Privacy Policy

Agro Contracts prioritizes the security of its clients’ data. We take all necessary measures to protect your personal data with the utmost care. This Privacy Policy was updated on January 3, 2025.

Data Controller

The Data Controller is AGRO CONTRACTS Sp. z o.o., located at ul. Sportowa 7 / 1A, 05-600 Grójec, Poland, with the following identifiers: Tax ID (NIP): 7972088345, Business Registry Number (REGON): 529401287, National Court Register Number (KRS): 0001121953. Agro Contracts is also the owner of the following portals: https://epunnet.com / https://www.agrocontracts.com/ /

We implement the highest reasonable technical and organizational standards to secure your personal data against destruction, unauthorized access, or misuse. We ensure that our partners maintain high standards of personal data protection.

Contact

For any questions related to the processing of personal data, please contact us at contact@agrocontracts.com.

Where Do We Obtain Your Data?

We have obtained your data directly from you during the account creation process in the application or on our website, as well as while using the epunnet application. We have also received your data through the contact form on our website. Additionally, we may have collected your data directly from you at various trade fairs and conferences. Furthermore, we obtain data from other sources in compliance with applicable laws and based on agreements with our partners. These additional sources may include information from public registers, such as KRS or CEIDG. In all such cases, we thoroughly verify that we have the appropriate legal basis for processing your personal data.

Purpose and Legal Basis for Processing Your Personal Data by Agro Contracts

We process your personal data in accordance with applicable legal regulations, particularly: Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data. The Polish Personal Data Protection Act of May 10, 2018, along with other specific regulations. We ensure that your data will only be processed for the purpose for which it was provided to us. If the processing is based on your voluntary consent, you have the right to withdraw it at any time.

We process your personal data because it is necessary for entering into, performing, terminating, or taking other essential actions to provide the service. The specific purposes of processing include:

• Ensuring the ability to use the service electronically and fully utilizing the functions of the epunnet application, including issuing wristbands to employees and settling the results of agricultural work.
• Creating and managing your account(s), facilitating transactions, and resolving technical issues related to your account.
• Handling complaints regarding the epunnet application if you submit such a complaint.
• Managing inquiries submitted by you, for example, through the contact form.
• Communicating with you for service-related purposes.
• Fulfilling obligations arising from legal requirements.

Other Purposes Related to Agro Contracts' Legitimate Interests

• Monitoring activity in the epunnet application, managing user activity, and conducting research and analysis to improve functionality, enhance service performance, and assess users' key interests and needs.
• Conducting marketing activities, including direct marketing of our services or those of third parties.
• Contacting you for permissible marketing purposes through available communication channels and, with your consent, via email.
• Supporting payment gateway operations and ensuring the security of electronically delivered services, including enforcing compliance with the internal rules of the epunnet application and preventing misuse.
• Managing inquiries and requests, especially those directed to Customer Support, unless they are directly related to the performance of the agreement.
• Organizing loyalty programs, contests, and promotional campaigns in which you may participate.
• Recovering debts and conducting legal, arbitration, and mediation proceedings.
• Performing statistical analyses.
• Storing data for archiving purposes and ensuring accountability, i.e., demonstrating compliance with legal obligations.

Additional Processing Based on Your Consent. With your explicit consent, we process your personal data for the following purposes:

• Storing information in cookies.
• Collecting data from websites and mobile applications.
• Organizing promotional campaigns and contests in which you may participate.
• Providing communication in the form of a newsletter, where the legal basis for processing is the consent given during registration in the application or via a form on the website.

You can withdraw your consent for the processing of personal data at any time. To do so, simply send an email to contact@agrocontracts.com or uninstall the epunnet application. Upon receiving your request to withdraw consent, we will immediately stop processing your data and inform you of the results. Your personal data will be processed until the moment consent is withdrawn. At Agro Contracts, we assure you that your personal data will only be processed for specific, clearly defined purposes in compliance with applicable laws and will not be processed in any way that deviates from these purposes.

Do You Need to Provide Us with Your Personal Data?

We require the following personal data and other information to provide you with the service:

• Registration information: First name, last name, email address, and phone number, provided during registration for epunnet.
• Shipping information: First name, last name, address, postal code, email, phone number, and city.
• Payment processing information (via payment gateway): IP address, email, first name, and last name.
• Bank transfer payment processing data.
• Billing information.
• Application usage data: Location, internet usage, and Bluetooth signal usage.

If you fail to provide this personal data, we will be unable to deliver certain services, meaning you will not be able to use the epunnet application or some of its features.

In cases other than those mentioned above, providing your personal data is voluntary. For instance, providing data for marketing purposes is optional.

