Welcome to Plan Sequences and our website at www.plan-sequences.com (our “website”). Data protection and data security when using our website and services are very important to us. We would therefore like to inform you about which of your Personal Data we collect when you visit our website and for what purposes it is used.
WHO IS RESPONSIBLE?
The data controller under Germany’s Federal Data Protection Act (Bundesdatenschutzgesetz) (“BDSG”) and the EU’s General Data Protection Regulation (“GDPR”) is Plan Sequences, Frederic Vie, Mittelstr. 28, 12167 Berlin, Germany (“Plan Sequences,” “we,” “us,” “our”). If you would like to contact us or have any questions, you can reach us by email at info@plan-sequences.com or write to us at the address above.
PRINCIPLES OF DATA PROCESSING
a) Personal data
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, phone number, date of birth, email address, IP address, or user behavior.
b) Processing
The processing of personal data (e.g., collection, retrieval, use, storage, or transmission) always requires a legal basis.
c) Legal basis
In accordance with the BDSG and the GDPR, we must have at least one of the following legal bases to process your Personal Data: i) you have given your consent, ii) the data is necessary for the performance of a contract or pre-contractual measures, iii) the data is necessary to comply with a legal obligation, or iv) the data is necessary to protect our legitimate interests, provided that your interests are not overridden.
d) Retention
Processed personal data will be deleted as soon as the purpose of the processing has been fulfilled and there are no longer any legally required retention obligations.
DATA WE COLLECT
a) Provision and use of the website
When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. This is technically necessary for us to display our website and to ensure its stability and security. In this regard, we collect the following data: i) the IP address of the requesting computer, ii) the date and time of access, iii) the name and URL of the file accessed, iv) the website from which the access originated (referrer URL), v) the browser used and, if applicable, your computer’s operating system, as well as the name of your internet service provider. The legal basis is our legitimate interest.
b) Hosting
The hosting services we use to operate our website are provided by Squarespace Inc. ( 225 Varick Street, 12th Floor, New York, NY 10014, United States). In doing so , Squarespace processes inventory data, contact data, content data, usage data, metadata, and communication data of customers, interested parties, and visitors to our website and services, based on our legitimate interests.
c) Content Management System
We also use Squarespace’s Content Management System (CMS) to publish and maintain the content and text created and edited on our website. This means that all content and text submitted to us is transferred to Squarespace. This constitutes a legitimate interest.
d) Cookies
We use cookies on our website. In accordance with Germany's Data Protection and the Protection of Privacy in Telecommunications and Digital Services Act ("TDDSG") and the EU's Privacy and Electronic Communications Directive (“PECD”), we are required to obtain your consent before placing so-called non-essential cookies (functional cookies, analytics and performance cookies, advertising cookies, or targeting cookies). The legal basis for processing is our legitimate interest and your consent. For further information, please also refer to our Cookie Policy.
e) Cookie Consent
Our website uses a cookie consent tool to obtain your consent to the storage of cookies and to document this consent. When you visit our website, the following Personal Data is transmitted to us via our cookie consent tool: i) Your consent(s) or revocation of your consent(s); ii) Your IP address; iii) Information about your browser; iv) Information about your device; v) The time of your visit to our website. The legal basis for processing is our legitimate interest and your consent.
f) YouTube
We have integrated YouTube components. This integration requires that YouTube be able to detect the user’s IP address. The IP address is necessary to send the video content to the user’s browser. If you click on a YouTube component (video) on our website, the component will prompt your internet browser to download a corresponding representation of the component. In this way, YouTube knows which specific subpages you have visited. The legal basis for the data processing is our legitimate interest and your consent. For further information, please also refer to our Cookie Policy.
g) Contacting Us
We offer you the opportunity to contact us in a variety of ways. We collect the information you provide—such as your name, email address, phone number, and message—in order to process your inquiry and respond to you. The legal basis for this is both your consent and the contract. As a general rule, we do not require any special categories of personal data to provide our services.
h) User account
You can also sign up for an account. To do so, you can choose a password and provide your email address; both will allow you to log in more easily without having to re-enter your information when you make a future purchase or access your order history. We will retain your information for future orders as long as you maintain your account with us.
(i) Subscription and paid services
When you take out a subscription or subscribe to a service that requires payment, we process the Personal Data you provide as part of the contract. The legal basis is our contract. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, for example, in the case of inquiries about our services. Furthermore, we are required to process personal data for the purpose of fulfilling legal obligations, such as tax obligations. The legal basis in this case is our legal obligation.
j) Payment services
If you sign up for a subscription, your payment information will be processed through our payment service provider. Payment information will be processed solely through our payment service provider, and we do not have access to any payment information you may submit. The legal basis for providing a payment system is the establishment and performance of the contract.
