Privacy policy
We process personal data only to provide the service, secure access, and respond to requests.
Data controller
Service: SpotAquaGeo (website and tools about angling and aquatic environments).
Postal address of the publisher: to be completed in production as applicable.
Privacy & support email: georgios.cusumano@gmail.com
DPO: not appointed — please use the address above for any personal-data queries.
Postal address of the publisher: to be completed in production as applicable.
Privacy & support email: georgios.cusumano@gmail.com
DPO: not appointed — please use the address above for any personal-data queries.
Categories of data (depending on enabled features)
Account: email, identifier, password (stored securely), role, dates.
Subscription: status, dates, plan (billing may be added in V2).
Private spots: title, coordinates, notes.
Logbook: catches, measurements, text, optional photos.
Support: messages sent via the contact form.
Technical: minimal logs (errors/security) if enabled on the environment.
Subscription: status, dates, plan (billing may be added in V2).
Private spots: title, coordinates, notes.
Logbook: catches, measurements, text, optional photos.
Support: messages sent via the contact form.
Technical: minimal logs (errors/security) if enabled on the environment.
Purposes and legal bases (principles)
Service delivery: contract / pre-contractual measures.
Security (fraud/abuse prevention): legitimate interest.
Legal obligations: when required.
Marketing/newsletter: only with separate consent (not enabled by default in this V1).
Security (fraud/abuse prevention): legitimate interest.
Legal obligations: when required.
Marketing/newsletter: only with separate consent (not enabled by default in this V1).
Private spots & confidentiality
Private spots are linked to your account and are not made visible to other users through the intended application features.
Strictly limited technical/admin access may exist for security, support, or legal obligations, with minimization and traceability where applicable.
Strictly limited technical/admin access may exist for security, support, or legal obligations, with minimization and traceability where applicable.
Recipients and processors
Hosting: infrastructure is provided by O2Switch (shared hosting, cPanel), France — https://www.o2switch.fr/
API providers (e.g., weather): only if you configure an API key and the app calls the provider.
Payments: if enabled later (e.g., Mollie/Stripe/PayPal), processing will be described and updated.
API providers (e.g., weather): only if you configure an API key and the app calls the provider.
Payments: if enabled later (e.g., Mollie/Stripe/PayPal), processing will be described and updated.
Retention (indicative)
Account data and user content: for the lifetime of the account, then deletion/anonymization subject to legal obligations.
Support messages: as long as needed for handling + evidence.
Logs: short retention unless required/incident.
Support messages: as long as needed for handling + evidence.
Logs: short retention unless required/incident.
Transfers outside the EU
Some providers may be located outside the EU. Where applicable, SpotAquaGeo aims to implement appropriate safeguards (e.g., Standard Contractual Clauses) and document updates here.
Your rights
You have rights of access, rectification, erasure, restriction, objection, and portability where applicable.
You may lodge a complaint with your local Data Protection Authority (Belgium: Gegevensbeschermingsautoriteit / Autorité de protection des données).
You may lodge a complaint with your local Data Protection Authority (Belgium: Gegevensbeschermingsautoriteit / Autorité de protection des données).
Security
SpotAquaGeo implements reasonable measures (access controls, CSRF protection on sensitive actions, password hashing). No system is risk-free: report incidents to georgios.cusumano@gmail.com.
Last updated: 2026-05-06 — generic wording (V1). Add exact legal publisher details in production where required.