Additional Data Processing for Service Fulfillment and Legal Obligations. We also process the following data to properly deliver the service or fulfill legal obligations:

• Account balance in epunnet.
• Transaction details, such as payment specifics.
• Browsing history: Information necessary to maintain proper communication between the server and browser while using the epunnet application.
• Publicly available data or data obtained from third parties, such as information from public registers.
• Technical data about the device you use to access the epunnet application.
• Location data, such as the location of transactions performed through the mobile application.
• Harvest data: Assigning work results to an employee.
• Employee data: Data entered into employee profiles, such as first name, last name, and email. Please note that you must obtain consent from employees before processing their data in the epunnet application. Agro Contracts is not responsible for data entered into employee profiles.

What Are Your Rights Regarding Data Processing by Agro Contracts Under the GDPR? Can You Object to the Processing of Personal Data?

We guarantee that you can exercise all your rights under the General Data Protection Regulation (GDPR), including:

• Right to Rectification or Completion of Data. You can exercise this right if you notice that your data is incorrect or incomplete.
• Right to Erasure (Right to Be Forgotten). You can request the deletion of your data in several situations. Your data is no longer needed for the purposes for which it was collected. You withdraw your consent for data processing. You object to the processing of your data. Your data is being processed unlawfully.
• Right to Restrict Processing. You have the right to limit the processing of your data in the following cases: You believe your data is incorrect. The data is being processed unlawfully. The data is no longer needed but may be required for defense or legal claims. You object to the processing, pending the determination of legitimate grounds for processing.
• Right to Data Portability.You can request to transfer your data if the processing is based on your consent or a contract and the processing is carried out by automated means.
• Right to Object to Data Processing. You have the right to object to the processing of your personal data if: The processing is based on legitimate interests or for statistical purposes, and your objection is justified by your specific situation. Your data is being processed for direct marketing purposes, including profiling for marketing purposes.

Filing a Complaint. You can lodge a complaint about the processing of your personal data with the supervisory authority: General Inspector for Personal Data Protection. Address: ul. Stawki 2, 00-193 Warsaw, Poland.

Who Do We Share Your Personal Data With?

Access to your personal data within the epunnet system is restricted to our authorized employees and granted only to the extent necessary. In certain situations, we may share your personal data with entities outside our organization. In all cases, we carefully analyze the legal basis for sharing your personal data.

We may share your data with entities responsible for electronic communication or push notifications. This type of data sharing is intended to inform you about changes to the Terms of Service, the current status of transactions, the availability of services in the epunnet application, and other important updates. Each such entity is legally and contractually obligated to comply with GDPR and to process your data solely based on and within the scope defined in the agreement.

Your data, in encrypted form, may also be processed on the servers of our software and cloud service providers.

Data Processing Entities

Within the EEA:

• GetResponse S.A.: Provides newsletter tools and heatmap solutions for monitoring user activity on the website.
• Digital Virgo Polska Sp. z o.o.: Operates the JustSend SMS messaging service.
• PayPro S.A.: Provides the Przelewy24 payment gateway service.
• Stripe Technology Europe, Limited: Provides the Stripe payment gateway service.
• mBank S.A.: Operates the PayNow payment gateway service.
• OVH Sp. z o.o.: Provides server hosting services.
• Google Ireland Limited: Provides cloud computing services.

Outside the EEA:

Some entities collaborating with the Data Controller are located outside the European Union and are thus considered “third countries” under GDPR. Data is shared with entities in the United States that meet appropriate data processing standards:

• Google Inc.: Provides Google Analytics for website traffic monitoring.
• Facebook Inc.: Provides Facebook Pixel for website traffic monitoring.
• MongoDB, Inc.: Provides specialized cloud services.
• Amazon Web Services Inc.: Provides cloud computing services.
• Vercel Inc.: Provides server hosting services.

How Long Do We Retain Your Personal Data?

We retain your personal data for the duration of the service offering and beyond, in accordance with our legitimate interests and legal obligations, such as: Pursuing claims, Fulfilling legal obligations (including tax and accounting requirements), Preventing fraud and misuse, Statistical and archival purposes. This retention period is a maximum of 10 years after the end of the service offering. For marketing purposes, your data will be used until the service offering ends or until you object to such processing, whichever occurs first. If you participate in loyalty programs, contests, or promotional campaigns, we process your data for the duration of these events and the period necessary to distribute prizes in accordance with the applicable rules. To demonstrate compliance with data processing regulations, we retain data for the period required to document compliance with legal requirements and to allow for inspection by public authorities.