1. The Collection of Data or Information
We collect and use information when necessary for our legitimate interests and in a fair, balanced way. We collect both non‑personally identifiable information (from visitors) and personally identifiable information (from users).
1.A Non‑Personally Identifiable Information
We may collect: browser type, language preference, referring site, timestamp of requests, pages viewed before/after using our Solutions or site, interactions with the site and other users via server log files, and other information a visitor chooses to provide. We use this to understand site usage and may publish aggregate, non‑identifying statistics.
1.B Personally Identifiable Information (PII)
We may collect PII necessary to access and use the Solutions/website, including (as applicable):
- First/last name (natural persons) or company name (juristic persons)
- Active mobile number and email address
- Location and area (farm/field location)
- Job title and department
- Phone numbers (business, fax, mobile)
- Company postal code
- Corporate website URL(s) and social media URL(s)
- Metadata such as IP addresses, dates messages are sent/received, subject lines
- Encrypted account password
We use this information to understand users, and to test, develop, improve, and enhance our Solutions and website; to contact customers about Solutions/promotions/opportunities; and to investigate potential security or license breaches.
1.C Purpose for Collecting and Processing
- Detect, investigate, and prevent fraud or illegal activities
- Respond to comments, questions, requests; provide support
- Fulfill access/correction/deletion requests and other legal rights
- Review employment applications
- Protect rights and property of ORTH, customers, and others
- Provide notice of important changes and policy updates
- Provide/deliver Solutions; send related communications and invoices
- Communicate about offers, promotions, rewards, and events
- Send technical notices, updates, security alerts, admin messages
- Comply with legal/contractual obligations; resolve disputes; enforce agreements
- Use in relevant legal proceedings
1.D Data Retention
We follow industry standards and ISO requirements to protect information during transmission and at rest. We retain data as long as needed for purposes in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Retention periods consider amount, nature, sensitivity, and purposes. After the period ends, we delete personal information.
1.E Cookies and Tracking Technologies
We use cookies and similar technologies to enhance functionality, analyze usage, personalize content, and deliver relevant advertising. Non‑essential cookies (analytics/personalization/marketing) are set only after clear, affirmative consent via our cookie banner, per GDPR/ePrivacy. You can manage preferences anytime via “Cookie Settings.” Strictly necessary cookies are always active. We do not respond to browser “Do Not Track” signals; control cookies via your browser or our consent tool. Disabling certain cookies may affect features.
2. The Disclosure of Data or Information
2.1 Disclosure to Third Parties
We may use third‑party services (e.g., payment gateways). Your PII may be disclosed where necessary and will be subject to those third parties’ privacy policies. Payments processed by third‑party processors are not accessible or controlled by us; we are not liable for third‑party service/data privacy failures. Our site may contain links to third‑party sites; review their privacy policies—we do not control their content or practices.
2.2 Disclosure for Legal Reasons
We may disclose information to comply with lawful requests or orders; address legal violations; protect rights/property/safety; exercise legal rights or respond to claims; or respond to data subject access requests as required by law.
2.3 Disclosure to a Buyer
If ORTH or substantially all assets are acquired, or in a merger/bankruptcy, your information may be transferred.
2.4 Disclosure to Affiliates
We may share non‑personal information with affiliates (current/future parents, subsidiaries, and companies under common control) for the purposes in this Policy.
2.5 Disclosure to Service Providers
We may disclose information to service providers solely to operate the site/Solutions (e.g., payment processors, analytics). These providers may set cookies and receive browsing data to deliver their services.
2.6 Other Disclosures
Testimonials (with consent) may display names; to update/delete, email dpo@aydi.com. Public blogs/forums may expose content to others; request removal via dpo@aydi.com (removal may not always be possible).
If needed, we may request your consent to share personal data with third parties not covered above; you may decline (which may limit website use).
3. Users’ and/or Visitors’ Rights ("Individual Rights")
Residents of the EEA, UK, Switzerland, or UAE are entitled to the following rights under GDPR and UAE Federal Decree‑Law No. 45/2021 (identity verification may be required):
- Access, Correction, Restriction: Request access to/copies of personal information (free), and details of processing; request correction/completion; restrict processing while accuracy is verified.
- Data Portability: Receive data in a machine‑readable format and request transmission to another entity where technically feasible.
- Erasure: Request deletion where data is no longer necessary, consent is withdrawn, or rights override our interests.
- Objection: Object where processing is based on legitimate interests/public interest, for direct marketing, or for research/statistics.
- Complaint: Lodge complaints with the relevant supervisory authority.
4. Privacy by Default
We apply Privacy by Design and Default (GDPR Art. 25) and ISO standards. By default, we collect/process/store/share the minimum personal data necessary. Non‑essential data collection (e.g., marketing, analytics, AI recommendations) is disabled until you provide active, informed consent.
- No non‑essential cookies/tracking without explicit consent
- New accounts and profiles default to private/limited visibility
- Email subscriptions and promotions are opt‑in
- AI features use the least data necessary
- Retention settings auto‑delete/anonymize data when no longer needed
- Role‑based access controls restrict internal access
- Ongoing reviews to maintain/enhance data protection
5. GDPR / UAE Compliance
We process personal information only where we have a lawful basis: consent; contract performance; legal obligation; or legitimate interests (e.g., marketing, sales, recruiting, organizing user/visitor profiles). We provide required notices (GDPR Arts. 13/14) and honor rights in Arts. 12–23, including the right to be forgotten. For privacy requests, visit aydi.com or email dpo@aydi.com.
6. Data Protection Impact Assessments (DPIAs)
We conduct DPIAs (GDPR Art. 35; ISO requirements) when processing is likely to result in high risk (e.g., innovative technologies like AI Agronomist, large‑scale profiling, or sensitive data). DPIAs assess nature/scope/context/purposes; necessity/proportionality; risks to individuals; and measures to mitigate risks. We consult our DPO and supervisory authorities where appropriate.
7. Automated Decision‑Making and Profiling
ORTH does not make decisions based solely on automated processing that produce legal or similarly significant effects, unless necessary for a contract, authorized by law, or based on explicit consent. Where used, we will inform you of the logic, significance, and consequences, and ensure your right to human intervention, to express your view, and to contest decisions.
8. Data Protection Officer (DPO)
Contact our DPO for data protection matters under GDPR and UAE law: dpo@aydi.com.
9. Children’s Privacy
Our website is not intended for individuals under 16. We do not knowingly collect personal information from anyone under 16. If we learn we have, we will delete it as soon as possible. Contact dpo@aydi.com if you believe we collected such data.
10. Privacy Policy Changes
We may modify this Policy periodically. Material changes will be announced here, by email, and/or via a homepage notice before taking effect. Continued use of the website after updates constitutes acceptance.
11. Governing Law & Dispute Resolution
Disputes should first be settled amicably. If unresolved within 30 days, disputes shall be finally settled by arbitration under DIAC rules, seat at DIFC, Dubai, language English, by a sole arbitrator. UAE law governs.
12. Language
If translated, the English version prevails.
13. Contact Us
Email: dpo@aydi.com
Website: https://www.aydi.com/