This document provides information regarding the processing of personal data of our Users, both from our Platform and those from social networks that interact with NasApp, following the provisions of the General Data Protection Regulation ("GDPR").
1. Data Controller
The data controller for User data is NasApp S.L., with VAT number: B-44938389, and registered office at Calle Bilbao 72, 08005 Barcelona, (hereinafter "NasApp").2. Purpose of Data Processing
Depending on the interaction that the User wishes to have with NasApp, the platform will process different types of data, which, in general, may include the following:- User identification data (e.g., name, surname, address, contact details, etc.)
- Connection, geolocation, and navigation data;
- Commercial information (e.g., if you are subscribed to NasApp's informational communications).
Depending on how the User interacts with the Platform, NasApp will process their personal data for the following purposes:
- To manage user registration on the Platform: In order to report an incident of unpleasant odor to NasApp, it is necessary to be registered as a User. Therefore, we need to process the User's data to identify them and provide access to the Platform's functionalities. The User can cancel their User account by contacting us through the email address info@NasApp.org.
- To study the report individually: NasApp will access and share the User's data with its clients to analyze the reported incident. This includes odor data (typology, sub-typology, degree of discomfort, and hedonic tone), geolocation (to determine where the incident is occurring and compare it with meteorological data at the time of the report), comments, and photos that the user may have included.
- To study the reports collectively: NasApp uses all the reports received in a defined geographical area to aggregate and study them continuously.
- Evaluate user activity: Both to monitor the effectiveness of the study and to activate the necessary mechanisms to prevent and detect misuse of the Platform. If NasApp detects abnormal, fraudulent, or illicit use by the User, NasApp may take measures such as blocking access to the Platform or canceling the User's account.
- For marketing purposes: This includes the processing of User data for primarily the following purposes:
- Personalize the services that NasApp offers to the User.
- To the extent that the User subscribes to email communication channels, NasApp will process their personal data to manage their subscription. The User can unsubscribe at any time by sending an email to info@NasApp.org.
- To send the User information through various means (such as email or SMS). Additionally, NasApp may send communications through push notifications. Therefore, the user should be aware that this data processing involves the analysis of their User profile to determine preferences and interests for sending information.
- Display Internet advertising to the User that they may see when browsing websites and apps, for example, on social media. The advertising the User sees may be random, but at other times, it may be related to their purchase history, preferences, and browsing.
- Data enrichment: When NasApp obtains User personal data from various sources, NasApp may combine them in certain circumstances to enhance its understanding of the User's needs and preferences regarding our products and services.
- Carry out promotional activities.
- Usability and Quality Analysis for the Improvement of Our Services: When the User accesses the Platform, they will be informed that NasApp processes their navigation data for analytical and statistical purposes. In other words, this is done to understand how Users interact with the Platform and the actions that may be taken on other websites and apps, enabling NasApp to make improvements. Additionally, NasApp occasionally conducts quality actions and surveys to assess the satisfaction levels of its customers and users and identify areas for improvement.
3. Legitimization for User Data Processing
The legal basis that allows NasApp to process the User's personal data also depends on the specific purpose for which the data is processed:-
Purpose: Manage User registration on the Platform
Legitimization: The processing of User data is necessary for the execution of the terms that regulate the use of the Platform. In other words, for the User to register on the Platform, NasApp needs to process the User's personal data; otherwise, it would not be able to manage the registration. -
- Purpose: Study the report individually
- Legitimization: The processing of User data is necessary to conduct appropriate studies to assess and reduce olfactory impact. Additionally, our clients need this data to verify the accuracy of the report, better understand the report with possible attached comments and photos, and cross-reference reports with meteorological data, for example, to trace the odor track. NasApp understands that when a user reports an unpleasant odor episode, its intention is to let it know to the source, or possible source, of the odor so that appropriate measures can be taken to assess and reduce the impact. -
- Purpose: Process the report collectively with other reports.
- Legitimization: The ability to aggregate data to study unpleasant odor episodes collectively and not on a case-by-case basis is crucial for our clients to understand the situation and take the most relevant and effective measures. -
- Purpose: Evaluate user activity
- Legitimization: NasApp considers that it has a legitimate interest in carrying out necessary checks to detect and prevent possible fraud or fraudulent use when the User uses the Platform. This allows NasApp to ensure the User's security and prevent misuse of the Platform, ensuring data quality that ultimately benefits all users and residents in areas affected by olfactory pollution. -
- Purpose: Marketing
- Legitimization: The consent provided by the User, for example, when they agree to receive information through various means or authorize the sending of push notifications on their mobile device. To offer the User personalized services or show personalized information, as well as to carry out data enrichment, NasApp considers that it has a legitimate interest in profiling with the information it has about the User and the personal data provided. -
- Purpose: Usability and Quality Analysis
- Legitimization: NasApp considers that it has a legitimate interest in analyzing the usability of the Platform and User satisfaction as this data processing is also beneficial for the User. The purpose is to improve the User's experience and provide better service.
4. Data Retention Period
The retention period for User data will depend on the purpose for which NasApp processes them, as explained below:-
Purpose: Manage User registration on the Platform
Retention Period: As long as the User maintains the status of a registered user (i.e., until they unsubscribe). -
Purpose: Development, fulfillment, and execution of the study in which the user voluntarily decides to participate with their involvement.
Retention Period: For the duration necessary to manage the study. -
Purpose: Study the report individually
Retention Period: For the duration necessary to manage the study. -
Purpose: Study the report collectively with others reports
Retention Period: For the duration necessary to manage the study. -
Purpose: Marketing
Retention Period: In the case of informative communications, until the User unsubscribes or cancels their subscription. For personalized advertising, until the User configures their mobile device or browser to revoke their consent. -
Purpose: Usability and Quality Analysis
Retention Period: Occasionally, during the time when NasApp carries out a specific quality action or survey, or until your navigation data is anonymized.
5. Data Sharing with Third Parties
To fulfill the purposes stated in this document and to conduct studies that NasApp or its clients may want to perform, NasApp needs to grant access to the User's personal data to third-party entities that provide support in the services it offers. These entities include:- Clients who have requested a study on olfactory pollution.
- Providers of technological and analytical services.
6. User Rights When Providing us with Their Data
NasApp is committed to respecting the confidentiality of the User's personal data and ensuring the exercise of their rights. Users can exercise their rights at no cost by sending an email to info@NasApp.org, simply indicating the reason for the request and the right they want to exercise. If NasApp deems it necessary to identify the User, it may request a copy of an identity document from the person contacting them.In particular, regardless of the purpose or legal basis under which NasApp processes User data, the User has the right to:
- Request access to data: The data NasApp holds about the User is available in the corresponding section for personal data on the Platform.
- Request data rectification: The User can request the correction of data NasApp already holds. These modifications can be made in the section corresponding to personal data on the Platform.
- Ensure data accuracy: By actively providing personal data to NasApp, the User guarantees that it is true and accurate, committing to notify NasApp of any changes or modifications. Any loss or damage caused due to incorrect, inaccurate, or incomplete information in registration forms will be the sole responsibility of the User.
- Request data deletion: The User can request the deletion of their data to the extent they are no longer necessary for the purposes for which NasApp processes them, as reported in this document, or if NasApp no longer has the legitimacy to do so.
- Request data processing limitation: In certain cases, the User can request NasApp to temporarily suspend data processing or to retain it beyond the necessary time when they may need it.
- Withdraw consent: The User has the right to withdraw any previously granted consent.
Finally, the User has the right to file a complaint with the relevant data protection authority, especially with the Agencia Española de Protección de Datos.