IT
EN
HR
Data controller
The data controller is the Comune di Monfalcone, lead partner of the BIOPRESSADRIA project. To exercise the rights described below, or for any request concerning personal data, write to [email protected]. The Data Protection Officer can be reached at the contact details published on the municipality's institutional website.
In short
The app requires no registration and creates no account. It contains no analytics, advertising or tracking. Your location is used on the device to draw the map and warn you as you approach a sensitive area: it leaves the device only when you send a report or ask for an anchoring suggestion.
What data is processed
| Data | Why | Legal basis |
|---|---|---|
| Precise location | To show your position on the map and warn you near Posidonia meadows and protected areas. Processing happens on the device. The location leaves the device in two cases only: attached to a report, and in the request for the nearest anchoring zones. | Performance of a task carried out in the public interest (Art. 6(1)(e) GDPR), for the environmental protection purposes of the project. Access to location always requires the operating system permission, which can be withdrawn at any time. |
| Photographs attached to a report | To document what was observed at sea. On upload the server strips EXIF metadata, including any geolocation embedded in the shot. | Performance of a task carried out in the public interest (Art. 6(1)(e) GDPR) |
| Report category and description | To classify and assess the report. The description is optional; please avoid entering personal data about yourself or others. | Performance of a task carried out in the public interest (Art. 6(1)(e) GDPR) |
| Contact e-mail address | To get back to you about your report, if you want us to. It is optional and a report can be sent without it. It is never published. | Consent (Art. 6(1)(a) GDPR), given by filling in the field. Can be withdrawn by writing to the controller. |
| Anonymous device identifier | On first launch the app registers a random token whose only purpose is to authorise API calls and to link your own reports back to you. It contains no identifying data and is not tied to an identity. It is kept in the protected area of the device (Keychain on iOS, Keystore on Android). | Legitimate interest in operating and securing the service (Art. 6(1)(f) GDPR) |
| Server technical logs | Fault diagnosis and security. They contain the IP address and request data. | Legitimate interest in securing the service (Art. 6(1)(f) GDPR) |
What stays on the device only
These never leave your phone: maps downloaded for offline use, map tiles already viewed and held in cache, the language you chose, the fact that you have already seen the introduction, and reports still queued for sending. Clearing the map cache from the app settings, or uninstalling the app, deletes them.
What becomes public in a report
Every report is moderated by the project partners. If approved, its category, description, date, position and photographs become visible to other app users and on the WebGIS. The e-mail address is never published or shared. A report that is not approved stays visible only to the person who sent it.
Who else processes the data
The BIOPRESSADRIA project partners, to moderate and analyse the reports. Offline Agency S.R.L., as data processor, for the development and technical operation of the app and the platform. Amazon Web Services, as infrastructure provider: servers and file storage are in the Milan region, inside the European Union. Data is not sold to third parties for commercial purposes and is not used for profiling or advertising.
Third-party maps
The background maps are not ours: the app fetches them directly from the servers of Esri (base cartography and satellite imagery) and of OpenSeaMap and OpenStreetMap (nautical chart). Those providers therefore receive the device IP address and the coordinates of the map tiles requested, from which the area being consulted can be inferred. Esri is based in the United States, so using its maps involves a transfer of data outside the European Union. Each provider handles this data under its own privacy policy. Map tiles already seen stay cached on the device and need no further calls.
How long it is kept
Reports and the data accompanying them are kept for the duration of the BIOPRESSADRIA project and for the subsequent period required by the reporting obligations of the Interreg Italy–Croatia Programme, after which they are deleted or anonymised. The contact e-mail address is deleted once handling of the report is complete. The device token remains valid as long as the app is installed. Technical logs are kept for as long as diagnosis and security require.
Your rights
You may ask the controller for access to your data, and for its rectification, erasure, restriction or portability, and you may object to processing based on the public interest or on legitimate interest. Consent to the use of the contact e-mail can be withdrawn at any time, without affecting the lawfulness of processing already carried out. Send requests to the contact details above: because the app creates no account, identifying a report may require its date, approximate position or the code shown in the report detail. You also have the right to lodge a complaint with the Italian Data Protection Authority.
Children
The app addresses people who go to sea and is not intended for minors. No data concerning children is knowingly collected and no processing specifically concerning them is carried out.
Changes to this policy
This policy may be updated, for instance if the features of the app or the providers involved change. The date at the top shows the last update; significant changes will also be signalled inside the app.