1. Controller
Responsible for data processing on this website within the meaning of the GDPR is:
PermaNatura
TT Systems & Designs
Owner: Massimiliano Tonon
Pürstlingstraße 27
83024 Rosenheim, Germany
Email: [email protected]
For privacy-related questions please contact the address above directly.
2. Privacy at a glance
The following notes provide a simple overview of what happens to your personal data when you visit or use PermaNatura. Personal data is any data with which you can be personally identified.
- PermaNatura is ad-free. We do not sell data to third parties.
- The database and files are hosted by Supabase in Zurich (Switzerland). Some service providers, for example for AI and maps, are based in the USA (details below).
- You can request access, deletion and data export at any time.
- AI features only run when you call them yourself.
3. Data collection when visiting the website
3.1 Server log files
When pages are accessed, technical information is automatically stored (server logs): IP address (anonymised after 7 days), browser type, operating system, referrer URL, date and time of the request.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in operation and security of the website). Storage period: 30 days, then automatic deletion.
3.2 Cookies and local storage
We use technically necessary cookies (session management, authentication) and optional analytics cookies. The latter are only set with your consent.
Legal basis for necessary cookies: Art. 6 (1) lit. f GDPR. Legal basis for optional cookies: Art. 6 (1) lit. a GDPR (consent).
You can adjust your cookie settings at any time:
3.3 Hosting & infrastructure
PermaNatura runs on the cloud infrastructure of Supabase (Supabase Inc., region Zurich, Switzerland – EU Commission adequacy decision per Art. 45 GDPR). Supabase processes database data, authentication and file storage on our behalf per Art. 28 GDPR. A data processing agreement (DPA) is in place.
Additional infrastructure: Cloudflare, Inc., USA (pages delivered from the nearest data centre, DDoS protection); transfers to the USA rely on the EU-US Data Privacy Framework or the EU standard contractual clauses. Privacy information: cloudflare.com/privacypolicy.
3.4 Google Analytics
With your consent we use Google Analytics 4, a web analytics service by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies or similar technologies to analyse website usage. The IP address is anonymized; a transfer to the USA (Google LLC) may occur based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6 (1)(a) GDPR), which you can withdraw at any time with effect for the future via the cookie settings. Without consent, Google Analytics is not loaded.
Google privacy policy: policies.google.com/privacy.
Map, location & weather services
For the garden map, location search and the soil & weather features, approximate geo-coordinates (no name, no address) are transmitted — only when you use these features — to external map services: Esri (satellite/map tiles, USA), the OpenStreetMap Foundation (map tiles & address search 'Nominatim', EU/UK), Open-Meteo (weather data, EU/Germany), ISRIC – World Soil Information (soil data, EU/Netherlands) and the European Environment Agency EEA (protected areas, EU); and, when you use the optional national high-resolution aerial imagery, swisstopo (Switzerland) and basemap.at / City of Vienna (Austria). The sole purpose is to display the map and provide location-based gardening information. Plant photos are additionally loaded from Wikimedia servers (Wikimedia Foundation, USA); as with any image request, your IP address is transmitted to the server.
The legal basis is Art. 6(1)(b) and (f) GDPR (provision of the requested feature / legitimate interest in a functioning garden app). For Esri, data is transferred to the USA on the basis of the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework; the transmitted coordinates are deliberately coarse and do not by themselves identify you. You can avoid the transfer by not using the map, location and weather features.
Live location on the map: only when you tap “My location” does your browser or the app ask for permission and continuously determine your position (GPS/Wi-Fi). This position is processed exclusively on your device to show it as a dot on the map; it is not transmitted to PermaNatura or third parties and is not stored. The dot itself is drawn only on your device. The map does not jump to your position on its own; if you tap “Go there” or pan there, it loads the map tiles for that area from the map services named above, as for any other view – what is transmitted is the map area, not your exact position. Tracking stops as soon as you switch it off, leave the map or the page goes into the background. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time by switching it off or in your device settings.
AI features (garden chat, AI bed planning, plant identification)
For AI-assisted features (garden chat, AI bed planning, plant identification) your input (e.g. your question, selected bed/plant data, and for plant identification the uploaded photo) is transmitted for processing to our AI providers: the request runs through the Cloudflare AI Gateway (Cloudflare, Inc.) to the Google Gemini AI model (Google Ireland Ltd./Google LLC), or, if it is unavailable, to OpenAI (OpenAI, L.L.C., USA), which process the content as our processors solely to generate the response. Please do not enter sensitive personal data into the AI features.
The legal basis is Art. 6(1)(b) and (f) GDPR (provision of the requested feature / legitimate interest in AI-assisted gardening advice). Any transfer to the USA (Google/Cloudflare) is based on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. AI answers are generated automatically, may contain errors and are not binding professional advice; they are labelled accordingly in the app (Art. 50 AI Act).
Error & stability diagnostics (Sentry)
To detect technical errors and crashes we use Sentry (Functional Software, Inc., USA) with data processing on EU servers (Frankfurt, 'EU data residency'). When an error occurs, technical details are transmitted: the error message, browser/device type, operating system, app version and the path of the page last visited (without query parameters and without tokens — addresses are truncated before sending). For signed-in users only the internal user ID is included for error correlation; no name, e-mail address or IP address is stored.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable, secure operation). Anonymous performance measurements (load times) are collected only with your analytics consent (Art. 6(1)(a) GDPR) and can be disabled at any time via the cookie settings. Error data is deleted automatically after 90 days. Sentry's privacy policy: sentry.io/privacy.
4. Registration & user account
When you create an account on PermaNatura, we collect the following data:
- Email address (mandatory)
- Password (stored encrypted, never in plain text)
- Username (optional)
- Registration date and last login
Legal basis: Art. 6 (1) lit. b GDPR (contract performance). Storage period: until account deletion by the user or after 3 years of inactivity.
