Record of processing activities
Summary of the laboratory's personal data processing activities.
Version 1.0, of 10 October 2026. aGo lab is the controller for every processing activity. Where the data are processed and which providers process them on its behalf is explained on the privacy page.
Sources with personal data
The three activities in this section process lists that the Agricultural and Livestock Service (SAG) publishes on its website. In all of them, the laboratory removes identifying data when reading, stores the original list encrypted and not exposed through the API, reduces it within ninety days of its capture and publishes only aggregate counts. Backup copies, encrypted with a key that neither the server nor the storage provider holds, are deleted after thirty-one days, and the monthly one after three hundred and sixty-six, and are not used to produce figures.
Lists of operators with organic certification
| Field | Detail |
|---|---|
| Purpose | Count organic operators by region, production line, sector and certification body, and follow them from one edition of the list to the next without identifying them |
| Legal basis | Legitimate interest for statistical purposes in the public interest (article 16 quinquies), on lists the body publishes |
| Data | The operator’s name, who may be a natural person, with establishment, sector, species, region, municipality and certification body |
| Recipients | None at individual level; only aggregates are published |
| Retention | The list with names, until the edition’s load has been checked and for ninety days at most; afterwards, a reduced version with a pseudonymous key and the columns that do not identify anyone, for as long as the series is published |
Organisations of ecological farmers
| Field | Detail |
|---|---|
| Purpose | Count organisations of ecological farmers and their members by organisation and by region, and follow them from one edition to the next |
| Legal basis | Legitimate interest for statistical purposes in the public interest (article 16 quinquies), on a register and a list the body publishes |
| Data | The organisation’s name, its tax number, contact address, email and phone, its region and, in the annual list, the names of its members |
| Recipients | None at individual level; only aggregates are published |
| Retention | The capture with contacts or names, until the edition’s load has been checked and for ninety days at most; afterwards, a reduced version without tax number, contacts or names, for as long as the series is published |
The laboratory does not capture from archived copies an edition containing data that the current register marks as not authorised for publication, and it does not look for members of the organisations in other sources.
Trade in organic products
| Field | Detail |
|---|---|
| Purpose | Count shops selling organic products by region and municipality |
| Legal basis | Legitimate interest for statistical purposes in the public interest (article 16 quinquies), on a list the body publishes |
| Data | The shop’s name, which may be that of a natural person, its region, municipality and address |
| Recipients | None at individual level; only aggregates are published, with a minimum threshold per cell |
| Retention | The capture with names and addresses, until its load has been checked and for ninety days at most; afterwards, a version reduced to region and municipality |
The laboratory’s own processing
Request limit
| Field | Detail |
|---|---|
| Purpose | Limit how many requests per minute the API receives and how many submissions its forms receive, and count requests and distinct origins per day |
| Legal basis | The controller’s legitimate interest in keeping the service available; for the daily count, legitimate interest for statistical purposes in the public interest |
| Data | A digest of the network address, computed with a key only the laboratory holds; the API does not store the address |
| Recipients | None |
| Retention | Deleted every day, after the closed day is counted; for each day only the total of requests and of origins remain |
Entry proxy log
| Field | Detail |
|---|---|
| Purpose | Run and protect the server: diagnose failures and detect abuse |
| Legal basis | The controller’s legitimate interest in the security and availability of the service |
| Data | The network address, date, requested path, response code, browser and referring page of each request to the API and its forms |
| Recipients | None |
| Retention | The log is rotated by size and covers a few days; it is not backed up |
Rights requests
| Field | Detail |
|---|---|
| Purpose | Receive, handle and answer requests for access, rectification, erasure, objection, portability and blocking |
| Legal basis | Compliance with a legal obligation of the controller |
| Data | Name, email address, the details of the request, and the dates and text of its handling |
| Recipients | None |
| Retention | Four years from when the reply is sent, the limitation period for legal action over a breach of the law |
API keys
This activity exists only if aGo lab signs a written agreement with an institution that needs a higher quota; there is no public key request.
| Field | Detail |
|---|---|
| Purpose | Give the institution a key with a higher quota, and write to it about the key |
| Legal basis | The written agreement with the institution |
| Data | The institutional email address and an optional label |
| Recipients | None |
| Retention | While the key is active and for thirty days after it is deactivated |
Internal accounts and audit
These accounts are only for the aGo lab staff who run the laboratory; there are no public accounts.
| Field | Detail |
|---|---|
| Purpose | Give two-factor access to the laboratory’s administration and record who logged in, exported or read a capture with personal data, when and from which network |
| Legal basis | The controller’s legitimate interest in securing access to the data it holds |
| Data | Username, email, hashed password, encrypted authenticator secret, failed login attempts and, in the audit, the action, the date and the network prefix |
| Recipients | None |
| Retention | The audit, twenty-four months from each entry; failed attempts, while they count towards the login limit; the account is deactivated after ninety days without use |