Last modified: 27 June 2023
The Controller is:
PEAT GmbH
Kastanienallee 4
10435 Berlin
Germany
E-Mail: privacy@plantix.net
Geschäftsführerin (Managing Director): Simone Strey
The Data Protection Officer of the Controller is:
Dennis R. Jlussi
paxaru Rechtsanwaltsgesellschaft mbH
Berliner Allee 13
30175 Hannover
E-Mail: datenschutz@paxaru.com
This Privacy Policy applies to the processing of personal data in the context of
a) the websites www.peat.ai and www.plantix.net (“Website”), and
b) the mobile applications Plantix and Plantix-Preview (“App”),
c) the digital community Plantix Community (“Community”).
The Website, the App and the Community are collectively referred to as the “Services”. This Privacy Policy is to be read in conjunction with the Plantix Terms of Use (“Terms of Use”) as provided on the Website and/or App.
When using the Website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server. If you view our Website, we collect the following data:
This data will be processed by us for the following purposes:
The main functionality of the App is to upload pictures of plants that are affected by a disease or pest in order to receive an automated analysis of what the disease or pest possibly is. If you upload a picture of a plant, we collect in connection with such picture the following data:
for the purpose of improving the analysis results and algorithms, and improving the performance, stability, security and user experience of the App, based on a Legitimate Interest in these purposes. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. For the latter purposes, we will store and process the data for the lifetime of the Services (without prejudice for any ‘right to be forgotten’ request from you – see below). Generally, after your Community User ID has been deleted (see below for details) or if you take the image without being logged in, the data is anonymous. However, in individual cases you may still be indirectly identifiable through the location data (e.g. if you take images on your private property); we will not undertake any efforts to identify you by this data, and will not co-operate in doing so unless we are legally obliged and ordered to do so by a competent authority or court.
This data is processed for Performance of Contract in order to analyze the possible disease of pest, and (if you are logged in as a Community user) in order to connect the image to your account.
If you use Plantix Dukaan, in addition to the terms contained herein, the privacy policy of Plantix Dukaan shall also apply.
The App provides Push Notifications that appear in the notification pane of your device. The notifications include information about responses to your Community contributions and important information from us. We do not use push notifications for advertising purposes. You can disable push notifications for individual Community contributions ‘unsubscribing’ from the respective contribution, or disable push notifications entirely in the App settings.
If you use the Community as a part of the App, all information above about the App is applicable to the Community as well.
If you sign up for and use the Community, we collect and process the following personal data of you:
This data is processed by us for the purpose of providing the Community to you and other users. In particular, the base data is required to maintain your user account, and to contact you via e-mail or push notifications. This data is processed for Performance of Contract. We will restrict the processing of this data once you delete your user account. Your data will further be stored in order to document your Community participation for the purposes of legal defense, which is a Legitimate Interest, for the duration of three full years, and afterwards be deleted.
In the course of you using the Community, we collect, compute and process the following personal data of you:
The data bases on interactions of users within the Community and is processed in order to make the Community work in a way that users can interact and trust each other. The follower connections base on you following other users or other users following you, respectively, within the Community. Also, we allow users to up-vote or down-vote certain Community contributions of other users in order to support the quality of contributions. Based on the interactions, we compute users ranks and reputation for your user account in order for other users to get an idea of your seniority within the Community. This data is processed for Performance of Contract. If you choose to delete your Community account, you may request from us to anonymize the data (your contributions will be marked as being from a deleted user). Otherwise, we will continue to store this data out of our Legitimate Interest to maintain Community content that bases on interactions usable for all users (without prejudice for any ‘right to be forgotten’ request from you – see below).
When you contact us by e-mail or via a contact form, we will store and process your e-mail address and, if you provide it, your name and telephone number in order to respond to your message. We will restrict the processing of the data arising in this context after processing is no longer necessary. Your message and our response will further be stored in order to fulfill legal obligations (German trade and tax laws, §§ 257 HGB, 147 AO) for the duration of six full years, and afterwards be deleted.
For our App, we use Firebase Crashlytics and Google Analytics for Firebase, services provided to us by Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). With both services, we track the behavior of the App (in terms of performance and crash reports) as well as the usage by users. This includes ‘clickstreams’, i.e. which functions of the App you use in which order. You can find the privacy notice for Firebase Crashlytics here and the privacy notice for Google Analytics for Firebase here.
We collect the following data in this context:
We collect this data in order to fix eventual problems and further improve our App in terms of technology, stability, security and user experience, based on a Legitimate Interest in these purposes.
We will fully anonymize the data within a couple of minutes after your usage session. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
Our Services use Google Analytics, a web analysis service provided by Google. With this service, we track the behavior of users in order to generate anonymous statistics. This included ‘clickstreams’, i.e. which functions of the Website or the App you see in which order. Google Analytics uses Cookies. You can find further information about Google Analytics’ privacy policy at https://www.google.com/analytics/terms/.
We collect the following data in this context:
We collect this data in order to fix eventual problems and further improve our Services in terms of technology, stability, security and user experience, based on a Legitimate Interest in these purposes. We will fully anonymize the data within 26 months after your usage session. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
We occasionally send out surveys, conduct user and other research and may invite you to participate in such surveys and research so that you can provide us with your feedback and ideas. Participation in our surveys and user research is of course voluntary.
We will process personal data in that context for purposes of our legitimate interests in accordance with GDPR article 6.1(f): to provide our product development and marketing teams with relevant information and to enable such research projects. To record audio calls we will ask for your permission. In such cases processing your data is subject to your consent in accordance with GDPR article 6.1(a), as may be applicable to you.
