Privacy policy

How AgroTour Connect collects, uses and protects your personal data in line with GDPR and BiH LPPD.

Last updated: 2026-04-25

1. Who we are

AgroTour Connect is a platform developed by UAB Silotech under the SMART ERA Challenge #7 grant. For data-protection questions email support@agrotour.eu.

2. What data we collect

  • Account data: name, email, hashed password, preferred language.
  • Organization profile: business name, type, municipality, descriptions and photos you provide.
  • Content you create: knowledge-hub articles, packages, partnership messages.
  • Enquiries sent through the public pages: if you use the “Send an enquiry” form on a profile or a package, we store your name, email address, phone (if you give one) and the message text — solely so the owner can reply to you. No account is needed and we do not record your IP address or device data. Messages are permanently deleted after 12 months.
  • Technical data: IP address, browser type and basic server logs for security and debugging.

3. Legal basis

We process data under GDPR Art. 6(1)(b) (contract performance when you use the platform) and Art. 6(1)(f) (legitimate interest — service security). Enquiries sent through the public pages rest on the legitimate interest of the owner in replying to you (Art. 6(1)(f)), together with the consent you confirm in the form. We do not verify the address you enter, so that consent corroborates the processing rather than being its sole basis. Marketing communications are sent only with your explicit consent under Art. 6(1)(a).

4. Your rights

  • Access (Art. 15) and portability (Art. 20): export your data as a JSON bundle from Settings.
  • Erasure (Art. 17): requested deletions execute after a 14-day cancellation window. See Settings.
  • Rectification (Art. 16): edit your profile data directly from the dashboard.
  • Objection and complaint: contact our DPO; your right to lodge a complaint with the BiH Personal Data Protection Agency remains preserved.

5. Retention and deletion

Active accounts are retained while in use. On deactivation, personal data is anonymized within 30 days; technical logs are deleted after 90 days. Enquiries sent through the public pages are permanently deleted 12 months after we receive them; to have yours removed sooner, write to our DPO.

6. Cookies

We use only essential cookies for sign-in and language preferences. See the Cookie policy for details.