1) PRIVACY POLICY

Last updated: 12.9.2025.
Data controller: Smart Garden Systems d.o.o., Kralja Petra Krešimira IV 4, 47000 Karlovac, OIB: 41728076022
Contact: info@smartgarden.hr, tel. 099 664 1989
Website: https://smartgarden.hr

What this Policy covers

This Policy explains how we collect, use and protect personal data when you visit smartgarden.hr, create an account, buy products, use contact forms, leave reviews/comments or receive our newsletter. The Cookie Policy is a separate document linked in the footer and via the “Cookie Settings” button.

What data we collect

Identification and contact details: first name, surname, e-mail, phone, delivery/billing addresses.
Order and payment data: products purchased, amount, payment/delivery status. We do not store card numbers – they are processed by payment providers (Stripe, CorvusPay, PayPal, PayCek).
Accounts and support: user account, order history, communication with support.
Marketing preferences: consent/unsubscribe for the newsletter (Brevo; no double opt-in).
Website usage and device data (with consent): IP address (anonymised where applicable), cookie identifiers, device/browser type, pages visited and events (e.g. adding to cart) via Google Analytics 4 and Microsoft Clarity.
Comments/reviews (if enabled): content, IP and user agent for spam detection.
Mobile app (if you use it): when you sign in and use the app, we process the minimum data needed for its features (e.g. account, device synchronisation).

Gravatar: an anonymised hash of your e-mail may be sent to Gravatar for verification (automattic.com/privacy). Once your comment is approved, your profile picture may be publicly visible next to your comment.
Uploaded images: avoid EXIF GPS data – visitors can download images and extract location data from them.

Purposes and legal bases

Performance of a contract (GDPR 6(1)(b)) – order processing, delivery, invoicing, support.
Legal obligations (GDPR 6(1)(c)) – accounting, tax regulations, record keeping.
Consent (GDPR 6(1)(a)) – analytics (GA4, Clarity), newsletter and marketing messages (Brevo).
Legitimate interest (GDPR 6(1)(f)) – system security, abuse prevention, basic aggregated statistics.

Cookies and consent

We use Complianz (Consent Mode v2) to manage consent. Without consent, only necessary cookies are loaded. A detailed list is available in the Cookie Policy and in Cookie Settings.

Data recipients (processors)

We share only the necessary data with contracted partners:

Hosting/IT: cyber_Folks (hosting and technical support).
Payments: Stripe, CorvusPay, PayPal, PayCek (they process payment data; we do not process card numbers/wallet keys).
Accounting and e-invoices: e-Računi and/or an accounting service.
Delivery: Mail Boxes Etc. and contracted couriers (e.g. DPD, GLS, HP-Express) – for parcel delivery.
Newsletter/messages: Brevo (Sendinblue).
Analytics and UX (with consent): Google Analytics 4, Microsoft Clarity.
Security/anti-spam (as needed): e.g. reCAPTCHA/Akismet/Cloudflare.
Live chat (if activated): it will be added to this Policy with the exact name of the provider.

All partners apply appropriate technical and organisational safeguards and data processing agreements.

Transfers outside the EEA

Some providers (Google, Microsoft, Stripe/PayPal, etc.) may process data outside the EEA. Standard Contractual Clauses (SCCs) and additional safeguards are applied in accordance with the GDPR.

Retention periods

Orders and invoices: as required by law (usually 10 years).
User account: while active or until deleted at your request.
Support/communication: up to 2 years after the enquiry is resolved.
Newsletter: until you unsubscribe/withdraw consent.
Analytics (GA4): data retention of 14 months (or shorter, depending on settings).
Cookies: according to the duration of each cookie (see the Cookie Policy).

Your rights

You have the following rights: access, rectification, erasure, restriction, portability, objection, withdrawal of consent (this does not affect the lawfulness of processing before withdrawal). Send requests to info@smartgarden.hr.
Supervisory authority in Croatia: AZOP – the Personal Data Protection Agency (hrv. Agencija za zaštitu osobnih podataka).

Marketing and newsletter

We send the newsletter only with your consent. Every message contains an unsubscribe link. We keep records of consents/unsubscribes for compliance purposes.

Payments

Payments are processed by Stripe, CorvusPay, PayPal, PayCek. We do not store card details/wallet keys; payment providers process them under their own policies and security standards (e.g. PCI-DSS).

Embedded content and third-party links

Embedded content (videos, posts) behaves as if you were visiting the original website and may collect data and use cookies under that website’s own policies.

Automated decision-making

We do not make decisions based solely on automated processing that produce legal effects for the user.

Changes to this Policy

We will update this Policy from time to time. The new version applies from the moment it is published on this page with the Last updated date.

Contact: Smart Garden Systems d.o.o., Kralja Petra Krešimira IV 4, 47000 Karlovac, info@smartgarden.hr, 099 664 1989

2) COOKIE POLICY

Last updated: 12.9.2025.

This Policy explains what cookies are, which types we use and why, how long they last, and how you can manage your choices via Cookie Settings (Complianz).

