Privacy Policy

Effective Date: 14 November 2026 · Website: gliata.com

This Privacy Policy is drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"), Romanian Law No. 190/2018 implementing certain provisions of the GDPR, and decisions issued by the National Supervisory Authority for Personal Data Processing (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, hereinafter "ANSPDCP").

Art. 1, Identity and Contact Details of the Data Controller

The Data Controller responsible for the processing of your personal data is DTCONCIERGE S.R.L., registered office Municipiul Sibiu, Aleea Călărașilor, nr. 5, bloc G, ap 54, județ Sibiu, Romania, CUI 53369247. For all matters relating to the processing of your personal data and the exercise of your rights under the GDPR, you may contact the Data Controller at service@gliata.com.

Art. 2, Categories of Personal Data Collected

2.1 Technical data. When you open gliata.com, our hosting provider receives the technical information every website receives: your Internet Protocol (IP) address, browser type and version, and the address of the page requested.

2.2 Map and plot data. The place you search for and the plot you draw on the map stay in your browser. We do not receive them and we do not store them. To show the map and the 3D surroundings, your browser requests map sections for the area on screen from our map storage, from Esri (satellite imagery) and from Amazon Web Services (terrain heights). These requests show each provider your IP address and the approximate area you are viewing.

2.3 Communication data. If you write to us or call us, we process your name, your contact details and the content of your message.

We do not use contact forms, user accounts, analytics or advertising on this Website.

Art. 3, Purposes and Legal Bases for Processing

Pursuant to Articles 13 and 14 of the GDPR, we inform you of the purposes and legal bases:

• Operating the Website and the live 3D demonstration, and keeping them secure: our legitimate interest (Article 6(1)(f) GDPR).
• Answering your enquiries and preparing a possible collaboration: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR), otherwise our legitimate interest in replying (Article 6(1)(f) GDPR).
• Meeting accounting and tax obligations where a contract follows: legal obligation (Article 6(1)(c) GDPR).

Art. 4, Recipients and Categories of Recipients

• Website hosting and map storage: Vercel Inc. (United States). The map data our Website uses are stored in Vercel's Frankfurt (Germany) region.
• Satellite imagery: Esri (Environmental Systems Research Institute, Inc., United States). Your browser requests imagery directly from Esri, and Esri's privacy statement applies to those requests.
• Terrain heights: Amazon Web Services, Inc. (United States), which serves the public "Terrain Tiles" dataset. Your browser requests these directly, and Amazon's privacy notice applies to those requests.
• Email: Google Workspace (Google), which receives and stores the messages sent to service@gliata.com.
• Professional advisors, where necessary for the management of our business or the protection of our legal interests.
• Public authorities, where required by law or for the establishment, exercise or defence of legal claims.

We do not sell, rent, or otherwise commercially transfer your personal data to third parties for their independent marketing purposes.

Art. 5, International Data Transfers

Vercel, Esri and Amazon Web Services are established in the United States. For Vercel, transfers are covered by Vercel's Data Processing Addendum, which includes the European Commission's Standard Contractual Clauses. Requests to Esri and Amazon Web Services are made directly by your browser to their servers, and each provider's own privacy statement and transfer safeguards apply.

Art. 6, Data Retention Periods

• Technical data in hosting logs: as kept by Vercel under its own retention rules.
• Map surroundings in your browser: up to the 12 most recent places, until you clear your browser's site data.
• Communication records: 5 years from the date of communication (business records and potential dispute resolution).
• Contact data: duration of the business relationship plus 3 years (limitation period for contractual claims under Romanian law).

Art. 7, Cookies and Local Storage

Our Website sets no cookies and uses no analytics, profiling or cross-site tracking. To load faster, the 3D demonstration keeps the map surroundings of up to 12 recently viewed places in your browser's localStorage (not a cookie), under keys beginning with planuri.osm.v3. These entries are never transmitted to our servers. You can delete them at any time through your browser settings.

Art. 8, Rights of Data Subjects

Under the GDPR you have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), the right to object (Article 21), and the right not to be subject to solely automated decision-making (Article 22). We do not engage in solely automated decision-making.

You may send any request to service@gliata.com. We respond within one (1) month of receipt. This may be extended by two (2) further months for complex or numerous requests, in which case we inform you within the first month. The exercise of these rights is free of charge. We may ask you to verify your identity before responding.

Art. 9, Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. In Romania, the competent supervisory authority is the ANSPDCP (www.dataprotection.ro). You may also lodge a complaint in the Member State of your habitual residence, place of work, or place of the alleged infringement.

Art. 10, Security of Personal Data

The Website is served only over encrypted connections (HTTPS), collects no data through forms or accounts, and keeps the data it handles to the minimum described above.

Art. 11, Children's Privacy

Our Website is not directed to individuals under the age of eighteen (18) years. We do not knowingly collect personal data from children.

Art. 12, Amendments to This Privacy Policy

We may amend this Privacy Policy. The "Effective Date" at the beginning of this Policy indicates the date of the most recent revision, and material changes are shown on the Website.

Art. 13, Contact Information

For any question about this Policy or your personal data, contact DTCONCIERGE S.R.L. at service@gliata.com, or by phone at +40 779 390 396.