Privacy Policy

Who we are

The data controller is Planta Design, Unipessoal Lda., a company registered in Portugal (European Union). Planta Smart Homes is a registered trademark of Planta Design, Unipessoal Lda. Contact: hi@planta.design.

We keep zero personal data

This website runs free of tracking cookies, advertising pixels, third-party analytics, fingerprinting, cross-site trackers, and behavioural profiling. We keep zero user profiles, and your data stays with you — always free from advertisers and data brokers.

The only personal data we ever receive is what you deliberately send us — for example, your name and email when you write to us via the contact form or by email. We use that information solely to reply to you and, when relevant, to keep a record of our conversation. Marketing use happens only with your explicit consent.

Sensor data is anonymous by design

Planta Smart Homes runs sensing systems in homes, buildings and live environments (for example large events). These systems are engineered so that personal data stays absent by construction, inside the sensor itself. This is a hardware design choice, backed by engineering rather than by a policy promise.

How we achieve it, in practice:

• Camera-free, microphone-free, biometrics-free. Our sensors count presence and measure environment (temperature, air quality, motion, occupancy, energy). Faces and conversations stay physically out of reach of the hardware.
• Aggregate wireless sensing. Where we estimate crowd density from wireless signals, we only read anonymous, ephemeral radio identifiers that devices already broadcast publicly, and we immediately transform them on the sensor into a single number: "how many devices are nearby". The original identifier is destroyed on the device and stays there.
• Edge machine learning. The count, the flow and the occupancy estimate are computed on the sensor itself. Only the resulting number (e.g. "42 people in this zone") is transmitted upstream — pure aggregate numbers, always untraceable to a person.
• Tracking-free and re-identification-free. People stay uncounted as individuals, device histories stay absent, and presence stays fully separated from identity. Two visits by the same person are indistinguishable from two visits by two different people.
• Data minimisation as a hardware property. Because personal data is destroyed at the sensor before transmission, everything downstream stays purely statistical — in our cloud, in a backup, with a partner, and with any authority.

This method is the subject of our patent-pending work on privacy-by-design crowd counting and calibrated wireless presence estimation — see Trademarks & Patents.

Legal basis (GDPR / RGPD)

Where you contact us, we process your message under Article 6(1)(b) GDPR (steps taken at your request prior to entering a contract) or 6(1)(f) GDPR (our legitimate interest in replying to you). Sensor data is anonymous in the sense of Recital 26 GDPR — it stays outside the definition of personal data, because any individual remains unidentifiable from it, directly or indirectly, by us or by any other party. GDPR therefore stays inapplicable to it. This is compliant with the EU General Data Protection Regulation and with the Portuguese Lei n.º 58/2019.

Cookies

We use only strictly necessary cookies required to make the website work (for example, remembering that you accepted this notice). Advertising, analytics and tracking cookies stay absent. Strictly necessary cookies stay exempt from consent under ePrivacy and Portuguese law, and we still display a notice to be explicit.

Hosting and infrastructure

The website is served from EU-based edge infrastructure. Server logs (IP, timestamp, path) are kept short-term only for security and abuse prevention, and stay purely technical.

Your rights

You can access, correct, export, restrict or delete any data you have sent us — or withdraw consent — at any time by writing to hi@planta.design. You also have the right to complain to the Portuguese supervisory authority, CNPD (cnpd.pt).