Privacy Policy

1. Controller

OASIS Energie Bauernhof GmbH & Co. KG
represented by Ansgar Dietz
Haid 61, 72818 Trochtelfingen
E-mail: info@oasis-rassegeflügelhof.de
Phone: +49 1520 987 21 06
Website: oasis-website-nine.vercel.app

2. What data we collect and why

a) Sponsorship registration (paper form and online form)

When you register for a chicken sponsorship, we collect the following data:

• First and last name
• Street, house number, postcode, town
• Phone number
• E-mail address
• IBAN (for the SEPA Direct Debit Mandate)

Purpose: conclusion of the contract, handling of deliveries, invoicing and collection of the monthly membership contribution by SEPA direct debit.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

b) Contacting us by e-mail or phone

If you contact us, we store the details you provide (name, e-mail address, phone number, content of your message) in order to deal with your enquiry.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries)

3. Processors and recipients

We use the following processors (Art. 28 GDPR) to provide our services. A data processing agreement (DPA) is in place with each of them:

• Supabase Inc. – database hosting (PostgreSQL). Location: eu-central-1 (Frankfurt am Main). This server holds all registration data, IBANs (encrypted with AES-256-GCM) and internal notes.
• Resend, Inc. – sending of transactional e-mails (registration confirmation, internal notification mailbox). Where e-mails are sent from a US region, the transfer to a third country is based on the EU Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR.
• Vercel Inc. – hosting of the website. Preferred region: EU (Frankfurt).
• OpenStreetMap Foundation (Nominatim) – conversion of the address given at registration into geographic coordinates, so that delivery routes and the internal map in the admin area can be displayed. No name or contact details are transmitted, only the address itself.

In addition, we transmit your IBAN and mandate to our bank as part of the SEPA direct debit procedure. This transfer is strictly necessary in order to perform the contract.

No further transfer to third parties takes place.

4. Retention period

Your data is stored for as long as the sponsorship exists. After the sponsorship ends, your data is retained in accordance with statutory retention obligations (in particular 10 years pursuant to § 147 AO for tax-relevant records) and is deleted thereafter.

5. Your rights as a data subject

Under the GDPR you have the following rights:

• Access (Art. 15 GDPR): you may request information about the data we hold about you.
• Rectification (Art. 16 GDPR): you may request that inaccurate data be corrected.
• Erasure (Art. 17 GDPR): you may request the deletion of your data, provided no statutory retention obligations prevent this.
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR): you may object to the processing of your data at any time.

To exercise your rights, please contact: info@oasis-rassegeflügelhof.de

6. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the competent data protection supervisory authority:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)
Königstraße 10a, 70173 Stuttgart, Germany
Phone: 0711 615541-0
E-mail: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de

7. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

8. Currency of this policy

This privacy policy applies from April 2026 and will be updated as required. The current version is always available on our website.