Softwareentwicklung Sebastian Bleuel, Ortesweg 10, 36145 Hofbieber, Germany, e-mail: info@farmmanager.cloud.

Provision and operation of the "FarmManager" application, user and access management, billing of subscriptions, fulfilment of statutory documentation and reporting duties (including the Fertiliser Ordinance, TAMG/HI-Tier, plant protection), and support and communication.

Data subjects are the customer's users and, where applicable, their customers and employees. Processed data includes master data (name, e-mail, phone), access and usage data, operational domain and financial data, and billing data.

Data is shared only with carefully selected processors to the extent necessary for operation – in particular hosting and infrastructure, the payment provider Stripe, the sending of system e-mails via STRATO AG, and a service for automated error diagnostics (Sentry). For the map display and location search, technical connection data (including the IP address) are transmitted directly from your browser to the map services OpenStreetMap and Esri. No data is shared for third parties' own purposes.

Transfers to third countries take place only to a strictly limited extent. This affects the payment provider Stripe (USA), the map service Esri (USA) and the error-diagnostics service (Sentry, USA); each transfer is carried out on the basis of appropriate safeguards (EU standard contractual clauses or the EU-US Data Privacy Framework). The remaining processing takes place on infrastructure within the EU or the EEA.

Personal data is deleted as soon as it is no longer required for the stated purposes and no statutory retention obligations (e.g. commercial and tax-law periods) prevent deletion. At registration we record that the terms and conditions and the data processing agreement were accepted and that note was taken of the privacy policy: version, time, IP address and user agent. The IP address and the user agent are deleted three years after the end of the year of acceptance (regular limitation period, §§ 195, 199 BGB), even beyond an account deletion (Art. 17(3)(e) GDPR); version and time remain, linked after an account deletion only to the pseudonymised account.

The technical and organisational measures pursuant to Art. 32 GDPR apply (encryption, access and tenant separation, two-factor authentication, logging, backups). Details are provided on request.