Privacy Notice

1. Controller details

GreenGro Plants s.r.o. is committed to protecting the personal data it processes. This notice has been prepared in accordance with the EU General Data Protection Regulation 2016/679 (GDPR).

2. Personal data we process

When you contact us (via the Website's contact form or by email)

• Name
• Email address
• Country (must be selected in the form)
• The free-text content of your message
• The time the form was submitted, and the IP address and browser identifier recorded technically on submission (to filter out abuse and spam)

We send an automatic confirmation of your enquiry to the email address you provide.

When you visit the Website (technical data recorded automatically in the hosting provider's server log)

• IP address
• The time of the request and the address of the page opened
• Browser type and version
• URL of the referring page

The Website does not use any analytics or marketing tools.

We do not process any special categories of personal data (health, political, religious, etc.).

3. Purposes and legal bases of processing

• Replying to contact enquiries: at the request of the data subject, taking steps prior to entering into a contract (Article 6(1)(b) GDPR) and the controller's legitimate interest in replying to enquiries (Article 6(1)(f) GDPR). We use the country information only to reply to your enquiry in the right language and with information relevant to that country.
• Operation and security of the Website (data recorded automatically when you visit): legitimate interest (Article 6(1)(f) GDPR)

4. Retention periods

• Contact data: 2 years from the closure of the matter
• Server log data: retained for a short period under the hosting provider's (Netlify) own rules and then deleted automatically.

Messages submitted via the form are deleted from the hosting provider's system once the matter is closed; their retention period is also 2 years from the closure of the matter.

When the retention period expires, the data is deleted or anonymised without delay.

5. Data transfers and processors

We share personal data only with the following partners, to the extent necessary for the purpose of the processing concerned:

• Netlify, Inc. – hosting and delivery provider for the Website and processor of the contact form (storing submitted data, forwarding notification emails to the controller and sending the automatic confirmation email about your enquiry); 101 2nd Street, San Francisco, CA 94105, United States; netlify.com. Netlify, Inc. is based in the United States; a data processing agreement (DPA) has been concluded between the controller and Netlify, and data is transferred on the basis of the standard contractual clauses adopted by the European Commission.
• Websupport Magyarország Kft. – domain name registrar and email provider: operator of the info@greengroplants.com mailbox (where contact form notifications arrive) and provider of the shivamasterpack.com domain and email (the automatic confirmation email is sent from noreply@shivamasterpack.com); 1132 Budapest, Victor Hugo utca 18–22., Hungary; websupport.hu

We transfer data to third countries (outside the EU/EEA) only if the safeguards set out in Chapter V of the GDPR are met (e.g. an adequacy decision or standard contractual clauses).

We disclose personal data to authorities only where and to the extent required by law.

6. Data security

We protect data with HTTPS encryption, password protection and access restrictions. Data backups are handled by the systems of the hosting and email providers. In the event of a personal data breach, we will notify the competent supervisory authority within 72 hours and, where necessary, the data subjects as well.

7. Your rights

To exercise your rights, write to info@greengroplants.com. We will respond to your request within 30 days, or in exceptional cases within a maximum of 90 days (in which case we will inform you).

8. Use of cookies

The Website does not use cookies, nor does it use any analytics or marketing tools. If this changes in the future, we will update this notice beforehand and ask for your prior consent to any cookies that require it.

9. Contact and right to complain

For data protection requests or complaints, contact us:

If you are not satisfied with our response, you may lodge a complaint with the competent data protection supervisory authority. The authority competent for the controller's registered office is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR):

• Website: dataprotection.gov.sk
• Email: statny.dozor@pdp.gov.sk
• Address: Hraničná 12, 820 07 Bratislava, Slovak Republic

Under Article 77 GDPR, you may also lodge a complaint with the supervisory authority of the EU/EEA country where you live or work. Data subjects in Hungary may also contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): naih.hu, 1055 Budapest, Falk Miksa utca 9–11.