Privacy Policy

This Privacy Policy explains how Plantepleje Aarhus ("we", "us") collects, uses and protects personal data when you visit our website or contact us about plant care services in Aarhus, Denmark.

Data Controller

The data controller is Plantepleje Aarhus, Vestergade 48, 8000 Aarhus C, Denmark.

CVR: 41287654 (fictitious reference for studio registration)
Email: [email protected]
Phone: +45 86 12 44 70

Personal Data We Collect

We may collect:

• Identity and contact data: name, email address, phone number, billing address and home visit address
• Service and project data: plant counts, species notes, watering schedules, key access arrangements, holiday sitting dates, visit preferences and care plan documents
• Communication data: messages sent via forms, email, phone or in-person consultations at Vestergade 48
• Payment data: transaction references processed by our payment provider (we do not store full card numbers)
• Technical data: IP address, browser type, device information, pages visited, referral source (via cookies where enabled)
• Marketing preferences: opt-in status for studio newsletters or seasonal care reminders
• Access data: dates and times of home visits when recorded in our client log for service quality
• Photography data: optional before-and-after images of plant care, only with explicit consent

Purposes and Legal Basis (GDPR)

We process personal data under Regulation (EU) 2016/679 (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven) on the following bases:

• Contract / pre-contract steps (Art. 6(1)(b)): processing enquiries, preparing care proposals, scheduling watering visits, prune-and-clean sessions, holiday plant sitting and monthly care bundles
• Legitimate interests (Art. 6(1)(f)): responding to enquiries, improving our services and website, route planning across Aarhus, preventing fraud and securing our systems—balanced against your rights
• Legal obligation (Art. 6(1)(c)): accounting, invoicing, tax and regulatory requirements under Danish law
• Consent (Art. 6(1)(a)): non-essential cookies, optional marketing emails, photography for portfolio use and storage of spare keys beyond active service periods

Cookies and Similar Technologies

Our website uses necessary cookies for basic operation. Analytics or preference cookies, if introduced, run only with your consent where required. See our Cookies page for categories, retention and how to withdraw consent.

Data Retention

Enquiry and quote data is kept for up to 24 months after the last meaningful contact unless an active client relationship continues. Visit logs and care notes for watering and pruning services are retained for 36 months after the last transaction. Invoices and related correspondence are retained for the period required by Danish bookkeeping law (typically 5 years). Key custody records are deleted within 14 days of key return unless you request otherwise. Marketing consent records are kept until you withdraw consent plus a short audit period. Technical logs may be retained for up to 12 months for security purposes.

Who We Share Data With

We share personal data only as needed with:

• Hosting, email and form processing providers acting as processors under Article 28 GDPR agreements
• Payment service providers for card and MobilePay transactions
• Accounting and bookkeeping partners for invoicing compliance
• Professional advisors (accountant, legal counsel) where necessary
• Public authorities when legally obliged, including Datatilsynet if required by investigation

We do not sell personal data. We do not use automated decision-making that produces legal or similarly significant effects.

International Transfers

Where tools or hosts process data outside the European Economic Area, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, supplementary measures where required, or rely on an adequacy decision. You may request details of transfers relevant to your data by contacting us.

Security

We apply technical and organisational measures proportionate to the risk, including access controls on studio systems, encrypted transmission where available, staff confidentiality training and limited access to home addresses and key information. Physical keys are labelled with client codes only—never full names on tags. No method of transmission over the internet is completely secure; please avoid sending unnecessary sensitive data by unencrypted email.

Your Rights Under the GDPR

Depending on circumstances, you may have the right to:

• Access your personal data and obtain a copy (Art. 15)
• Rectify inaccurate or incomplete data (Art. 16)
• Erase data in certain cases, such as where it is no longer necessary (Art. 17)
• Restrict processing in defined situations (Art. 18)
• Data portability for data you provided, where processing is automated and based on contract or consent (Art. 20)
• Object to processing based on legitimate interests or for direct marketing (Art. 21)
• Withdraw consent at any time without affecting prior lawful processing (Art. 7(3))
• Not be subject to solely automated decisions with significant effects, where applicable (Art. 22)

To exercise these rights, contact [email protected]. We respond within one month, extendable where requests are complex. We may need to verify your identity.

Data Protection Officer

We are not required to appoint a Data Protection Officer under Art. 37 GDPR. Privacy enquiries are handled by studio management at the contact details above.

Children

Our services are directed at adults. We do not knowingly collect data from children under 16 without parental consent. Contact us if you believe we have received such data.

Complaints

If you believe your data protection rights have been infringed, you may lodge a complaint with Datatilsynet (Danish Data Protection Agency) at www.datatilsynet.dk or the supervisory authority in your EU country of residence. We encourage you to contact us first so we can address your concern.

Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The "Last updated" date at the top will change accordingly. Material changes may be communicated via email to active clients or a notice on this page.

Questions: [email protected]