Privacy Policy
Bergermann Floristik GmbH · As at March 2026
1. Data controller and contact details
Data controller within the meaning of the GDPR:
Bergermann Floristik GmbH
Managing Director: Andreas Bergermann
Mittelweg 6, 02736 Oppach, Germany
Telephone: +49 (0) 35872 359 210
Email: verwaltung@bergermann-floristik.de
2. General information on data processing
This privacy policy applies to the website moosmoos.de and all associated online platforms and communication channels of Bergermann Floristik GmbH (MOOSMOOS brand). A separate privacy policy applies to the online shop moosbild-shop.de.
As a general rule, we process personal data only to the extent necessary to provide a fully functional website and to deliver our content and services. Processing is always carried out in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications and Digital Services Data Protection Act (TDDDG).
Legal basis: Consent (Article 6(1)(a) of the GDPR), performance of a contract (Article 6(1)(b) of the GDPR), legal obligation (Article 6(1)(c) of the GDPR) and legitimate interests (Article 6(1)(f) of the GDPR).
3. Your rights as a data subject
You have the following rights in relation to us: the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR). To exercise your rights, simply send an informal message to verwaltung@bergermann-floristik.de.
If the processing of your data is based on your consent, you may withdraw that consent at any time with effect for the future, without this affecting the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal.
Competent supervisory authority: Saxony Data Protection and Transparency Commissioner, Devrientstraße 5, 01067 Dresden, Tel.: +49 351 85471101, Email: saechsdsb@slt.sachsen.de
4. Hosting and server log files
Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Delivery is provided via Vercel’s European data centre network; a data processing agreement in accordance with Article 28 of the GDPR is in place, supplemented by standard contractual clauses.
Every time our website is accessed, information is automatically recorded in what are known as server log files: truncated IP address, page accessed, date and time of access, volume of data transferred, referrer URL, browser type and operating system. We process this data solely to ensure trouble-free operation, to defend against attacks and to improve our service. This data is not combined with other data sources.
The videos played on our website are hosted on the Vercel Blob storage service provided by the same provider. When the videos are played, the same access data is processed as when the page itself is accessed.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in ensuring IT security). The data will be deleted after 14 days at the latest.
5. Technology used on this website
This website is a static website: all pages are generated in advance and served unchanged. There is no database, no user accounts and no content management system that would collect data from you when you visit the site.
Form data does not leave your browser until you submit the form. Sections 8 to 10 explain where it goes from there.
6. SSL/TLS encryption
For security reasons, our website uses SSL/TLS encryption. This ensures that any data you send to us is transmitted in encrypted form and cannot be read by third parties. You can recognise the encryption by the padlock icon in the browser address bar and by ‘https://’ in the URL.
8. Making contact
If you contact us by email, telephone or via the contact form, we will process the data you provide (name, email address, content of your message) in order to deal with your enquiry. The legal basis for this is Article 6(1)(b) of the GDPR (pre-contractual measures) or Article 6(1)(f) of the GDPR (legitimate interest in responding to enquiries). The data will be deleted once your enquiry has been dealt with, in accordance with statutory retention periods.
9. HubSpot CRM system
Provider: HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA / HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.
We use HubSpot as a CRM system to manage customer relationships, process enquiries via contact forms, manage our sales pipeline and for telephone communications (via HubSpot’s native phone numbers with the 035872 area code). In doing so, we store contact details such as name, email address, telephone number and communication history.
Legal basis: Article 6(1)(b) of the GDPR (performance of a contract) and Article 6(1)(f) of the GDPR (legitimate interest in professional customer management). HubSpot is certified under the EU-US Data Privacy Framework (TADPF). A data processing agreement has been entered into in accordance with Article 28 of the GDPR.
11. Web analytics
11.1 Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We use Google Analytics 4 (GA4) to analyse user behaviour on our website. GA4 uses cookies and similar technologies to collect information such as IP addresses (anonymised), page views, time spent on the site, device information and referrer URLs.
Consent Mode v2 (extended): We use the enhanced implementation of Google Consent Mode. Google Tag Manager is loaded before you make your decision; it does not store anything on your device itself. All consent types are set to ‘declined’ until you make your decision, and the sharing of advertising data is reduced (ads_data_redaction). Without your consent, no cookies will be set and no identifiers will be stored; cookie-free pings may be sent to Google which do not contain any device identifiers and which Google uses to model usage trends. We only use cookies to track usage once you have given your consent.
Legal basis: Article 6(1)(a) of the GDPR (consent via Cookiebot). Your data may be transferred to the USA. Google is certified under the TADPF.
11.2 Microsoft Clarity
Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
We use Microsoft Clarity to analyse user behaviour. Clarity tracks mouse movements, scrolling behaviour and clicks, and uses this data to generate heatmaps and session recordings. Your IP address is anonymised. Personal data is stored on Microsoft’s servers (Azure Cloud) in the USA.
