Data Controller
The data controller for personal data is:
Data Collected
We collect and process the following types of personal data:
User-provided data
Information you provide directly to us:
- Name, surname, and contact details (email, phone)
- Farm information (name, address, VAT number)
- Login credentials (email and encrypted password)
- Animal data and livestock activity records
- Account preferences and settings
Automatically collected data
Information collected during your use of the service:
- IP address and device information
- Browsing data and platform interaction
- Technical and session cookies
- System logs for security and debugging
Activity data
Information generated through the use of the service:
- Calf feeding and health records
- Recipes and nutritional plans created
- Reports and statistics generated
- History of operations performed
Purposes of Processing
Your personal data is processed for the following purposes:
Service provision
- Account management and authentication
- Provision of platform features
- Customer assistance and technical support
- Service-related communications
Legal obligations
- Tax and accounting obligations
- Regulatory compliance (GDPR, livestock regulations)
- Response to requests from competent authorities
Security
- Protection against fraud and unauthorized access
- System security monitoring
- Backup and disaster recovery
Service improvement
- Aggregated and anonymous usage analysis
- Development of new features
- Performance optimization
Marketing (with consent only)
Only with your explicit consent:
- Newsletters and promotional communications
- Information about new features and offers
You can revoke your consent at any time from your account settings.
Data Recipients
Your data may be shared with:
| Category | Purpose | Legal Basis |
|---|---|---|
| Hosting provider (Vercel) | Application hosting | Contract performance |
| Cloud database (Supabase) | Data storage | Contract performance |
| Analytics services (anonymized) | Usage analysis | Legitimate interest |
| Payment services | Subscription management | Contract performance |
Internal sharing
Within the platform, data may be shared with:
- Authorized veterinarians (if enabled by the user)
- Farm staff (for multi-user accounts)
- System administrators (for technical support)
Data Retention
We retain your data for the time strictly necessary for the purposes of processing:
| Data Type | Retention Period |
|---|---|
| Account data | Duration of contract + 10 years (tax obligations) |
| Livestock activity data | Duration of contract + 5 years |
| Security logs | 12 months |
| Session cookies | Duration of session |
| Backups | 90 days |
Upon account deletion, data is removed within 30 days, except where legal obligations require retention.
Your Rights
Under the GDPR, you have the following rights:
✏️ Right to Rectification
You can correct inaccurate or incomplete data.
Edit directly from your profile
🗑️ Right to Erasure
You can request the deletion of your data ("right to be forgotten").
⏸️ Right to Restriction
You can request restriction of processing in certain cases.
📦 Right to Data Portability
You can request your data in a structured, machine-readable format.
✋ Right to Object
You can object to processing based on legitimate interest.
↩️ Withdrawal of Consent
You can withdraw your consent to optional processing at any time.
Manage from privacy settings
⚖️ Right to Lodge a Complaint
You can file a complaint with the Data Protection Authority.
You can exercise your rights by contacting us at dedicated form.
We will respond within 30 days of receiving your request.
Data Security
We adopt technical and organizational measures to protect your data:
Technical measures
- Data encryption in transit (HTTPS/TLS)
- Password encryption (bcrypt)
- Secure authentication with JWT
- Encrypted automatic backups
- DDoS protection and web application firewall
Organizational measures
- Data access restricted to authorized personnel
- Staff security training
- Documented security policies
- Incident response procedures
Changes to the Policy
We reserve the right to modify this policy to adapt it to new regulations or service changes.
In case of significant changes, we will inform you via:
- Email to the registered address
- In-app notification
- Informational banner on the website
We recommend checking this page periodically to stay informed.
Contact
For any questions or requests regarding privacy, you can contact us:
Response Time:
We are committed to responding within 30 days, as required by the GDPR.
You can file a complaint with the Italian supervisory authority:
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
Piazza Venezia, 11 - 00187 Roma
Tel. +39 06.696771
www.garanteprivacy.it
This policy complies with EU Regulation 2016/679 (GDPR) and applicable Italian legislation.