Privacy and cookies

Data controller

FarmyPoint

For any privacy request, write to us using the “Contact” form.

In short

• You do not need an account to search and we do not ask for personal data. Name and email only if you leave them, for a notification after a report or to find your favourites on another phone.
• No advertising, no profiling, no tracking cookies and no third-party statistics.
• Your location is only used for «Near me», with your permission, and we do not store it.
• Of your IP address we keep at most a pseudonymous code (computed with a secret key), to limit abuse, and we delete it after a few months.

Browsing

Like every website, the hosting server records technical data about requests (IP address, date and time, page requested, browser) to run the site and protect it from abuse. These logs are kept for the period set by the hosting provider.

The “Near me” search

Your device's location is only requested when you tap «Near me» and only with your permission. It is rounded to about 100 metres, sent in the body of the request (never in the page address), used to calculate distances and then forgotten: we do not store it. As with any map, to show you the area around you the browser downloads the map images from the provider listed under «Third-party services», which receives your IP address and the area shown (not your exact location). The search log keeps only the municipality of the nearest pharmacy.

Searches and statistics

To improve the service we record what was searched for, the language, the municipality and the number of results, with the time rounded to the hour and without data that identifies the person; if the search text looks like a medicine we only record that a search took place. This data is kept for 12 months. Searches travel in the body of the request, not in the address, so they do not end up in the server's technical logs.

We also count, only as daily totals, visits to pharmacy pages, requests for directions and similar, to show pharmacies anonymous statistics.

In the same way, without cookies and without storing anything on your device, we count visits to the site: pages viewed (by type, not the exact address), which site you came from (only its name, for example a search engine or a social network), the type of device (phone, tablet or computer), the browser and operating system, the time of arrival, the time spent on pages, the links and buttons tapped, how fast pages load and site errors (pages not found, server errors or errors in the site's scripts). To know which region and city a visit comes from we compare the IP address, only at the moment of the visit and without storing it, with a public list of Italian networks (DB-IP); for other countries we derive the country from the browser time zone. To count visitors and sessions within the same day we compute a non-reversible code from the IP address and browser together with a random key that we change and destroy every day: the code cannot be traced back to you or link different days, and it is deleted by the next day. Only daily totals are kept.

Reports

For a report we keep its type, the message if you write one and a pseudonymous code of your IP address, to limit abuse. The report is seen by our staff and, if it manages its page on FarmyPoint, by the pharmacy concerned. The code is deleted once the report has been handled and 180 days have passed since it was sent; the message after 2 years. If you report a vending machine from «I saw a vending machine» we also store your phone's location rounded to about 10 metres, which we remove once the report has been handled and 90 days have passed since it was sent, and the photo, if you send one: only moderators see it and we delete it as soon as the report is accepted or rejected. The photo is re-encoded, without camera data. If you allow publication, we may instead show the photo on the pharmacy's page as a «user photo», with no data about you, only if no people or number plates can be recognised; the pharmacy can remove it and you can ask for its removal through the contact form. The same applies if you report a vending machine that is not at a pharmacy: location, description and photo are only used to find it and link it to the right pharmacy; in this case the IP address code is also removed 90 days after sending, once the report has been handled. These deletions happen through an automatic daily clean-up. To find the address we send only the rounded location to OpenStreetMap (Nominatim) or Photon (Komoot, Germany), from our server: never your IP address or other data about you.

Notifications and favourites on your email

After reporting a vending machine you can leave, if you wish, your name (optional) and your email to know when the vending machine is on the map or if we could not add it. With a separate box, unticked by default, you can also keep a copy of your favourites linked to your email, to find them on another phone with a link we email you. You can do the same from the «Favourites» page.

• Before using the address we send you a confirmation link: if you do not open it within 7 days we delete everything and do not write again.
• We keep your email, name, language and confirmation dates and, if you use the copy of your favourites, the list of saved pages (only the name and number of the page, data that is already public) and the linked browsers, recognised by the technical cookie fp_vis, which only contains a random code.
• Only the staff who check reports see your email and name, to write to you if something needs clarifying: never the pharmacy or other visitors.
• If you only asked for the notification, we delete your data as soon as we have sent it. With the copy of your favourites we keep it while you use it and delete it after 24 months without use.
• You can delete everything at any time from «Favourites» or from the «Delete my data» link at the bottom of our emails.

Reviews

If you review a vending machine we keep the ratings, your comment if you write one, the language and the date, with no name or account, and for 30 days a pseudonymous code of your IP address to limit repeated reviews. A review is published only after we check it and stays online for three years; the pharmacy can reply publicly. Rejected or never-checked reviews are deleted after 6 months. Do not write personal data or health information in your comment.

“Contact” form

If you write to us, we keep the type of contact, your name if you give it, your email and your message only to reply to you, for at most 12 months, together with a pseudonymous code of your IP address. We may send to that address only the confirmation that your message arrived (without repeating its text) and our reply: we do not use it for anything else.

As proof that you have read these notes we also record in the Consent Database of iubenda S.r.l. (Italy) your email, your name if given, the ticked box and the date: never the text of the message or your IP address.

To protect the form from spam we use Cloudflare Turnstile (Cloudflare, Inc.): on the «Contact» page your browser connects to Cloudflare, which automatically checks that it is not a program. We do not use this check for anything else and we do not send Cloudflare the text of your message or your email.

