Privacy policy

1. Introduction

This Privacy Policy explains how TERRASENSE S.R.L. (“TerraSense”, “we” or “the company”) collects, uses, stores and protects the personal data of people who visit the website www.terra-apps.com, fill in the contact form or communicate directly with the company.

TerraSense develops and provides software solutions for public institutions, legal entities and professional users, including the LocalSense, CadSense, AgriSense and RoadSense products.

This policy concerns solely the activities carried out through the presentation website and the communications associated with it, including the commercial communications for which the data subjects have given their consent.

The use of TerraSense applications may be governed by policies and terms specific to each product.

2. Identity and contact details

The controller of the personal data processed for the purposes set out in this policy is:

TERRASENSE S.R.L.

• Tax ID (CUI): 39267829
• Trade Register no.: J2018005913407
• Registered office: Strada Drumul Gura Putnei no. 137, floor 3, flat 19, Sector 3, Bucharest, Romania
• Email: office@terra-apps.com
• Website: https://www.terra-apps.com

For any request regarding personal data you can contact us at the email address above.

3. Categories of personal data collected

3.1. Data provided through the contact form

Depending on the information filled in voluntarily, we may process:

• first and last name;
• email address;
• phone number;
• the name of the organisation or institution represented, if provided;
• the message sent and the information voluntarily included in it;
• subsequent correspondence regarding the request.

3.2. Data on commercial preferences

If the person opts to receive marketing communications, we may process:

• the email address provided;
• the phone number provided, if any;
• the first and last name, if provided;
• the organisation represented, if indicated;
• the date and time consent was given;
• the source, version and content of the consent statement;
• information on the confirmation, withdrawal or change of the agreement.

This information is used to administer commercial communications and to demonstrate compliance with data protection obligations.

3.3. Technical data

When the website is accessed, the technical infrastructure may process the IP address, information about the browser and device, the access date, the resources requested and information needed for the operation and security of the website.

4. Purposes and legal bases for processing

4.1. Handling contact requests

We use the data provided through the form to:

• receive and analyse requests;
• send replies;
• provide information about the products and services requested;
• organise demonstrations or presentations requested;
• continue the correspondence initiated by the person who contacted us.

The legal basis is, as the case may be, TerraSense’s legitimate interest in handling the requests received, under Article 6(1)(f) GDPR, or carrying out pre-contractual steps at the data subject’s request, under Article 6(1)(b) GDPR.

4.2. Commercial communications and direct marketing

On the basis of express consent, TerraSense may use the contact data to send commercial communications about its products and services.

These communications may include:

• presentations of the LocalSense, CadSense, AgriSense and RoadSense products;
• information about new features, updates and developments of the applications;
• commercial offers, subscriptions and promotions;
• invitations to demonstrations, events and presentations;
• communications about other products and services developed or marketed by TerraSense.

The communications may be carried out by:

• email;
• SMS, if a phone number has been provided;
• phone calls, if a phone number has been provided.

Legal basis: Article 6(1)(a) GDPR – the data subject’s consent, in compliance with Law no. 506/2004.

Consent for marketing is requested explicitly through a distinct option in the contact form, not ticked by default.

Selecting this option expresses agreement to commercial communications through the channels mentioned, within the limits of the contact data provided in the form.

Giving consent is voluntary and is not a condition for submitting the form or for receiving a reply.

Merely filling in the contact form or reading this policy does not constitute consent for marketing.

In the absence of express agreement, the information provided is used to handle the request, without automatically adding the person to commercial communication lists.

4.3. Withdrawing marketing consent

The data subject may withdraw consent at any time and may request that commercial communications stop through one or more channels.

Withdrawal can be done:

• through the unsubscribe link included in marketing messages sent by email;
• through the unsubscribe mechanism indicated in SMS messages;
• by communicating the request during a phone call;
• through a message sent to office@terra-apps.com.

Withdrawing consent is free of charge and does not affect the lawfulness of processing carried out before the withdrawal.

After the request is received and processed, TerraSense stops using the respective channels for direct marketing.

The data strictly necessary to record the withdrawal and prevent sending further unsolicited communications may be kept in order to comply with legal obligations.

4.4. Website administration and security

Technical data may be used for the operation of the website, preventing unauthorised access, protecting the infrastructure and diagnosing errors.