What are cookies?

Small text files that a website stores in your browser. They can be necessary (basic functions) or non-necessary (analytics, preferences, marketing).

How we use cookies

Necessary: website functionality, cart, security, consent records.
Functional/Preferences: remember your settings (e.g. language).
Analytics (with consent): measure traffic and behaviour so we can improve the website (Google Analytics 4, Microsoft Clarity).
Marketing: currently not used.

Consent and management

A “Cookie Settings” button/link is available in the website footer, where you can change your choices at any time. Without consent, only necessary cookies are loaded.

List of typical cookies (example)

Name	Provider	Purpose	Duration	Category
`cmplz_*`	Complianz	Stores consent status and cookie settings.	up to 1 yr	Necessary
`woocommerce_cart_hash`, `woocommerce_items_in_cart`	WooCommerce	Cart functionality.	Session	Necessary
`wp_woocommerce_session_*`	WooCommerce	Customer/cart session ID.	2 days	Necessary
`_ga`, `_ga_*`	Google Analytics 4	Statistics and visit measurement.	up to 2 yrs	Analytics
`_gid`	Google Analytics 4	Distinguishing sessions.	24 h	Analytics
`_clck`, `_clsk`	Microsoft Clarity	Session replay and heatmaps.	up to 1 yr / 1 day	Analytics

Google Consent Mode v2

We apply Consent Mode v2; without consent, only limited signals are sent, and full analytics tags are loaded once consent is given.

How to disable cookies in your browser

Most browsers let you delete or block cookies. Keep in mind that disabling necessary cookies may affect how the website works.

Contact: info@smartgarden.hr

3) GENERAL TERMS AND CONDITIONS OF BUSINESS

Last updated: [insert date]
Seller: Smart Garden Systems d.o.o., Kralja Petra Krešimira IV 4, 47000 Karlovac, OIB: 41728076022, info@smartgarden.hr, 099 664 1989
Website: https://smartgarden.hr

1. General

These Terms apply to purchases made via the smartgarden.hr online shop. The Seller reserves the right to make changes without notice. Relations with consumers are governed by the applicable Croatian Consumer Protection Act (hrv. Zakon o zaštiti potrošača) and other Croatian/EU regulations.

2. Prices and availability

All prices are shown in EUR with VAT included, unless stated otherwise. Delivery costs are not included in the price (they are shown in the cart/at checkout). We reserve the right to change prices and descriptions and to correct typographical errors.

3. Payment methods

We accept Stripe (cards), CorvusPay, PayPal, PayCek (crypto), and other methods if listed on the website. Payments take place on the providers’ secure pages; we do not store card details.

4. Delivery

Delivery is carried out by Mail Boxes Etc. via contracted couriers (e.g. DPD, GLS, HP-Express). Delivery times and costs are shown in the cart/at checkout and depend on the address and availability. Once the parcel is handed over to the courier, responsibility for delivery passes to the delivery service.

5. Delivery, damage and risk

Goods are packaged so that normal handling will not damage them. By accepting the parcel, the buyer confirms that the package is undamaged. If the packaging is visibly damaged, we recommend refusing the parcel or drawing up a damage report with the courier service.

6. Material defects, warranty and service

Products carry statutory rights regarding material defects. The warranty (where applicable) is stated on the product page/warranty card and covers manufacturing defects. For support and service, contact: info@smartgarden.hr.

7. Right of unilateral withdrawal (returns within 14 days)

The consumer has the right, without giving any reason, to unilaterally withdraw from a distance contract within 14 days of receiving the product. To exercise this right, the consumer must notify us by an unambiguous statement (e.g. by e-mail) and, where possible, use our Return Form. The goods must be returned undamaged, in their original condition and packaging, no later than 14 days after sending the statement.

Exceptions: the right of withdrawal does not apply to sealed goods which are not suitable for return for health protection/hygiene reasons if unsealed; goods made to the buyer’s specifications; perishable goods, etc. (under the Croatian Consumer Protection Act (hrv. ZZP)/EU rules).

Refunds: we will issue a refund without delay, and at the latest within 14 days of the day we receive the returned goods or proof that they have been sent, using the same payment method unless agreed otherwise. The cost of returning the goods is borne by the consumer, unless stated otherwise.

8. Consumer complaints

In accordance with the Croatian Consumer Protection Act (hrv. ZZP), you can send a written complaint to info@smartgarden.hr or by post to our registered address. We respond to complaints within 15 days of receipt.

9. Liability and force majeure

We are not liable for delays or failure to deliver caused by extraordinary circumstances (force majeure). We are not liable for indirect/consequential damages to the extent permitted by law.

10. Dispute resolution (ODR)

We aim to resolve disputes amicably. Consumers may submit a complaint via the EU Online Dispute Resolution (ODR) platform.

11. Governing law

The law of the Republic of Croatia applies.

