Privacy notice
This notice explains which personal data oenit.com processes, why, and what your rights are.
Who is responsible
RM.ai, s.r.o., Palánok 1, 949 01 Nitra, Slovakia, is the controller for the data processed on oenit.com. You can reach us at hello@oenit.com.
What we process, and why
Contact requests, demos and meetings
When you use the contact form, we process your first and last name, email address, phone number, country, company and chosen contact topics. Your role, website and message are optional. The topics can include a demo, collaboration, equipment integration or another enquiry. Older demo and meeting forms record your name, email address and company, plus any optional details you provide. We also record the language of the page you used, whether you came from our Bordeaux page, the time the request reached us, your agreement to be contacted, and the version of the text you agreed to.
We use these details only to answer your request and to arrange the demo or the meeting. We also send you one short e-mail confirming that your request reached us. To keep the form from being used to send these confirmations to other people, we send at most one a day to the same address, and for this we keep a one-way code of the address (not the address itself) until the next monthly clean-up.
Pilot applications
When you apply for a pilot, we process the same details as for a demo request, plus the size of your winery, the parts of OENIT you would like to work with and your preferred start.
We use these details only to assess your application, to arrange the onboarding call and to prepare the pilot with you.
Newsletter
When you sign up for the newsletter, we process your e-mail address, the language of the page you used, the time you signed up and confirmed, your agreement and the version of the sentence you agreed to.
- Double opt-in. We first send a confirmation link to the address. You are subscribed only after you open it and press “Confirm my subscription”. The link works for 72 hours. So that the form cannot be used to flood someone’s inbox, we send at most three confirmation e-mails to one address a day.
- Purpose. We use your address only to send you the OENIT newsletter, a few times a year. We do not use it for anything else, and we do not link it to analytics or advertising data.
- Legal basis. Your consent (Art. 6(1)(a) GDPR).
- Unsubscribe at any time with the link in every issue (oenit.com/newsletter/unsubscribe/), by replying “unsubscribe”, or by writing to hello@oenit.com. We remove the address from our sending list before the next issue. Withdrawing does not affect sending that took place before.
- How long. If you do not confirm, we delete the address after the link has expired, at the latest about a month later. While you are subscribed, we keep it. After you unsubscribe, we keep a record of the subscription and its end (address, dates and the wording you agreed to) for 24 months, so that we can show we had your consent, and then delete it.
- Where. The sign-up and the list are kept with the same cloud hosting provider as the forms, which also sends the confirmation e-mail; the newsletter itself is sent from our e-mail provider’s mailbox.
Fairs and messages on social media
When we talk with you at a fair, for example at our stand at Vinitech-Sifel, or you write to OENIT on LinkedIn, Instagram, Facebook, YouTube, X or TikTok, we may note your name, company, role, country, the contact details you give us, what you are interested in, and whether you agreed that we follow up. We use these notes to answer you and, if you agreed, to contact you again about OENIT. The legal basis is our legitimate interest in answering and keeping track of the people who approach us (Art. 6(1)(f) GDPR); where you ask us for something, such as a demo, taking the steps you ask for (Art. 6(1)(b) GDPR); and, for contacting you again about OENIT, your consent (Art. 6(1)(a) GDPR). We keep the notes for 24 months and then delete them, or sooner if you ask us to. We never add you to the newsletter from these notes: for that you sign up yourself. A message you send on a social platform is also processed by that platform under its own privacy policy. When you visit OENIT’s pages on LinkedIn, Facebook, Instagram or YouTube, the platform shows us statistics about the visits in aggregated form only; for those statistics we and the platform are jointly responsible (Art. 26 GDPR) under the platform’s terms, and the platform is the first contact point for your rights in that part.
Legal basis
We use the details from the demo, meeting and pilot forms to answer your request and to take the steps you ask for before a possible contract (Art. 6(1)(b) GDPR). We contact you about it because you agreed to that in the form (Art. 6(1)(a) GDPR). You can withdraw your agreement at any time by writing to hello@oenit.com; we then stop contacting you and delete your request. Withdrawal does not affect processing that took place before.
The fields marked as required are needed to answer your request; without them we cannot reply. We do not use your details for automated decisions or profiling.
Protection against misuse
To keep automated submissions out, the forms use a hidden field and a minimum time to fill them in, and they limit how many requests one connection can send. For this limit, the connection’s address is turned into a one-way code that is kept in working memory for about ten minutes, and is never stored or logged. Before a form is sent, your browser also solves a small computing puzzle that our own server sets; this takes a moment while you type. It uses no cookie, stores nothing on your device, involves no other company and sends nothing about you. To stop a solved puzzle from being used twice, we keep a one-way code of the puzzle (not of you or your details) until the next monthly clean-up.
Where your details go
Your request is sent by e-mail to our sales team and stored in a list of requests that only our team can read. The services that host this website, send these e-mails and store the list process the data on our behalf, under a data processing agreement, with EU data residency. If one of these services accesses the data from outside the EU, for example for support, it does so only under the safeguards the GDPR requires (Art. 45 or 46 GDPR). We do not sell your data and do not pass it on to anyone else.
