Privacy Policy

1. Controller

This Privacy Policy explains how FloraRadar processes personal data when users visit the website, use plant search, view seller offers, click third-party links, contact the team, or submit seller information.

The data controller is MB "Electas", company code 305697951, address 46370 Kaunas, Europos pr. 34-47. Privacy questions may be sent to info@floraradar.com.

2. Data we may process

Depending on how the website is used, FloraRadar may process:

• contact data, such as name, email address, seller name, website link, and message content;
• technical data, such as IP address, browser type, device information, operating system, page requests, server logs, and error information;
• usage data, such as search queries, viewed plants, clicked seller offers, selected language, or selected market;
• cookie and similar technology identifiers;
• public or seller-provided information about plants, offers, prices, product links, and availability.

FloraRadar is not intended to collect special categories of personal data, such as health, political opinion, or religious belief data.

3. Purposes and legal bases

Personal data may be processed for these purposes:

• to provide and maintain the FloraRadar website, plant search, and seller offer browsing;
• to respond to questions, seller submissions, bug reports, or other communications;
• to remember language, market, or similar website preferences;
• to measure website usage, analyze performance, improve content, and improve search quality;
• to protect the website from abuse, spam, unauthorized access, and technical incidents;
• to comply with legal obligations and defend legal interests.

The legal bases may include performance of a contract or steps before entering into a contract, legitimate interests in operating and improving the service, consent for non-essential cookies or analytics, and legal obligation where applicable.

4. Cookies and analytics

FloraRadar may use necessary cookies so the website works securely and conveniently. For example, the `floraradar_locale` cookie may be used to remember a selected catalog region or language.

The website may also use analytics tools to understand how visitors use plant search, seller offers, categories, and other pages. Non-essential cookies or similar technologies should only be used when there is an appropriate legal basis, such as user consent where required by applicable law.

5. Recipients and service providers

FloraRadar may use service providers that help provide, host, store, monitor, and protect the website. These providers may include:

• Supabase for database, authentication, storage, or related infrastructure functions;
• Vercel for website hosting, deployment, performance, and infrastructure;
• other hosting, security, error monitoring, communication, or analytics providers.

Where service providers process personal data for FloraRadar, they should process it under contracts and applicable data protection requirements.

6. Third-party links

FloraRadar may link to seller or other third-party websites. When a user leaves FloraRadar and visits a third-party website, that website has its own terms, privacy policy, cookies, analytics, payment rules, and delivery rules.

7. International transfers

Some service providers, including technology, hosting, or analytics providers, may process data outside Lithuania or the European Economic Area. In those cases, appropriate safeguards should be used, such as European Commission adequacy decisions, standard contractual clauses, or other transfer mechanisms under the GDPR.

8. Retention

Personal data is kept no longer than necessary for the purposes described in this policy. Contact messages are generally kept for as long as needed to answer the request and administer related communication. Technical logs and analytics data are kept for a limited period needed for security, performance monitoring, and service improvement.

Exact retention periods must be confirmed based on the tools, contracts, and legal obligations used by MB "Electas".

9. Security

FloraRadar uses technical and organizational measures designed to protect the website and personal data from unauthorized access, loss, alteration, or disclosure. However, no internet service can guarantee complete security.

10. GDPR rights

Under the General Data Protection Regulation (GDPR), a user may, where applicable, have the right to:

• receive information about personal data processing;
• access their personal data;
• request correction of inaccurate data or completion of incomplete data;
• request deletion of data;
• request restriction of processing;
• object to processing;
• receive data in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority.

In Lithuania, the personal data protection supervisory authority is the State Data Protection Inspectorate.

11. Children's privacy

FloraRadar is not intended as a dedicated service for children. If you believe that a child has provided personal data without appropriate consent or legal basis, contact info@floraradar.com.

12. Policy changes

This Privacy Policy may be updated when FloraRadar services, providers, cookies, analytics, or legal requirements change. The latest version is published on this page with a version number and last updated date.