1. Overview and Data Protection Controller
   Welcome to www.flexirecline.com. Protecting your personal data is of utmost importance to us. This Privacy Policy informs you about how we collect, process, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Data Controller Information
The entity responsible for data processing (Data Controller) within the meaning of the GDPR is:

Company Name: Komfort GmbH

Brand Name: Flexirecline

Registered Business Address: Elbestraße 12-16, Rampentür 23, 45768 Marl

Commercial Register: HRB 17101，AG Gelsenkirchen

Privacy & Support Email: control@flexirecline.com

Telephone: +49 9090574800

2. Collection and Processing of Personal Data
   We collect and process personal data only when it is necessary for the performance of a contract, based on your explicit consent, or permitted by European and German statutory provisions.

Communication Data: When you contact us via email, telephone, or our contact forms, we process the personal information you provide (such as your name, email address, telephone number, and message content) to handle and respond to your inquiry.

Order and Transaction Data: When you purchase our folding recliner products, we collect identification details, shipping addresses, and order specifics necessary to fulfill our contractual obligations.

3. Payment Processing via Stripe
   To process payments securely for orders placed on www.flexirecline.com, we integrate payment services provided by Stripe.

When you make a purchase, your payment details (such as credit card information, bank account details, or billing address) are transmitted directly to Stripe as our designated payment processing partner. Stripe processes your payment data independently as an independent controller or processor in accordance with applicable payment industry standards (PCI-DSS) and its own privacy policy. We do not store your full raw financial card data on our local web servers.

4. Data Retention Periods
   In accordance with German and European statutory retention obligations, personal data is stored only for as long as necessary to fulfill the purposes for which it was collected, or as required by commercial and tax laws.

Tax and Commercial Records: Under the German Commercial Code (HGB) and the German Fiscal Code (AO), business letters, commercial books, and accounting records (including invoices, payment confirmations, and transaction data tied to orders) are subject to mandatory retention periods of 6 to 10 years.

Communication and General Records: Customer inquiries and correspondence not resulting in a commercial transaction are deleted once the matter is resolved, unless statutory limitation periods (typically up to 3 years under the German Civil Code, BGB) require continued temporary storage for potential legal defense.

5. Your Rights as a Data Subject
   Under Chapter III of the GDPR, you hold extensive rights regarding your personal data processed by Komfort GmbH. You may exercise these rights at any time by contacting us at control@flexirecline.com:

Right of Access (Article 15 GDPR): Request confirmation as to whether your personal data is being processed, along with access to specific details of that processing.

Right to Rectification (Article 16 GDPR): Request the correction of inaccurate personal data or completion of incomplete data stored by us.

Right to Erasure (Article 17 GDPR): Request the deletion of your personal data, provided statutory retention obligations or overriding legal grounds do not prevent immediate erasure.

Right to Restriction of Processing (Article 18 GDPR): Request limitations on how your data is processed under specific circumstances.

Right to Data Portability (Article 20 GDPR): Receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object (Article 21 GDPR): Object to the processing of your personal data based on legitimate interests.

Right to Lodge a Complaint: You have the right to lodge a complaint with a competent European supervisory authority, such as the State Data Protection Commissioner for North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).