Privacy Policy

Information on Data Processing pursuant to Article 13 of EU Regulation No. 679/2016

Welcome!

This privacy notice (also “Privacy Policy”) explains, with specific reference to the transparency principle of Article 13 of EU Regulation 679/2016 (hereinafter, for convenience, “GDPR”, “Regulation” or “Applicable Law”), which data are processed by the Data Controller and how they are handled. This Privacy Policy is made available to users (hereinafter, the “Data Subjects”) of the Plantvoice platform (“Plantvoice”), accessible on desktop or mobile at https://plantvoice.farm/ and via iOS and Android mobile apps, which—subject to registration—provides access to the cloud-based software developed by Plantvoice SRL SB, with registered office in Bolzano (BZ), Via Alessandro Volta 13/A, ZIP 39100, c/o NOI SPA – A1/1.28D, tax code, VAT number and Bolzano Company Register no. 03225710213 (hereinafter, the “Company”), i.e. a Software as a Service using patented sensors to analyze in real time the composition and flow of sap in fruit trees, detecting stress and issues before they become visible and significantly improving crop yield through data collection, organization, storage and presentation.

Pursuant to Article 5 of the GDPR, personal data processing is based on lawfulness, fairness, purpose limitation, storage limitation, data minimization, accuracy, integrity, confidentiality and accountability, according to the principles of privacy by design and by default. The relevant legal framework includes, among other provisions, Legislative Decree n. 196/2003 as amended, Legislative Decree n. 101/2018 and the GDPR.

“Processing of personal data” means any operation concerning any information relating to an identified or identifiable natural person. For example, a person’s name and e-mail address with a “username” that identifies them are “common personal data,” and collecting, recording and using them to send a communication constitutes “processing,” as do storage and sharing. Please visit the Italian Data Protection Authority (Garante) website (www.garanteprivacy.it/home/diritti) for further information.

Please read this Privacy Policy carefully. It applies whenever you access this website or its services and/or use the mentioned Apps, regardless of the data processed. By accessing the website, you consent to this Privacy Policy.

1. Data Controller

Plantvoice SRL SB, with registered office in Bolzano (BZ), Via Alessandro Volta 13/A, ZIP 39100, c/o NOI SPA – A1/1.28D, tax code, VAT number and Bolzano Company Register no. 03225710213 (the “Controller”), acts as the autonomous data controller for handling data related to Platform and mobile App registration. For Controller’s personal data, you may send a written request to plantvoice@legalmail.it.

2. Categories of Personal Data Processed

a. Navigation data: Data implicitly transmitted by using Internet communication protocols, collected automatically by IT systems and software procedures. Examples include IP addresses or domain names of devices used, URI addresses of requested resources, date and time of requests, request method, size and type of returned files, HTTP response codes, and parameters relating to the user’s operating system and IT environment. Such data are necessary for web services, used for statistics on service use and to ensure correct operation.

b. Data provided by the user: Data collected when the user sends a message via the contact form or by phone or any other means to request information or commercial proposals, clarifications, or otherwise. This includes commenting on site articles by providing name and e-mail address. Voluntary submission of messages to contact addresses and form completion entail acquisition of sender’s contact data and any personal data included: all supplied data are processed to fulfill the user’s request.

c. Data collected via cookies: Information contained in cookies, retransmitted when the user revisits the site. Cookies are text files placed by site servers on the user’s device memory. Please see our Cookie Policy on the website.

d. Newsletter subscription data: Data entered by the user—name, surname, e-mail address—via subscription form. These data enable delivery of updates and commercial communications. Marketing may be carried out through third-party providers, for which the Controller has obtained and maintains all necessary permissions and consents for legal data transfer, collection, processing and sharing.

e. ChatBot data: Data voluntarily entered by the user in the ChatBot window—e.g., name, surname, residence address, e-mail—processed solely to handle subsequent requests.

f. Purchase, billing and payment data: Data acquired to enable ordering and purchase of products/services on the website. The Controller receives information directly via registration and payment forms, including:

· Identification and personal details (name, surname, place/date of birth, residence, domicile, e-mail, phone number, for deliveries);

· Payment and billing details, and administrative, accounting and tax data.

g. Review data: Data entered by users to review purchased products/services—name, surname, e-mail—via dedicated form, necessary to publish the review.

All above information is provided solely for purposes related to this website and not for any linked sites. The Controller is not responsible for personal data processed independently by linked platform providers.

Via the Platform and mobile App, the Controller processes the following data collected directly from the Data Subject:

Common personal data: name, surname, e-mail address, phone number, farm name, farm VAT number.

Crop data: geographic location of fields, crop type, sensor-collected data in the field, real-time plant health data.

App usage data: device information, IP address, navigation data, geolocation data (if enabled), access logs.

These data are collected at Platform/App registration and via field sensors.

Personal data of a third party (name, surname, e-mail) entered in the “Invite a colleague” section will be used only to send an invitation e-mail to that third party. Such data are kept only until the invitation is sent; if the third party does not register, their data will be deleted within 15 days of invitation.