SOCIAL MEDIA
We maintain a presence on social media based on our legitimate interest (Instagram and Facebook (Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025), TikTok (TikTok Inc., 5800 Bristol Parkway, Culver City, Los Angeles, CA 90230, United States)). If you contact or connect with us via social media, we and Instagram are jointly responsible for the processing of your data and enter into a so-called joint controller agreement. The personal data collected when you contact us is used to handle your request, and the legal bases for this processing are both your consent and our legitimate interest.
When you visit our social media profile, we, as the profile operator, process your actions and interactions with our profile (e.g., the content of your messages, inquiries, posts, or comments that you send to us or leave on our profile, or when you like or share our posts), as well as your publicly viewable profile data (e.g., your name and profile picture). Which personal data from your profile is publicly visible depends on your profile settings, which you can adjust yourself in the settings of your social media account. The legal basis is our legitimate interest and your consent.
DATA SECURITY
We are committed to protecting your privacy and treating your Personal Data confidentially. To prevent the manipulation, loss, or misuse of your data stored with us, we implement comprehensive technical and organizational security measures that are regularly reviewed and adapted to technological advancements. These include, among other things, the use of recognized encryption methods (SSL or TLS).
However, we would like to point out that, due to the nature of the Internet, it is possible that data protection rules and the aforementioned security measures may not be observed by other individuals or organizations that are outside our control. We have no technical control over this. It is the user’s responsibility to protect the data they provide against misuse by encrypting it or by other means.
INTERNATIONAL TRANSFERS
We may transfer your Personal Data to other companies as necessary for the purposes described in this Privacy Policy. To ensure adequate protection of your Personal Data during such transfers, we have contractual arrangements in place. We take all reasonable technical and organizational measures to protect the Personal Data we transfer.
HOW WE MAY SHARE YOUR PERSONAL DATA
We may share your Personal Data with our business partners and within Plan Sequences for the purposes described in this Privacy Policy, including (but not limited to) providing the services you request or tailoring our business to better meet your needs. We share your Personal Data only with business partners who agree to protect and use your Personal Data solely for the purposes specified by us.
We may also disclose your Personal Data for any purpose with your consent, or for law enforcement, fraud prevention, or other legal actions as required by law or regulation, or if we reasonably believe that we must protect ourselves, our customers, or other business interests. Except as described above—of which you will be informed in advance—we will not disclose your Personal Data.
WHAT WE DO NOT DO
● We do not request Personal Data from minors and children;
● We do not use automated decision-making, including profiling; and
● We do not sell your personal data.
PRIVACY RIGHTS
Under the BDSG and the GDPR, you can exercise the following rights:
● Right to information
● Right to rectification
● Right to erasure
● Right to data portability
● Right to object
● Right to withdraw consent
● Right to file a complaint with a supervisory authority
● The right not to be subject to a decision based solely on automated processing.
If you have any questions about the nature of the personal data we hold about you, or if you wish to exercise any of your rights, please contact us.
UPDATING YOUR INFORMATION AND WITHDRAWING YOUR CONSENT
If you believe that the information we hold about you is inaccurate or that we are no longer authorized to use it, and you wish to request that it be corrected or deleted, object to its processing, or withdraw any consent you have given us, please contact us.
ACCESS REQUEST
If you wish to submit a Data Subject Access Request, you may notify us in writing. We will respond to requests for access and correction as soon as reasonably possible. If we are unable to respond to your request within thirty (30) days, we will explain why and let you know when we will be able to respond. If we are unable to provide you with any Personal Data or to make a correction you have requested, we will explain why.
COMPLAINT TO A SUPERVISORY AUTHORITY
You have the right to file a complaint regarding our processing of Personal Data with a supervisory authority responsible for data protection. The Federal Commissioner for Data Protection and Freedom of Information (BfDI) (www.bfdi.bund.de) is the Federal Commissioner for Data Protection. The Berlin DPA is the state data protection authority for the state of Berlin. The Berlin DPA’s contact details can be found at www.datenschutz-berlin.de. However, we would appreciate the opportunity to address your concerns before you contact the BfDI or the Berlin DPA.
HOW DO WE MAKE CHANGES TO THIS POLICY?
We may update our Privacy Policy from time to time. When we update our Privacy Policy, we will post the updated policy on our website. Please review this Privacy Policy regularly. Subject to applicable law, all changes will take effect as soon as we post the new Privacy Policy; however, if we have already collected information about you and/or if required by law, we may take additional steps to notify you of any material changes to our Privacy Policy and may ask you to agree to these changes.
EFFECTIVE DATE
Tuesday, May 20, 2025