PRIVACY NOTICE

Welcome to BeCrop, owned and operated by Biome Makers Inc. ("Biome Makers", "us", or "we"), a Delaware corporation. This Privacy Notice explains the information collected, both "Personal Information (PI)" and "Non-Personal Information (NPI)", and stored at Biome Makers and associated applications, web services, and other mechanisms associated with us.

HOW YOU ACCEPT THIS NOTICE

By visiting the BeCrop portal (the "Portal"), re-acepting our new terms and conditions and privacy policy, or by registering into the Portal for new users, you agree to the terms and conditions of this Privacy Notice.

COOKIES

We use cookies to make interactions with the Portal easy and meaningful. When you visit the Portal, our servers send a cookie to your computer. Standing alone, cookies do not personally identify you; they merely recognize your Web browser, hence you remain anonymous to us.

NPI WE COLLECT AND HOW WE USE

We use NPI in connection with use of the Portal, such as login date, browser type, or operating system. Such information may be considered PI in your jurisdiction. We may use collected information to enhance the visitor experience of the Portal, to operate and maintain the Portal, to investigate and understand how our Portal is used, to monitor and protect the security and integrity of the Portal, and to study our business-related analytics.

We analyze traffic to the site in various ways, including using a service called Google Analytics and a service called Mixpanel. We use this information to generate statistics and to measure activity to improve the usefulness of the Portal, and to track which are the non-activity spots to carry out our needed maintenance breaks without affecting users.

By visiting the Portal, you are agreeing both the terms of Mixpanel and the Google Privacy Policy that apply to Google Analytics. Mixpanel terms can be found at "GDPR Compliance" located at https://help.mixpanel.com/hc/en-us/articles/360000345423-GDPR-Compliance. On the other hand Google Analytics is subject to the privacy policy of Google. These terms can be found at “How Google uses data when you use our partners’ sites or apps”, located at https://www.google.com/policies/privacy/partners/, or any other URL Google may provide from time to time.

We are not responsible for any changes made to the Mixpanel or Google Privacy Policy or of advising you of such changes. We reserve the right to change analytical service providers at any time without notice.

WHAT WE COLLECT THAT IS PI

In the registering form of the Portal we ask the following PI: name, lastname, email address, password (encrypted), and organization information. For users that purchase some products throught the Portal online shop, we also ask for some additional organization details and credit card info (that we do not store in our database). We use Stripe platform as our gateway payment, where this credit card info is properly stored with an associated client codification (https://stripe.com/guides/general-data-protection-regulation?#stripe-and-the-gdpr). We may also store other PI that you provide to us voluntarily if desired through the profile form of the Portal, that is merely used to ease contact between customer and us such as telephone number, or enhance between-users interaction in our public wiki/community such as your studies/position. We also transmit through secure protocol basic personal data within specific action performed in the Portal (e.g. new user registered, new sample registered) to the company communication platform held by Slack, with the merely aim to have a real-time alert of these actions in order to have feedback of correct functioning of the Portal and its integrity.

HOW WE USE AND DISCLOSE PI

We use personal data to provide you with the Portal per the Terms and Conditions, to enhance the visitor experience of the Portal, to operate and maintain the Portal, to investigate and understand how the Portal is used, to communicate with you about using the Portal, to monitor and protect the security and integrity of the Portal, and to analyze our business.

If you give consent to receive marketing communications the Company may also use the email you provide to send you information regarding BeCrop and Biome Makers.

We may disclose PI as required by law or in response to service of legal process, such as a court order, summons, subpoena, or the like.

We store your PI in platforms managed by our business partners who provide services related to the Portal functioning (such as database and website hosting). These business partners do not have the right to use this PI for any purpose other than those related to the Portal.

Information about our users, including PI, may be disclosed or transferred to entities now or in the future affiliated with BeCrop or as part of any merger, acquisition, change of control, debt financing, insolvency, bankruptcy or sale of our assets. Such information may be used in the businesses of any entity receiving it.

Except as provided above, we will not sell or transfer your PI to third parties.

DO NOT TRACK HEADERS

Currently, various browsers offer a “do not track” or “DNT” option that relies on a technology known as a DNT header, which sends a signal to Web sites’ visited by the user about the user’s browser DNT preference setting. We do not currently commit to responding to browsers’ DNT signals with respect to the Portal, in part, because no common industry standard for DNT has been adopted by industry groups, technology companies or regulators, including no consistent standard of interpreting user intent. However, we will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.

HOW YOU CAN ACCESS OR CHANGE THE PI THAT YOU HAVE PROVIDED

Once you have registered with us, you can access your profile, review the information that is stored, and revise that information.

CHILDREN AUDIENCE

We do not target, market to, or knowingly collect PI from children under the age of thirteen.

DATA RETENTION AND RIGHT TO ERASURE

We retain your Portal activity data as an anonymous aggregation information in order to evaluate the evolution of the Portal. You can ask for your right to erasure contacting to legal@biomemakers.com

DATA SECURITY

We use industry standard physical, managerial, and technical safeguards to preserve the integrity and security of your PI. We cannot, however, ensure the security of any information you transmit to the Portal, and you do so at your own risk. Depending on where you live, you may have a legal right to receive notice of a security breach in writing or by emailing us at legal@biomemakers.com.

YOUR CALIFORNIA PRIVACY RIGHTS

Residents of California have the right to request from a business, with whom the California resident has an established business relationship, certain information with respect to the types of PI the business shares with third parties for those third parties’ direct marketing purposes and the identities of the third parties with whom the business has shared such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by emailing us at legal@biomemakers.com. Your request should specify your full name and the email address you used when submitting PI to us.

