Privacy Policy

Privacy Policy

Last updated: February 2026

Agromigo is operated by Marcel Hazenbroek, trading under the name Agromigo, registered as a sole proprietorship (eenmanszaak) under Dutch law, with registered address at Stadhouderskade 118 H, 1073 AZ Amsterdam, the Netherlands, and registered with the Dutch Chamber of Commerce under number 98724932. You can reach us by email at hello@agromigo.com. We are committed to handling your personal data with care, transparency, and in full compliance with the General Data Protection Regulation (GDPR), the Dutch Implementation Act on the GDPR (Uitvoeringswet AVG), and other applicable privacy legislation. This policy applies to the website agromigo.com and all Agromigo platform apps and services.

1. Data Collection

On this website, we only collect data that you provide voluntarily via the contact form: your name, email address, and your message. We do not collect sensitive personal data. We do not collect data from minors under the age of 16. The legal basis for processing this data is our legitimate interest in responding to your inquiry (Article 6(1)(f) GDPR). Our specific legitimate interest is to handle and respond to inbound inquiries from people interested in the Agromigo platform. Providing your name and email address is necessary for us to respond to your inquiry. If you choose not to provide this information, we will be unable to reply to you.

2. How We Use Your Data

We use the data you submit through our contact form solely to respond to your inquiry or request. We do not use your contact details for unsolicited marketing without your explicit consent. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

3. Data Retention

We retain contact form submissions for a maximum of 12 months. This period reflects the typical time it takes for an inquiry to be fully resolved and for any follow-up to be completed. After 12 months, submissions are permanently deleted. If you request deletion earlier, we will honor that request promptly.

4. Separation of Website and Application

Users do not log in to this website. Accessing the linked Agromigo application is subject to the specific Terms of Use and Privacy Agreement of that application, which are provided at the point of access. No login credentials or detailed user profiles are processed or stored on this marketing website. The Agromigo application operates on a separate, secured cloud infrastructure with role-based access controls, encrypted storage, and full audit logging.

5. Cookies

We use functional cookies that are necessary for basic site performance and navigation. These are placed automatically as they are essential for the website to work. We also use limited analytical cookies to track anonymous visitor statistics so we can improve our website. We use Plausible Analytics, a privacy-friendly analytics tool that does not use persistent identifiers or track individuals across sites. No personal data is collected through this tool and no Data Processing Agreement is required. We do not use third-party tracking cookies for advertising purposes. For any non-essential cookies, your consent is obtained before they are placed. You can withdraw your consent at any time via the cookie settings on this website.

6. Third-Party Processors

To deliver the Agromigo platform and this website, we work with a number of trusted third-party service providers who process personal data on our behalf. We have entered into Data Processing Agreements with each of them where required under GDPR Article 28. Below is an overview of the processors we use, the data they handle, and the purpose.

Google Cloud Platform (Google LLC) ā€” We use Google Cloud Platform as our primary cloud infrastructure and data storage provider. Employee personal data, including names, contact details, role information, and operational records entered into the Agromigo platform, is stored and processed exclusively within the EEA. Data at rest is stored in Google’s Netherlands region (europe-west4), and data processing via Cloud Functions runs in Belgium (europe-west1, generation 1) and the Netherlands (europe-west4, generation 2). No personal data is transferred to the United States or any country outside the EEA in connection with this service. A Data Processing Agreement is in place with Google LLC covering these processing activities. We recommend reviewing Google’s DPA to understand how Google LLC as a corporate entity governs access to EEA-hosted data by its global support and operations staff.

Clerk (Clerk Inc., United States) ā€” We use Clerk as our authentication provider. When a user registers for or logs into the Agromigo platform, Clerk processes the user’s first name, last name, and email address for the purpose of identity verification and account management. As Clerk Inc. is a US-based company, transfers of personal data outside the EEA are governed by Standard Contractual Clauses as approved by the European Commission under Article 46 GDPR.

Bird (Bird B.V., Netherlands) ā€” We use Bird to send SMS verification messages as part of the onboarding process. Bird processes a user’s phone number solely for the purpose of delivering a one-time verification code. Bird is a Dutch company and all data is processed within the EEA. No additional transfer safeguards are required.

Contact Form 7 (website only) ā€” We use Contact Form 7 to handle contact form submissions on this website. Form data is processed temporarily within WordPress and delivered to us by email. No form data is stored permanently in the WordPress database beyond what is necessary for delivery.

Plausible Analytics (Plausible Insights OƜ, Estonia) ā€” We use Plausible Analytics for anonymized website visitor statistics. Plausible does not use cookies, does not collect personal data, and does not track individuals across sites. All data is processed within the EEA.

7. International Data Transfers

We aim to keep your personal data within the European Economic Area (EEA) at all times. Google Cloud Platform stores and processes all Agromigo platform data within EEA regions in Belgium and the Netherlands. Bird and Plausible Analytics are EEA-based and process data entirely within the EEA. The one exception is Clerk, our authentication provider, which is based in the United States. For this transfer, we rely on Standard Contractual Clauses as approved by the European Commission under Article 46 GDPR to ensure your personal data receives an adequate and consistent level of protection. We do not transfer personal data to countries outside the EEA beyond what is described in this policy.

8. Security

We take appropriate technical and organizational measures to prevent unauthorized access, loss, or misuse of your personal data. Our infrastructure uses TLS encryption for data in transit and AES-256 encryption for data at rest. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Dutch authority Autoriteit Persoonsgegevens within 72 hours as required under Article 33 GDPR, and inform affected individuals without undue delay as required under Article 34 GDPR. To report a security concern, please contact us at security@agromigo.com.

9. Your Rights Under GDPR

Under the GDPR and the Dutch Uitvoeringswet AVG, you have the following rights regarding any personal data we hold about you. To exercise any of these rights, contact us at privacy@agromigo.com. We will respond within one calendar month. You also have the right to lodge a complaint with the supervisory authority in the EU member state where you live, work, or where an alleged infringement took place. In the Netherlands, this is the Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl.

  • Access: You have the right to request a copy of the personal data we hold about you.
  • Correction: You have the right to have inaccurate or incomplete data corrected.
  • Deletion: You have the right to request that we delete your personal data, subject to legal retention obligations.
  • Restriction: You have the right to request that we restrict processing of your data in certain circumstances.
  • Objection: You have the right to object to processing based on legitimate interest. Where you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
  • Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Withdraw consent: Where we process your data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
  • Complaint: You have the right to lodge a complaint with the Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl. Before doing so, we ask that you contact us first at complaints@agromigo.com. We respond within one calendar month.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in legislation or our practices. We will update the date at the top of this page when we do. We encourage you to review this policy periodically.

Privacy inquiries and GDPR requests: privacy@agromigo.com
General complaints: complaints@agromigo.com
Security incidents and data breach reports: security@agromigo.com