Privacy Policy — Via DobroGetica mobile app
Last updated: 25 September 2026
This policy explains what personal data we process when you use the Via DobroGetica mobile app (Android and iOS), why we process it, how long we keep it and what rights you have. This policy applies only to the app; the viadobrogetica.ro website is not covered by it.
1. Who is responsible for your data
The data controller is SANSELO GENERAL SRL, registered office in Năvodari, Str. M9 nr. 30D, Constanța County, Romania, tax ID (CUI) 41597616, Trade Register number J2019003106130, which publishes and operates the Via DobroGetica app.
For any question or request about your data: viadobrogetica@sanselo.com.
2. In short
- You can use the app without an account. Routes, the map, points of interest, audio guides and the passport all work without telling us who you are.
- Your location is used on your phone, to show distances and to validate stamps. We do not track it continuously and we only send it to our servers as part of a stamp, if you have an account.
- We do not use behavioural analytics tools, we do not show ads from advertising networks and we do not sell your data. The only technical data sent automatically are error reports, so that we can fix the app.
3. What data we process
3.1. Without an account
- Passport stamps: the point of interest, date and time, GPS coordinates and GPS accuracy at the moment of stamping. They stay only on your phone, in the app's storage, and never reach us.
- Notifications (only if you allow them): a random installation identifier generated by the app, your phone's notification token, the platform (Android/iOS), the app language and the routes you want notifications for. We use them solely to send you notifications.
- Technical connection data: when the app downloads routes, the map or media files, the servers involved receive, as with any internet connection, your IP address and technical information about the request.
3.2. With an account
In addition to the above:
- your email address and password (the password is stored only in irreversibly encrypted form; we cannot see it);
- the stamps linked to your account (point of interest, date and time, coordinates, GPS accuracy and speed at the moment of stamping), so you don't lose your passport if you change phones;
- your profile in the app (for example, your preferred language);
- your display name and avatar, if you set them (optional): either an illustrated avatar chosen in the app or your own photo, resized on your phone before it is sent. The photo is kept in private storage, accessible only to your account, and is not visible to other users.
3.3. Location
The app asks for location permission and uses your location only while it is open, to show the distance to points of interest and your position on the map, and to check, when you stamp, that you are actually at the point of interest (radius, GPS accuracy, speed and how long you stay). The app does not track your location in the background. Your position is saved only when you take a stamp, as described above. You can withdraw the permission at any time in your phone's settings; the app keeps working, without stamps and without distances.
3.4. Error reports
When the app hits an error or closes unexpectedly, it automatically sends a technical report so that we can find and fix the problem. The report contains the type of error, the screen and the technical steps that led to it, the phone model and the operating system and app versions. If you are signed in, the report also contains your account's internal identifier (a random code), so that we can link several errors to the same problem.
Reports do not contain your email address, name, photo, password or location: the app removes them before sending, and the IP address is not stored.
3.5. When you write to us
If you send us an email (for example, from "Report a problem" or "Have you been on the route?"), we process your email address and the content of your message, to reply to you and to improve the routes.
