Privacy Policy

1. Data Controller

Seed Factory Owner: Sergei Bartenev c/o Block Services Stuttgarter Str. 106 70736 Fellbach Germany Email: hello@seed-factory.com

2. What Data We Collect

We actively collect personal data only when you submit an inquiry through the form on our website:

• Name
• Email address
• Telegram (if provided)
• Message text
• IP address (for fraud protection)
• UTM parameters (referral source)

In addition, technical access data is generated when you visit the website (see section 10). To improve our website, we use anonymous analytics (see section 9).

3. Purpose of Data Processing

• Responding to your inquiry
• Protection against fraud and spam
• Analysis of advertising channel effectiveness (via UTM parameters)

4. Legal Basis

We process your inquiry data to carry out pre-contractual measures and, where applicable, to perform a contract (Art. 6 (1) (b) GDPR). The processing of your IP address to protect against abuse and spam, and the analysis of UTM parameters to measure the effectiveness of our advertising channels, are based on our legitimate interest (Art. 6 (1) (f) GDPR).

5. Data Retention

Inquiries and the related correspondence are processed and stored in an internal system for managing inquiries and client relationships, which we operate under our own responsibility on servers of Hetzner Online GmbH in Germany (see section 10). Any further correspondence with you is handled via our email address hello@seed-factory.com; for the email provider we use, see section 11. Inquiries that do not lead to a contract are deleted 6 months after the last contact. If a contractual relationship arises from the inquiry, the statutory retention periods apply: 6 years for commercial correspondence (§ 257 (4) HGB, § 147 (3) AO) and 8 years for accounting records and invoices (§ 257 (1) HGB, § 147 (1) AO, § 14b UStG). Once these periods expire, the data is deleted. Data that is not subject to a statutory retention obligation can be deleted at your request at any time.

6. Data Sharing

We do not sell or share your personal data with third parties. We operate our internal systems ourselves; external service providers receive no access beyond what is required to operate the website and to handle email communication (see sections 10 and 11). Exceptions apply where disclosure is necessary to fulfil your request or required by law.

7. Your Rights

Under GDPR, you have the right to:

• Access information about your stored data
• Correct inaccurate data
• Delete your data
• Restrict data processing
• Receive a copy of your data in a machine-readable format
• Object to data processing

To exercise your rights, write to us at hello@seed-factory.com or use our contact form.

Right to object (Art. 21 GDPR): where we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you have the right to object to the processing at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint about the processing of your personal data with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

8. Cookies

Our website does not use cookies for tracking. We only use browser technical storage (sessionStorage) to preserve UTM parameters within a single session. This data is not sent to the server without your explicit action (form submission).

9. Anonymous Analytics

To improve our website, we use the Umami analytics system hosted on our own servers.

Features of our analytics:

• Does not use cookies
• Does not collect personal data
• Does not use fingerprinting
• Does not track users across websites

The legal basis for this analysis is our legitimate interest in the statistical evaluation and needs-based design of our website (Art. 6 (1) (f) GDPR).

Anonymized data collected:

• Pages viewed
• Referral source
• Country (from IP, IP not stored)
• Device type (desktop/mobile)
• Browser

In addition, we anonymously record general interaction events, such as clicks on external links, the reading depth of blog articles, or interactions with the contact form.

Form field values (name, email, message) are never sent to analytics.

This data cannot be linked to a specific user. You can block analytics using appropriate browser extensions.

10. Hosting

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When the website is accessed, the server automatically processes technical access data (server log files) such as the IP address, date and time of access, the page accessed and the user agent. This processing is carried out to ensure secure and stable operation on the basis of our legitimate interest (Art. 6 (1) (f) GDPR). The server log files are deleted after 14 days at the latest. A data processing agreement (Art. 28 GDPR) is in place with the hosting provider; it also covers the servers of our internal systems (section 5) and the email service (section 11).

11. Email communication

For our business email communication we use the email service of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. All mailboxes of our domain seed-factory.com are operated there, including the address hello@seed-factory.com used for correspondence with enquirers. The content of your messages, together with sender, recipient and timestamp data, is stored on Hetzner's servers. The data is processed exclusively in data centres in Germany; no transfer to a third country takes place. A data processing agreement (Art. 28 GDPR) is in place with the provider. Incoming and outgoing messages are automatically scanned by the provider for malware and spam. The legal basis is Art. 6 (1) (b) GDPR (communication in the context of pre-contractual measures or a contract) and Art. 6 (1) (f) GDPR (legitimate interest in secure email communication). The retention periods described in section 5 apply to email correspondence. Please note: the transport path of an email is only encrypted end to end if your provider supports this as well — an unencrypted email can be read by third parties in transit.

12. Automated decision-making

Automated decision-making in individual cases, including profiling within the meaning of Art. 22 GDPR, does not take place.

13. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our processes or in legal requirements. The current version is always available on this page; the date of the last update is shown at the top.

14. Contact

For questions regarding personal data processing, contact us: hello@seed-factory.com

You can also reach us through the contact form: Contact form