Privacy Policy

1. Who processes your data

The controller of personal data on uberisam.com (“UBeriSam”, “we”) is Panonium consulting d.o.o., OIB (Croatian personal identification no.) 97010885457, Međašni klanac 1, 10000 Zagreb, Croatia.

For any privacy questions or to exercise your rights, write to [email protected]. We have not appointed a data protection officer because it is not required for our kind of processing, and we answer all requests at the same address.

UBeriSam is a listings site for pick-your-own and harvest jobs: growers (family farms) publish picking events and jobs for pickers, and visitors and pickers find them on the map, sign up for a visit or apply for work, and receive alerts. We only collect the data needed for that.

2. What data we collect

Growers (account for publishing listings)

• Sign-in data: email address. If you sign in with Google or Facebook, that provider gives us your name, email address (if available), a link to your profile picture and an account identifier. We don't use or store passwords.
• Profile: display name (taken from your name at the provider or from your email address).
• OPG/business verification: entity type (OPG, craft business, company, association/other), OIB (Croatian personal ID number), MIBPG (OPG register number, optional), legal name, optional links (Facebook, Instagram, website) and optional proof (photo or PDF of the OPG registration decision, OPG ID card or craft licence). OIB and MIBPG are not public; the public only sees a “Verified” badge and the legal name after an admin approves verification. Proof is in private storage and only you and admins can see it.
• Technical sign-in data: time of sign-in, IP address and browser details, logged by our sign-in system for security.

Picking event listings

• Farm name, products, county, place and address, exact location on the map, dates and opening hours, price, contact (phone or email), a note for pickers and the maximum number of visitors per day. For picking-job listings also the pay per hour or per day, the number of pickers needed per day, what is offered to pickers (accommodation, transport, meals, tools) and the minimum age.
• Approved listings are public, including the contact you entered in the listing. Your account's email address is not public.
• Moderation data: listing status, review time and the reason for any rejection.

Visit sign-ups (“I'm coming”)

• Mobile number, name (optional), email address (optional), chosen day, number of people, preferred confirmation channel (WhatsApp or SMS), language, and your consent with its time.
• This data is visible to the grower running the event (in “My picking events”), so they can organise the picking and tell you about changes, and to our moderators.

Picking-job applications (“Apply for this job”)

• Full name, mobile number, email address (optional), the chosen work days, a message to the grower (optional), language, and your consent with its time. We do not verify the mobile number (e.g. by SMS) — you enter it yourself and are responsible for it being correct.
• This data, including the mobile number, is visible only to the grower who posted that job (in “My picking events” and in the email about a new application), so they can contact you and arrange the work, and to our administrators. It is not public and other growers or visitors can't see it.

Farm reviews (“How was it? Rate the farm”)

• If you entered an email with your visit sign-up or job application, after the visit day or the last work day we send you one email inviting you to rate the farm, with a one-time link. For this we store the invitation: a link to your sign-up, the visit day, your short name, language, the link's secret code and when it was used. Without an email (mobile number only) we don't send an invitation for now.
• If you rate the farm, we store the rating (1–5 stars), the comment (optional), a display name in the form first name and last initial (e.g. “Ana H.”), the type of visit (pick-your-own or picking job), the listing it refers to, the visit day, language, time and your consent to publication, plus any reply from the grower, reports by other users and moderation data.
• Reviews are public: they are shown with the short name, the type of visit, the listing and only the month of the visit. Your email, mobile number and full surname are never published and are not shown to the grower with the review.
• When someone reports a review (“Report”), we store the reason they enter (optional) and the time of the report.

Field status, deals, time slots and amenities (listings)

• With a listing the grower can publish the field status (e.g. “ripe”, “ending soon”, “closed today”) with a short note and the time of the last change, a deal price with an end date, amenities (parking, toilet, kid-friendly, dogs, wheelchair access, card payment, baskets) and time slots for arrival with a number of places. These are public, like the rest of the listing.
• If you choose a time slot when signing up for a visit, we also store the start of the chosen slot with your sign-up.

Following a farm (“Follow”)

• If you're signed in, we store the follow with your account. Without an account we store the email address you enter, language, the farm you follow and the listing you followed it from, your consent with its time, the confirmation time and secret codes for confirming and unfollowing (links in the email).
• The grower only sees the number of their farm's followers, not who they are.

Notifications on your device (web push)

• If you switch on device notifications, your browser gives us a subscription address (an endpoint at the browser's push service) and encryption keys for the messages. With them we store the language, the farms you follow via device notifications and, if you also switch on alerts about new u-picks nearby, a point on the map (coordinates), the distance, products and type of listing, plus the time of consent and of the last notification. If you're signed in, the subscription is linked to your account.
• We keep a log of sent device notifications (type, title, text, link, delivery status) for reliable delivery.