4. Why and on what legal basis we process data
- Purpose
- Running the app: routes, map, distances, stamps
- Data
- location on the phone, stamps
- Legal basis (GDPR)
- performance of the service you requested — Art. 6(1)(b)
- Purpose
- Your account and keeping your passport
- Data
- email, password, stamps, profile, display name, avatar/photo
- Legal basis (GDPR)
- performance of the service you requested — Art. 6(1)(b)
- Purpose
- Notifications
- Data
- installation identifier, token, language, routes of interest
- Legal basis (GDPR)
- consent — Art. 6(1)(a), given through the phone permission and the app settings
- Purpose
- Security and abuse prevention (for example, fake stamps)
- Data
- technical data, stamp data
- Legal basis (GDPR)
- legitimate interest — Art. 6(1)(f)
- Purpose
- Keeping the app working and fixing errors
- Data
- error reports, technical phone data, internal account identifier
- Legal basis (GDPR)
- legitimate interest — Art. 6(1)(f)
- Purpose
- Aggregate statistics on visits to points of interest and routes
- Data
- stamp data, without identifying individuals
- Legal basis (GDPR)
- legitimate interest — Art. 6(1)(f)
- Purpose
- Replying to messages
- Data
- email, message content
- Legal basis (GDPR)
- legitimate interest — Art. 6(1)(f)
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Running the app: routes, map, distances, stamps | location on the phone, stamps | performance of the service you requested — Art. 6(1)(b) |
| Your account and keeping your passport | email, password, stamps, profile, display name, avatar/photo | performance of the service you requested — Art. 6(1)(b) |
| Notifications | installation identifier, token, language, routes of interest | consent — Art. 6(1)(a), given through the phone permission and the app settings |
| Security and abuse prevention (for example, fake stamps) | technical data, stamp data | legitimate interest — Art. 6(1)(f) |
| Keeping the app working and fixing errors | error reports, technical phone data, internal account identifier | legitimate interest — Art. 6(1)(f) |
| Aggregate statistics on visits to points of interest and routes | stamp data, without identifying individuals | legitimate interest — Art. 6(1)(f) |
| Replying to messages | email, message content | legitimate interest — Art. 6(1)(f) |
We also use stamps for aggregate statistics (for example, how many visitors a point of interest had or how many routes were completed in a month). The statistics do not identify anyone, and we may publish them or share them with the project's partners.
5. Who else has access to data
We use service providers that process data only on our behalf and only for the purposes above:
- Supabase — hosting of the database and profile photos, and authentication, with servers in the European Union (Frankfurt, Germany);
- Expo and Google Firebase Cloud Messaging — delivering notifications to your phone;
- Sentry — receiving and analysing error reports, with data stored in the European Union (Germany);
- MapTiler — displaying the map (it receives the requests for map tiles, i.e. the area you are viewing, and your IP address);
- Google Maps or Waze — only if you tap "Navigate"; the respective app then opens and processes data under its own policy.
Some of these providers may process data outside the European Economic Area (for example, in the USA). In such cases, the transfer relies on the safeguards provided by the GDPR, such as the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.
We do not sell or rent your data to anyone.
6. How long we keep data
- Account data, linked stamps and profile photo: for as long as you have an account. A photo you replace or remove is deleted. When you delete your account, they are deleted from our servers.
- Notification data: until you turn off notifications, uninstall the app or delete your account; tokens that are no longer valid are removed.
- Error reports: no longer than 90 days, after which they are deleted automatically.
- Data on your phone (stamps without an account, settings): until you delete them in the app or uninstall the app.
- Emails we receive: as long as needed to reply and follow up on the reported issue, but no longer than 2 years.
7. Deleting your account
You can delete your account at any time, directly in the app: Profile → Account → Delete account. You can also request deletion without the app, from the page viadobrogetica.ro/en/aplicatie/stergere-cont, where you will find all the details.
8. Your rights
Under the GDPR, you have the right:
- to find out what data we hold about you and to receive a copy (right of access);
- to ask for inaccurate data to be corrected;
- to ask for your data to be deleted;
- to ask for processing to be restricted;
- to receive your data in a structured format, to pass it on to someone else (portability);
- to object to processing based on legitimate interest;
- to withdraw your consent at any time (for example, for notifications), without affecting processing carried out before.
For any request, write to us at viadobrogetica@sanselo.com. We will reply within one month.
You also have the right to lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28–30, sector 1, Bucharest, www.dataprotection.ro, or with the data protection authority in the country where you live.
9. Children
Anyone can use the app without an account. Creating an account is intended for people aged 16 or over; for children under 16, an account may be created only with the consent of a parent or guardian.
10. Security
Data is transmitted encrypted (HTTPS), passwords are stored irreversibly encrypted, and your account session is kept on your phone in the system's secure storage. Access to the database is restricted by rules that allow each user to see only their own data.
11. Changes
We may update this policy when the app changes (for example, when rewards or Google/Apple sign-in are introduced). The date of the last update is shown at the top of the page; we will also announce important changes in the app.
Translation of the Romanian original. In case of differences, the Romanian version prevails.