Privacy Policy

1. Who processes your data

The controller of personal data on uberisam.hr (also available at uberisam.com; “UBeriSam”, “we”) is Panonium consulting d.o.o., OIB (Croatian personal identification no.) 97010885457, Međašni klanac 1, 10000 Zagreb, Croatia.

For any privacy questions or to exercise your rights, write to [email protected]. We have not appointed a data protection officer because it is not required for our kind of processing, and we answer all requests at the same address.

UBeriSam is a listings site for pick-your-own and harvest jobs: growers (family farms, craft businesses, companies, cooperatives or private individuals) publish picking events and jobs for pickers, and visitors and pickers find them on the map, sign up for a visit or apply for work, and receive alerts. We only collect the data needed for that.

2. What data we collect

Growers (account for publishing listings)

• Sign-in data: email address. If you sign in with Google or Facebook, that provider gives us your name, email address (if available), a link to your profile picture and an account identifier. We don't use or store passwords.
• Profile: display name (taken from your name at the provider or from your email address).
• Grower verification (optional): entity type (OPG, craft business, company, cooperative/association/other), OIB (Croatian personal ID number), MIBPG (OPG register number, optional), legal name, optional links (Facebook, Instagram, website) and optional proof (photo or PDF of the OPG registration decision, OPG ID card or craft licence). OIB and MIBPG are not public; the public only sees a “Verified” badge and the legal name after an admin approves verification. Proof is in private storage and only you and admins can see it.
• Technical sign-in data: time of sign-in, IP address and browser details, logged by our sign-in system for security.

Picking event listings

• Farm name, products, county, place and address, exact location on the map, dates and opening hours, price, contact (phone or email), a note for pickers and the maximum number of visitors per day. For picking-job listings also the pay per hour or per day, the number of pickers needed per day, what is offered to pickers (accommodation, transport, meals, tools) and the minimum age.
• Organic (Eko / Bio) label (optional, u-pick): the label saying the offer comes from certified organic production, plus the control body and certificate number if you enter them — these are public with the approved listing. The time you ticked the truthfulness declaration is not public (only you and the moderator see it) and is kept as long as the listing or the label exists.
• Approved listings are public, including the contact you entered in the listing. Your account's email address is not public.
• Moderation data: listing status, review time and the reason for any rejection.

Visit sign-ups (“I'm coming”)

• Mobile number, name (optional), email address (optional), chosen day, number of people, preferred confirmation channel (WhatsApp or SMS), language, and your consent with its time.
• This data is visible to the grower running the event (in “My picking events”), so they can organise the picking and tell you about changes, and to our moderators.

Picking-job applications (“Apply for this job”)

• Full name, mobile number, email address (optional), the chosen work days, a message to the grower (optional), language, and your consent with its time. We do not verify the mobile number (e.g. by SMS) — you enter it yourself and are responsible for it being correct.
• This data, including the mobile number, is visible only to the grower who posted that job (in “My picking events” and in the email about a new application), so they can contact you and arrange the work, and to our administrators. It is not public and other growers or visitors can't see it.

Grower reviews (“How was it? Rate the grower”)

• If you entered an email with your visit sign-up or job application, after the visit day or the last work day we send you one email inviting you to rate the grower, with a one-time link. For this we store the invitation: a link to your sign-up, the visit day, your short name, language, the link's secret code and when it was used. Without an email (mobile number only) we don't send an invitation for now.
• If you rate the grower, we store the rating (1–5 stars), the comment (optional), a display name in the form first name and last initial (e.g. “Ana H.”), the type of visit (pick-your-own or picking job), the listing it refers to, the visit day, language, time and your consent to publication, plus any reply from the grower, reports by other users and moderation data.
• Reviews are public: they are shown with the short name, the type of visit, the listing and only the month of the visit. Your email, mobile number and full surname are never published and are not shown to the grower with the review.
• When someone reports a review (“Report”), we store the reason they enter (optional) and the time of the report.

Field status, deals, time slots and amenities (listings)

• With a listing the grower can publish the field status (e.g. “ripe”, “ending soon”, “closed today”) with a short note and the time of the last change, a deal price with an end date, amenities (parking, toilet, kid-friendly, dogs, wheelchair access, card payment, baskets) and time slots for arrival with a number of places. These are public, like the rest of the listing.
• If you choose a time slot when signing up for a visit, we also store the start of the chosen slot with your sign-up.

Following a grower (“Follow”)

• If you're signed in, we store the follow with your account. Without an account we store the email address you enter, language, the grower you follow and the listing you followed it from, your consent with its time, the confirmation time and secret codes for confirming and unfollowing (links in the email).
• The grower only sees the number of their followers, not who they are.

