Privacy Policy & Data Security

1. General Information on Data Protection

The operators of this website take the security of your private collector profiles, institution archives, and agricultural records very seriously. We treat all personal data with the highest level of confidentiality in strict accordance with statutory European General Data Protection Regulation (GDPR) frameworks and the California Consumer Privacy Act (CCPA) standards. Technical metadata, such as encrypted IP strings, request logging timestamps, and unit preferences, are handled solely to maintain database server integrity and seamless navigation.

2. What Specific Data We Collect & Process

When you register specimens or submit inquiries via our secure registry portal, we collect and store the following classifications of information:

• Identity Profile Data: Full name of collector, institution representatives, mailing address, verified email, and phone coordinates.
• Geospatial Greenhouse Placement: Precise location data of greenhouse installations. This data is heavily safeguarded to protect against targeted theft of multi-thousand-dollar specimens.
• Botanical Lineage Logs: Photos of mature specimens, historical invoices, CITES import numbers, genomic lab sequences, and parent-plant trace files.
• Transaction Data: Documented procurement values and verified auction ledger references to formulate accurate index appraisals.

3. Legal Basis for Data Processing

Pursuant to Article 6 of the GDPR, we process personal data under several conditions:

• Consent (Art. 6 para. 1 lit. a): When you explicitly submit registration profiles and upload tissue photos to our advisory board.
• Contract Execution (Art. 6 para. 1 lit. b): Necessary for implementing the verification, registry tagging, and issuing official security certificates.
• Legal Compliance (Art. 6 para. 1 lit. c): Complying with state-mandated phytosanitary monitoring, customs declarations, and CITES tracing regulations.
• Legitimate Interests (Art. 6 para. 1 lit. f): Keeping our platform safe from database exploits, botanical double-registries, and cataloging fraud.

4. Double-Blind Custodial Privacy Safeguards

To secure our users from security intrusions, the exact storage address and owner identity of elite registered flora (e.g. specimens valued at over $15,000 USD) are handled under a double-blind cryptographic tokenization routine. Front-end users of the index only view the generic municipal region and verified country of origin. Full owner directories are preserved offline and can only be accessed with dual authorization from the executive board of registrars.

5. Security Matrices & Server Infrastructure

All database registers are housed on European Union-based ISO/IEC 27001 certified physical servers. Data transmissions are shielded using 256-bit TLS encryption protocols. Active firewalls, periodic penetration tests, and strict role-based access protocols ensure that unauthorized agricultural competitors or illegal nursery brokers cannot harvest registry locations or metadata logs.

6. International Data Transfers (CITES & EPPO Actions)

For trans-continental transfers, we may share registered genomic IDs and phytosanitary certificate copies with national customs, environmental authorities (such as IBAMA in Brazil or USDA in the USA), and EPPO monitoring networks. This processing is strictly restricted to executing necessary legal clearance and preventing asset seizure at border borders.

7. Retention and Disposal Procedures

We preserve registration records for as long as the specimen maintains active entry status in the Collection Maximums Index. Should you decide to remove a specimen from the ledger or terminate your advisory board account, all structural records, geospatial locations, and contact identities are permanently expunged from our database archives within 14 business days, unless legal holding mandates apply.

8. Your Rights as a Data Subject

Under the GDPR, you have comprehensive rights regarding your stored data. You may exercise these at any point by emailing our legal secretariat:

• Right of Access: Obtain a structured report detailing all personal data and genomic history files we currently hold.
• Right to Rectification: Request instant corrections to incorrect lineage, ownership updates, or physical location logs.
• Right to Erasure (The Right to be Forgotten): Demand complete deletion of your files from our active ledger.
• Right to Restrict Processing: Request temporary freezes on public registry views during legal ownership or estate inheritance disputes.
• Right to Data Portability: Receive your data in a machine-readable JSON or CSV format.

To trigger any actions, please contact our data safety division: [email protected].