01 ·In short
Regulation (EU) 2016/679 (GDPR) gives you, as a person whose data we process, rights you can exercise free of charge. Many work directly in Settings; for the rest, write to dpo@agrogis.ro. We answer within one month (extendable by two more months for complex requests, in which case we tell you why) and may ask you to confirm your identity.
Reference document: This guide explains in practice the rights described in the Privacy Policy; if they differ, the policy prevails.
02 ·Right of access (Art. 15)
You can find out what data we hold about you, why, who receives it, how long we keep it and where it comes from — all described in the Privacy Policy — and receive a copy of it.
You download the copy yourself: Settings → Privacy & data → Export my data. You immediately get a JSON file with your profile, the farms and parcels of the organisations you belong to, the records created under your account, the EUDR and ISCC reports you generated, invoices, notifications, acceptance records, support tickets and your conversations with John, plus links to the files stored under your account that stay valid for one hour. Not included: our team's internal notes on tickets, and the records the organisation keeps for its parcels, such as crop seasons, the spray register, field-guidance sessions and the zones of prescription maps. You can ask for them by e-mail at dpo@agrogis.ro.
03 ·Right to rectification (Art. 16)
You correct your profile and your farm data directly in the app (the profile is in Settings). For anything you cannot correct yourself, write to dpo@agrogis.ro.
04 ·Right to erasure (Art. 17)
- In Settings → Privacy & data → Delete account: the account and personal data are deleted immediately, except what is listed below, and the subscription is cancelled. While an EUDR or ISCC analysis for your account is still running, the deletion is refused and nothing is deleted until the analysis has finished or been stopped, which takes at most 30 minutes. Deletion cannot be undone.
- Or write to dpo@agrogis.ro and we do the same after confirming your identity.
What we keep after deletion: Invoices and payment records (10 years, accounting law); if you generated EUDR or ISCC reports, those reports and their PDFs, including the e-mail address recorded in them, together with the organisations you owned, with their farms, parcels and the records attached to the parcels (5 years from the most recent report); and the records of document acceptance and the activity log (no longer than 3 years after the account is closed). An EUDR or ISCC analysis that stopped without results is not kept: it is deleted with the account. Your account, sign-in details and profile are deleted, together with the records created under your account, such as jobs, field issues and expenses. The Privacy Policy explains why.
05 ·Right to restriction (Art. 18)
You can ask us to restrict the processing of your data temporarily — for example while we check a dispute about its accuracy. During the restriction the data is kept, but we do not use it for anything else.
06 ·Right to data portability (Art. 20)
The export in Settings is a structured, machine-readable JSON file. While the account is not locked you can also download the spray register as CSV, XML or JSON and — on plans that include prescription maps — each prescription map as Shapefile, ISOXML, GeoJSON, KML, CSV or GPX (Terms, section 10). You can take these files to any other provider.
07 ·Right to object (Art. 21)
We send no marketing e-mails. You choose alert e-mails in Settings, under notifications, and each alert e-mail has a one-click unsubscribe link.
You can object to processing based on our legitimate interest — security, acceptance records, keeping EUDR and ISCC evidence — by writing to dpo@agrogis.ro. We look at your situation and answer in writing within one month.
08 ·Automated decisions (Art. 22)
AGROGIS makes no decisions based solely on automated processing that have legal effects on you, apart from applying the terms you accepted — for example locking access when a trial ends or a payment stays unpaid. You can ask a person on our team to review such a step. The platform's recommendations (alerts, prescription maps, risk verdicts) are support tools; the decision is yours.
09 ·Complaints to the supervisory authority
If you believe your rights have not been respected, you can lodge a complaint with the Romanian data protection authority — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — or with the authority of the EU country where you live or work:
- Web: dataprotection.ro
- B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București
- E-mail: anspdcp@dataprotection.ro
You can also write to us first, at dpo@agrogis.ro — a problem can often be solved quickly and directly.
For any data-related question
AGROGIS team · Data Protection
Email: dpo@agrogis.ro
Address: Str. Pictor Ion Andreescu 32B, Camera 3, Giurgiu, România
We answer data-protection requests within one month, as the GDPR requires.