3. Purposes of Processing

Your personal data will be lawfully processed under Article 6 of the Regulation for the following purposes:

a) Contractual obligations and service provision: to enable registration, interaction and use of Platform/App services, specifically:

  • Creation and management of user accounts;
  • Real-time plant health monitoring via sensors;
  • Data visualization dashboards, alerts and notifications;
  • Traffic-light style health monitoring systems;
  • Tools for sustainable crop management;
  • Technical communications related to the service;

b) Administrative and accounting purposes: internal organizational, administrative, financial and accounting activities related to contractual and pre-contractual obligations;

c) Legal obligations: compliance with legal, regulatory or EU requirements.

Providing data for these purposes is mandatory; failure prevents service delivery.

The Controller may process data based on its legitimate interest, without prior consent, for:

  • Analysis and research on service use to improve services, with data adequacy, relevance and limitation, anonymized or aggregated where possible;
  • Evaluation of user satisfaction and issue resolution;
  • Customer segmentation by non-invasive categories;
  • Improvement of plant-health predictive algorithms through sensor data analysis.

Data will not be used for other purposes without prior consent.

Mandatory fields are clearly marked in forms. Omission makes relationship management impossible and prevents service provision.

4. Additional Processing: Marketing

With your free and optional consent, certain personal data (name, surname, e-mail, phone) may be used for marketing (newsletters, direct sales, commercial communication) via post, e-mail, phone (automated or operator-assisted), SMS, MMS or push notifications (if mobile App enabled), to propose products/services by the Controller or third parties. The legal basis is your explicit consent. Lack of consent does not affect service access. You may withdraw consent at any time per Section 7. You may also opt out of e-mail promotions by clicking the unsubscribe link in each promotional e-mail. Upon withdrawal, the Controller will send a confirmation e-mail. To withdraw telephone or e-mail promotions selectively, please contact the Controller per Section 7. Note that due to technical timing, you may receive some promotional messages within 24 hours of your opt-out; if messages persist beyond 24 hours, please inform the Controller.

5. Processing Methods and Retention Periods

The Controller processes your data using electronic, automated and/or paper means, strictly tied to processing purposes and ensuring data security and confidentiality.

Data for purposes in Section 3 are retained only as long as needed and in any case no more than 10 years. Data necessary for legal obligations are kept longer as required by law.

Data for marketing purposes in Section 4 are retained only as long as needed and in any case no more than 10 years from collection.

Sensor-collected field data are retained up to 10 years for historical analysis and service improvement.

6. Data Disclosure and Recipients

Your personal data may be accessed by employees or collaborators of the Controller, instructed on confidentiality under Article 29 of the Regulation, and processing your data only for stated purposes in compliance with Applicable Law.

They may also be accessed by third-party “External Data Processors,” such as hosting providers, technical maintenance, banking, accounting, tax service providers, cloud service providers storing sensor data, etc.

The Controller has obtained and maintains all necessary permissions and consents for legal data transfer and sharing with these parties to deliver Plantvoice services.

You may request a list of Data Processors from the Controller per Section 7.

Your data may be shared with third parties, including commercial partners and distribution network entities, only with your specific consent.

7. Data Subject Rights

You may exercise rights under Applicable Law by contacting the Controller at:

  • Certified e-mail: plantvoice@legalmail.it

Under Applicable Law, you have the right to know (i) the source of your personal data; (ii) processing purposes and methods; (iii) logic applied for electronic processing; (iv) Controller’s and Processors’ identities; (v) recipients or categories of recipients.

You also have the right to:

a) access, update, rectify or supplement your data;

b) erase, anonymize or block unlawfully processed data, including data no longer necessary for original purposes;

c) obtain confirmation that a) and b) have been communicated to recipients, unless impossible or disproportionate.

Additionally, you have:

a) the right to withdraw consent at any time;

b) where applicable, data portability, restriction of processing and erasure (“right to be forgotten”);

c) the right to object:

i) for legitimate reasons to processing of your data, even if relevant to collection purposes;

ii) to processing for marketing, direct sales, market research or commercial communication;

iii) to processing for direct marketing, including profiling.

If you believe processing violates the Regulation, you may lodge a complaint with a supervisory authority where you live, work or the alleged infringement occurred. In Italy, that authority is the Garante (Piazza Venezia 11, 00187 Rome; www.garanteprivacy.it).

Under Article 23 GDPR, Member States may limit certain data subject rights; we reserve the right to exercise this option within EU and national law in exceptional cases.

8. International Data Transfers

Personal data will not be transferred outside the EU. Any transfer to non-EU countries, if necessary and with your prior authorization, will comply with Articles 44 et seq. GDPR, ensuring appropriate data protection safeguards.

9. Social Links and Buttons

This Policy applies only to this website and the mobile App, not to any linked sites or platforms reachable via links or social buttons. External parties’ data handling is independent; please consult their privacy policies:

  • Facebook: https://facebook.com/about/privacy
  • Instagram: https://help.instagram.com/519522125107875
  • YouTube: https://policies.google.com/privacy?hl=it
  • LinkedIn: https://it.linkedin.com/legal/privacy-policy

10. Changes to this Privacy Policy

The Controller reserves the right to update this Policy to reflect legal or technical developments without notice. Material changes will be highlighted appropriately. Please review this Policy periodically.

This Privacy Policy is effective as of June 10, 2025.