Privacy policy for the app “WinTec Agrar”

1. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

WinTec GmbH
Managing Director: Dipl.-Ing. Karlheinz Unangst
Liethweg 9, 48565 Steinfurt, Germany
Phone: +49 2552 6003902
E-Mail: karlheinz.unangst@wintec.li

Please contact this address with any questions about data protection. We have not appointed a data protection officer, as the legal requirements under Section 38 BDSG (German Federal Data Protection Act) are not met.

2. Overview

WinTec Agrar makes the public plant protection product data of the German Federal Office of Consumer Protection and Food Safety (BVL) usable and offers field and farm management, weather information and plant disease detection. The app does not require a user account and does not use any analytics, advertising or tracking services. The app stores your farm data on your device; we do not operate a server on which this data is stored or synchronised.

Some features, however, retrieve data from external services and transmit information such as your location or a photo for this purpose. Section 5 describes which ones. There is no connection or partnership between WinTec and the BVL.

3. Data on your device

The app stores, among other things, the following in databases in the app’s own data directory:

farm details (name, address, coordinates) and the names of employees you enter,
fields and parcels (FLIK) with geometries, completed operations and soil details,
photos of fields, operations and the farm with time and location of capture,
photos and results of plant disease detection,
a randomly generated installation ID that never leaves the device,
downloaded public data (BVL authorisations, JKI, BBCH and weather data).

If you enter employee data, you are yourself responsible for this processing. Entries can be deleted in the app, including photos, fields, operations and all farm data; uninstalling the app removes all data.

4. Permissions

Location – only while in use; for weather, weather warnings, field search, the map, photos and operations. Without permission, the app uses a preset location.
Camera and photos – for photos for disease detection, of fields and operations, and for scanning labels and barcodes. Text recognition and barcode scanning run on the device.
Microphone and speech recognition – for dictating comments. The app uses the operating system’s speech recognition; depending on the device, the audio may be processed by Google or Apple.
Files – for selecting images and importing InVeKoS files.

You grant permissions via the operating system’s prompt (Art. 6(1)(a) GDPR) and can withdraw them there at any time. The other features of the app remain usable.

5. External services

With every request, the respective provider technically receives your IP address. Beyond that, the app only transmits the information listed here, and only when you use the respective feature. The legal basis is the provision of the feature you have called up (Art. 6(1)(b) GDPR) or your consent to location access (Art. 6(1)(a) GDPR).

Plant disease detection (Kindwise)

For disease detection, the photo you take or select is transmitted together with a location rounded to approx. 100 metres to the crop.health and plant.id services of kindwise s.r.o. (Czech Republic) and analysed there. This transmission only takes place when you send a photo for detection.

Weather and weather warnings

For weather data, radar images and soil temperatures, the app transmits your location to the Bright Sky service (api.brightsky.dev), which provides the open data of the German Weather Service (DWD). Warning maps and station data are retrieved directly from the DWD; your location is evaluated on the device.

Addresses, parcels and maps

To convert a position into an address, the app sends the coordinates to Nominatim of the OpenStreetMap Foundation (United Kingdom).
To search for field blocks (FLIK), the app sends your location with a search radius to the geodata services of the respective German federal state.
Maps are loaded from OpenStreetMap and Esri (World Imagery, Esri Inc., USA). The providers can see which map section is requested.
For the map views, software libraries are loaded via the unpkg, jsDelivr and cdnjs (Cloudflare) networks.

Public reference data

The app loads authorisation data from the BVL’s PSM API and website, and further reference data from the Julius Kühn Institute (JKI). No information about you is transmitted.

Supplier search

If you search for suppliers of a product, the app opens a web search with the product name (Google on Android and Windows, DuckDuckGo on iOS). The search provider’s privacy policy applies to this search.

Transfers to third countries

Some of the providers mentioned (Esri, Cloudflare, Google) are based in the USA or use servers there. An adequacy decision of the European Commission exists for the USA (EU-U.S. Data Privacy Framework), and likewise for the United Kingdom.

6. Export and sharing

You can export data, such as the plant protection records as an Excel or JSON file, via the operating system’s share function or send it by e-mail. This only happens on your explicit action and to the recipient you choose.

7. Distribution via app stores

The app is distributed via Google Play and the Apple App Store. The respective store operator is responsible for the data processed in that context, such as your store account and purchase and installation records: Google Ireland Limited (Google Privacy Policy) or Apple Distribution International Ltd. (Apple Privacy Policy). We do not receive any data from the stores that would allow us to identify you personally.

8. Device backup

Depending on your device settings, the data stored in the app may be included in the operating system's device backup (on Android the Google backup, on iOS iCloud or a local backup). You control this backup yourself in your device settings; we have no access to it.

9. Your rights

You have the right at any time to

access the data we hold about you (Art. 15 GDPR),
have inaccurate data rectified (Art. 16 GDPR),
have data erased (Art. 17 GDPR) and restrict processing (Art. 18 GDPR),
data portability (Art. 20 GDPR),
object to processing based on legitimate interests (Art. 21 GDPR) and
withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).

You may also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (www.ldi.nrw.de).

As your farm data is stored solely on your device, you can view, change and delete it there yourself.

Last updated: September 2026. In case of doubt, the German version prevails.