The legal basis is Article 6(1)(f) GDPR, namely TerraSense’s legitimate interest in ensuring the security and operation of its own website.

5. Provision of data

Filling in the form is voluntary.

To reply to a request, at least one valid means of contact must be provided, in line with the fields available in the form.

The first name, last name, phone number and organisation represented may be provided optionally, if they are not needed for the specific request.

Giving consent for marketing is optional.

Not giving it does not affect the person’s right to request information about TerraSense services.

6. Data recipients

The data may be accessed by authorised TerraSense staff and by technical providers involved in operating the website and managing communications.

These may include, depending on the services used:

• web hosting providers;
• email service providers;
• contact form infrastructure providers;
• providers of commercial communication services by email or SMS;
• IT, maintenance and security service providers.

Where providers process data on behalf of TerraSense, the safeguards and contractual agreements required by the GDPR apply.

We do not sell the databases with the personal information provided through the contact form and we do not pass this information to other companies for their own marketing without a distinct legal basis.

The data may be disclosed to the competent authorities where there is a legal obligation.

7. Data retention

7.1. Contact requests

Data from general requests is kept for as long as needed to resolve them and, as a rule, no more than 12 months from the last communication.

Where a request leads to the conclusion of a contract or there is another legal basis for retention, different periods may apply, corresponding to that purpose.

7.2. Data used for marketing

Data used for commercial communications is kept for the duration of the validity of consent, within a period of 24 months from giving or renewing it.

On the expiry of this period, TerraSense may request the renewal of consent. In the absence of renewal, the data is no longer used for commercial communications based on that agreement.

If consent is withdrawn, the use of data for marketing stops, with the possibility of keeping the information strictly necessary to demonstrate the prior consent, record the withdrawal and comply with legal obligations.

7.3. Technical data

Technical data is kept for limited periods, determined by operational and security needs.

8. Cookies and similar technologies

The website may use cookies and other technologies needed for its operation, security and session management.

If optional analytics, advertising or tracking technologies are used, for which the law requires consent, they will be activated only after the visitor’s prior agreement.

Information about the technologies actually used, their purposes and retention periods will be available on the website.

9. International transfers

Certain technical providers may process data outside the European Economic Area.

Where such transfers take place, TerraSense applies the appropriate legal mechanisms, depending on the jurisdiction and provider, including adequacy decisions or other safeguards provided by the GDPR.

Further information about the actual transfers can be requested at office@terra-apps.com.

10. Information security

TerraSense applies appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.

These include, as the case may be, protecting communications, controlling access to information and using the security mechanisms of the technical infrastructure.

11. Rights of data subjects

Under the GDPR, data subjects benefit, under the conditions of the law, from:

• the right of access;
• the right to rectification;
• the right to erasure of data;
• the right to restriction of processing;
• the right to object;
• the right to data portability, where applicable;
• the right to withdraw consent;
• the right to lodge a complaint with the competent authority.

The right to object to direct marketing can be exercised at any time. When it is exercised, the data will no longer be processed for the direct marketing targeted by the objection.

To exercise these rights, data subjects can send a request to office@terra-apps.com.

We will reply within the time limits provided by the GDPR, as a rule within one month at most from receiving the request, with the possibility of extension under the conditions of the law.

12. Automated decisions and profiling

The data collected through the contact form is not used to make decisions based solely on automated processing that produce legal effects on data subjects or similarly significant effects.

13. External links and apps

The website may contain links to TerraSense applications or to external services.

The use of these applications may involve distinct processing operations, described in the documents specific to each product.

14. Data protection complaints

Data subjects may lodge complaints with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

Website: https://www.dataprotection.ro

15. Policy updates

This policy may be updated to reflect legislative, technical or TerraSense activity changes.

The updated version will be published on the website, together with the date of the last update.

Changes to the policy do not retroactively extend the consent given for marketing. Where changes require new consent, it will be requested separately.

16. Contact

TERRASENSE S.R.L.

Tax ID (CUI): 39267829

Registered office: Strada Drumul Gura Putnei no. 137, floor 3, flat 19, Sector 3, Bucharest, Romania

Email: office@terra-apps.com

Website: https://www.terra-apps.com