Privacy Statement

This Privacy statement contains information about the way Harvest by Grain BV processes data and personal data as part of its business. This includes the processing of data through our website. During the processing of personal data Harvest by Grain BV works conform the requirements of the applicable data protection legislation, like the General Data Protection Regulation. This means we:

  • clearly specify our purposes before we process personal data, by using this privacy statement.
  • limit our collection of personal data to only the personal data needed for legitimate purposes.
  • first ask for permission to process your personal data in cases where your permission is required; Please note that by making use of this website and/or our services this permission is deemed to be given by you.
  • take appropriate security measures to protect your personal data and we demand the same from parties who process personal data on our behalf.
  • respect your right to access, correct or delete your personal data held by us.

Harvest by Grain BV is the party responsible for data processing. In this privacy statement, we will explain what kind of personal data we collect and for what purposes within our application Harvest. We recommend that you read it carefully.

If you have any questions regarding the processing of personal data, you can find the contact details of Harvest by Grain BV at the end of this privacy statement.

All information we register will be deleted when the information is no longer required for our administrative and/or fiscal or other legal or commercial requirements.

Use of personal data

User registration

Certain features of our service require you to register beforehand. You will have to provide some information about yourself and fill in a name, e-mail and password for the user account that we will set up for you.

We need this information because of our agreement with you and for the functionality and security of Harvest. Some information, however, will be linked to the change history of the Harvest accounts you have worked on. This information is required for us to keep a correct change history.

A user that has not logged in for 3 months will be determined as inactive. We will automatically delete the user within 6 months of becoming inactive.

Account creation

A user can create multiple accounts in Harvest. To make use of an account, we need the company details, like the name, address and a person of contact of the company to which the account belongs. We need this information because of our agreement.

An account will become inactive if no user has logged in to it for 6 months and if there is no subscription.

Contact form

You can use our contact form to ask questions or make a request. For this purpose, we use your name, email and optionally address and phone number. We do this on the basis of your consent.

Statistics and profiling

We keep statistics on the use of our application Harvest. These statistics are used in three ways.


Firstly, we use anonymous statistics to help us improve our application. This data is not personal identifiable. We collect this data on the basis of our right to use statistics for improvements.


Secondly, we use data to use for marketing purposes like remarketing. This data is shared with third parties, as mentioned below. Please refer to the privacy statement of the pertinent third party to understand how they handle your data. We do not share personal identifiable data.


Finally, we use data to improve your user experience and relation with us. We can stitch your data together, so we can personalize our application and marketing messages. We will always make sure your data is secure and private. We do not share personal identifiable data.

Providing to third parties

We use third parties to carry out marketing communications. We do not share personal identifiable information and share as limited information as possible. We share your data to provide (personalized) advertisement/messages with the following parties:

  • Facebook
  • Google
  • LinkedIn
  • Twitter
  • MailChimp

Among these parties, the following are not in the EU:

  • Facebook
  • Google
  • LinkedIn
  • Twitter
  • MailChimp


Via Harvest you can take out a paid subscription on a Harvest account. We use your personal data to complete the payment. For this purpose, we use your payment details in addition to the provided company details related to the account. We need this data because of our agreement with you. We store this information because of legal requirements. We use third parties to support us with collecting payments.

We use the following third parties:

  • GoCardless


We have a newsletter to inform those interested about news, tips and information about our products and services. Your e-mail is added to the list of subscribers, only with your permission. For this purpose, we use your email address and name. You may cancel your subscription to our newsletter at any time. Each newsletter contains a link to unsubscribe from our newsletter.

We use the following third parties to carry out our newsletter service:

  • Mailchimp

Among these parties, the following are not in the EU:

  • Mailchimp

Hosting and log data

We need hosting to provide our services on the web. When you use our service, the relevant servers will automatically record information that your browser sends whenever you visit a website (“log data”). This log data may include information such as your ip-address, browser type, etc. Additionally, to deliver our website and protect ourselves against attacks, we need to store ip-addresses. Furthermore, when using hosting services, the ip-address and each requested file will be seen by our hosting parties.

We use the following third parties to carry out our hosting:

  • Amazon
  • Heroku


Our application makes use of cookies. Cookies are small files in which we can store information, so that you do not have to fill in that information again. We can also use them to see whether you are visiting us again and third parties can use cookies to identify you for remarketing purposes.

Cookies are only related to the “Statistics and profiling” use of data. We use cookies for the following 3 purposes:

  • Functionality and statistics of the website
  • Remarket you on other marketing platforms
  • Personalize our website and marketing messages

You can change your consent anytime and upon request we can delete your information. The first time you visit our website, we will show you a notification explaining our cookies and ask for your permission for the use of these cookies. These cookies are only related to the “Statistics and profiling” use of data.

We made arrangements with other parties who place cookies on our website. Nevertheless, we cannot fully control what they are doing with their cookies, so please read their privacy statements as well.


We take security measures to reduce misuse of and unauthorized access to personal data. We take responsibility in the security of your personal data. We cannot however guarantee that a breach of personal data will not take place.

Changes to this privacy statement

We reserve the right to modify this statement. Modifications will be published on this website.

Inspection and modification of your data

You can always contact us if you have any questions regarding our privacy policy or wish to review, modify or delete your personal data.

You have the following rights:

  • Right of access: you have the right to see what kind of personal data we processed about you.
  • Right to complain: you have the right to file a complaint against the processing of your personal data by us, or against direct marketing.
  • Right to be forgotten: you can file a request with us to remove any personal data we processed of you.
  • Right to data portability: if technically possible, you have the right to ask us to transfer your processed personal data to a third party.
  • Right to restriction of processing: you can file a request with us to (temporarily) restrict the processing of your personal data.

If you exercise any of the rights mentioned above, we will ask to identify yourself with a valid ID, to confirm it is your personal data. We will usually comply to your request within 30 days. This term can be extended if the request is proven to be complex or tied to a specific right. You will be notified about a possible extension of this term.


If you think that we are not helping you in the right way, you have the right to lodge a complaint at the Authorities. For The Netherlands, this is the Autoriteit Persoonsgegevens.

Contact details
Harvest by Grain BV
Akkerbergplein 52
8043XM Zwolle