Notifications on your device (web push)

• If you switch on device notifications, your browser gives us a subscription address (an endpoint at the browser's push service) and encryption keys for the messages. With them we store the language, the growers you follow via device notifications and, if you also switch on alerts about new u-picks nearby, a point on the map (coordinates), the distance, products and type of listing, plus the time of consent and of the last notification. If you're signed in, the subscription is linked to your account.
• We keep a log of sent device notifications (type, title, text, link, delivery status) for reliable delivery.

Picker profile and picker ratings

• Pickers can sign in (by email or with Google/Facebook) and create a picker profile: display name, picking experience, crops they can pick, days of the week they're available, whether they have their own transport, region and a short bio (optional).
• The profile is not public. Only the grower you apply to while choosing to attach your profile can see it, and our administrators.
• After the work day the grower can give a picker who attached a profile a rating (1–5) and a comment. With the rating we store the grower, the listing, the work day, the time and any dispute by the picker and moderation data. You see your ratings in your profile; the average, number and a few most recent ratings are seen by growers you apply to with your profile attached.

Shared rides (“Rides”)

• To offer or ask for a ride to a grower we store your name, email address, mobile number (optional), starting town, date, number of seats and a note, language, your consent with its time, and a secret code for managing the ride (link in the email). To respond to a ride we store your name, email, mobile number (optional), number of seats, message and status (pending, accepted, declined).
• Publicly we only show the starting town, date, seats, note and a short name (e.g. “Ana H.”). The person who posted the ride sees the short name, seats and message of the people who respond. Contact details are exchanged only when a response is accepted: then the poster sees the full name, email and mobile number (if entered) of that person, and that person gets the poster's name, email and mobile number (if entered) by email.
• If someone reports a ride, we store the reason and the time.

Doorstep delivery (“Order delivery”)

• A grower can offer delivery with a u-pick listing: the delivery area (km from the field), price per unit, minimum order, a note and delivery slots (date and time). These details are public, like the rest of the listing.
• When you order a delivery we store your name, mobile number, email address, delivery address and its point on the map (coordinates), the distance from the field, quantity and price, preferred slot, note, language, your consent with its time, the order status (awaiting confirmation, confirmed, delivered, cancelled), the confirmed slot and the grower's message, and a cancellation reason. If you are signed in, the order is linked to your account.
• The order is seen only by the grower of that listing (in “My picking events”) and our administrators; you see it if you are signed in. You arrange payment and hand-over directly with the grower — UBeriSam charges nothing and processes no payment data.

Alerts about new u-picks and picking jobs

• Email address and/or mobile number (WhatsApp), a point on the map (coordinates, not your address), how far you want to travel, the products you're interested in, language, your consent with its time, confirmation and unsubscribe times, and a secret code for confirming and unsubscribing.
• We don't store the address you type to find a location; only the chosen point is saved.
• If you choose “only offers that deliver to my address”, we store that choice too; u-pick alerts are then sent only when the grower delivers to the chosen point.

Emails we send

• A log of sent messages: recipient address, type of message (e.g. sign-up confirmation, new u-pick alert, postponement notice, review invitation, follow confirmation, a new listing from a grower you follow, ride messages, delivery confirmations and messages), time, delivery status and the message identifier at the sending provider.
• If you email us, we keep your message and our reply.

Technical data when you visit

• Like any website, servers log the IP address, time and browser details.
• Your location (“Use my location”, a typed address or a click on the map) is used in your browser only to calculate distances and is not sent to us, unless you save it as the point for alerts or send it with a delivery order.
• When you search for an address, the text you type is sent to the OpenStreetMap address search service (Nominatim).
• If address suggestions while typing are switched on, the text you type is sent to Google Maps Platform (Places API), which returns address suggestions and the coordinates of the chosen address.

Visit statistics (Cloudflare Web Analytics)

• For aggregated statistics about visits and site speed we use Cloudflare Web Analytics, a service of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which processes the data as our processor. Cloudflare automatically adds a small script (from static.cloudflareinsights.com) to our pages, which sends its measurements to Cloudflare through our own domain (e.g. uberisam.hr/cdn-cgi/rum).
• No cookies and no storage in your browser: the script sets no cookies and doesn't store or read anything in your browser (no local storage, session storage or IndexedDB). According to Cloudflare, it doesn't “fingerprint” visitors via their IP address, browser details or any other data, and doesn't track individual visitors across websites.
• What is measured: the address (path) of the page you open and of the page you came from (referrer), in both cases without URL parameters (such as the secret codes in links from our emails); the type of browser, operating system and device (desktop, mobile, tablet); the country the visit comes from; and page speed and responsiveness metrics (load time and Core Web Vitals such as LCP, INP and CLS). For each page load the script creates a random ID for that page load, which is not stored in your browser.
• IP address: Cloudflare receives it as part of the browser's normal request, but according to its documentation discards it at the nearest Cloudflare data centre and does not store it in its databases or logs.
• We only see aggregated statistics (e.g. numbers of visits and page views, top pages, referrers, countries, browsers, devices and page speed), not data about individual visitors, and we don't link them to your account, sign-ups or email address.

