1. An Overview of Data Protection

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website bonsaigrid.com. Personal data is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our Privacy Policy listed below.

Data Collection on Our Website

Who is responsible for the data collection on this website?

The data processing on this website is carried out by the website operator. You can find the operator’s contact details in the „Information about the Controller“ section of this Privacy Policy or in our Legal Notice (Imprint).

How do we collect your data?

• Some data is collected when you provide it to us. This could, for example, be data you enter on a contact form or during the checkout/registration process.

• Other data is collected automatically or after your consent by our IT systems when you visit the website. These are primarily technical data (e.g., internet browser, operating system, or time of the page call).

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data can be used to process payments, manage your community membership, or analyze how visitors use the site.

What rights do you have regarding your data?

You always have the right to request information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request that this data be corrected or erased.

2. Information About the Controller

The party responsible for data processing on this website (the „Controller“) is:

Thitiporn Weber

Beinstr. 12

64584 Biebesheim, Germany

• Phone: +49 (0) 151 29817011

• Email: info@bonsaigrid.com

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data (e.g., names, email addresses, payment details).

3. Data Collection & Contact Options

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us:

• Browser type and version

• Operating system used

• Referrer URL

• Host name of the accessing computer

• Time of the server request

• IP address

This data is processed based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website.

Contact Form and Email Inquiries

If you send us inquiries via the contact form or email, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is based on Art. 6 (1) (b) GDPR if your request is related to the execution of a contract or necessary for pre-contractual measures, or Art. 6 (1) (f) GDPR based on our legitimate interest in processing inquiries effectively.

4. Payment Processing

To offer paid memberships (e.g., Plus and Premium plans), we process payment data. Depending on the payment method you select during checkout, payment details are transmitted to the respective payment service provider.

The processing of payment data is conducted on the basis of Art. 6 (1) (b) GDPR (contract performance) as well as Art. 6 (1) (f) GDPR (legitimate interest in providing secure payment options).

Stripe

If you choose payment via Stripe, processing is handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

For details on Stripe’s privacy practices, please visit: https://stripe.com/privacy

PayPal

If you pay via PayPal, payment details are transferred to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

For details on PayPal’s privacy policy, please visit: https://www.paypal.com/webapps/mpp/ua/privacy-full

5. Social Media & External Links (Telegram & Instagram)

We maintain online presences on external platforms and link to them from our website to communicate with our active community and inform interested users.

Links to Social Media Platforms

Our website contains links to external services. These are simple hyperlinks (not embedded plugins). When you click a link to Instagram or Telegram, no personal data is transferred to these providers until you intentionally click the link and leave our website

Instagram

When you visit our Instagram profile (@bonsaigrid), data is processed by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta may use cookies and user tracking to create user profiles for market research and advertising purposes.

• Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in community outreach).

• For more information, visit Instagram’s Privacy Policy: https://privacycenter.instagram.com/policy

Telegram

Our community Q&A and support interaction takes place via Telegram. Telegram is operated by Telegram Messenger Inc. (71-75 Shelton Street, Covent Garden, London, UK / Telegram Group Inc., Tortola, British Virgin Islands).

When joining or participating in our Telegram groups/channels, Telegram processes your account information, mobile phone number, profile name, and messages in accordance with Telegram’s Privacy Policy.

• Legal basis: Art. 6 (1) (b) GDPR (membership community fulfillment) and Art. 6 (1) (f) GDPR.

6. Your Legal Rights Under the GDPR

Under the European Union General Data Protection Regulation (GDPR), you hold the following rights regarding your personal data:

• Right to Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether or not personal data concerning you is being processed.

• Right to Rectification (Art. 16 GDPR): You have the right to request the immediate correction of inaccurate personal data.

• Right to Erasure / „Right to be Forgotten“ (Art. 17 GDPR): You can request the deletion of your personal data held by us, provided legal retention periods do not apply.

• Right to Restriction of Processing (Art. 18 GDPR): You have the right to demand the restriction of processing your personal data under certain conditions.

• Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

• Right to Object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data based on public or legitimate interests.

• Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.