Privacy policy

Controller

The controller within the meaning of Art. 4 no. 7 GDPR is:

Contact details are published in the imprint.

Contact for data protection matters

For any question about this notice or about your rights, write to Darina Onoprienko at the address above. We have not appointed a Data Protection Officer under Art. 37 GDPR, because the conditions requiring one do not currently apply to our processing.

Definitions

This notice uses the terms defined in Art. 4 GDPR, so that the wording matches the law it follows.

Server log files

When you open our website, your browser necessarily transmits data to our web server. During an active connection the following is recorded: browser and browser version, operating system, referrer URL, host name of the accessing computer, and the date and time of the request.

We process this to establish a working connection, to keep the site usable, and to assess system security and stability. The legal basis is our legitimate interest under Art. 6 para. 1 lit. f GDPR.

For technical security, in particular to defend against attacks on the web server, this data may be stored temporarily. We cannot identify individuals from it. After 30 days at the latest the IP address is truncated at domain level so that no reference to an individual user remains. Beyond statistical purposes this data is not evaluated, and it is not combined with data from other sources.

Hosting

This website is hosted on servers located in the European Union. The hosting provider processes the data described under "Server log files" on our behalf as a processor under Art. 28 GDPR, on the basis of a data processing agreement.

Cookies and local storage

Cookies are small text files stored on your device, either for the duration of a session or until you delete them. Comparable technologies such as local storage work the same way, and the rules below apply to them equally.

Storing information on your device, or accessing information already stored there, requires your consent under § 25 para. 1 TDDDG, unless it is strictly necessary to provide a service you have expressly requested (§ 25 para. 2 TDDDG). Where we process personal data on the basis of your consent, the legal basis is Art. 6 para. 1 lit. a GDPR.

This website stores only what is strictly necessary until you decide otherwise. The single entry we write without consent records your own cookie choice, so that we do not have to ask again on every page. Optional measurement is off until you switch it on, and you can change or withdraw your choice at any time through the cookie settings link in the footer, with effect for the future.

You can also configure your browser to inform you about cookies, to allow them only case by case, to refuse them generally, or to delete them automatically when the browser closes. Disabling cookies may limit how this website works.

Reach measurement

If you consent to optional measurement, we record which pages are opened and which elements are used, in order to understand which parts of the site are useful. No such data is collected before you consent, and withdrawing consent stops it with effect for the future. The legal basis is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.

We do not use Google Analytics, Google Ads or Facebook advertising tools on this website. Earlier versions of this policy described those services; they are no longer in use.

Contact form, offer requests and sample validation

If you send us a message, an offer request, or a sample validation request, we use the details you provide to answer, to prepare the offer, and to handle the related business communication. Providing a name and an email address is necessary for us to reply; the rest is voluntary and helps us give a useful answer.

The legal basis is Art. 6 para. 1 lit. b GDPR where the request concerns a contract or steps preceding one, and otherwise our legitimate interest in answering you under Art. 6 para. 1 lit. f GDPR. You may object to processing based on Art. 6 para. 1 lit. f GDPR at any time.

Your data is deleted once the request has been dealt with, unless statutory retention obligations require us to keep it. We do not pass it on without your consent.

Coffee & AI newsletter

If you subscribe to our newsletter, we use your email address to send occasional notes on green coffee grading and what we are building. We confirm the subscription by email before sending anything, so that nobody is signed up by someone else.

The legal basis is your consent under Art. 6 para. 1 lit. a GDPR. You can withdraw it at any time using the unsubscribe link in any newsletter, or by writing to us. Withdrawal does not affect the lawfulness of what was sent before it.

Customer accounts in the web application

The VeroLab web application at app.agrivero.ai is a separate service with its own login. Where you register, we process the name, email address and telephone number you provide, in order to give you access and to deliver the services you have purchased. The legal basis is Art. 6 para. 1 lit. b GDPR, and Art. 6 para. 1 lit. a GDPR where you have given consent for a particular purpose.

Account data is deleted when the account is deleted, unless statutory retention obligations apply.

Social media and external links

Our LinkedIn and Instagram profiles are linked from this site as plain links. Nothing is embedded, and no data reaches those providers until you click through, at which point their own privacy policies apply.

Where you interact with us on those platforms, the platform operator is a controller for the processing it carries out there, and we are a controller only for the data you send to us. We have no influence over how these providers collect or use data, and we cannot give you access to it.

Recipients and transfers

We do not transfer your personal data to third parties unless we have said so in the description of the relevant processing, you have consented under Art. 6 para. 1 lit. a GDPR, the transfer is necessary to establish, exercise or defend legal claims under Art. 6 para. 1 lit. f GDPR, there is a legal obligation under Art. 6 para. 1 lit. c GDPR, or it is required to perform a contract with you under Art. 6 para. 1 lit. b GDPR.

We use carefully selected external service providers, in particular for hosting, email delivery and IT maintenance. They act on our instructions under data processing agreements pursuant to Art. 28 GDPR.

Where a transfer to a country outside the European Economic Area is involved, it takes place only on the basis of an adequacy decision under Art. 45 GDPR, such as the EU-US Data Privacy Framework for certified organisations in the United States, or on appropriate safeguards under Art. 46 GDPR such as standard contractual clauses.

Storage period

We keep personal data for as long as it is needed for the purpose it was collected for, and thereafter for as long as statutory retention periods require, in particular under commercial and tax law. Data is deleted routinely once the relevant period expires, or once you exercise your right to withdraw consent or to object and no other basis for keeping it applies.

Your rights

Data protection law gives you the following rights:

• Access to the personal data we process about you (Art. 15 GDPR).
• Rectification of inaccurate personal data without undue delay (Art. 16 GDPR).
• Erasure of your personal data (Art. 17 GDPR), unless processing is necessary for freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims.
• Restriction of processing (Art. 18 GDPR).
• Portability of the data you provided to us, in a structured, commonly used and machine-readable format (Art. 20 GDPR).
• Withdrawal of any consent you have given, with effect for the future (Art. 7 para. 3 GDPR).
• Complaint to a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

Right to object

Where we process your personal data on the basis of legitimate interests under Art. 6 para. 1 lit. f GDPR, you have the right under Art. 21 GDPR to object at any time on grounds relating to your particular situation.

If the objection concerns processing for direct marketing, it applies without any need to explain your situation, and we will stop that processing.

To exercise your right to withdraw, to object, or any other right above, write to us at the address in the imprint.

Changes to this policy

We may adapt this policy to keep it in line with applicable data protection law and with changes to our services. The version published here applies to your visit.