3. Why we process data and on what legal basis

You can withdraw consent at any time: with the unsubscribe link in every alert email, by replying “STOP” to a WhatsApp message, or by emailing [email protected]. Withdrawal does not affect the lawfulness of processing before it. You stop following a grower with the “Unfollow” link in the email or the “Following” button on the site, and switch off push notifications on the site (“I want to pick” → “Push notifications on this device” → “Turn off”) or in your browser settings.

We don't sell data, don't use it for advertising and don't make automated decisions with legal or similarly significant effects on you. Alerts about new u-picks are sent automatically, based only on the distance and products you chose yourself.

4. Who receives the data (processors and other recipients)

We use trusted service providers that process data on our behalf (processors), under a data processing agreement:

• Supabase (Supabase, Inc.) – database, user sign-in and server functions. Data is stored in the EU, in a data centre in Frankfurt (Germany).
• Resend – sending emails from [email protected], processed in the EU (Ireland).
• Cloudflare (Cloudflare, Inc.) – website hosting (Cloudflare Pages), DNS, content delivery network, attack protection and aggregated visit statistics (Cloudflare Web Analytics). Cloudflare is a processor under its Data Processing Addendum.
• Google Workspace (Google Ireland Ltd.) – our business email ([email protected]) for corresponding with you.

The site also loads content from third parties, which see your IP address and browser details:

• OpenStreetMap (OpenStreetMap Foundation) – map tiles and address search (Nominatim). When you search for an address, the text you type is sent to this service.
• Leaflet (from unpkg.com) and supabase-js (from cdn.jsdelivr.net) – public CDNs serving the code libraries for the map and the database connection.
• Google Fonts (Google) – the site's fonts.
• Google or Meta (Facebook) – only if you choose to sign in with that account. Their privacy policies apply on their sign-in pages.
• Google Maps – only if you click “Open in Google Maps” for directions.
• Google Maps Platform (Google Ireland Ltd. / Google LLC) – address suggestions while typing (Places API), only if this feature is switched on. When you type in an address field, Google receives the text, your IP address and browser details; Google's privacy policy applies.
• Your browser's push service (e.g. Google for Chrome and Android, Mozilla for Firefox, Apple for Safari and iOS) – only if you switch on device notifications. It delivers the notification to your device; the content is encrypted, and the provider sees the subscription address and delivery time.

Other recipients: the grower sees visit sign-ups for their own events, picker applications for their own jobs (name, mobile number, email and message) and delivery orders for their own listings (name, mobile number, email, delivery address, quantity, preferred slot and note) and uses them as an independent controller, only to arrange that event, job or delivery, and the public sees approved listings. Grower reviews (stars, comment, short name, type and month of visit, the grower's reply) are public; the grower also sees them in “My picking events” and gets an email about each new review, while hidden reviews and review reports are seen only by that grower (without the reports) and by administrators. A picker profile and picker ratings are only seen by the grower the picker applies to with the profile attached; growers only see the number of their followers; with shared rides you get the other side's contact only after a response is accepted. We disclose data to authorities only when the law requires it.

We don't send WhatsApp or SMS messages yet. When we start, we'll add that provider to this policy.

5. Transfers outside the EU/EEA

We store data in the EU. Some of our providers (Supabase, Resend, Cloudflare, Google) are US companies or use sub-processors outside the EU/EEA, so data may be accessed from third countries, e.g. for support or maintenance. Such transfers rely on the European Commission's adequacy decision (EU–US Data Privacy Framework) for certified companies, or on the Commission's standard contractual clauses.

Measurements for visit statistics (Cloudflare Web Analytics) are processed at the nearest Cloudflare data centre, which may be in another country. For transfers of data from the EU to the US, Cloudflare relies on its certification under the EU–US Data Privacy Framework and, should that lapse, on the standard contractual clauses, which are also part of its Data Processing Addendum.