Picker profile and picker ratings

• Pickers can sign in (by email or with Google/Facebook) and create a picker profile: display name, picking experience, crops they can pick, days of the week they're available, whether they have their own transport, region and a short bio (optional).
• The profile is not public. Only the grower you apply to while choosing to attach your profile can see it, and our administrators.
• After the work day the grower can give a picker who attached a profile a rating (1–5) and a comment. With the rating we store the farm, the listing, the work day, the time and any dispute by the picker and moderation data. You see your ratings in your profile; the average, number and a few most recent ratings are seen by growers you apply to with your profile attached.

Shared rides (“Rides”)

• To offer or ask for a ride to a farm we store your name, email address, mobile number (optional), starting town, date, number of seats and a note, language, your consent with its time, and a secret code for managing the ride (link in the email). To respond to a ride we store your name, email, mobile number (optional), number of seats, message and status (pending, accepted, declined).
• Publicly we only show the starting town, date, seats, note and a short name (e.g. “Ana H.”). The person who posted the ride sees the short name, seats and message of the people who respond. Contact details are exchanged only when a response is accepted: then the poster sees the full name, email and mobile number (if entered) of that person, and that person gets the poster's name, email and mobile number (if entered) by email.
• If someone reports a ride, we store the reason and the time.

Alerts about new u-picks and picking jobs

• Email address and/or mobile number (WhatsApp), a point on the map (coordinates, not your address), how far you want to travel, the products you're interested in, language, your consent with its time, confirmation and unsubscribe times, and a secret code for confirming and unsubscribing.
• We don't store the address you type to find a location; only the chosen point is saved.

Emails we send

• A log of sent messages: recipient address, type of message (e.g. sign-up confirmation, new u-pick alert, postponement notice, review invitation, follow confirmation, a new listing from a farm you follow, ride messages), time, delivery status and the message identifier at the sending provider.
• If you email us, we keep your message and our reply.

Technical data when you visit

• Like any website, servers log the IP address, time and browser details.
• Your location (“Use my location”, a typed address or a click on the map) is used in your browser only to calculate distances and is not sent to us, unless you save it as the point for alerts.
• When you search for an address, the text you type is sent to the OpenStreetMap address search service (Nominatim).
• If address suggestions while typing are switched on, the text you type is sent to Google Maps Platform (Places API), which returns address suggestions and the coordinates of the chosen address.

3. Why we process data and on what legal basis

You can withdraw consent at any time: with the unsubscribe link in every alert email, by replying “STOP” to a WhatsApp message, or by emailing [email protected]. Withdrawal does not affect the lawfulness of processing before it. You stop following a farm with the “Unfollow” link in the email or the “Following” button on the site, and switch off push notifications on the site (“Get alerts” → “Push notifications on this device” → “Turn off”) or in your browser settings.

We don't sell data, don't use it for advertising and don't make automated decisions with legal or similarly significant effects on you. Alerts about new u-picks are sent automatically, based only on the distance and products you chose yourself.

4. Who receives the data (processors and other recipients)

We use trusted service providers that process data on our behalf (processors), under a data processing agreement:

• Supabase (Supabase, Inc.) – database, user sign-in and server functions. Data is stored in the EU, in a data centre in Frankfurt (Germany).
• Resend – sending emails from [email protected], processed in the EU (Ireland).
• Cloudflare (Cloudflare, Inc.) – website hosting (Cloudflare Pages), DNS, content delivery network and attack protection.
• Google Workspace (Google Ireland Ltd.) – our business email ([email protected]) for corresponding with you.

The site also loads content from third parties, which see your IP address and browser details:

• OpenStreetMap (OpenStreetMap Foundation) – map tiles and address search (Nominatim). When you search for an address, the text you type is sent to this service.
• Leaflet (from unpkg.com) and supabase-js (from cdn.jsdelivr.net) – public CDNs serving the code libraries for the map and the database connection.
• Google Fonts (Google) – the site's fonts.
• Google or Meta (Facebook) – only if you choose to sign in with that account. Their privacy policies apply on their sign-in pages.
• Google Maps – only if you click “Open in Google Maps” for directions.
• Google Maps Platform (Google Ireland Ltd. / Google LLC) – address suggestions while typing (Places API), only if this feature is switched on. When you type in an address field, Google receives the text, your IP address and browser details; Google's privacy policy applies.
• Your browser's push service (e.g. Google for Chrome and Android, Mozilla for Firefox, Apple for Safari and iOS) – only if you switch on device notifications. It delivers the notification to your device; the content is encrypted, and the provider sees the subscription address and delivery time.

Other recipients: the grower sees visit sign-ups for their own events and picker applications for their own jobs (name, mobile number, email and message) and uses them as an independent controller, only to arrange that event or job, and the public sees approved listings. Farm reviews (stars, comment, short name, type and month of visit, the grower's reply) are public; the grower also sees them in “My picking events” and gets an email about each new review, while hidden reviews and review reports are seen only by that farm's grower (without the reports) and by administrators. A picker profile and picker ratings are only seen by the grower the picker applies to with the profile attached; growers only see the number of their followers; with shared rides you get the other side's contact only after a response is accepted. We disclose data to authorities only when the law requires it.