YOUR EUROPEAN ECONOMIC AREA (EEA) DATA PROTECTION RIGHTS

1. What we collect that is personal data in the EEA

We collect the following "personal data", as defined in Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”), from those who to purchase our products or registered users: name, lastname, email address, account password (encrypted), account type, account creation date, last session date; number of pageviews; referral source; company name, company location, billing address and/or credit card information (not stored) that you may choose provide to us. We may also also collect other personal data if you contact us or otherwise give it to us (e.g., in an email), or also store other PI that you provide to us voluntarily if desired through the profile form of the Portal, that is merely used to ease contact between customer and us such as telephone number, or enhance between-users interaction in our public wiki/community such as your studies/position.

2. How we use and disclose your personal data

We use personal data to provide you with the Portal per the Terms and Conditions, to enhance the visitor experience of the Portal, to operate and maintain the Portal, to investigate and understand how the Portal is used, to communicate with you about using the Portal, to monitor and protect the security and integrity of the Portal, and to analyze our business. We store your PI in platforms managed by our business partners who provide services related to the Portal functioning (such as database and website hosting). These business partners do not have the right to use this PI for any purpose other than those related to the Portal. We may engage in automated decision-making to enhance the visitor experience and analyze and grow our business. For example, we may tailor lists to certain academic purposes due to different science discovering that could be based on anonymized user’s geographic location. Only if users consider suitable for her/his interests this anonymity could be revealed for this purposes (e.g. Biodiversity rankings).

3. Legal basis for processing your personal data

The legal bases for processing your personal data is contract, consent, and/or legitimate interests, in particular to conduct business within BeCrop, to develop our business, to market and sell our products and show the results in the Portal, and to maintain the accuracy of our databases and documentation. Where you have given consent to the processing of your personal data for one or more specific purposes, you have the right to withdraw consent at any time.

4. Data subject rights

Data subjects protected by the GDPR have the right to make certain requests with respect to their personal data controlled by BeCrop, and to lodge a complaint with a supervisory authority.

  1. Right of Access: Each data subject protected by the GDPR has the right to obtain confirmation from BeCrop as to whether personal data concerning her or him is being processed, as well as the information outlined in the GDPR’s Article 15 in the event this is the case. If you wish to exercise this right please contact us at legal@biomemakers.com, using the email address you used when submitting personal data to us and specifying your full name, or you can also access the user/company profile views at the Portal.
  2. Right to Rectification Each data subject protected by the GDPR has the right to obtain from BeCrop without undue delay the rectification of inaccurate personal data concerning her or him, as well as the right to have incomplete personal data completed. You can use Portal forms to modify some of your personal data, or if you can contact us at legal@biomemakers.com.
  3. Right to Erasure (Right to be Forgotten): Each data subject protected by the GDPR has the right to obtain from BeCrop the erasure of personal data concerning her or him without undue delay when one of the grounds listed in the GDPR’s Article 17 applies. If one of these conditions has been met and you wish to exercise this right, please contact us at legal@biomemakers.com, using the email address you used when submitting personal data to us specifying your full name as well as the condition you believe has been met.
  4. Right to Restriction of Processing: Each data subject protected by the GDPR has the right to restrict the processing of her or his personal data where one of the grounds listed in GDPR Article 18 applies. If one of these conditions has been met and you wish to exercise this right, you may contact us at legal@biomemakers.com, using the email address you used when submitting personal data to us, specifying your full name as well as the condition you believe has been met.
  5. Right to Data Portability: Each data subject protected by the GDPR has the right to to receive the personal data concerning her or him, and which was provided to BeCrop, in a structured, commonly used and machine-readable format, where both of the conditions listed in GDPR Article 20 (1) apply. In addition, such data subject has the right to have her or his personal data transmitted directly from BeCrop to another controller, where such transfer is technically feasible and when doing so does not adversely affect the rights and freedoms of others. If you wish to exercise your right to data portability, you can use our tool placed at user profile view at Portal or you may contact us at legal@biomemakers.com, using the email address you used when submitting personal data to us and specifying your full name.
  6. Right to Object: Each data subject protected by the GDPR has the right to object, on grounds relating to her or his particular situation, at any time, to processing of personal data concerning her or him which is based on the GDPR’s Article 6(1) point (e) or (f). If you wish to exercise your right to object, please contact us at legal@biomemakers.com, using the email address you used when submitting personal data to us and specifying your full name.
  7. Automated, Individual Decision-Making: Each data subject protected by the GDPR has the right not to be subject to a decision based solely on automated processing which produces legal effects concerning her or him or similarly significantly affects her or him, and when one of the grounds listed in the GDPR’s Article 22 (2) does not apply. If you believe that none of these conditions has been met and wish to exercise this right, please contact us at legal@biomemakers.com, using the email address you used when submitting personal data to us and specifying your full name.

5. Period for which personal data will be stored

Please see "Data Retention", above

6. Hosting

The Portal service and/or your personal data may be hosted in the United States, a country with an adequacy decision by the European Commission (Privacy Shield). By providing us with your personal data, you may be: (i) permitting the transfer of your personal data to the United States, which may not have the same data protection laws as the country in which you reside; and (ii) permitting the use of your personal data in accordance with this Privacy Notice. In some instances we may transfer personal pursuant to the Model Clauses, a copy of which you can download from the Commission’s website.

OTHER INTERNATIONAL VISITORS

This Portal service may be hosted in the United States. If you are an international visitor, you should note that by providing your PI, you may be: (i) permitting the transfer of your PI to the United States, which may not have the same data protection laws as the country in which you reside; and (ii) permitting the use of your PI in accordance with this Privacy Notice.

CONTACT US

Please contact us with any questions you may have at legal@biomemakers.com.