- Data Controller Information
The Data Controller responsible for processing personal data on this website in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) is:
Data Controller: www.nestvisitplan.com
Brand Name: Nestvisitplan
Company: BK Küchenkonzept GmbH
Address: Wilhelm-Busch-Str. 12, 30938, Burgwedel
Phone: +49 172 9145600
Email: plan@nestvisitplan.com
- Scope and Purpose of Data Processing
We collect and process personal data solely to evaluate initial service requests, deliver bespoke home organization and space planning services, arrange consultation schedules, communicate regarding quotes and service progress, and process payments.
The types of personal data collected include:
Contact details (e.g., name, email address, telephone number, service address).
Inquiry details submitted via our online consultation forms (e.g., room dimensions, spatial requirements, scheduling preferences).
Transaction and billing details required for deposit and balance payments.
The legal basis for processing this data is Article 6(1)(b) of the GDPR (performance of a contract or steps prior to entering into a contract) and Article 6(1)(c) of the GDPR (compliance with legal obligations).
- Payment Processing via Stripe
To provide efficient and payment card industry-compliant transactions, payment processing for deposits and remaining balances is carried out directly through our external payment service provider, Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (“Stripe”).
When you submit payment details, your transactional information is transmitted directly to Stripe. Stripe processes payment data, including card details, billing address, transaction amount, and payment verification records, acting as an independent data controller for fraud prevention, payment security, and transaction processing.
Data transmitted to Stripe is handled strictly in accordance with Stripe’s privacy policy and GDPR regulations. The legal basis for this processing is Article 6(1)(b) GDPR (contractual performance) and Article 6(1)(f) GDPR (legitimate interest in maintaining security and processing payments reliably).
- Data Retention Period
We retain personal data only for as long as necessary to fulfill the specific purposes for which it was collected, or to comply with statutory retention requirements under applicable German and European laws:
Inquiry and Consultation Data: Data submitted through contact or assessment forms that does not result in a contract is erased within six (6) months from the final communication.
Contractual and Service Data: Personal data related to active service provision is retained for the duration of the contractual agreement.
Commercial and Tax Records: Pursuant to German commercial and tax laws (Section 147 of the German Tax Code – Abgabenordnung / Section 257 of the German Commercial Code – Handelsgesetzbuch), relevant invoices, order documentation, and transactional records are stored for up to ten (10) years.
Upon expiry of the applicable retention periods, the corresponding data is routine-deleted or anonymized, provided that no further storage is necessary for the defense or establishment of legal claims.
- Storage and Security Measures
We maintain technical and organizational measures designed to guard personal data against unauthorized access, disclosure, alteration, or accidental loss. While technical safeguards are regularly reviewed and aligned with current standards, technical internet transmissions inherently carry natural vulnerabilities, and absolute protection cannot be guaranteed against every conceivable risk. - User Rights Under the GDPR
Under European data protection law, data subjects situated in the European Union hold the following rights:
Right of Access (Art. 15 GDPR): The right to request confirmation as to whether personal data concerning you is processed and to receive information regarding such data.
Right to Rectification (Art. 16 GDPR): The right to request the correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17 GDPR): The right to request the deletion of personal data when statutory grounds apply.
Right to Restriction of Processing (Art. 18 GDPR): The right to request the restriction of processing under specified statutory conditions.
Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21 GDPR): The right to object at any time to processing based on legitimate interests (Art. 6(1)(f) GDPR).
Right to Lodge a Complaint: The right to lodge a complaint with a competent supervisory authority for data protection in Germany or the EU member state of your habitual residence.
To exercise any of these rights, please contact us at: plan@nestvisitplan.com.
- Updates to This Privacy Policy
We reserve the right to amend this Privacy Policy to reflect changes in regulatory compliance, legal requirements, or operational adjustments. The latest version published on www.nestvisitplan.com shall always apply.