Data controller

Nicolas HANQUEZ, sole trader, [email protected]. Full details are available in the legal notice.

Data processed and purposes

Data	Purpose	Legal basis
First name, last name, email address, language, account identifier	Creating and managing your account, signing you in	Performance of the contract
Garden address and matching geographic coordinates, outline, zones, plants, soil type, watering history	Calculating watering, the growing calendar, disease risks and upkeep tasks	Performance of the contract
Connected device accounts, devices and their readings	Operating your devices and feeding their measurements into the calculations	Performance of the contract
Subscription status, purchase history, billing data	Managing your subscription and meeting our accounting obligations	Performance of the contract and legal obligation
Device notification token	Sending the notifications you have accepted	Consent
Email preferences and proof of your consent	Honouring your choices and being able to evidence them	Legal obligation
Screens viewed, main actions, technical device information, measurement identifiers and advertising identifier	Measuring how the app is used and how our campaigns perform	Legitimate interest
Email address and content of your messages	Answering your requests	Legitimate interest
Technical logs	Service security and abuse prevention	Legitimate interest

News and promotional emails are only sent with your consent, which you can withdraw at any time from the app settings or through the unsubscribe link in every email.

Recipients

Your data is shared, strictly as needed, with the following categories of recipients: hosting and infrastructure provider, email delivery provider, payment and subscription management providers, audience measurement and advertising measurement providers, weather data provider, push notification providers. If you link a connected device account, the data required to operate your devices is exchanged with the manufacturer concerned, which acts as controller for its own processing. Your data may also be disclosed to the authorities where the law requires it. It is never sold or rented.

Transfers outside the European Union

Data is hosted in the European Union. Some providers belong to groups established outside the Union; any transfers are governed by the European Commission standard contractual clauses or by an adequacy decision.

Retention periods

Account, garden and usage data is kept for the lifetime of the account and deleted when it is closed, subject to periods imposed by law. Billing records are kept for ten years under accounting obligations. Proof of consent is kept for as long as needed to produce it in the event of an inspection. Audience measurement data is kept for fourteen months. Support requests are kept for three years after the last exchange.

Security

Appropriate technical and organisational measures are in place to protect your data, including encryption of communications and of the access granted to your connected devices.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give instructions about what happens to it after your death. You can edit your information and permanently delete your account from Profile then Settings. For any other request: [email protected]. You may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

Trackers

The app uses audience measurement identifiers, as well as your device advertising identifier to measure how our campaigns perform. You can object from your device settings: on iOS, Settings then Privacy and Security then Tracking; on Android, Settings then Google then Ads. The gardenconnect.app website sets no audience measurement or advertising tracker.

Minimum age

The services are available from the age of 15. Paid subscriptions are reserved for adults.

Changes

This policy may be amended. The date of the latest update appears at the top of this page.