4) DELIVERY AND PAYMENT

Delivery

Delivery: Mail Boxes Etc. (DPD/GLS/HP-Express).
Delivery times: shown in the cart/at checkout; depending on the address and availability.
Cost: shown before the order is confirmed.
Tracking: a link sent by e-mail once the courier collects the parcel.

Payment

Cards via Stripe and/or CorvusPay.
PayPal (if activated on the website).
PayCek (crypto) – transactions are executed under the provider’s rules.
Payment security: see the Payment Security Statement.

5) RETURNS AND EXCHANGES (copy-paste)

Right of return within 14 days

The consumer may withdraw from the contract without giving any reason within 14 days of receipt. Send us a request by e-mail and use the Return Form (not mandatory, but it helps). Return the goods undamaged, with the original packaging and receipt.

Return address: Smart Garden Systems d.o.o., Kralja Petra Krešimira IV 4, 47000 Karlovac

Exceptions: sealed goods not suitable for return for hygiene reasons if unsealed; made-to-order goods; perishable goods, etc.

Procedure

Send a withdrawal notice by e-mail: info@smartgarden.hr.
Pack the product + receipt.
Send the parcel to the address above (tracked delivery recommended).
We process refunds within 14 days (upon receipt of the goods or proof of dispatch).

6) CONSUMER COMPLAINTS

In accordance with Article 10 of the Croatian Consumer Protection Act (hrv. Zakon o zaštiti potrošača), you can submit a complaint:

by e-mail: info@smartgarden.hr
by post: Smart Garden Systems d.o.o., Kralja Petra Krešimira IV 4, 47000 Karlovac

We will respond to your complaint within 15 days of receipt. Please include your contact details and a description of the problem in your complaint. If we cannot resolve the dispute amicably, you may contact the competent authorities or use the EU ODR platform.

7) PAYMENT SECURITY STATEMENT

Your security is our priority. Payments are processed by trusted providers (Stripe, CorvusPay, PayPal, PayCek) on their secure pages. Smart Garden Systems d.o.o. does not collect or store card details or private keys/wallet data. The providers apply industry security standards (e.g. PCI-DSS) and advanced protection measures.

For questions about billing, contact us at info@smartgarden.hr.

8) Privacy Policy – Camera Use For Smart Garden Application

Privacy Policy – (Smart Garden App)

Smart Garden mobile app — privacy

Data controller: Smart Garden Systems d.o.o., Kralja Petra Krešimira IV 4, 47000 Karlovac, Croatia · Contact: info@smartgarden.hr
Last updated: 22.7.2026.

This section explains what data the Smart Garden mobile app (iOS and Android) collects, why it collects it and who it is shared with.

Who the app is for

The app is intended both for school-age children (through the EduGarden programme in schools) and for adult users (Aurelia and Simply home smart gardens). For this reason, we apply special safeguards for minors, described below.

What data we collect

Account data (required to use the app):

E-mail address and name — to create and manage your account.
Password — stored and protected by our authentication provider (Supabase); we never see it.

Optional data (only if the user enters or enables it):

Year of birth — to tailor the experience and ads to your age (the prompt can be skipped).
Photos and videos — profile picture, plant photos and Community posts. We remove GPS/location metadata from photos before storing them.
Post text in the Community.
Address and phone number — only when the user orders a physical reward, for delivery purposes.

Technical data:

Notification token (FCM) — for reminders and notifications; collected only with your permission.
Device advertising identifier — used by the advertising system (Google AdMob). For users under 16, it is used in non-personalised mode (see “Children and ads”).

We do not collect: device location, financial data (there are no payments in the app), health data, contacts, calendar or browsing history. The app does not use analytics or behavioural tracking tools other than the advertising system described below.

Why we process data and on what basis

Service delivery (app functionality, plant care, notifications, rewards) — legal basis: performance of a contract.
Advertising that keeps the app free to use — for adults, legitimate interest with the right to object, or consent where required; for children, strictly non-personalised.
Newsletter — only with explicit consent, which can be withdrawn at any time.

Who we share data with

We do not sell your data. We use trusted service providers who process data on our behalf:

Supabase — storage of accounts, database and media.
Google Firebase Cloud Messaging — push notification delivery.
Google AdMob — ad display; for this purpose the device advertising identifier is passed to the advertising system.
Brevo — newsletter delivery, only for users who have opted in.

Children and ads

For users we know or assume to be under 16 (all school pupils and anyone who states a younger age in the age prompt or skips it):

ads are non-personalised and age-appropriate (child-directed treatment, content rating “for all ages”);
we do not collect data for personalised advertising or build an advertising profile;
we do not ask the child for more data than is necessary for the feature.

For adult users, personalised ads are shown only after consent has been requested and given.

How long we keep data

We keep account data for as long as the account exists. After account deletion, we delete or anonymise the data (reward order data is retained in anonymised form to meet legal obligations).

User rights

Users have the right to access, rectification, erasure and objection. The account and all associated data can be deleted directly in the app (Profile → Delete account) or by sending a request to info@smartgarden.hr. For minors, the request may be submitted by a parent or guardian.