Privacy policy

1. Data controller

This privacy policy covers Optifarm’s company website (www.optifarm.net) and the mobile app’s landing page (app.optifarm.net). It explains which personal data we process when you visit them, for which purposes and on what basis, who we share it with and what your rights are. It follows the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2). The webshop and the mobile app have privacy policies of their own.

• Optifarm d.o.o., Gradnikova cesta 85, 4240 Radovljica, Slovenia
• Registration number: 7015933000, VAT ID: SI41125029
• Email for data protection questions: info@optifarm.net
• Data protection officer: Gaber Terseglav, gaber.terseglav@optifarm.net

2. What we process and why

• The contact form: your name, email address, subject and message. We use them to reply to you. The legal basis is a step taken at your request (Article 6(1)(b) GDPR) or our legitimate interest in answering questions (Article 6(1)(f)).
• Analytics, only with your consent (Article 6(1)(a) GDPR): which pages you visit and which links you use (such as the links to the app stores), with a random browser identifier. You give consent in the cookie banner and can withdraw it at any time in the cookie settings in the footer.
• Error reports: when something goes wrong on the site, the error, the page it happened on, and the browser and device type are recorded, without anything that would identify you. We need them to find and fix errors (legitimate interest, Article 6(1)(f)).
• Technical data: your IP address, browser type, and the time and address of each request, which the server logs on every visit. They are needed to run and secure the site (legitimate interest, Article 6(1)(f)).
• The map on the Contact page: when you open that page, a Google Maps map is loaded, so Google receives your IP address and browser details and may set its own cookies (see the cookie statement).

3. Who we share data with

We share data only with the providers that perform services for us, and only as far as they need it:

• Amazon Web Services EMEA SARL (Luxembourg): hosting the sites and sending the contact form’s messages, as our processor.
• Segment (Twilio Inc., USA): visit analytics, only with your consent, as our processor.
• Sentry (Functional Software, Inc., USA): error reports, as our processor.
• Google Ireland Limited (Ireland): the map on the Contact page, as an independent controller under its own privacy policy.
• Sanity AS (Norway): the blog’s and the EU projects’ content; images load from its servers, which receive your IP address.

Twilio Inc., Functional Software, Inc. and Google are based in, or have their parent company in, the USA, so data may be transferred there. The transfer relies on the European Commission’s adequacy decision for the EU-US Data Privacy Framework.

4. How long we keep data

• Contact form messages: as long as we need them to reply and for any further cooperation, at most 2 years.
• Analytics data: 1 year, or until you withdraw consent, if sooner.
• Error reports: at most 90 days.
• Technical server logs: at most 90 days.

5. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to processing based on legitimate interest, to data portability, and to withdraw consent, which does not affect processing before the withdrawal. Send your request to info@optifarm.net; we reply within one month.

If you believe we process your data unlawfully, you can complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, email: gp.ip@ip-rs.si, website: www.ip-rs.si.

6. Changes

We update this policy from time to time, for example when we add a service. The current version is always published on this page, with the date of its last change.