Optoura Privacy Policy
Optoura is a work app for the staff of CODRU GROUP CGA SRL: tour guides, museum staff, dinner staff and managers. Accounts are created by the company, and the app is not offered to the public. This policy explains what personal data Optoura processes about staff, why, and what your rights are.
Who is responsible for your data
Data controller: CODRU GROUP CGA SRLRegistered address: Sat Varlaam, Comuna Gura Teghii, T156, Județ Buzău, 052032, Romania
Tax ID (CUI): RO40198595 · Trade Register: J2018001277103
Privacy contact: codrugroup@gmail.com
The Optoura platform and its intellectual property are owned and published by Bran Tudor Serban, and are licensed to and operated for CODRU GROUP CGA SRL. The developer publishes the app on the App Store and Google Play under their own developer account. CODRU GROUP CGA SRL decides how and why staff data is used.
What we collect
| Data | Examples | Why |
|---|---|---|
| Contact details | Name, email address, phone number | Your account, and contacting you about your work |
| Account details | User ID, job roles, language, password (stored only in a protected, hashed form) | Signing in and showing you the right pages |
| Precise location | GPS position and its accuracy | Checking you in at a tour's meeting point, and showing your position to your manager during a tour (see below) |
| Work records | Your schedule, availability, tours led, check-in and completion times, delays | Planning and running tours |
| Financial information | Tips, cash collected, card and pass counts, earnings, penalties | Calculating and settling what you are owed |
| Time off | Dates, type of leave and the reason you give, if any | Handling your requests. If you give a health-related reason or request medical leave, please include only what is needed |
| Device identifier for notifications | A push token | Sending you work notifications |
| Security records | Sign-ins, important actions and the IP address used | Protecting accounts and keeping an audit trail |
Location: when and how
Optoura uses your location only for tours, and it asks only for permission to use location while using the app. It never asks for "Always" location access.
- At check-in, the app reads your position to confirm you are at the meeting point.
- While you are checked in to a tour, it sends your position to our server about once a minute, including when your phone is locked, so that your manager can follow the tour on a live map. You can always see that this is happening: iPhones show a blue location indicator, and Android phones show a "Tour in progress" notification.
- It stops when you complete the tour, when you sign out, or 3 hours after the tour's start time, whichever comes first. A tour longer than 3 hours is not tracked after that point.
Optoura does not use your location at any other time.
Why we may use your data (legal bases)
- Your employment or work contract: schedules, tours, pay and time off.
- Legal obligations: keeping financial and accounting records, as Romanian law requires.
- Legitimate interests: following tours in progress for safety and coordination, and keeping the system secure. You have the right to object to processing based on legitimate interests.
Who sees your data
- Managers at CODRU GROUP CGA SRL see the data they need to run tours, schedules and pay, including your position during a tour.
- Colleagues see limited work information, such as who is on a shift and approved time off. The reason for your time off is visible only to you and to managers.
- Service providers process data for us under contract:
- EXIM HOST SRL (RO40672655), which hosts the servers and database
- Expo (650 Industries, Inc.), Apple and Google, which deliver push notifications
We do not sell your data, use it for advertising, or track you across other companies' apps and websites. Some of these providers may process data outside the European Economic Area. Where they do, the transfer is protected by the European Commission's Standard Contractual Clauses, as the GDPR requires.
How long we keep it
| Data | How long |
|---|---|
| GPS positions and check-in records | 90 days, then deleted automatically |
| Location, check-in and booking audit entries | 90 days |
| Sign-in, account and privacy audit entries | 365 days |
| Financial audit entries | 5 years |
| Financial and accounting records | 10 years, as Romanian accounting law (Law 82/1991) requires |
| Other account data | While you work with us, then until your deletion request is handled, except what the law requires us to keep |
Your rights
Under the GDPR you can ask to access your data, correct it, delete it, restrict or object to its use, and receive a copy in a portable format. You can also withdraw any consent you have given, which does not affect what was done before.
To use these rights, contact codrugroup@gmail.com. We respond within 30 days. You can also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).
Deleting your account
You can request deletion in the app at My Account → Request account deletion, or by emailing codrugroup@gmail.com. Details are on our account deletion page. Financial records that the law requires us to keep are retained for the required period, and everything else is deleted.
Security
Connections to the server are encrypted with HTTPS, passwords are stored only in a protected form, and access is limited by role. On your phone, your sign-in is kept in the device's secure storage.
Children
Optoura is a work app for adult staff and is not intended for children.
Changes
If this policy changes, we will update the date above and tell staff about significant changes.