This privacy policy explains which personal data we process when you visit our website www.plantlogiq.com, for what purposes and on what legal basis. Our customers’ use of the PLANTLOGIQ platform is governed by the respective contractual agreements, in particular the data processing agreements.

1. Controller

PLANTLOGIQ GmbH

Kreuzmattenstraße 13
79276 Reute
Germany

Represented by the Managing Director Stefan Kiene

Phone: +49 7641 932 85 21
Email: info@plantlogiq.com

If you have any questions about data protection, please contact us at info@plantlogiq.com or at the address above.

2. Hosting and server log files

Our website is hosted by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (“AWS”), in the Frankfurt am Main region (eu-central-1). AWS processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Each time the website is accessed, the server automatically records the following data in server log files: IP address, date and time of access, page or file requested, previously visited page (referrer), browser type and version, operating system, amount of data transferred and status code.

We process this data to deliver the website, ensure its stable operation and detect and prevent attacks. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Log files are deleted as soon as they are no longer needed for these purposes, unless they are needed for longer to investigate a security incident.

AWS is part of the Amazon group, headquartered in the USA. We cannot completely rule out a transfer to the USA. Amazon Web Services, Inc. is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR).

3. Encryption

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

4. Cookies and consent management

The cookie “pll_language” is technically necessary. It stores your language selection (German or English) for one year. The legal basis is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6(1)(f) GDPR.

We only use all other cookies and similar technologies (Google Analytics, Google reCAPTCHA) if you have consented via our consent banner. In that case, the legal basis is your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. We store your choice in a cookie on your device so that we do not have to ask you again on every visit; the legal basis for this is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR. You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link in the website footer.

5. Contact form, email and phone

If you contact us via the contact form, by email or by phone, we process the data you provide (in the contact form: name, email address and message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or to steps prior to entering into a contract, and otherwise our legitimate interest in responding to enquiries pursuant to Art. 6(1)(f) GDPR.

Information from the contact form is sent to us by email and may also be stored in our website system. Our email accounts are operated by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, as a processor within Google Workspace. A transfer to Google LLC in the USA is possible; Google LLC is certified under the EU-U.S. Data Privacy Framework.

We delete your enquiry once it has been fully dealt with, unless statutory retention obligations apply (in particular under commercial and tax law for business correspondence, up to six years).

6. Google reCAPTCHA

To protect our contact form against spam and automated access, we use Google reCAPTCHA v3. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For this purpose, reCAPTCHA evaluates information such as IP address, browser and device information, time spent on the page and mouse movements, and reads or stores information on your device.

reCAPTCHA is only loaded if you have given your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Without consent, you can reach us at any time by email or phone. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. Further information: https://policies.google.com/privacy

7. Google Analytics

With your consent, we use Google Analytics 4, integrated via the WordPress plugin Google Site Kit, to understand how our website is used and to improve it. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics sets cookies (e.g. “_ga” and “_ga_<ID>”, stored for up to two years) and records, among other things, pages visited, time spent, where the visit came from, device and browser information, and approximate location. According to Google, IP addresses collected in the EU are not stored. Analytics data is deleted automatically once the retention period set in Google Analytics expires. We have concluded a data processing agreement with Google.

The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time via the “Cookie settings”. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework.

8. Sign in with Google

Our team uses the “Sign in with Google” feature provided by Google Ireland Limited to log in to the website’s administration area. This feature is used exclusively for our team’s login and is not used by visitors to the public pages.

9. Links to social networks

Our website links to our profiles on LinkedIn. These are simple links, not embedded plugins. Data is only transferred to the respective provider when you click a link. The privacy policy of that provider then applies.

10. Recipients and storage period

We only share your data with the service providers named above or where we are legally obliged to do so. We do not sell data. Unless a specific storage period is stated above, we only store personal data for as long as is necessary for the respective purpose or required by statutory retention periods.

11. Your rights

You have the following rights against us with regard to your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, simply send a message to info@plantlogiq.com or to the address above.

Right to object pursuant to Art. 21 GDPR

Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)

Heilbronner Straße 35, 70191 Stuttgart, Germany
Postal address: Postfach 10 29 32, 70025 Stuttgart, Germany

Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de

www.baden-wuerttemberg.datenschutz.de

12. Obligation to provide data and automated decision-making

You are not obliged to provide us with personal data. However, we cannot handle your enquiry without the information in the contact form. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

13. Changes

We update this privacy policy when the website or legal requirements change. The version published here applies.

As of: October 2026