At Alvie, protecting your personal data is a priority.
When you use the hygo.ag website (hereinafter the “Site”) and the HYGO mobile application (hereinafter the “Application”), we collect personal data about you.
This policy tells you what data we process, why we process it, how long we keep it, who we share it with and what rights you have.
1. Who is the data controller?
The data controller is ALVIE 1, a French simplified joint-stock company (société par actions simplifiée), registered with the Orléans Trade and Companies Register (RCS) under number 884 552 902, whose registered office is located at Immeuble Val de Loire, 4 passage de la Râpe, CS31635, 45000 Orléans, France (hereinafter “We”).
For any question about the protection of your personal data, or to exercise your rights, you can write to us at contact@hygo.ag.
2. What data do we collect?
Personal data is any data that makes it possible to identify a person, either directly or by cross-referencing it with other data. We collect the following categories:
- Identification and contact data: surname, first name, email address, telephone number, farm name.
- Account data: username, encrypted password, usage preferences, language.
- Data relating to your farm: field register, crops, crop protection applications, products used, doses applied.
- Geolocation data for your fields: when your agricultural machine starts, a sensor switches on and transmits GPS positions in order to track the spraying of plant protection products on your fields. The sensor switches off when your tractor stops.
- Billing data: billing details, subscription and payment history.
- Usage and technical data: pages viewed, actions performed in the Application, IP address, device and browser type, connection logs.
- Exchanges with our support team: content of your messages and history of your support requests.
Mandatory data is marked with an asterisk when we ask you for it: without it, we cannot provide our services to you.
3. Why do we process your data, and on what legal basis?
Each processing operation we carry out is based on one of the legal bases set out in Article 6 of the General Data Protection Regulation (GDPR):
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, providing you with the HYGO services (application planning, agronomic recommendations, dose modulation, traceability of field operations) | Performance of the contract between us |
| Managing your subscription, invoicing and keeping our accounts | Performance of the contract and compliance with our legal obligations |
| Responding to your support requests and providing support | Performance of the contract |
| Measuring the audience of the Site and the Application, understanding how they are used and improving our services | Your consent, obtained via the cookie management banner |
| Sending you marketing communications and measuring the effectiveness of our advertising campaigns | Your consent |
| Ensuring the security of the Site and the Application, preventing fraud and abuse | Our legitimate interest in protecting our services and our users |
| Complying with a legal obligation or a request from an authority | Compliance with our legal obligations |
Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.
4. How long do we keep your data?
We only keep your data for as long as necessary for the purposes for which it was collected:
| Data category | Retention period |
|---|---|
| Account, farm and field register data | For the entire duration of your subscription, then 3 years from your last contact with us |
| Billing data and accounting records | 10 years from the end of the financial year |
| Marketing prospecting data | 3 years from your last contact |
| Exchanges with support | 3 years from the closure of your request |
| Cookies and trackers | 13 months maximum for the lifetime of trackers and 25 months for the data collected through them; your consent choices are kept for 12 months |
| Connection and security logs | 12 months |
When these periods expire, your data is irreversibly deleted or anonymised. Some data may be kept for longer in archived form where the law requires us to do so or to establish our rights in the event of a dispute.
5. Who receives your data?
Your data is accessible to the Alvie teams who need it to perform their duties. We also use technical service providers who act as processors, on our instructions and under contractual confidentiality and security commitments:
| Type of provider | Role |
|---|---|
| Hosting and infrastructure | Hosting the Site, the Application and our databases |
| Consent management | Collecting and storing your cookie choices |
| Audience measurement and product analytics | Understanding how the Site and the Application are used in order to improve them |
| Customer support and messaging | Handling your support requests |
| Customer relationship management and emailing | Managing our commercial exchanges and communications |
| Advertising and social networks | Running our campaigns and measuring their effectiveness |
| Billing and payment | Managing subscriptions and collecting payments |
| Content management | Managing the editorial content published on the Site |
Your data may also be disclosed to our advisers (lawyers, chartered accountants, auditors) and to administrative or judicial authorities where the law requires us to do so.
We do not sell your personal data and we do not pass it on to third parties for their own marketing purposes.
6. Is your data transferred outside the European Union?
Our servers and databases are located in the European Union.
However, some of our service providers are established outside the European Union, in particular in the United States. These transfers are subject to the safeguards provided for by the GDPR: an adequacy decision of the European Commission where one exists (in particular the EU–US Data Privacy Framework), or standard contractual clauses of the European Commission, supplemented where appropriate by additional technical measures.
You can obtain a copy of the safeguards in place by writing to us at contact@hygo.ag.
7. How is your data secured?
We implement appropriate technical and organisational measures to protect your data: encryption of communications, access control, logging, regular backups and restriction of access to authorised persons only.
As no method of transmission over the Internet or of electronic storage is 100% secure, we cannot guarantee absolute security. In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will inform you under the conditions laid down by the GDPR.
8. What are your rights?
In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:
- Right of access: obtain confirmation that we process data about you and receive a copy of it.
- Right to rectification: have inaccurate or incomplete data corrected.
- Right to erasure: request the deletion of your data in the cases provided for by the regulations.
- Right to restriction: request the temporary suspension of the processing of your data.
- Right to data portability: receive the data you have provided to us in a structured, machine-readable format, or request its transfer to another controller.
- Right to object: object to processing based on our legitimate interest, and at any time to direct marketing.
- Right to withdraw your consent: at any time, where the processing is based on it.
- Right to set post-mortem instructions: decide what happens to your data after your death.
To exercise these rights, write to us at contact@hygo.ag. We may ask you for proof of identity if we have reasonable doubts about your identity. We will reply within one month, which may be extended by two months if your request is complex.
If you consider that your rights have not been respected, you can lodge a complaint with the supervisory authority of your place of habitual residence or place of work. In France, this is the French data protection authority (Commission nationale de l'informatique et des libertés, CNIL) — www.cnil.fr.
9. Links to third-party websites
The Site and the Application may contain links to other websites that we do not operate. We have no control over their content or their data practices, and we encourage you to read their own privacy policy.
10. Protection of minors
Our services are intended for agricultural professionals and are not intended for minors. In France, the processing of data of a minor under 15 years of age based on consent also requires the consent of their legal representative.
We do not knowingly collect data relating to minors. If you hold parental responsibility and find that your child has provided us with personal data, write to us at contact@hygo.ag: we will delete it.
11. Changes to this policy
We may update this policy, in particular to take account of regulatory changes or new processing operations. Any change is published on this page. We encourage you to consult it regularly and, in the event of a substantial change, we will inform you by appropriate means.