This Privacy Policy explains how the personal data of plantcare. users is collected and processed when you create an account, place an order, contact support or use the app, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
The data controller is Luis Miguel Bautista Fraile, a natural person with NIF 49019521N and registered address at Calle Suiza 15, Spain.
For any data protection matter you can write to lmiguelbautista@gmail.com.
Data we process
Depending on your relationship with the service, the following categories of data may be processed:
- Identification and contact data: name, email and phone.
- Account and preference data: access credentials, language and configuration.
- Order and shipping data: postal address, postal code, city, country, product configuration and colour, and consents given.
- Technical data from your plantcare. devices: battery, moisture, temperature, connection status, waterings and configuration.
- Data arising from support and from the communications you send us.
Purposes and legal bases
Your data is processed for the following purposes, on the legal bases indicated:
- Creating and managing your account and providing the contracted service: performance of a contract (Art. 6.1.b GDPR).
- Processing orders and bank-transfer payments and providing related support: performance of a contract (Art. 6.1.b GDPR).
- Handling enquiries, requests and incidents: performance of a contract or legitimate interest (Art. 6.1.b and 6.1.f GDPR).
- Keeping the service secure and improving the product: legitimate interest (Art. 6.1.f GDPR).
- Complying with applicable legal obligations: legal obligation (Art. 6.1.c GDPR).
- Sending commercial or product communications, where appropriate: consent or legitimate interest under applicable law (Art. 6.1.a or 6.1.f GDPR).
Data recipients
Your data is not sold or transferred to third parties for commercial purposes. Providers of services necessary to run the service, such as hosting or delivery, may have access and act as data processors under Article 28 GDPR. Data may also be disclosed to public authorities where there is a legal obligation.
Retention period
Data is kept for as long as the relationship with the service lasts and, once ended, is duly blocked for the limitation periods of the applicable legal, contractual and tax liabilities.
Your rights
You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to lmiguelbautista@gmail.com and identifying yourself appropriately.
If you believe the processing does not comply with the regulations in force, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).