Legal basis: Article 6(1)(a) of the GDPR (consent) or Article 6(1)(f) of the GDPR (legitimate interest in user analysis). A data processing agreement is in place.
11.3 Vercel Web Analytics (cookie-free tracking)
Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA — the same provider that hosts this website (section 4).
We use Vercel Web Analytics to measure website traffic. Only aggregated data is collected: page viewed, referring page, country, device type, browser and operating system. The service uses no cookies, does not use your device’s fingerprint and does not store any identifier that could be used to recognise you across multiple page views. Your IP address is not stored; it is merely incorporated into a non-reversible checksum, which is discarded as soon as the page view has been counted. We are therefore unable to link this information to you personally.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in data-minimal audience measurement). As no access is made to information on your device, consent is not required under Section 25(1) of the TDDDG. A data processing agreement is in place; processing takes place within the provider’s European data centre network.
12. Google Tag Manager
Provider: Google Ireland Limited.
We use Google Tag Manager to centrally manage website tags. Tag Manager itself does not store any cookies or collect any personal data. However, it enables other tags to be triggered, which may in turn collect data. These are explained in the relevant sections of this privacy policy.
For the extended Consent Mode (section 11.1), the Tag Manager is loaded in the cookie notice before you make your decision. In doing so, your IP address is technically transmitted to Google, as is the case whenever an external file is accessed. The tags managed by the Tag Manager are only evaluated once you have given your consent; nothing is stored on your device without your consent. Legal basis for loading the Tag Manager: Article 6(1)(f) of the GDPR (legitimate interest in managing the tags in accordance with consent requirements).
13. Online marketing and advertising
13.1 Google Ads conversion tracking
We use Google Ads with conversion tracking. When you click on a Google advert, a cookie is placed on your device, which enables Google and us to track whether you have carried out a desired action on our website. We receive statistical reports that do not contain any personally identifiable information. Google Consent Mode (Version 2) is used: no advertising cookies are set without your consent, and the amount of data transmitted is reduced; the advertising tags only collect data once you have given your consent. Legal basis: Article 6(1)(a) of the GDPR (consent). Google is certified under the TADPF.
13.2 Microsoft Advertising
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. We use Microsoft Advertising (formerly Bing Ads) for conversion tracking. A cookie is set when you click on an advert. Microsoft is certified under the TADPF. Legal basis: Article 6(1)(a) of the GDPR (consent).
13.3 Meta Pixel (Facebook Pixel)
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. We use the Meta Pixel for remarketing and conversion tracking. When you visit our website, a connection is established with Meta’s servers and information about which pages you have visited is transmitted. Meta associates this information with your Facebook user account, if you have one. We and Meta are joint controllers in accordance with Article 26 of the GDPR. Legal basis: Article 6(1)(a) of the GDPR (consent). Data transfer to the USA is based on standard contractual clauses and the TADPF.
13.4 Pinterest Day
Provider: Pinterest Europe Ltd., Palmerston House, Fenian Street, Dublin 2, Ireland. The Pinterest tag enables us to measure the success of our Pinterest adverts and to track how visitors behave on our website after clicking on a Pinterest advert (conversion tracking). In doing so, Pinterest places cookies on your device and processes usage data such as pages visited, interactions and, where applicable, transactions, including the order value. Pinterest may combine this data with other data it holds about you. Legal basis: Section 25(1) of the TDDDG in conjunction with Article 6(1)(a) of the GDPR (consent). You may withdraw your consent at any time with future effect via the Cookie settings withdraw. Pinterest also processes data in the USA; this transfer is carried out on the basis of the European Commission’s standard contractual clauses. Further information: Pinterest Privacy Policy.
13.5 Click IDs from adverts and offline conversions
If you arrive on our site via an advert, the advertising platform appends a click ID to the address — in Google’s case, this depends on the type of advert gclid,gbraid or wbraid, on Facebook and Instagram fbclid, at Microsoft Advertising (Bing)msclkid. Our website stores this identifier in your browser’s cache (localStorage, key mm_click_id) and keeps them there 90 days . A subsequent click on the advert replaces the previous identifier.
What is it for: Clicking on an advert takes you to a page, whilst you usually fill in a form on a different page. Without the stored identifier, we would not be able to tell which advert led to an enquiry.
What happens to it: As long as you are simply browsing MOOSMOOS.de, the identifier will not leave your device. Only once you have submitted a form yourself, it is transmitted to HubSpot along with your enquiry (Section 9) and stored there in your contact record. If this subsequently results in an order, we will transmit the identifier, together with the time and value of the order, to the advertising platform from which the identifier originated — Google Ads, Meta or Microsoft Advertising — so that we can assess which adverts actually lead to business (“offline conversion”). Your name, your email address and the content of your enquiry will be not transmitted to the advertising platform.
Visit our online shop: Click on a link to our online shop moosbild-shop.de, we append the click ID to the address of this link. The reason for this is that the shop is hosted on its own domain: without the ID, we would not be able to recognise that a purchase made there was the result of an advert. Only the ID itself, as assigned by the advertising platform, is transmitted — none Information about which pages you have viewed on our website. The shop is operated by the same company (Bergermann Floristik GmbH); the following applies there: separate privacy policy.
