Data Subject Access Request (DSAR) Procedure

2Acknowledgment and Processing of the Request

Upon receipt of a sufficiently complete request, Gajo Livestock will acknowledge receipt within a reasonable period and proceed with its assessment.

Where additional information is required to verify the identity of the requester or clarify the request, Gajo Livestock may contact the requester to obtain the necessary information.

Gajo Livestock will endeavor to process requests within the time limits prescribed by applicable laws and regulations governing the protection of personal data.

Where the nature or complexity of a request requires additional time, the requester will be informed, where required by applicable law, of the reasons for the delay and the expected processing timeframe.

3Identity Verification

Protecting personal data is a priority for Gajo Livestock.

Before disclosing personal data, we may verify the identity of the requester to ensure that personal data is not disclosed to an unauthorized person.

The level of verification required will depend, among other things, on the nature of the data concerned and the risk of unauthorized access.

Gajo Livestock will not systematically require a copy of an identification document where other reasonable means are available to verify the identity of the requester.

4Data Search and Retrieval

Once the identity of the requester has been verified, Gajo Livestock will identify and retrieve the relevant personal data held or processed in connection with its services.

Such data may include information related to the use of:

• Farm Trade, for the purchase and sale of livestock and agricultural products, as well as interactions with buyers and other Platform participants;
• Open Farm, for the management and monitoring of agricultural and livestock farming activities;
• Agri-Credit: We offer interest-free credit for farm products and services to support farmers during difficult moments.
• Farm Genius AI, for digital assistance, learning, and agricultural support services;
• Gajo Vet, for veterinary care services, requests, and animal health monitoring;
• Any other service, application, account, or digital feature operated by Gajo Livestock.

Where applicable, the search may also include certain data processed by service providers or processors acting on behalf of Gajo Livestock.

5Disclosure of Data

Where the request is valid and disclosure of the requested data is legally permitted, the relevant personal data will be provided to the requester securely and, where technically appropriate, in a structured and commonly used format.

The response may include, in particular:

• the categories of personal data being processed;
• the purposes for which the data is processed;
• the main categories of recipients or persons to whom the data may be disclosed, where applicable;
• available information concerning the retention period or the criteria used to determine such period;
• the source of the data where it was not collected directly from the data subject, where such information is required to be provided;
• information regarding the rights to rectification, erasure, and restriction of processing;
• any other information required to be disclosed under applicable law.

Where the requested data contains information relating to other individuals, Gajo Livestock may take appropriate measures to protect the rights and privacy of those individuals.

6Record Retention

Gajo Livestock may maintain a record of data access requests to ensure appropriate tracking, security, traceability, and compliance.

Such records may include, in particular:

• the date on which the request was received;
• the identity or relevant identification information of the requester;
• the verification steps carried out;
• the nature of the request;
• the measures taken to locate the requested data;
• the date and method of response;
• the reasons supporting any limitation, restriction, or refusal of the request.

This information will be retained in accordance with applicable legal requirements and Gajo Livestock's internal data retention policies.

7Special Cases, Restrictions, and Refusals

In certain circumstances provided for by applicable law, Gajo Livestock may limit or refuse all or part of an access request.

This may include circumstances where:

• the identity of the requester cannot be sufficiently verified;
• the request concerns data that cannot legally be disclosed;
• disclosure of the data would adversely affect the rights or freedoms of another individual;
• a legal or regulatory obligation prevents the disclosure of certain information;
• the request is subject to a restriction provided for under applicable law.

Where a request is refused or limited, Gajo Livestock will, to the extent required by law and where no legal exception prevents it, provide the reasons for its decision, together with information regarding available remedies or complaint procedures before the competent authority.

8Data Relating to Agricultural, Veterinary, and Financial Services

Given the nature of the services provided by Gajo Livestock, certain requests may concern information relating to livestock farming, agricultural activities, veterinary services, commercial transactions, or credit applications.

Gajo Livestock applies appropriate confidentiality and security measures to such information and processes the data in accordance with the purposes for which it was collected and applicable legal requirements.

For requests relating to Agri-Credit, the relevant information may include identification data, contact details, credit applications, and supporting documents. Such data is processed for the purposes of managing the relevant applications and services and in accordance with applicable requirements.

9Data Security

Gajo Livestock implements reasonable and appropriate technical and organizational measures designed, in particular, to protect personal data against:

• unauthorized access;
• loss or destruction;
• alteration;
• unauthorized disclosure;
• misuse of data.

Access requests themselves are processed using appropriate security measures designed to minimize the risks of unauthorized access to or disclosure of personal data.

10Contact Us

To exercise your right of access or for any questions regarding the processing of your personal data, you may contact Gajo Livestock:

When contacting us, please clearly indicate that your request concerns access to your personal data and provide the information necessary to enable us to process your request efficiently.