6. How long we keep data

• Grower account and profile: as long as you have an account. When you ask for deletion, we delete it together with your listings and their sign-ups.
• Verification proof (registration decision / ID / craft licence): deleted automatically 30 days after the approve/reject decision. We keep only the verification status, decision date and legal name; the OIB stays with your account until you delete it or ask us to erase it.
• Listings: as long as the grower's account exists. After the event ends the listing is no longer public, but it stays visible to the grower in “My picking events”.
• Visit sign-ups: as long as needed to organise the event, and at most 12 months after the visit day. They are deleted earlier if the listing or the grower's account is deleted.
• Picking-job applications (name, mobile number, email, days, message): at most 12 months after the last chosen work day, after which they are deleted automatically. They are deleted earlier if the listing or the grower's account is deleted.
• Grower reviews (rating, comment, short name, the grower's reply): as long as that grower's profile (account) exists on UBeriSam. Deleting the grower's account also deletes all reviews they received. A review stays when only the listing or your sign-up is deleted. You can ask us to delete your review at any time — see the instructions.
• Review invitations (one-time link): the link is valid for 60 days, and the invitation is deleted automatically 90 days after it was sent.
• Alert subscriptions: until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days, and data of unsubscribed sign-ups at the latest 30 days after unsubscribing.
• Farm follows: until you unfollow (with the “Unfollow” link or the button on the site). Unconfirmed follows (the email link was never clicked) are deleted after 30 days. Deleting a grower's account also deletes all follows of that grower.
• Device notification subscriptions: until you switch them off or the browser cancels them. A subscription with nothing switched on (no alerts and no followed growers) is deleted after 30 days, and one the browser's push service reports as invalid is deleted immediately. Log of sent device notifications: 30 days.
• Picker profile: until you delete it (you can do this yourself in “My picker profile”) or as long as your account exists.
• Picker ratings: 24 months after the work day, after which they are deleted automatically; earlier if the picker's or grower's account is deleted.
• Shared rides and responses: deleted automatically 30 days after the ride date; a ride that was never confirmed with the email link is deleted after 7 days. Deleting a listing also deletes its rides.
• Delivery orders (name, mobile, email, address, point on the map, quantity, note): deleted automatically 30 days after the delivery date (the confirmed slot), or 30 days after a cancellation or, if the order was never confirmed, after the preferred slot or the order date. They are deleted earlier if the listing or the grower's account is deleted. Delivery slots are deleted 30 days after the slot date.
• Log of sent emails: 90 days, after which it is deleted automatically.
• Visit statistics (Cloudflare Web Analytics): according to Cloudflare's documentation, individual measurements are kept for 7 days and then aggregated down (to about 10% of the original volume) for long-term storage; the statistics are available to us for the past 6 months. The IP address is not stored.
• Technical logs (sign-ins, access, security): briefly, according to the providers' rules, usually a few days to a few weeks.
• Email correspondence: as long as needed to handle your request, and at most 2 years.

7. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access your data and get a copy (Art. 15),
• have inaccurate data corrected (Art. 16),
• have your data erased (“right to be forgotten”, Art. 17) – see the data deletion instructions,
• restrict processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw consent at any time (Art. 7(3)).

Objecting to visit statistics: you can object to the processing for visit statistics (Cloudflare Web Analytics) by emailing [email protected]. As the measurements contain nothing we could recognise you by, the simplest way to stop them is yourself: block the script from static.cloudflareinsights.com in your browser (e.g. with a content blocker or tracking protection) — the site keeps working normally.

Send your request to [email protected], ideally from the email address or number you used with us. We reply without undue delay and within one month at the latest. If we need to verify your identity, we'll ask you for additional confirmation.

Complaint to the supervisory authority: if you believe we process your data unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, [email protected], azop.hr, or with the authority in your EU country of residence. We'd appreciate it if you contacted us first so we can try to solve the problem.

8. Cookies and local storage

We don't use advertising or analytics cookies — our visit statistics (Cloudflare Web Analytics) don't use cookies or local storage either. We only store what the site needs to work in your browser:

• lang (local storage) – the site language you chose,
• ubs-mode (local storage) – what you're looking for on the map (u-pick produce or a picking job),
• sb-…-auth-token (local storage) – only for signed-in users (growers and pickers), to keep them signed in; removed when you sign out,
• ubs-reported (session storage) – which reviews you've already reported, so they aren't reported twice; removed when you close the tab,
• ubs-oauth and ubs-heal-… (session storage) – temporary markers during Google/Facebook sign-in and when refreshing an outdated version of the site; removed when you close the tab,
• service worker and cache (ubs-v…) – a copy of the site's files (HTML, scripts, styles, icons) so the site loads faster, works on a weak connection, can be installed on your home screen and can receive device notifications. We don't store personal data or database responses in this cache; you can clear it in your browser settings (site data).

Cloudflare may set strictly necessary technical cookies for security and protection against malicious traffic. We don't ask for consent for this necessary storage, because the site wouldn't work as you expect without it. You can delete all of it in your browser settings.

9. Security and minors

The connection to the site is encrypted (HTTPS), database access is protected by rules that let each user access only their own data, and visit sign-ups can only be seen by the grower running that event and by moderators. We only store the data we need.

Grower accounts, picker profiles, shared rides and alert subscriptions are intended for people aged 16 and over.

10. Changes to this policy

We may change this policy, e.g. when we add new features such as WhatsApp messages. The current version is always on this page, with the date of the last change. We'll tell registered users about significant changes by email.