Legal basis: Article 6(1)(f) of the GDPR. Our legitimate interest lies in being able to assess the cost-effectiveness of our advertising. This processing takes place independently of your consent to the use of cookies and is therefore described separately here.
Your objection: You may object to the processing at any time in accordance with Article 21 of the GDPR — by sending an informal request to verwaltung@bergermann-floristik.de. You can also delete the identifier stored in your browser at any time by clearing the website data for MOOSMOOS.de in your browser settings.
Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google is certified under the EU-US Data Privacy Framework.
15. Videos and maps
15.1 Videos
All the videos on this website are hosted by us (see section 4). No videos from YouTube, Vimeo or other platforms are embedded — so no third-party providers are contacted when the videos are played.
15.2 Google Maps on the project map
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. On the ‘MOOSMOOS Map’ page, we display our projects on a Google Maps map. The map does not load automatically: At first, you will only see a message with a button. The map is only reloaded once you click this button — at which point your IP address and access data are transmitted to Google. Technically, a programme library for point aggregation from the distribution service unpkg.com (Cloudflare Inc., USA) is also loaded at this stage.
Legal basis: Article 6(1)(a) of the GDPR (consent given by clicking the button). Google is certified under the TADPF. If you do not load the map, no data will be transferred.
16. Fonts
All the fonts on this website (Inria Serif, PT Sans, Minion Pro) are hosted on our own server and are served from there. There is no connection to Google Fonts, Adobe Fonts or any other font service — Your IP address is not passed on to anyone for this purpose. The same applies to the icons on the page: as vector graphics, they are embedded directly in the page’s source code.
17. Search and Chat Assistant
17.1 Search
The search function on this website operates entirely within your browser: the list of pages is loaded along with the page, and your search term is checked against it. Search terms are not passed on to us or to third parties and is not stored anywhere.
17.2 How to navigate the site when submitting form enquiries
To ensure that our advisory service can respond to your enquiry, the website stores information in your browser’s cache during your visit (sessionStorage, keymm-travel), which sections you have viewed — such as ‘Interior Design’ and ‘Wall greenery’. Only these categories are saved; no complete history is stored, and the note only applies to the open browser tab: if you close it, the note disappears.
It will be broadcast only then, if you submit a form yourself — it will be sent to HubSpot (section 9) along with your enquiry, so that your contact person knows what the matter is, rather than having to ask you all over again. If you do not submit a form, the note will never leave your browser. Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in providing appropriate advice); you may object to the processing at any time.
17.3 Chat assistant ‘Mr MOOSMOOS’
The chat assistant is a rule-based help programme that runs entirely within your browser. It responds solely on the basis of a predefined knowledge base, using no artificial intelligence and does not ask for any contact details. Your details will not be sent to us — There is no chat log on our server, and nobody here can read your conversation.
If you have given your consent for the ‘Statistics’ category, the wizard will store a note in your browser’s cache (localStorage, key mm_chat_log, up to a maximum of the last 400 entries): the time, a random session ID, the page accessed, your question and the ID of the reply. Email addresses and telephone numbers are automatically replaced by [E-MAIL] or [TELEPHONE] replaced. Without this consent, nothing will be stored. The cookie remains on your device; you can delete it by clearing your browser’s website data. Legal basis: Article 6(1)(a) of the GDPR, Section 25(1) of the TDDDG.
18. Advertising by email / Direct marketing
We use your email address, which we have received in connection with the sale of a product or service, to send you electronic advertising for our own, similar products or services, provided you have not objected to this use (Section 7(3) of the Unfair Commercial Practices Act (UWG)). Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in direct marketing). You may object to this use at any time.
19. Data transfers to third countries
Some of the service providers we use are based in the USA. The European Commission has issued an adequacy decision for the USA in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Service providers that have obtained TADPF certification guarantee an adequate level of data protection. Where service providers are not TADPF-certified, data transfers are carried out on the basis of standard contractual clauses (Article 46(2) and (3) of the GDPR).
20. Retention period
We only retain personal data for as long as is necessary for the relevant processing purpose or as required by statutory retention periods (in particular, the 6- and 10-year retention periods under commercial and tax law). Once the retention periods have expired, the data is routinely deleted.
21. Validity and amendments to this privacy policy
This privacy policy is current as of August 2026. We reserve the right to amend this privacy policy as necessary to bring it into line with changes in the legal framework or changes to our data processing practices. You can always find the latest version on our website.
Further legal information: Legal Notice · Terms and Conditions
14. Links to social media platforms
On our website, there are No social media plugins have been integrated. We simply provide links to our profiles on Instagram, Facebook, LinkedIn, Pinterest and YouTube. These are standard links: a connection to the relevant network is only established once you click on the link. It is only from that moment onwards that the relevant network’s privacy policy applies.