Pharmacy accounts

For registered pharmacies we process email, name, password (stored only in non-reversible form), pharmacy and role, declared VAT number, the date you accepted the terms and the privacy notice and, if given, a phone number used only for the verification call and deleted 90 days after the decision. For verification, depending on the method you choose, we may need the pharmacy's certified email (looked up in the public INI-PEC register), a document (deleted at the decision or, if the verification is left unfinished, after 60 days) or a SPID or CIE login through an accredited intermediary, which gives us your name and tax code. We send the account the necessary emails (security, verification, password recovery) and, unless you turn them off in «Emails I receive», reminders and service notices; the newsletter only with a confirmed subscription. For emails we keep a log (recipient, type, date, outcome) for 12 months and the content for 90 days; to send them we use Aruba's mail server or Postmark (ActiveCampaign, United States), appointed as data processor, with the safeguards required by the GDPR for the transfer (EU-US Data Privacy Framework or standard contractual clauses).

For security we log sign-in attempts (6 months; for an address without an account only a code) and changes to vending machine, products and prices, with who made them and when (24 months). An account that is never activated is deleted after 60 days, a deactivated one after 24 months. In the reserved area, under «I miei dati», you can download a copy of your data and delete your account.

Pharmacy verification

Before publishing a pharmacy's data we check that the person registering can manage it, using the method they choose:

• phone call: we call the pharmacy's public number and ask for you;
• letter: we post a letter with your name and a code to the pharmacy's address;
• PEC: we send a code to the pharmacy's certified email found in the public INI-PEC register;
• email on the website domain: we send a code to an address on the domain of the pharmacy's website, and keep the address and the website;
• professional register: name, number and province of registration with the Order of Pharmacists, which we check against the public register;
• documents: business register extract or letter on headed paper and an identity document, stored encrypted, with photos stripped of camera data, and deleted when we decide, file name included;
• SPID or CIE: first name, surname and tax code provided by the identity broker, stored encrypted.

Verification data is deleted 90 days after the verification closes; a verification left unfinished is cancelled after 60 days. Legal basis: the terms of service and our legitimate interest in preventing anyone from managing a pharmacy that is not theirs.

Other data in the pharmacy area

• API keys for pharmacy software: key name, first characters, creation, last-use and revocation dates (we never keep the full key) and the number of requests per hour, deleted after 30 days. If you authorise a supplier to update your products, we record the authorisation and its revocation.
• Sales uploaded by the pharmacy: day, product, quantity and amount, never buyer data; used only for the pharmacy's statistics and deleted after 24 months.
• Pharmacy announcements: the published texts, deleted one year after they end.
• Pharmacy plans: feature removed on 15/10/2026, FarmyPoint is free for pharmacies. For plans requested in the past we keep the period and a note (for example bank transfer details) for accounting obligations, for at most 10 years.

Only the pharmacy and FarmyPoint staff, for support, can see this data.

Data stored on your device

Some data stays only in your browser's memory: favourites, the light or dark theme and, if the «Recent searches» box is active, your latest searches (at most 5). If you choose to save your favourites on your email too, a copy is also kept on our server (see «Notifications and favourites on your email»). To update favourites the browser sends us only the public numbers of the pages, which we do not keep. Your last search also stays in the browser tab, so you can go back to the results, and is deleted when you close the tab; the app keeps a copy of the latest pages you visited (searches included) to show them without a connection. You can delete everything at any time from your browser settings.

Cookies

We only use technical cookies, which do not require consent:

• fp_lang: remembers the chosen language (1 year);
• fpsess: session for the reserved area, only for those who log in (until the browser is closed, at most 12 hours);
• fp_theme: theme of the reserved area, only for those who log in (1 year).
• fp_vis: links this browser to the copy of your favourites on your email, only if you asked for it (400 days).
• _iub_cs-4720545: remembers the cookie choices you made in the iubenda banner (6 months).

No profiling or statistics cookies, ours or anyone else's. Should we ever use them, we would only enable them with your consent, given or refused in the banner and changeable at any time from «Cookie preferences» at the bottom of the page. The up-to-date list is in iubenda's cookie policy, linked at the bottom of every page.

Third-party services

• Hosting: Aruba S.p.A., in Italy.
• Maps: the browser downloads the images of the area shown from our server or from OpenFreeMap (European Union), which receives your IP address and the area shown but not your exact location; only if that service does not respond is OpenStreetMap used (United Kingdom, a country recognised as adequate by the European Union).
• Addresses from coordinates: OpenStreetMap Nominatim (United Kingdom) or Photon (Komoot, Germany), called from our server with only the rounded location; for pharmacies also Geoapify (Germany), only with the pharmacy's address.
• Email: Aruba's mail server or Postmark (ActiveCampaign, United States), see «Pharmacy accounts».
• Pharmacy verification, only if they choose that method: the INI-PEC lookup service and an accredited SPID/CIE intermediary.
• Cookie consent management: iubenda S.r.l. (Italy). The browser downloads from iubenda the banner and the scripts that block non-technical cookies until you consent; iubenda receives your IP address and records the choices made in the banner as proof of consent.

We do not use any other external services: no analytics or fonts from other sites.

Legal bases

• Operation and security of the site, statistics, reports and reviews: legitimate interest in offering a reliable service and preventing abuse.
• “Near me”: the permission you give in your browser, which you can withdraw at any time.
• Contact form: your request, which we answer (Art. 6(1)(b) GDPR); the box in the form confirms you have read these notes.
• Pharmacy accounts and verification: the terms of service accepted at registration; for verification also our legitimate interest in preventing false registrations.
• Notification after a report: your request (Art. 6(1)(b) GDPR). Copy of your favourites on your email: your consent (Art. 6(1)(a) GDPR), which you withdraw by deleting the data.
• Newsletter: your consent, confirmed through the link in the email and revocable at any time.

Your rights

You can request access to your data, rectification, erasure, restriction of processing and portability, and object to processing, by writing to us through the contact form. We reply within one month. Pharmacies can also download their data and delete their account themselves, under «I miei dati» in the reserved area.

You can also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Changes

If the way we process data changes, we update this page and the date at the top.