The surveys and research may take different forms from face-to-face discussions to audio calls or online survey forms. You may be able to participate via different methods, such as via our website, or speaking to our employees, Representatives or Partners, or through a third-party website or a survey form. Please note that such third-party tools (such as web forms or survey tools that you may be directed to) may process personal data for their own purposes, such as via cookies. Please bear in mind if you provide personal data directly to a third party, such as through a link in the App, the processing is typically based on their policies and standards.
We will collect your identifiers such as your contact details and IP address, and audio recording (if you give us your consent, where applicable). We will also collect the personal data that you voluntarily give to us in such surveys and research, for example as may be included in your answers.
We collect and use your personal data to the extent needed to carry out the research and to stay in touch with you for any possible follow-up. We will keep the research data, including your personal data, for as long as we consider the research data to be useful for example for product development purposes. The exact time depends on the research, the answers and the possible use case.
Within the App, you can opt-out from the collection of data through all mentioned Google services by the use of the opt-out switch in the App settings.
All Services are based on internet connections. Your data is transferred to us via the internet and vice versa. Also, the data you make public through the Services (e.g. your plant pictures, profile information, Community contributions) are transferred to other users of the service via the Internet. This happens in the course of Performance of Contract. Internet connections are potentially worldwide. Depending on your location, or the locations of other users respectively, data may be transferred to and from countries that have no adequate level of data protection.
You may optionally choose to sign up for the Community via Google Sign-In, using a pre-existing Google account. By doing so, you instruct Google to transfer your personal data (as indicated in the sign-up process by Google; we may request nickname, e-mail address, telephone number and user picture) to us, while Google in return receives the information that you signed up for the Community. Google, LLC, is located in a third country, the United States of America, and has certified itself under the EU-US Privacy Shield program that the EU Commission found to provide adequate protection of personal data. Please consult Google’s terms and privacy policy for more details. The legal basis is Performance of Contract. By clicking on Sign-In via Google, you recognize having read and accepted this Privacy Policy and Terms of Use
You may optionally choose to sign up for the Community via Facebook Connect, using a pre-existing Facebook account. By doing so, you instruct Facebook to transfer your personal data (as indicated in the sign-up process by Facebook; we may request nickname, e-mail address, telephone number and user picture) to us, while Facebook in return receives the information that you signed up for the Community. Meta Platforms, Inc., is located in a third country, the United States of America, and has certified itself under the EU-US Privacy Shield program that the EU Commission found to provide adequate protection of personal data. Please consult Meta’s terms and privacy policy for more details. The legal basis is Performance of Contract. By clicking on Sign-In via Facebook Connect, you recognize having read and accepted this Privacy Policy and Terms of Use.
You may optionally choose to sign up for the Community via a one time password (OTP) using your mobile phone number. By doing so, you instruct us to send you an OTP in order to verify your identity and maintain your account security.
We do not share your personal data with third parties outside of Plantix’s organization unless one of the following circumstances apply:
1. If you have given your Consent to the processing of your data and/or the receipt of marketing e-mails, you can withdraw your Consent at any time with effect for the future. To do this, notify (e.g. by e-mail) the Controller mentioned under 1. above or its data protection officer.
2. To the extent we base the processing of your personal data on a Legitimate Interest, you may object to the processing. To do this, notify (e.g. by e-mail) the Controller mentioned under 1. above or its data protection officer. If you wish to file such an objection, we kindly ask you to explain the reasons why your interest outweighs ours. In the event of your objection, we will check the situation and either stop or adjust our processing of your data, or point out to you our overriding interest, on the basis of which we will continue our processing.
You are entitled to request from us:
If you wish to exercise one or several of these rights, please notify (e.g. by e-mail) the Controller mentioned under 1. above or its data protection officer.
If you wish to complain about data processing, please notify (e.g. by e-mail) the Controller mentioned under 1. above or its data protection officer.
You also have the right to file a complaint with the competent data protection supervisory authority. This is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information). If you reside within the European Economic Area (EEA), you may also choose to file your complaint with your local data protection supervisory authority.
This Privacy Policy was last updated on 23 June 2023. We reserve the right to amend this Privacy Policy. You can refer to the current version of the Privacy Policy at any time at: https://plantix.net/imprint/privacy-policy/. If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our Website, App and Community. Your continued use of the Service after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
Your use of the Services will be subject to our Terms of Use. You will have the rights, and be subject to liabilities, regarding your personal data as are specified under applicable laws.
By accessing and/ or using the Services, you consent to the collection, use, storage, transfer and processing of your personal data in accordance with this policy. Please read this Privacy Policy carefully to understand how your personal data is handled and your rights in its regard. If you do not agree with any of the terms contained in this Privacy Policy, please do not use or access the Services.
You must be aged 18 years or over to avail of the Services offered by us. If you are aged below 18 years, please ensure your use of our Services is consented to by your parent or legal guardian.
If an individual deletes or deactivates their account, then their personal data will be deleted as per requirements under applicable law.
We are committed to protecting your personal data from loss, theft and misuse. We take all reasonable precautions to safeguard the confidentiality of your personal data, including through use of appropriate organizational and technical measures.
While transferring your personal data to another body corporate or natural person, for purposes necessary to perform contractual obligations to you, we will make sure that this is done as required by applicable laws, and that the same level of data protection adhered to by us is adhered to by such entity to whom the data is being transferred.