- Overview and Responsible Entity
ALFA Möbelmontage GmbH (“we”, “us”, or “our”) operates the website www.alfambelmontage.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, submit booking requests, or engage our on-site furniture installation services across Europe.
We are committed to safeguarding personal data in strict compliance with the General Data Protection Regulation (GDPR) and applicable German data protection laws, including the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
Data Controller Contact Details:
Company: ALFA Möbelmontage GmbH
Address: Hauptstraße 105, 56182 Urbar, Germany
Tel: +49 17662245109
Email: installation@alfambelmontage.com
- Information We Collect
We collect personal data that you provide directly to us when you fill out our contact and booking forms, communicate with us via email, or complete transactions on our website. This information includes:
Identity and Contact Data: Full name, residential or installation address, telephone number, and email address.
Service Details: Information regarding the furniture items to be installed, project specifications, layout preferences, and appointment schedules.
Transaction and Payment Data: Details relating to deposits and payments processed securely through our designated payment processing partner, Stripe. (Note: We do not store full credit card numbers or sensitive financial credentials on our servers; all payment transactions are handled directly by Stripe in accordance with PCI-DSS standards).
Technical and Usage Data: IP address, browser type, device information, operating system, and access timestamps gathered through standard website logging and cookies.
- Legal Basis and Purpose of Processing
We process your personal data exclusively under valid legal bases established by the GDPR:
Contract Performance (Article 6(1)(b) GDPR): Processing is necessary to evaluate your inquiry, coordinate project details, schedule appointment dates, collect required deposits, and deliver on-site furniture installation services.
Legal Obligation (Article 6(1)(c) GDPR): Processing is required to comply with mandatory German and European commercial, tax, and accounting retention statutes (such as the Handelsgesetzbuch – HGB and Abgabenordnung – AO).
Legitimate Interests (Article 6(1)(f) GDPR): Processing is conducted to maintain website security, optimize service operations, and manage administrative communications.
- Payment Processing via Stripe
To facilitate secure online deposit transactions for our installation services, we utilize Stripe as our primary payment processing provider. When you make a deposit payment, your personal and financial data is transmitted directly to Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.) for authorization and fraud prevention.
The processing of your payment data by Stripe is governed by Stripe’s respective privacy policy and terms of service. We do not retain complete payment card credentials within our internal databases.
- Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements:
Contact Inquiries and Unconverted Quotations: Data submitted via contact forms that do not result in a booked service contract is securely deleted or anonymized within 12 months, unless ongoing communication is active.
Contractual and Transaction Records: Data relating to completed installation contracts, invoices, and deposit records is retained for 10 years in compliance with statutory commercial and tax retention obligations under German law (Section 147 AO and Section 257 HGB).
Technical Logs: Server logs and standard cookie data are automatically purged or anonymized within 30 to 90 days, unless required for investigating security incidents.
- Data Sharing and International Transfers
We do not sell, trade, or rent your personal information to third parties. Your data is shared strictly with trusted service providers necessary for business operations, including:
Stripe: For secure payment gateway and transaction processing services.
Hosting and IT Infrastructure Providers: Operating servers compliant with European data security standards.
Data processing primarily occurs within the European Union (EU) and the European Economic Area (EEA). In limited instances where technical data may be processed outside the EEA (such as via standard cloud infrastructure), transfers are governed by appropriate safeguards, including European Commission-approved Standard Contractual Clauses (SCCs).
- Your Data Protection Rights
Under the GDPR, you possess the following rights regarding your personal data:
Right of Access (Article 15 GDPR): Request confirmation as to whether we process your data and obtain a copy of your stored information.
Right to Rectification (Article16 GDPR): Request correction of inaccurate data or completion of incomplete records.
Right to Erasure (Article 17 GDPR): Request the deletion of your personal data, subject to statutory retention obligations.
Right to Restriction of Processing (Article 18 GDPR): Request limitations on how we process your data under specific conditions.
Right to Data Portability (Article 20 GDPR): Receive your data in a structured, commonly used, and machine-readable format.
Right to Object (Article 21 GDPR): Object to processing based on legitimate interests.
Right to Lodge a Complaint: You have the right to submit a complaint to a competent European supervisory data protection authority, such as the Landesbeauftragte für Datenschutz und Informationsfreiheit in the German federal state where our company is registered.
8.Updates to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time to reflect operational updates or changes in European and German legal frameworks. The revised version will be published on this page with an updated revision date. We encourage you to review this policy periodically.
9.Cookies and Tracking Technologies
Our website utilizes essential cookies and similar technologies to ensure proper website functionality, security, and session management. You can adjust your browser settings to refuse non-essential cookies; however, disabling certain cookies may impact website usability and booking form functionality.