Privacy policy

Who we are

AGROO, privacy@agroo.si. The person responsible for data protection at AGROO is the founder, Serhii Punko.

What we collect

When you contact us. Your name, company, work email, country and what you make, plus anything you choose to write in the message field. We use it to answer you and, if you become a client, to run the engagement.

When you become a client or partner. Contact details, company registration information, the documents you send us for your supplier file, and the record of our correspondence.

When you visit this website. Aggregate, non-identifying statistics only — see the section on analytics below. We do not build visitor profiles and we do not use tracking cookies.

Why we may process it

To take steps at your request before entering a contract, and to perform a contract once you are a client. To comply with legal obligations, including tax, accounting and sanctions or export-control screening. And for our legitimate interest in operating and securing the service, provided your rights do not override it.

Analytics

We use Plausible Analytics, self-hosted on our own server in the European Union. It sets no cookies, collects no personal data and does not track you across websites. The statistics it produces are aggregate and cannot be traced back to an individual. Because of this, no consent banner is required for analytics on this site.

We do not use Google Analytics, Google Tag Manager, Google Ads, Yandex Metrica, Meta Pixel or any other third-party tracking service.

Who processes data on our behalf

We keep this list short deliberately. These are the only processors with access to data you send us:

• OVH (France) — hosting of our CRM, client portals and internal systems. Data stays in the EU.
• NEOSERV (Slovenia) — hosting of this website.
• Cloudflare — security and delivery in front of this website. Processes IP addresses of visitors for bot protection.
• Anthropic (United States) — the language models used to produce research reports, under a data processing agreement. Client material is not used to train models.

Plausible is not listed as a processor because it runs on our own infrastructure and the data never leaves it.

Transfers outside the EU

Processing takes place in the European Union with one exception: Anthropic, in the United States, is used to generate research reports. That transfer is covered by the European Commission’s Standard Contractual Clauses. If you would prefer your material not be processed this way, tell us before the engagement starts and we will discuss alternatives.

How long we keep it

Enquiries that do not become engagements: up to 24 months, then deleted. Client and partner records: for the duration of the relationship and afterwards for as long as tax, accounting and limitation periods require. Aggregate website statistics: indefinitely, because they contain no personal data.

Your rights

Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Write to privacy@agroo.si; we respond within 30 days. If you are not satisfied, you may complain to the Slovenian Information Commissioner (Informacijski pooblaščenec) or to the supervisory authority where you live.

Security

Data is held on servers we control, with encrypted transport, restricted access and daily backups. Access to client files is limited to the people working on that engagement. Territory partners can add records to the CRM but cannot edit or delete existing ones.

Changes

When this policy changes materially we update the date at the top and, for active clients and partners, tell you directly.