Privacy & Cookies

Declaration on the obligation to provide information (Privacy Policy)

Welcome to Plantalytix! This Privacy Policy describes the practices of microgreenbox gmbh (Plantalytix) regarding the collection, use, and disclosure of information (including personal information, as defined below) through our website www.plantalytix.com. We therefore process your data exclusively on the basis of the legal provisions (GDPR, TKG 2003). In this data protection information, we inform you about the most important aspects of data processing in the context of our website.

Collection of personal data when you visit our website

When you use our website, we only collect personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to show you our website:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Displayed page
• amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software

Cookies

Cookies are small text files that are sent when you visit a website and are temporarily stored on the hard drive of the user of the website. If the corresponding server of our website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can then evaluate the information obtained through this procedure in various ways. For example, cookies can be used to control advertising or make it easier to navigate on a website. If the website user wishes to prevent the use of cookies, he or she can do so by making changes locally in the Internet browser used on his computer, i.e. the program used to open and display websites (for example, Internet Explorer, Mozilla Firefox, Opera or Safari).

Cookie settings

Open Settings

Cookies used

Transfer of data to third parties

We may share your personal data with third parties if it is necessary to comply with our contractual or legal obligations. These include, for example, shipping service providers, payment service providers and tax authorities.

Support Ticket Request

If you contact us via a support ticket on the website, the data you provide will be stored by us for the purpose of processing the request and for the duration of the business relationship. We do not pass on this data without your consent.

Contact Us

If you contact us via the contact form on the website or by e-mail, the data you provide will be stored by us for the purpose of processing the request and for the duration of the business relationship. We do not pass on this data without your consent.

Using CleanTalk Anti-Spam

Our website uses the CleanTalk Anti-Spam plugin to prevent spam activity and ensure the security of the website. This plugin stores certain information in the browser’s Local Storage to distinguish between real users and spam bots.
The data stored in Local Storage includes, but is not limited to:

• Timestamps and interaction data:
  • apbct_page_hits (number of page views)
  • ct_fkp_timestamp, ct_ps_timestamp (timestamps for user interactions)
  • ct_mouse_moved, ct_has_key_up, ct_has_input_focused, ct_has_scrolled (detection of mouse movements, keystrokes, focus on input fields)
• Technical specifications for bot detection:
  • bot_detector_event_token, bot_detector_has_scrolled, bot_detector_pointer_data (detection of user behavior for spam detection)
  • bot_detector_browser_supports_cookies, bot_detector_webgl_support (Technical information about the browser)
  • bot_detector_user_agent (Browser User Agent Analysis)
  • bot_detector_referrer, bot_detector_referrer_previous (Referring websites for spam analysis)
• Spam checks:
  • ct_checked_emails, ct_checked_emails_exist (checking email addresses for spam lists)
  • ct_checkjs (check if JavaScript is enabled)
• Other detection mechanisms:
  • apbct_visible_fields (analysis of visible spam detection forms)
  • apbct_headless, bot_detector_headless (check if a headless browser is used)
  • ct_screen_info, ct_timezone (screen and time zone information)

Purpose of data storage

The data collected is used exclusively to prevent spam and to ensure the security of our website. They are not used for advertising purposes and are not shared with third parties, except for verification by the CleanTalk cloud service.

Storage period and deletion

The data in Local Storage remains on the user’s device and is not automatically deleted. Users can manually remove the stored data in the settings of their browser .

Legal basis for processing

Storage is carried out in accordance with Art. 6 (1) (f) GDPR (legitimate interest) , as it is necessary for the security and protection of the website against misuse.

Using Google Tag Manager

Our website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags from one interface. The tag manager itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool ensures that other tags are triggered, which in turn may collect data. Google Tag Manager doesn’t access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager.

Use of Tags

We use Google Tag Manager to integrate various third-party tags. These third-party tags may collect personal information, such as IP address, and may use cookies to process data.

• Google Analytics: We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies that enable an analysis of your use of the website.
• Other Third-Party Tags: In addition, other tags can be integrated that collect different data.

Using Hotjar (analytics tool)

This website uses Hotjar, an analysis tool provided by Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta. Hotjar allows us to measure and analyze user behavior (mouse movements, clicks, scroll height, etc.) on our website. The information generated by Hotjar about your user behaviour on our website will be transmitted to Hotjar Ltd.’s servers in Ireland and stored there. This includes your IP address, screen size, device type and operating system, reference page, geographic location (country only), and your preferred language used to display our website. The information that Hotjar collects using the tracking code and “cookies” is stored on Hotjar servers in Ireland.

Hotjar will use this information to analyze your use of our website, to compile reports on usage, as well as to provide other services related to website usage and internet analytics of the website. The information generated from the tracking code and cookies is not used to identify you personally and is not combined with personal data.

The use of Hotjar and the storage of Hotjar cookies is based on Art. 6 (1) (f) GDPR: The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time.

