Privacy & GDPR¶

Kamerplanter is built on the principle of Privacy by Design. You have full control over your personal data: you can export, correct or have it deleted at any time. All data subject rights under GDPR Art. 15–21 are available as self-service features directly in your account.

Opening Privacy Settings¶

1. Click your profile picture or initials in the top right
2. Choose Account Settings
3. Click the Privacy tab

The privacy area has four tabs: My Data, Consents, Restrict Processing and Delete Account.

Exporting Your Data (GDPR Art. 15 & 20)¶

You have the right to know what data the system has stored about you and to receive it in a machine-readable format.

Requesting a Data Export¶

1. Navigate to Privacy > My Data
2. Click Export Data
3. The system creates the export asynchronously (takes 1–5 minutes depending on data volume)
4. You receive a notification (in-app or email) when the export is ready
5. Download the JSON file — the link is valid for 72 hours

The export contains all data the system knows about you: - Profile data (name, email, settings) - All created plants, locations, tasks and harvests - Care reminders and confirmation history - Sensor data (if you have any) - Consent history

Changing Your Email Address (GDPR Art. 16)¶

You have the right to have your data corrected.

1. Navigate to Privacy > My Data > Change Email
2. Enter your new email address
3. The system sends a verification link to the new address
4. Click the link in the email
5. The new email is now active — all active sessions are ended

Restricting Processing (GDPR Art. 18)¶

You can restrict the processing of your data for certain purposes — for example if you dispute the accuracy of your data or consider the processing unlawful.

1. Navigate to Privacy > Restrict Processing
2. Choose the processing purpose from the list
3. Click Restrict

During a restriction the affected data is no longer actively processed. The restriction can be lifted at any time.

Managing Consents (GDPR Art. 7)¶

No optional consent is needed for the core functions of the system. However, some additional features require your agreement.

Types of Consent¶

Revoking Consent¶

1. Navigate to Privacy > Consents
2. You see all granted consents with their date
3. Click Revoke next to the optional consent
4. The revocation is saved with a timestamp and takes effect immediately

Objecting to Processing (GDPR Art. 21)¶

You can object to the processing of your data for certain purposes where processing is based on legitimate interest.

1. Navigate to Privacy > Restrict Processing
2. Choose the processing purpose
3. Click Object to Processing

The system reviews the objection. For processing based on GDPR Art. 6(1)(f) (legitimate interest), processing will cease unless compelling legitimate reasons are present.

Deleting Your Account (GDPR Art. 17)¶

You have the right to erasure of your data.

Deletion Process¶

1. Navigate to Privacy > Delete Account
2. Confirm with password (or OAuth re-authentication)
3. Click Permanently Delete Account

What happens next:

Immediately:
- Soft-delete of the account (status: deleted)
- All active sessions are terminated
- You can no longer log in

Personal data (GDPR Art. 17):
- Anonymised immediately or deleted after 90 days

Legally protected data (GDPR Art. 17(3)(b)):
- Harvest documentation and IPM treatment records:
  Are anonymised (user reference removed),
  the data itself is retained (CanG, PflSchG)

After 90 days:
- Hard-delete of all remaining personal data

Data Retention and Retention Periods¶

Kamerplanter stores different data categories with different retention periods:

Sensor Data Downsampling¶

Sensor data is automatically compressed in stages:

0–90 days:       Raw data (every measurement)
90 days–2 years: Hourly aggregates (Min/Max/Avg)
2–5 years:       Daily aggregates (Min/Max/Avg)
After 5 years:   Automatic deletion

IP Anonymisation¶

IP addresses are generally only stored in plain text for 7 days. After that they are anonymised to the /24 subnet (the last 8 bits set to 0), so that individual assignment is no longer possible.

Sensor Data and Privacy (DPIA)¶

Certain sensor data can allow inferences about presence patterns (CO₂ concentration, motion detectors, manual overrides). A Data Protection Impact Assessment (DPIA) has been carried out for such data. The key measures:

• Sensor data is fundamentally not shared with other tenants or third parties
• The platform operator can only view sensor data after an explicit support request and with your consent
• Aggregated statistics (without personal reference) may be used for system improvement — you can disable this in the consents

Frequently Asked Questions¶

See Also¶

• Account Settings
• Tenants & Gardens