Privacy policy

Who

Planted is run by Nick Verschueren (DorgArt, Beerse, Belgium), the data controller under the GDPR. Questions or requests: garden@dorgart.be.

What data and why

• Account: name, username, email address and password (encrypted) — to make your account work.
• Profile and content: what you fill in or post yourself: country and city, plants, collections, photos, blogs, questions and comments — to make the platform work.
• Security: sign-ins with IP address and browser — to detect abuse.
• Usage: when there are problems, an administrator can temporarily turn on tracking: the pages you visit, what you do and your IP address — to track down errors.
• Reports and requests: what you fill in on a bug report, feedback or beta request, with your IP address. For a bug report also your browser, operating system, screen size, language, time zone, connection type, the page and recent errors in the browser — to follow up on your question or problem.
• Error reports: technical details of errors, with only your user ID (no name, email or IP).
• Newsletter: only if you subscribe; you can unsubscribe via the link in every email.
• Push notifications: only if you turn them on in your profile: a push address from your browser for each device — to deliver your notifications. It is removed when you turn them off or delete your account.

The legal basis is the agreement with you (your account), our legitimate interest (security, troubleshooting, backups) and your consent (newsletter, push notifications).

Who processes data for us

We do not share your data with third parties, unless that is needed to make Planted itself work. We do not sell data, show no ads and pass nothing on for marketing. These service providers process your data only on our behalf and only for their task:

• Hetzner (Germany) — server and database
• Cloudflare — storage and delivery of photos, and storage of backups
• Resend — sending emails
• Sentry (EU) — error reports
• Your browser's push service (e.g. Google or Mozilla) — delivering push notifications, only if you turn them on. The content is encrypted; the push service cannot read it.

How long

As long as your account exists. After you delete your account, data remains in our backups for at most 30 more days. Error reports are deleted automatically after Sentry's retention period. Bug reports, feedback and beta requests are kept after that too, separate from your account. To have them deleted, email garden@dorgart.be.

Your rights

• Access and portability: download all your data via your profile → "Download my data".
• Correction: change your data in your profile.
• Deletion: delete your account via your profile. You then choose whether your photos stay in the plant guide anonymously (without your name), or are deleted as well. What is deleted and what stays is explained on Delete your account.
• Objection or other questions: email garden@dorgart.be.

You can also file a complaint with the Data Protection Authority (Gegevensbeschermingsautoriteit).