Privacy Policy

Protecting your personal data is important to us. We design this website to function without tracking, profiling, or unnecessary data collection. Personal data is processed only when you actively and knowingly provide it.

This website is intentionally designed to work without cookies, tracking, or profiling.

You can browse this site without being identified, followed across pages, or tracked over time. We do not use advertising trackers, marketing pixels, or behavioral analytics.

Personal data is processed only when you actively choose to provide it, for example by contacting us or entering into a business relationship. When that happens, we collect only what is necessary and use it only for the stated purpose.

This Privacy Policy explains what data we process, for what purpose, and on what legal basis under the General Data Protection Regulation (GDPR / DSGVO).


1. Controller

The data controller responsible for processing personal data on this website is:

Roots & Fruit UG (haftungsbeschränkt)
Braunfels 35619, Germany

Email: info@rootsandfruit.com


2. No cookies and no consent banner

This website does not use cookies or similar tracking technologies.

In particular, we do not use:

  • cookies (including analytics or marketing cookies)
  • localStorage or sessionStorage
  • fingerprinting techniques
  • cross-site or cross-session tracking

Because no cookies or tracking technologies are used, no cookie consent banner is required under the ePrivacy Directive or GDPR.


3. Privacy-friendly analytics

We use Plausible.io to understand general website usage (for example page views and referrers).

Plausible is operated in a privacy-first configuration:

  • no cookies are set
  • no personal data is stored
  • no user profiles are created
  • no tracking across sessions occurs

Legal basis: Article 6(1)(f) GDPR (legitimate interest)
Our legitimate interest is understanding aggregated website usage to improve content and performance, without identifying individual users.


4. Search engine performance data

We access aggregated search performance data via Google Search Console.

This data:

  • is collected by Google independently of this website
  • does not involve tracking code or cookies on our site
  • is provided to us only in aggregated form

No personal data of website visitors is processed by us in this context.

Legal basis: Article 6(1)(f) GDPR (legitimate interest)


5. Personal data you actively provide

We process personal data only when you voluntarily provide it, for example:

  • when contacting us via a form or email
  • when subscribing to a newsletter
  • when entering into a business relationship with us

Depending on the context, this may include:

  • name
  • email address
  • message content
  • business or billing information you choose to provide

This data is used exclusively for the stated purpose and not for tracking, profiling, or advertising.


6. Legal bases for processing

Personal data is processed on one or more of the following legal bases:

  • Article 6(1)(a) GDPR – Consent
    When you voluntarily submit information or opt in to communications.
  • Article 6(1)(b) GDPR – Contractual necessity
    When processing is required to perform or prepare a contract.
  • Article 6(1)(f) GDPR – Legitimate interest
    For responding to inquiries and maintaining business communication.

Consent may be withdrawn at any time with future effect.


7. Data retention

We store personal data only for as long as necessary:

  • to fulfill the purpose for which it was collected
  • to comply with legal retention obligations
  • to maintain an ongoing contractual relationship

You may request deletion of your personal data at any time, unless statutory retention requirements apply.


8. Data recipients and processors

Personal data is not sold, rented, or shared for marketing purposes.

Where necessary, data may be processed by service providers acting as processors under Article 28 GDPR, strictly for operating this website or delivering agreed services.


9. Hosting and technical infrastructure

This website is delivered via Cloudflare for security and performance purposes.

Cloudflare may temporarily process technical connection data (such as IP addresses) to:

  • protect against abuse
  • ensure reliable delivery
  • maintain network security

This processing is limited, purpose-bound, and not used for tracking or marketing.

Legal basis: Article 6(1)(f) GDPR (legitimate interest)


10. Your rights

You have the right to:

  • access your personal data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority.


11. Contact

For privacy-related inquiries or to exercise your rights:

Email: info@rootsandfruit.com