Privacy Policy

Valid for global distribution of the TrackAndShare app

(last update: November 2025)

This notice describes how personal data is collected, used, and protected for users of TrackAndShare, a tool designed for localization, collaboration, and operational management in search and rescue contexts.

---

1. Data controller

The controller of personal data is:

Andrea Ruffini

Address: Via Pozzuolo 13, 33100 Udine, Italy

VAT: IT02227480304

REA number: UD – 363310

Privacy contact email: privacy@a75.eu

The controller defines the purposes and means of processing personal data related to the use of the TrackAndShare app.

---

2. Categories of data processed

The app collects only the data needed to provide its services.

2.1 Identification data

• Email address
• Name or nickname
• Profile information provided by the user
• Authentication credentials or identifiers generated for access

2.2 Location data

• GPS coordinates and device movement data
• Altitude, speed, heading, signal accuracy
• Information derived from device sensors

Location collection may also occur in the background during operational sessions.

2.3 Technical data

• Device identifiers
• Operating and diagnostic logs
• Tokens for managing push notifications

2.4 Team and session data

• Team membership and operational roles
• Responses to collaboration invites
• Data on active sessions and real-time shared activities

2.5 GPS tracks

• Routes recorded or imported via GPX files
• Associated statistics (distance, duration, speed, elevation)

---

3. Purpose of processing

Data is processed to:

1. Provide core app services

- Registration and authentication

- GPS tracking and track management

- Real-time location sharing

2. Manage teams and operational sessions

- Create and manage groups

- Invites, roles, and session participation

- Coordinate localization activities

3. Send operational notifications

- Invites, session updates, internal messages

4. Ensure security and proper operation

- Account protection

- Abuse prevention

- Technical diagnostics

---

4. Legal basis

Personal data is processed based on:

• Performance of a contract, i.e., providing the app’s services
• Explicit consent, especially for:

- access to location

- managing notifications and messages

• Legitimate interest of the controller for security and service improvement
• Legal obligations, when applicable

---

5. Processing methods and retention

Data is processed using technical and organizational measures designed to ensure security and confidentiality.

Retention

• Account data: retained until the user requests deletion.
• Location data and tracks: retained as long as the user wishes and can be deleted manually.
• Team and session data: retained to ensure integrity and history of operations.

---

6. Data sharing

Data is not sold or disclosed to unauthorized third parties.

Sharing is limited to:

1. Team or session members, when the user participates in collaborative activities.

2. Technical service providers, needed for:

- server hosting

- database

- notifications

- network and security infrastructure

3. Competent authorities, only if required by law.

---

7. International transfers

Some technical services used by the app may reside in countries outside the European Economic Area.

In such cases, appropriate safeguards such as standard contractual clauses are applied to protect personal data.

---

8. Data security

The app uses technical and organizational measures to protect personal data, including:

• Encrypted communications
• Secure authentication
• Access controls
• Internal access and operations logs
• Alerting and protection against suspicious activities

---

9. User rights

Users may exercise rights under applicable laws, including:

• access to personal data
• rectification or update
• deletion of the account and data
• restriction of processing
• data portability
• objection to processing
• withdrawal of consent (e.g., location, notifications)

Requests can be sent to: privacy@a75.eu

---

10. Minors’ data

The app is not intended for users below the minimum age required by local law (e.g., 13 or 16). If a minor account is detected, the controller may suspend or remove it.

---

11. Background location use

During work sessions, the app may collect and share location even when the screen is off or the app is in the background. This is essential for search and rescue activities. Users can stop sharing at any time by leaving the session or revoking location permissions.

---

12. Account deletion

Account deletion can be performed directly from the app settings. All personal data will be removed unless legal obligations require retention.

---

13. Changes to this notice

This notice may be updated to comply with new regulations or app changes. Significant updates will be communicated through official channels.

---

For questions or clarifications about personal data processing, contact:

privacy@a75.eu