  • Incident response: structured processes for data protection breaches

11 AI and automation

11.1 AI-supported garden planning

Our platform uses artificial intelligence for:

  • Personalized recommendations: Plant selection based on location and preferences
  • Optimized planning: Automatic layout suggestions and design optimization
  • Predictive analytics: Predicting maintenance requirements and growth behavior
  • Quality assurance: Automatic plausibility check of planning data

11.2 Transparency and control

Algorithm explanation: We will be happy to explain the logic behind our AI recommendations on request.

Human review: Important decisions are always validated by technical experts.

Opt-out option: You can deactivate AI functions in your account settings.

No automated decisions in individual cases: We never make legally binding decisions on a fully automated basis.

12. newsletter and communication

With your consent we will send you:

  • Newsletter: Gardening tips, new features, seasonal recommendations
  • Product updates: Information on platform improvements
  • Individual communication: project-related messages and reminders

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Unsubscribe: At any time via the unsubscribe link in every e-mail or in your user account
Double opt-in: Confirmation of the e-mail address before sending

13. social media and external content

13.1 Social media plugins

We use social media buttons with a data protection-friendly 2-click solution. Data is only transferred after you have consciously activated it.

13.2 External content

Embedded content (videos, maps, etc.) is only loaded after your consent in order to avoid tracking.

14. protection of minors

Our services are not aimed at persons under the age of 16. If we learn that we have processed data of minors without the consent of their legal guardians, we will delete this data immediately.

15. changes to this privacy policy

This privacy policy will be updated as necessary. You can always find the current version at https://bluegardens.com/datenschutz/

We will inform you of any significant changes via your user account or by e-mail.

Last update: July 2025

bluegardens AG
Augustinusstraße 11a
50226 Frechen
datenschutz@bluegardens.com

Secure initial consultation - receive ideas & calculation directly afterwards

We take the time to discuss your wishes and ideas in detail, whether garden, pool or both.

After the interview you will receive:

  • initial design ideasthat suit your property and style
  • a rough calculationtailored to your project and developed together with our partners

This means you know at an early stage what your dream project might look like and how much it is likely to cost.