Privacy policy

Updated October 2026

1. Data controller

Kastanie Grünbrücke e.U., owner Suman Rathod
Dr.-Eduard-Heinl-Gasse 5/6/3, 1190 Vienna, Austria
Email: hallo@kastanie.wien

We process personal data in accordance with the GDPR and Austrian Data Protection Act (DSG).

2. Website visits

Our host, GitHub Pages (GitHub Inc., USA), processes technical access data such as IP addresses, access times, requested pages and browser information to operate the website securely (Art. 6(1)(f) GDPR). Hosting log retention is determined by the provider and its applicable terms.

We do not operate our own advertising trackers or analytics on this site. The website uses system fonts, without external font providers. The embedded waiting-list form is provided by Zoho Forms, which may process technical data and necessary cookies when the form is loaded. See Zoho's privacy policy.

3. Free plant photo assessment

If you email us a plant photo, we process your email address, message and photos to respond to your request (Art. 6(1)(b) GDPR — steps taken at your request before a potential contract).

Please photograph only your plant and its location, without people or sensitive objects.
If specialist advice is needed, we may share the plant photo with a nursery without your name or contact details.
We delete enquiries and photos no later than six months after answering, unless a legal retention duty applies.

Our mailbox is operated through Zoho Mail.

4. Waiting list

If you join the waiting list, we process your email address, Vienna district, selected website language, any optional service-interest answer, optional number of houseplants, and your consent to notify you once when planned paid in-home plant-care visits become available in your district (Art. 6(1)(a) GDPR). This is not a newsletter or general advertising subscription.

We use Zoho Forms as our form and submission storage provider (data processor). When the embedded form loads, Zoho may also process technical connection data such as IP addresses. The forms are served from the European Zoho domain forms.zohopublic.eu. Zoho states that EU customer form data is stored in EU data centres. Limited access from outside the EU may be possible for support, under contractual safeguards. The data-processing agreement and the services enabled in the account should be checked before the form goes into production. If the embedded form does not display, you can use the direct Zoho form link on the website.

You can withdraw consent at any time by emailing hallo@kastanie.wien. Waiting-list entries will be deleted after the relevant launch notification or upon withdrawal, unless another legal duty applies.

5. Sharing data

We use providers for hosting, email and forms as explained above. For nursery planning, we ordinarily share only aggregated anonymous district demand, not individual waiting-list email addresses. Service-provider processing outside the EU/EEA is subject to the applicable agreements and GDPR safeguards, which must be verified. We do not sell your contact details or share them for third-party advertising.

6. Your rights

You may request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), object to processing (Art. 21) and withdraw consent at any time, effective for the future. Contact hallo@kastanie.wien.

You may also complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

7. Automated decisions

We do not use automated decision-making or profiling.