For more information about Hotjar and the data collected, please refer to Hotjar’s privacy policy at https://www.hotjar.com/legal/policies/privacy/. You can object to the storage of Hotjar cookies and the use of this tool by activating “Do Not Track” in your web browser or by using the opt-out option on the Hotjar website: https://www.hotjar.com/opt-out.

Social Media

In various areas of our website, we provide you with links to social media platforms (e.g. Facebook, Instagram, WhatsApp, …). You can recognize these social media platforms by the logo of the respective social media provider. When you use our website, no personal data is initially passed on to the providers of the social media platforms. Only by clicking on these social media icons will you be redirected to the website of the respective social media provider and then transmit personal data to the provider. You will then leave our website and we will no longer have any influence on the data and data processing processes that are then collected. The full scope of the data collection, the purpose of use and the storage periods are not known to us from these third-party providers. If you click on such a link, the social media provider will receive the information that you have accessed the corresponding page of our website. Furthermore, the data listed in the section “Collection of personal data on our website” of this statement will be transmitted. This process is done regardless of whether you have a personal account with that social media provider and are logged in to it. If you are logged in to the social media provider, the assignment is made directly to your account. This personal data is stored by the social media provider as user profiles and uses them for the purposes of advertising, market research and the design of its website. Your data will also be evaluated if you are not logged in to this social media provider. You can object directly to the creation of these user profiles at the respective social media provider. You can find more information about the purpose and use of your personal data directly in the privacy policy of the respective social media provider. Dorgt also provides you with detailed information about your rights in this regard and setting options to protect your privacy.

Your rights

In principle, you have the rights to information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. In Austria, this is the data protection authority.

Principles of personal data processing

The processing of personal data is based on strict principles that regard the protection and security of the data as well as the rights of the data subjects as the highest goods.

Legality and transparency

Data processing is carried out lawfully, in good faith. The data subject will be informed of the planned processing and handling of the data when the data is collected. In this way, those affected are informed at least about the following points:

Earmarking

The data is collected and processed for specified, explicit and legitimate purposes. The processing of the data will not be carried out in a manner incompatible with these purposes.

Data minimization

Only those data are collected and processed that are absolutely necessary for the specified purposes. If it is possible to achieve the purpose and the effort is reasonable, only anonymised data will be processed.

Storage limitation and deletion

Personal data will be deleted as soon as the purpose for which it was originally collected expires and statutory retention periods do not prevent deletion. If there are legitimate interests in this data in individual cases, they will continue to be stored until the interest worthy of protection has been legally clarified.

Data integrity

Data secrecy applies to personal data. The data must be treated confidentially in its handling and will be protected against unauthorized access, unlawful manipulation or disclosure as well as against loss and destruction by appropriate organizational and technical measures.

Factual accuracy

Personal data must be kept accurate, complete and up-to-date. Reasonable steps will be taken to correct outdated, inaccurate or incomplete data.

Commitment to data secrecy

All our employees are contractually bound to secrecy and are regularly informed and trained on the secure handling of personal and other critical data.

Rights of data subjects

Every data subject whose personal data is processed by us has the opportunity to invoke and assert their own rights at any time. To exercise your rights as a data subject, you can contact sa***@*********ix.com in writing by e-mail at any time.

Information

Data subjects can request information at any time about what personal data about them is being processed and what purposes this processing serves.

Correction

Data subjects have the right to request the immediate rectification of inaccurate personal data concerning them.

Restriction

Data subjects have the right to restriction of processing if the accuracy of the data concerning them is contested, the processing is unlawful, the data is no longer necessary for the processing or the data subjects have objected to the processing.

Revocation

Data subjects have the right to object to the processing of personal data concerning them at any time.

Transferability

Data subjects have the right to receive the personal data concerning them that they have provided to us in a structured, commonly used and machine-readable format. You also have the right to request the transfer of this data to another controller, if technically feasible. Portability only applies to personal data processed by automated means.

Erasure – right to be forgotten

The data subject has the right to demand the immediate deletion of personal data concerning him or her if the legal basis for the processing of the data is missing or no longer exists, the data processing is objected to, the data processing is unlawful and no statutory retention periods make deletion impossible. Data security also has a high priority with regard to the rights of data subjects, which is why the assertion of data subject rights is only possible after the data subject has been identified beyond doubt. You also have the right to lodge a complaint with the data protection authority at any time.

Transmission

The transfer of personal data to recipients outside the company as well as recipients in EU third countries will only take place in accordance with applicable laws and on a lawful basis and in compliance with the highest confidentiality and data security. We use various processors for processing. All processors are contractually obliged to comply with the legally applicable data protection regulations with a processor agreement.

You can reach us at the following contact details:

microgreenbox GmbH
Galgenau 39
4240 Freistadt

Changes to this Privacy Policy

We reserve the right to amend this privacy policy in accordance with the statutory data protection regulations. The currently valid version can be viewed by you at any time in the data protection section of our website.