These are the services that receive personal data through oenit.com:
| Service | Provider | What it does for us | Its role |
|---|---|---|---|
| Hosting, the forms, the list of requests and the newsletter list | Our cloud hosting provider | Serves the site, receives the forms and the newsletter sign-up, stores the requests and the subscribers, and sends the form and confirmation e-mails | Processor, EU data residency |
| E-mail and shared files | Our e-mail and office provider | Our team’s mailboxes, in which your requests arrive, from which we reply, and from which we send the newsletter; the shared list of fair and social-media contacts | Processor, EU data residency |
| Google Analytics 4 (only with your consent) | Google Ireland Limited | Counts page views and how visitors move through the site | Processor, under Google’s data processing terms |
| LinkedIn Insight Tag (only with your consent) | LinkedIn Ireland Unlimited Company | Measures our LinkedIn posts and ads, and LinkedIn audiences | Joint controller with us for the collection, then controller |
| Meta Pixel (only with your consent) | Meta Platforms Ireland Limited | Measures our Instagram and Facebook posts and ads, and Meta audiences | Joint controller with us for the collection, then controller |
How long we keep it
We keep your demo request, meeting request or pilot application, and the e-mail our sales team receives with it, for 24 months after it reaches us, and then delete it. If you become a customer or take part in a pilot, the details needed for that move to our customer records and are kept for as long as that agreement and the law require. If you ask us to delete your request, or withdraw your agreement to be contacted, we delete it sooner, within one month of your request. For the newsletter, see “Newsletter” above.
Analytics and advertising measurement: only with your consent
oenit.com can use three services that set cookies or similar technology in your browser: Google Analytics 4, the LinkedIn Insight Tag and the Meta Pixel. Each one is its own choice in the consent banner, and each runs only if you agree to it.
- Until you choose, and if you choose “Reject all”, none of them is loaded and none of their cookies is set. “Accept all” switches on all of them; “Choose” lets you switch each one on separately.
- The legal basis for each is your consent (Art. 6(1)(a) GDPR, and, for the cookies, the Slovak Electronic Communications Act, which implements Art. 5(3) of the ePrivacy Directive). You can change or withdraw your choice at any time through “Cookie settings” at the foot of every page. Withdrawing it stops the service on this site from that moment and removes its cookies from oenit.com; it does not affect processing that took place before.
- Your choice itself is stored in your browser so that the banner does not ask again on every page; after 13 months it asks again. This storage is necessary for the site and contains no tracking.
Google Analytics 4
We use Google Analytics 4 to count page views and to see how visitors move through the site, so that we can improve it. Google Analytics is provided by Google Ireland Limited.
- If you switch it on, Google Analytics sets cookies in your browser and processes information such as the pages you visit, the time of the visit, your browser and device type and an approximate location derived from your connection. It runs without advertising features: no advertising cookies and no ad personalization.
- The analytics cookies (
_ga, and_ga_followed by a code) expire after 13 months. Google keeps the analytics data linked to them for two months and then deletes it; our reports keep only aggregated figures. - Google Ireland Limited processes this data on our behalf under Google’s data processing terms. Google may also process it in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, so the transfer relies on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). Where that does not apply, it relies on the standard contractual clauses in Google’s data processing terms (Art. 46 GDPR).
LinkedIn Insight Tag
We use the LinkedIn Insight Tag to see which of our LinkedIn posts and ads bring visitors to oenit.com, and to show OENIT ads on LinkedIn to people who have visited the site. It is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
- If you switch it on, the tag sends LinkedIn the page you visit, the address of the page you came from, the time, your browser and device type and your connection’s address, together with LinkedIn’s cookies. If you are signed in to LinkedIn, LinkedIn can link the visit to your LinkedIn account.
- We see only aggregated reports and audiences; LinkedIn does not give us the identity of any visitor. LinkedIn says it removes direct identifiers within seven days and deletes the remaining data after 180 days.
- The tag’s cookies on oenit.com (such as
li_fat_id) and on linkedin.com (such asbcookie,lidc,li_sugr,UserMatchHistoryandAnalyticsSyncHistory) last from one day to one year. - For collecting the data on oenit.com and passing it to LinkedIn, we and LinkedIn Ireland are jointly responsible (Art. 26 GDPR); LinkedIn’s terms set out who does what, and you can use your rights with either of us. What LinkedIn then does with the data, it decides as its own controller, as described in the LinkedIn privacy policy (linkedin.com/legal/privacy-policy). LinkedIn may process the data in the United States; LinkedIn Corporation is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR), and otherwise LinkedIn relies on standard contractual clauses (Art. 46 GDPR).
Meta Pixel
We use the Meta Pixel to see which of our Instagram and Facebook posts and ads bring visitors to oenit.com, and to show OENIT ads on Instagram and Facebook to people who have visited the site. It is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
- If you switch it on, the pixel sends Meta the page you visit, the address of the page you came from, the time, your browser and device type and your connection’s address, together with Meta’s cookies. If you use Instagram or Facebook, Meta can link the visit to your account. We have switched off the pixel’s automatic collection of button clicks and page details, and we do not send Meta your e-mail address or any other detail from our forms.
- We see only aggregated reports and audiences; Meta does not give us the identity of any visitor.
- The pixel’s cookie on oenit.com (
_fbp, and_fbcwhen you arrive from an ad) and Meta’s cookie on facebook.com (fr) last 90 days. - For collecting the data on oenit.com and passing it to Meta, we and Meta Platforms Ireland are jointly responsible (Art. 26 GDPR) under Meta’s controller addendum (facebook.com/legal/controller_addendum); Meta Platforms Ireland is the contact point for your rights in that part, and you can also contact us. What Meta then does with the data, it decides as its own controller, as described in Meta’s privacy policy (facebook.com/privacy/policy). Meta may process the data in the United States; Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR), and otherwise Meta relies on standard contractual clauses (Art. 46 GDPR).
Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, write to hello@oenit.com.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where we are established. Our lead authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk).
Changes to this notice
We update this notice when what we process changes, for example when we add a service. The date below shows the current version.
Last updated: 1 November 2026