When signing in via Google OAuth, Google transmits the following data: email address, name and profile picture. Google Ireland Limited is independently responsible for this transmission: policies.google.com/privacy.
You can permanently and irreversibly delete your account at any time under account settings. All linked data (projects, beds, AI logs) will be deleted within 24 hours. account settings
5. Operational data (garden and field data)
As part of usage we store your garden and operational data:
- Project data (bed plans, plantings, locations)
- Field log entries (operations, harvest data)
- Soil analysis values
- Team access configuration
Legal basis: Art. 6 (1) lit. b GDPR (contract performance). This data is used solely to provide the service. It is not shared with third parties and not used for advertising.
You can export all operational data as CSV (settings → export) or request deletion.
6. AI-assisted features
PermaNatura uses AI services for the following features:
- AI garden advisor (chat): text inputs are transmitted to the AI service
- Plant recognition: the photo is sent for analysis. If you save the result to your collection, the photo is stored without location and camera data until you delete the entry; otherwise it is not stored
- Yield forecasts: aggregated operational data (no personal data) is used
AI services are provided by Google (Gemini) and OpenAI. Transfers to third countries (USA) take place on the basis of standard contractual clauses (Art. 46 GDPR).
Legal basis: Art. 6 (1) lit. b GDPR (for features you actively use) or Art. 6 (1) lit. a GDPR (consent for optional AI features).
AI requests are logged for 30 days for usage limiting and quality assurance, then anonymised.
7. Payment processing
No paid plans are currently active; no payment processing takes place. If paid plans are enabled, processing is handled via Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland); PermaNatura does not store any credit card data. Stripe processes payment data as an independent data processor.
Legal basis: Art. 6 (1) lit. b GDPR (contract performance). Stripe privacy policy: stripe.com/de/privacy.
8. Email communication
Transactional and notification emails (welcome, account confirmation, password reset, community/blog notifications, garden tips, team invitations) are sent via our hosting and email provider IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany). Processing takes place within the EU. Notification and tip emails are optional (opt-in) and can be unsubscribed at any time via the link in every email or in your profile. Privacy information: ionos.de/datenschutz.
Legal basis: Art. 6 (1) lit. b GDPR (contract performance).
Push notifications (mobile app)
In the mobile app (Android/iOS) you can optionally enable push notifications (e.g. garden reminders). After your explicit consent (system dialog + app setting), a pseudonymous device token is stored and transmitted for delivery to Google Firebase Cloud Messaging (on iOS devices this involves the Apple Push Notification service). This may involve a transfer to the USA (EU standard contractual clauses / EU-US Data Privacy Framework); notification contents never include sensitive data.
Legal basis: Art. 6(1)(a) GDPR (consent). You can disable push notifications at any time in the account settings or your device's system settings — the device token is then deleted. On sign-out or account deletion all push tokens are removed automatically.
9. Team features
When you invite team members, their email address is processed in order to send the invitation and to link the account upon registration. Invited people are informed about the data processing by PermaNatura in the invitation email.
Legal basis: Art. 6 (1) lit. b GDPR (contract performance).
9a. Feedback and information emails
If you send us feedback through the feedback page or the short survey in the app, we store your rating, your text, the type of feedback, the page, the language and the source (e.g. “from our information email”), linked to your account. We do not collect IP addresses, device data or click histories in the process. The purpose is to improve PermaNatura together with its users and to show you in the app what has become of your feedback. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the service). We only contact you by email about your feedback if you have expressly agreed to this (Art. 6(1)(a) GDPR); you can withdraw your consent at any time.
You can delete your feedback yourself at any time on the feedback page. It is included in the data export and deleted together with your account. We automatically delete completed or declined feedback after 24 months and all other feedback after 36 months at the latest.
We inform all account holders once by email about significant changes to the service, such as a new name or a new sender address (Art. 6(1)(b) and (f) GDPR). These emails contain no tracking pixels and no redirected links; we only record which account the email was sent to, so that nobody receives it twice. Every email contains an unsubscribe link.
10. Storage period & deletion
| Data category | Storage period |
|---|---|
| User account & profile | Until account deletion or 3 years of inactivity |
| Operational data (projects, beds) | Until account deletion |
| AI logs | 30 days, then anonymised |
| AI chat histories | Until you delete them, at the latest 12 months after the last message |
| Server logs | 30 days |
| Payment receipts (Stripe) | 10 years (statutory retention obligation) |
| Team invitations (email) | Until the inviter's account deletion |
| Push token (mobile app) | Until disabled, sign-out or account deletion |
| Cookie consent record | Until account deletion |
| Feedback | Until you delete it; deleted after 24 months once completed, otherwise after 36 months |
11. Your rights as a data subject
You have the right at any time to:
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR) – directly via account settings or by email
- Restriction of processing (Art. 18 GDPR)
- Object to processing (Art. 21 GDPR)
- Data portability (Art. 20 GDPR) – CSV export in account settings
- Withdraw consent at any time with effect for the future
- Complain to a supervisory authority (Art. 77 GDPR)
Competent supervisory authority:
Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.bfdi.bund.de
To exercise your rights, please contact: [email protected]
12. Data security
PermaNatura uses SSL/TLS encryption for all data transmissions. Passwords are stored exclusively as hashed values (bcrypt). Database access is secured at user level by Row-Level Security (RLS). AI endpoints are protected by rate limiting and WAF layers.
13. Changes to this privacy policy
We reserve the right to adjust this privacy policy in case of changes to the service or the legal situation. The current version is available at permanatura.com/datenschutz. In case of material changes, registered users will be informed by email.