We don't send WhatsApp or SMS messages yet. When we start, we'll add that provider to this policy.

5. Transfers outside the EU/EEA

We store data in the EU. Some of our providers (Supabase, Resend, Cloudflare, Google) are US companies or use sub-processors outside the EU/EEA, so data may be accessed from third countries, e.g. for support or maintenance. Such transfers rely on the European Commission's adequacy decision (EU–US Data Privacy Framework) for certified companies, or on the Commission's standard contractual clauses.

6. How long we keep data

• Grower account and profile: as long as you have an account. When you ask for deletion, we delete it together with your listings and their sign-ups.
• Verification proof (registration decision / ID / craft licence): deleted automatically 30 days after the approve/reject decision. We keep only the verification status, decision date and legal name; the OIB stays with your account until you delete it or ask us to erase it.
• Listings: as long as the grower's account exists. After the event ends the listing is no longer public, but it stays visible to the grower in “My picking events”.
• Visit sign-ups: as long as needed to organise the event, and at most 12 months after the visit day. They are deleted earlier if the listing or the grower's account is deleted.
• Picking-job applications (name, mobile number, email, days, message): at most 12 months after the last chosen work day, after which they are deleted automatically. They are deleted earlier if the listing or the grower's account is deleted.
• Farm reviews (rating, comment, short name, the grower's reply): as long as that farm's profile (account) exists on UBeriSam. Deleting the grower's account also deletes all reviews of their farm. A review stays when only the listing or your sign-up is deleted. You can ask us to delete your review at any time — see the instructions.
• Review invitations (one-time link): the link is valid for 60 days, and the invitation is deleted automatically 90 days after it was sent.
• Alert subscriptions: until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days, and data of unsubscribed sign-ups at the latest 30 days after unsubscribing.
• Farm follows: until you unfollow (with the “Unfollow” link or the button on the site). Unconfirmed follows (the email link was never clicked) are deleted after 30 days. Deleting a grower's account also deletes all follows of their farm.
• Device notification subscriptions: until you switch them off or the browser cancels them. A subscription with nothing switched on (no alerts and no followed farms) is deleted after 30 days, and one the browser's push service reports as invalid is deleted immediately. Log of sent device notifications: 30 days.
• Picker profile: until you delete it (you can do this yourself in “My picker profile”) or as long as your account exists.
• Picker ratings: 24 months after the work day, after which they are deleted automatically; earlier if the picker's or grower's account is deleted.
• Shared rides and responses: deleted automatically 30 days after the ride date; a ride that was never confirmed with the email link is deleted after 7 days. Deleting a listing also deletes its rides.
• Log of sent emails: 90 days, after which it is deleted automatically.
• Technical logs (sign-ins, access, security): briefly, according to the providers' rules, usually a few days to a few weeks.
• Email correspondence: as long as needed to handle your request, and at most 2 years.

7. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access your data and get a copy (Art. 15),
• have inaccurate data corrected (Art. 16),
• have your data erased (“right to be forgotten”, Art. 17) – see the data deletion instructions,
• restrict processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw consent at any time (Art. 7(3)).

Send your request to [email protected], ideally from the email address or number you used with us. We reply without undue delay and within one month at the latest. If we need to verify your identity, we'll ask you for additional confirmation.

Complaint to the supervisory authority: if you believe we process your data unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, [email protected], azop.hr, or with the authority in your EU country of residence. We'd appreciate it if you contacted us first so we can try to solve the problem.

8. Cookies and local storage

We don't use advertising or analytics cookies. We only store what the site needs to work in your browser:

• lang (local storage) – the site language you chose,
• ubs-mode (local storage) – what you're looking for on the map (u-pick produce or a picking job),
• sb-…-auth-token (local storage) – only for signed-in users (growers and pickers), to keep them signed in; removed when you sign out,
• ubs-reported (session storage) – which reviews you've already reported, so they aren't reported twice; removed when you close the tab,
• ubs-oauth and ubs-heal-… (session storage) – temporary markers during Google/Facebook sign-in and when refreshing an outdated version of the site; removed when you close the tab,
• service worker and cache (ubs-v…) – a copy of the site's files (HTML, scripts, styles, icons) so the site loads faster, works on a weak connection, can be installed on your home screen and can receive device notifications. We don't store personal data or database responses in this cache; you can clear it in your browser settings (site data).

Cloudflare may set strictly necessary technical cookies for security and protection against malicious traffic. We don't ask for consent for this necessary storage, because the site wouldn't work as you expect without it. You can delete all of it in your browser settings.

9. Security and minors

The connection to the site is encrypted (HTTPS), database access is protected by rules that let each user access only their own data, and visit sign-ups can only be seen by the grower running that event and by moderators. We only store the data we need.

Grower accounts, picker profiles, shared rides and alert subscriptions are intended for people aged 16 and over.

10. Changes to this policy

We may change this policy, e.g. when we add new features such as WhatsApp messages. The current version is always on this page, with the date of the last change. We'll tell registered users about significant changes by email.