Privacy Policy
Effective Date: January 2025
1. Introduction
Farm Mind ("Farm Mind," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our precision dairy farming platform and services (collectively, the "Services").
This policy applies to information we collect:
- Through our website www.farmmind.eu
- Through our mobile and web applications
- Through IoT devices and sensors integrated with our platform
- When you interact with our customer support
- Through email, text, and other electronic communications
Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
2. Information We Collect
2.1 Personal Information
We collect personal information that you provide directly to us, including:
Account Information:
- Name and contact details (email address, phone number, postal address)
- Company/farm name and registration details
- Job title and role
- Username and password
- Payment and billing information
- Tax identification numbers
Farm and Operations Data:
- Farm location and GPS coordinates
- Number and identification of dairy cows
- Milking system specifications
- Feed and nutrition data
- Veterinary and health records
- Production metrics and milk quality data
Communication Data:
- Support tickets and customer service communications
- Survey responses and feedback
- Training and webinar participation records
- Marketing preferences
2.2 Automatically Collected Information
Device and Usage Data:
- IP address and device identifiers
- Browser type and operating system
- Access times and dates
- Pages viewed and features used
- Clickstream data and referral URLs
- Error logs and performance data
IoT and Sensor Data:
- Real-time cow activity and behavior data
- Rumination patterns and feeding behavior
- Milk production and quality metrics
- Environmental conditions (temperature, humidity)
- Equipment performance data
Location Data:
- GPS coordinates of farm facilities
- Cow movement patterns within facilities
- Mobile device location (with permission)
2.3 Third-Party Information
We may receive information about you from:
- Dairy cooperatives and associations
- Milk processors and buyers
- Veterinary service providers
- Equipment manufacturers and integrators
- Credit reference agencies
- Marketing partners
3. How We Use Your Information
We use the collected information for the following purposes:
3.1 Service Delivery
- Provide and maintain our digital twin platform
- Process and analyze farm data to generate insights
- Predict milk quality and optimize production
- Track methane emissions and sustainability metrics
- Generate reports and recommendations
- Process transactions and manage subscriptions
3.2 Communication
- Send service-related notifications and alerts
- Respond to inquiries and provide customer support
- Send marketing communications (with consent)
- Provide training and educational materials
- Notify about platform updates and new features
3.3 Improvement and Development
- Analyze usage patterns to improve our Services
- Develop new features and functionalities
- Conduct research and development
- Train and improve our AI algorithms
- Benchmark performance across anonymized datasets
3.4 Legal and Compliance
- Comply with legal obligations and regulations
- Enforce our terms of service and agreements
- Protect against fraud and security threats
- Respond to legal requests and proceedings
- Maintain audit trails for compliance purposes
4. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
Contract Performance: Processing necessary to fulfill our service agreement with you.
Legitimate Interests: Processing for our legitimate business interests, including:
- Improving and securing our Services
- Marketing our Services to existing customers
- Fraud prevention and network security
Consent: Where you have given explicit consent, particularly for:
- Marketing communications to non-customers
- Optional data analytics features
- Location tracking on mobile devices
Legal Obligations: Processing required by law, including:
- Tax and accounting requirements
- Animal health and welfare reporting
- Environmental compliance reporting
5. How We Share Your Information
We may share your information in the following circumstances:
5.1 Service Providers
We share data with third-party service providers who assist us in:
- Cloud hosting and data storage (AWS, Microsoft Azure)
- Payment processing (Stripe, PayPal)
- Analytics services (Google Analytics)
- Customer support tools (Zendesk)
- Email services (SendGrid)
5.2 Business Partners
With your consent, we may share data with:
- Dairy cooperatives for benchmarking
- Milk processors for quality management
- Veterinary services for health monitoring
- Equipment manufacturers for integration
- Certification bodies for sustainability reporting
5.3 Aggregated and Anonymized Data
We may share aggregated or anonymized data that cannot identify you for:
- Industry research and benchmarking
- Scientific publications
- Market analysis reports
- Public policy development
5.4 Legal Requirements
We may disclose information when required by law or in response to:
- Court orders or legal proceedings
- Government or regulatory requests
- Protection of rights and safety
- Investigation of potential violations
5.5 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
6. Data Security
We implement appropriate technical and organizational measures to protect your information:
Technical Safeguards:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Multi-factor authentication
- Regular security audits and penetration testing
- Intrusion detection and prevention systems
- Regular software updates and patches
Organizational Measures:
- Access controls and role-based permissions
- Employee training on data protection
- Confidentiality agreements with staff and contractors
- Incident response procedures
- Regular security awareness training
Compliance Standards:
- ISO 27001 certification (in progress)
- GDPR compliance framework
- SOC 2 Type II audit preparation
7. Data Retention
We retain your information for as long as necessary to:
- Provide our Services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Support business operations and improvements
| Data Type |
Retention Period |
| Account data |
Duration of service + 7 years |
| Financial records |
7 years (tax requirements) |
| Production data |
5 years for trend analysis |
| IoT sensor data |
2 years detailed, 5 years aggregated |
| Marketing data |
Until consent withdrawn |
| Support tickets |
3 years |
8. Your Rights and Choices
8.1 GDPR Rights (European Users)
Under the General Data Protection Regulation, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit processing of your data
- Portability: Receive your data in a portable format
- Objection: Object to certain processing activities
- Automated Decision-Making: Not be subject to solely automated decisions
8.2 CCPA Rights (California Users)
Under the California Consumer Privacy Act, you have the right to:
- Know what personal information we collect
- Request deletion of your personal information
- Opt-out of the sale of personal information (we do not sell data)
- Non-discrimination for exercising your rights
8.3 How to Exercise Your Rights
To exercise any of these rights, please contact us at:
We will respond to your request within 30 days (or as required by applicable law).
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards for international transfers:
EU to Non-EU Transfers:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
- Binding Corporate Rules for group companies
Data Localization:
- Primary data storage in EU (Ireland)
- Backup facilities in EU (Germany)
- Processing primarily within EEA
10. Children's Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete that information promptly.
11. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on our website
- Sending notice to your registered email
- In-app notifications for significant changes
The "Effective Date" at the top indicates when this policy was last revised.
12. Contact Information
For questions about this Privacy Policy or our privacy practices, contact us at:
13. Supervisory Authority
If you are located in the European Union and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority:
14. Additional Information for Specific Jurisdictions
14.1 Brazil (LGPD)
Brazilian users have additional rights under the Lei Geral de Proteção de Dados, including the right to:
- Confirmation of processing
- Anonymization or blocking of unnecessary data
- Information about sharing with third parties
- Revocation of consent
14.2 United Kingdom
UK users maintain rights equivalent to GDPR under UK data protection laws. The supervisory authority is the Information Commissioner's Office (ICO).
14.3 Australia
Australian users are protected under the Privacy Act 1988 and the Australian Privacy Principles. We comply with requirements for cross-border disclosure of personal information.