Privacy Policy

1. Who is responsible

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

prEUnec GmbH
Möckernstraße 100, 10963 Berlin, Germany
E-mail: info@preunec.com

The platform is developed within the Smart Farming research project, co-funded by the European Union. Unless stated below, your data is not shared with the other project partners.

2. What we collect

• Account data: first and last name, e-mail address, organisation (optional), your password (stored only as a salted bcrypt hash, never in plain text), the time you accepted these terms, and whether your e-mail address is verified.
• Profile and preferences: an optional avatar URL and the settings you choose, such as notification and processing preferences.
• Field data: the files you upload (for example XML plot statistics and field imagery), the job name and sowing and harvest dates you enter, and the scores, reports and recommendations the platform derives from them.
• Notifications: the in-app messages we generate for you (for example when an analysis finishes) and whether you have read them.
• Contact messages: the subject and text you send through the contact form, together with your user ID and e-mail address so we can reply.
• Security data: your IP address, used to rate-limit requests, plus your last login time and the number of failed login attempts, used to protect your account.

3. Why we process it

• To create and run your account and to analyse the data you upload: this is necessary to provide the service you asked for (Art. 6(1)(b) GDPR).
• To keep the platform secure, prevent abuse and fix errors (rate limiting, account lockout, logs): our legitimate interest in a safe, working service (Art. 6(1)(f) GDPR).
• To answer your contact requests: to handle your request (Art. 6(1)(b) and (f) GDPR).

We do not sell your data and we do not use it for advertising.

4. AI-generated recommendations

To write irrigation and fertilisation recommendations, the platform sends a short prompt to an AI language-model service. The prompt contains only crop-status values: days after sowing, the irrigation and nutrition levels, and the vegetation index (NDVI) status. It does not contain your name, e-mail address, organisation or uploaded files.

AI recommendations are generated automatically and can be wrong. They support your decisions but do not replace them; see our Terms of Service.

5. E-mail

We send e-mails to verify your address, reset your password, notify you about your analyses (depending on your settings) and deliver contact-form messages to our team. These e-mails are sent through our mail server or an e-mail delivery provider that processes them on our behalf.

6. Browser storage and cookies

The platform uses only storage that is needed for it to work. We use no analytics, tracking or advertising cookies.

• Sign-in tokens (local storage and an access_token cookie) keep you logged in and authorise live notifications. Access tokens expire after about an hour and refresh tokens after about a week; logging out revokes them.
• A copy of your basic profile (name, e-mail, organisation) in local storage, so the interface can show who is signed in.
• Interface preferences in local storage, such as your selected analysis model and the last notification you have seen.

You can clear this storage at any time in your browser settings; you will then be signed out.

7. Google Maps on the contact page

The contact page embeds a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you open that page, your browser connects to Google, which receives your IP address and may set cookies. This is governed by Google's privacy policy. If you do not want this, do not open the contact page and e-mail us instead.

8. How long we keep it

• Account data, uploads and results: for as long as your account exists.
• Rate-limiting data: only for the short time window it applies to.
• Contact messages: as long as needed to handle your request.

When your account is deleted, the account and the data associated with it are permanently removed, unless the law requires us to keep something longer.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have incorrect data corrected (Art. 16), which you can also do in Settings;
• have your data and account deleted (Art. 17);
• restrict processing (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on our legitimate interests (Art. 21).

To use any of these rights, e-mail info@preunec.com from the address linked to your account. You also have the right to lodge a complaint with a data protection supervisory authority.

10. Security

Passwords are stored only as salted hashes. Login attempts are rate-limited and accounts are locked for a while after repeated failed attempts. Signing out revokes your session tokens.

11. Changes to this policy

We may update this policy when the platform changes. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you in the platform or by e-mail.