Privacy Policy

1. Data Controller Details

GreenGro Plants s.r.o. is committed to protecting the personal data it processes. This policy has been prepared in accordance with EU Regulation 2016/679 (GDPR).

2. Personal Data Processed

When placing an order

• Full name
• Delivery and billing address
• Email address
• Phone number (optional)
• Payment data (card details are processed by the payment provider and are not stored by us)

When contacting us

• Name
• Email address
• Free-text content of the message

When visiting the website (automatically collected data)

• IP address (anonymised)
• Browser type and version
• Pages visited, time and duration of visit
• Referring page URL

We do not process special categories of personal data (health, political, religious, etc.).

3. Purpose and Legal Basis of Processing

• Order fulfilment: necessary for the performance of a contract (Art. 6(1)(b) GDPR)
• Invoicing: compliance with a legal obligation (Art. 6(1)(c) GDPR)
• Customer service: contractual obligation and legitimate interest (Art. 6(1)(f) GDPR)
• Newsletter: exclusively based on voluntary consent (Art. 6(1)(a) GDPR) – consent may be withdrawn at any time
• Web analytics: legitimate interest in improving the website (Art. 6(1)(f) GDPR)

4. Retention Periods

• Order data: 8 years in accordance with accounting regulations
• Contact enquiry data: 2 years from closure of the matter
• Newsletter subscriber data: until consent is withdrawn
• Web analytics data: maximum 26 months (in anonymised form)

Upon expiry of the retention period, data is promptly deleted or anonymised.

5. Data Transfers and Processors

Personal data is shared only with the following partners, to the extent necessary for order fulfilment:

• Delivery partners (GLS General Logistics Systems Hungary) – delivery address and name
• Payment providers (e.g. Stripe, PayPal) – payment data; these controllers act in accordance with their own GDPR policies
• Websupport Magyarország Kft. – hosting provider, 1132 Budapest, Victor Hugo utca 18–22.; websupport.hu
• GLS General Logistics Systems Hungary Csomag-Logisztikai Kft. – courier service, 2351 Alsónémedi, GLS Európa u. 2.
• mufis.sk – invoicing software; mufis.sk

Data is transferred to third countries (outside the EU/EEA) only where the safeguards specified in Chapter V of the GDPR are met (e.g. adequacy decision, standard contractual clauses).

Personal data is disclosed to authorities only on the basis of a statutory obligation and with judicial authorisation.

6. Data Security

Data is protected by HTTPS encryption, password protection, and access controls. Regular backups are performed. In the event of a data breach, we will notify the competent supervisory authority within 72 hours and, where necessary, the affected individuals as well.

7. Rights of Data Subjects

To exercise your rights, write to info@greengroplants.com. We will respond within 30 days, or in exceptional cases within a maximum of 90 days (we will inform you if this is the case).

8. Cookies

Our website uses the following cookies:

• Strictly necessary cookies: essential for the operation of the website (cart, session). No consent is required for these.
• Analytical cookies: for analysing website usage (Google Analytics / Netlify Analytics). Activated only with consent.
• Marketing cookies: currently not used.

Cookie settings may be changed or disabled in your browser at any time. Essential cookies cannot be disabled without leaving the site.

9. Contact and Right to Complain

For data protection requests or complaints, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the competent data protection supervisory authority. The authority with jurisdiction over the controller's registered seat is the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR):

• Website: dataprotection.gov.sk
• Email: statny.dozor@pdp.gov.sk
• Address: Hraničná 12, 820 07 Bratislava, Slovak Republic

You also have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.