Privacy Policy

This Privacy Policy describes how meadowtote (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit or make a purchase from www.meadowtote.com.

1. Data Controller
The entity responsible for the processing of personal data on this website (the “Controller”) is:

Autohaus Korb GmbH
Gaußstraße 2, 68623 Lampertheim, Germany
HRB: Amtsgericht Darmstadt HRB 61341
Email: picnic@meadowtote.com
Telephone: +49 6206 5607110

2. Collection of Personal Data
When you visit the Site, we collect certain information necessary to process your orders and maintain the functionality of our services. This includes:

Order Information: Name, billing address, shipping address, email address, and phone number.
Payment Information: To complete transactions, payment data is required.

3. Payment Processing via Stripe
To provide a seamless checkout experience, we utilise Stripe for payment processing. By making a purchase, you acknowledge that your payment details are provided directly to Stripe.

Stripe collects, uses, and processes your information, including payment information, in accordance with their own privacy policy.
We do not store full credit card numbers or sensitive authentication data on our local servers.
The processing of this data is necessary for the performance of the contract between you and Autohaus Korb GmbH (Art. 6(1)(b) GDPR).

4. Purpose of Data Processing
We use your personal data for the following purposes:

To fulfil orders placed through the Site (including arranging for shipping and providing you with invoices and order confirmations).
To communicate with you regarding your enquiries or orders.
To comply with legal and regulatory obligations applicable to our operations in Europe and the United States.

5. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Transaction and Contract Records: In accordance with German commercial and tax laws (Handelsgesetzbuch and Abgabenordnung), we are required to retain certain financial information and contract data for a period of ten (10) years.
Communication Records: General enquiries are retained for a period of six (6) years following the conclusion of the matter, unless a longer retention period is mandated by law.
Customer Accounts: Information associated with registered accounts is retained until the user requests deletion, subject to the aforementioned legal overrides.

6. Sharing of Personal Data
We share your personal information with third-party service providers who assist us in operating our business:

Logistics Partners: To deliver your orders to your specified address.
Payment Processors: As identified in Section 3 (Stripe).
Legal Compliance: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

7. Your Rights (EEA and United States)
Depending on your location, you have certain rights regarding your personal data:

Access and Portability: The right to request copies of your data.
Correction: The right to request that we rectify inaccurate information.
Erasure: The right to request that we delete your data, subject to legal retention obligations.
Objection/Restriction: The right to object to or restrict certain processing activities.

To exercise these rights, please contact us at picnic@meadowtote.com.

8. Data Security
We implement industry-standard administrative, organisational, and technical measures intended to protect the personal information we collect. While we strive to protect your data, it should be noted that no method of transmission over the Internet or electronic storage is completely impenetrable. We maintain robust protocols to mitigate risks and protect your information against unauthorised access.

9. International Data Transfers
As we serve customers in the United States and Europe, your data may be transferred to and processed in countries outside of your residence. We ensure that such transfers are conducted in compliance with applicable data protection laws, typically through the use of Standard Contractual Clauses or other recognised legal frameworks.

10. Contact
For more information about our privacy practices, or if you have questions, please contact our office at the address provided in Section 1.