Privacy Policy

1. Controller (Data Protection Contact)

The controller responsible for data processing on this website is:

PAT Horticulture Software GmbH
Franz-Riepl-Gasse 29
8020 Graz
Austria

Website: https://pat-horticulture.com
Email: hello@pat-horticulture.com
Phone: +43 316 274813 – 0

For any questions and/or comments regarding our cookie policy and this statement, please contact us using the contact details above.

2. General Information on Data Processing

We process personal data only when this is legally permitted. This includes cases where:

you have given your consent (Art. 6(1)(a) GDPR),
processing is required for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR),
processing is required for compliance with a legal obligation (Art. 6(1)(c) GDPR), or
processing is required for the purposes of our legitimate interests (Art. 6(1)(f) GDPR), provided your interests or fundamental rights and freedoms do not override them.

3. Hosting and Website Infrastructure

This website is operated using:

WordPress (content management system),
LiteSpeed (web server and caching).

For technical reasons, the following data may be processed temporarily when you access our website:

IP address,
date and time of access,
browser type and version,
operating system,
referrer URL.

This data is processed exclusively for technical security, stability, and performance optimization and is not used to identify users personally.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website).

4. Cookies

Our website uses cookies. Cookies are small text files stored on your device that help make our website functional and user-friendly.

4.1 Technically Necessary / Functional Cookies

These cookies are required for the proper operation of the website and enable basic functions such as page navigation, access to secure areas, and performance optimization.

We use technical or functional cookies in connection with:

WordPress (content management and website functionality),
LiteSpeed (caching and performance optimization).

Without these cookies, the website may not function properly.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a technically functional and secure website).

4.2 Analytics Cookies (Microsoft Clarity, Google Analytics)

We use analytics cookies to analyze user behavior and improve our website and services.

The following tools are used:

Google Analytics
Microsoft Clarity

These tools may collect, for example:

pages visited and navigation paths,
session duration and interactions,
device and browser information,
anonymized IP addresses.

Analytics cookies are only set if you have given your consent via our cookie banner or settings.

Legal basis: Art. 6(1)(a) GDPR (consent).

Where personal data is transferred to recipients located outside the European Economic Area (EEA), such transfers are carried out only where an appropriate level of protection is ensured, for example on the basis of an adequacy decision adopted by the European Commission or by using the European Commission’s Standard Contractual Clauses (SCCs), where applicable. Such transfers take place on the basis of appropriate safeguards, such as standard contractual clauses approved by the European Commission or comparable instruments.

4.3 Marketing and Tracking Cookies (Google Ads)

We use marketing and tracking cookies to display relevant advertising and measure the success of our advertising campaigns.

The following tool is used:

Google Ads (conversion tracking and remarketing).

These cookies allow us, for example, to:

measure conversions after you interact with an ad,
display advertising tailored to your interests,
analyze the effectiveness of advertising campaigns.

Marketing and tracking cookies are only set if you have given your explicit consent via our cookie banner or settings.

Legal basis: Art. 6(1)(a) GDPR (consent).

5. Contact Form and Communication

If you contact us via the contact form or by email, we process the data you provide, in particular:

name,
email address,
phone number (if provided),
message content and other information you share with us.

To protect our contact forms against spam, automated abuse, and malicious submissions, we use Cloudflare Turnstile, a service provided by Cloudflare, Inc.

Turnstile performs an automated assessment of the request and may process technical information such as your IP address, browser characteristics, device information, and interaction signals solely for the purpose of distinguishing legitimate users from automated requests.

The use of Cloudflare Turnstile is necessary to ensure the security and integrity of our website and contact forms.

Legal basis:

Art. 6(1)(b) GDPR (where the communication relates to pre-contractual measures or contract performance), and/or
Art. 6(1)(f) GDPR (our legitimate interest in protecting our website and communication channels against spam, abuse and automated attacks).

6. Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies to analyze the use of our website.

IP anonymization is activated so that your IP address is shortened within the EU or EEA before transmission to Google servers. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

You can prevent the use of Google Analytics by:

adjusting your cookie preferences on our website; or
installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout.

Legal basis: Art. 6(1)(a) GDPR (consent).

7. Microsoft Clarity

We use Microsoft Clarity to better understand user interactions on our website (e.g. via heatmaps and session recordings).

Clarity may collect, for example:

mouse movements and clicks,
scroll behavior,
technical information about the browser and device.

Data is processed in a pseudonymized form and is used only for analytical purposes to optimize our website.

You can prevent the use of Clarity by adjusting your cookie preferences on our website.

Legal basis: Art. 6(1)(a) GDPR (consent).

8. Google Ads

We use Google Ads to display ads in Google search results and on third-party websites and to measure the success of such ads (conversion tracking).

When you click on an ad placed by Google, a conversion cookie is set. These cookies usually expire after 30 days and are not used to identify you personally.

You can prevent participation in this tracking by:

rejecting marketing cookies in our cookie banner or settings, or
adjusting your advertising settings in your Google account.

Legal basis: Art. 6(1)(a) GDPR (consent).

9. Data Storage and Deletion

We store personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by statutory retention periods.

As soon as the respective purpose no longer applies or the retention period expires, the personal data will be deleted or restricted in processing in accordance with legal requirements.

10. Your Rights under the GDPR

You have the following rights under the General Data Protection Regulation:

Right of access (Art. 15 GDPR) – to obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to that data.
Right to rectification (Art. 16 GDPR) – to obtain without undue delay the rectification of inaccurate personal data concerning you.
Right to erasure (Art. 17 GDPR) – to obtain the erasure of personal data concerning you, subject to certain conditions.
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR).
Right to object (Art. 21 GDPR) – to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6(1)(e) or (f) GDPR.
Right to withdraw consent (Art. 7(3) GDPR) – to withdraw your consent at any time with effect for the future.

To exercise your rights, please contact us using the contact details provided in section 1.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

In Austria, the competent supervisory authority is:

Austrian Data Protection Authority (Datenschutzbehörde)
Website: https://www.dsb.gv.at

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

12. Changes to This Privacy Policy

We reserve the right to adapt this Privacy Policy from time to time to reflect legal, technical, or organizational changes. The current version is always available on our website.

13. Cloudflare Turnstile

To protect our website and contact forms from spam, abuse and automated requests, we use Cloudflare Turnstile, a bot detection service provided by:

Cloudflare, Inc.
101 Townsend Street
San Francisco, CA 94107
USA

When a contact form is displayed or submitted, Turnstile may process technical information required to determine whether the interaction originates from a human visitor or an automated system.

Depending on the circumstances, this may include: