Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section 'Notice on the Responsible Party' in this privacy policy.

How do we collect your data?
Your data is collected in part by you providing it to us. This may include data you enter in a contact form or when registering for updates.

2. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Notice on the Responsible Party

Storage Duration

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.

4. Data Collection on This Website

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

Email Newsletter Registration

If you register for our email updates, we store your email address and any other data you provide. We use this data exclusively to send you information about project progress and platform launch.

You can revoke your consent to data storage at any time. Simply send us an email to the address provided above.

Use of Third-Party Services

We use the following third-party services to operate this platform:

Supabase (Database & Authentication)

We use Supabase Inc. (USA) for database operations, user authentication and file storage. Personal data (including email address, profile information, uploaded images) is processed on servers in the USA. Data transfer is based on Art. 49(1)(a) GDPR (your consent upon registration). More information: https://supabase.com/privacy

OpenStreetMap / Nominatim (Map Data & Geocoding)

For map display and location search we use OpenStreetMap map tiles and the Nominatim geocoding service of the OpenStreetMap Foundation. Your IP address is transmitted to the servers of the OpenStreetMap Foundation. Privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

CARTO (Map Tiles)

We use map tiles from CARTO (Spain) to render map views. When loading tiles, your IP address is transmitted to CARTO servers. Privacy policy: https://carto.com/privacy/

Resend (Email Delivery)

For sending emails (welcome messages, password resets) we use Resend Inc. (USA). Your email address is transmitted to Resend. Privacy policy: https://resend.com/legal/privacy-policy

The legal basis for using these services is Art. 6(1)(f) GDPR (legitimate interest in operating the platform) and Art. 6(1)(b) GDPR (contract performance). Where data is transferred to the USA, this is based on your consent (Art. 49(1)(a) GDPR).

International data transfers

Coffee to Grow is available worldwide. If you sign up from outside the European Economic Area (EEA), your data will necessarily be transferred across borders and processed on our service providers' servers – mainly in the EU and partly in the USA.

For transfers to third countries we rely on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), on adequacy decisions of the European Commission (e.g. the EU-US Data Privacy Framework) or – for individual services – on your explicit consent (Art. 49(1)(a) GDPR).

In third countries the level of data protection may be lower than in the EU; in particular, public authorities may be able to access data without effective legal remedies being available. By using the platform from outside the EEA you acknowledge this risk. You can withdraw your consent and delete your account at any time.

5. Your Rights

You have the right at any time to obtain free information about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions on data protection.

Additional rights for users outside the EU

Regardless of where you live, we grant all users the same core rights: access, correction, deletion, data portability and objection to processing.

For users in California (CCPA/CPRA) the following also applies: we do not sell or share personal information as defined by the CCPA, and we do not use it for targeted advertising. You have the right to know which categories of data we collect, to request their deletion or correction, and you will not be discriminated against for exercising these rights. We grant comparable rights to users in countries such as Canada (PIPEDA), the United Kingdom (UK GDPR), Brazil (LGPD) and Australia (Privacy Act).

To exercise these rights, simply email info@coffeetogrow.com. We usually respond within 30 days. Identity verification may be required.