Privacy policy

1. Who is responsible

The data controller is the Municipality of Neapoli-Sykies. The app was developed and is hosted on the Municipality's behalf by the company Pragma-IoT.

2. Use without an account

You can use the whole app as a visitor. In that case we store no personal data about you on our servers.

Your preferences (for example avoiding stairs, needing a lift, spoken directions, vibration, text size, theme, language, pace, 2D or 3D view) are stored only on your device. No medical information is asked for or recorded.

3. Location

The app asks for the location permission only while you are using it, to show where you are on the map, to work out a route to a destination and to find parking spaces near you.

• When you ask for a route or for nearby parking, the coordinates of your position are sent to our server only to compute the answer. They are not stored.
• For routes along streets, our server forwards the start and destination coordinates to the OpenStreetMap routing service (routing.openstreetmap.de, FOSSGIS e.V., Germany), with nothing that identifies you or your device.
• The app does not follow your location in the background.

4. Bluetooth and motion sensors

Inside buildings, the app uses Bluetooth to detect the beacons installed by the Municipality, in order to estimate your position and to trigger sound beacons near you. It also uses the device's compass and step counter. These data are processed only on your device and are not sent anywhere.

5. Optional account

If you create an account to keep favourite places, we store:

• the e-mail address and name you gave,
• your password only in hashed form, so that it cannot be read,
• the language of the messages we send you and your list of favourites,
• your active sign-ins (a hashed identifier, the type of app or browser, and the expiry date).

We e-mail you only the codes for activating the account and for changing the password. Codes are valid for 15 minutes. We send no newsletters or advertising.

6. Maps and outside services

To show the maps, your device connects directly to the services below, which, like any website, see the device's IP address and the map area requested:

• OpenFreeMap (tiles.openfreemap.org): the map tiles in the app,
• unpkg.com and cdn.jsdelivr.net: the open-source libraries that draw the map and the floor plan,
• OpenStreetMap (tile.openstreetmap.org): the map tiles in the administration portal.

Map data are © OpenStreetMap contributors.

7. What we do not do

• We show no advertising.
• We use no analytics, tracking or profiling tools.
• We do not sell data or pass them to third parties for their own purposes.

8. Administration portal and cookies

The administration portal is for the Municipality's staff. For administrators we store e-mail, name, a hashed password, optionally the two-step verification key, and a history of their changes to the content.

The portal uses only the cookies strictly needed for signing in. The mobile app uses no cookies.

As with any online service, the server receives the device's IP address in order to answer the request; it may be recorded for a limited time in technical logs, solely for security and troubleshooting.

9. Legal basis and retention

Processing takes place as part of the Municipality's task of providing accessibility services to citizens, in line with the General Data Protection Regulation (EU) 2016/679 and Greek law. The account is optional and is created by your own choice.

• Account data are kept until you delete your account.
• Sign-ins expire automatically; one-time codes expire after 15 minutes.
• Your location is not stored.

10. Deleting your account

You can delete your account at any time in the app: Account → Delete account. The account and your favourites are deleted permanently and at once. In the same place you can also deactivate it temporarily.

If you no longer have access to the app, you can ask for deletion by contacting the Municipality (see Contact).

11. Your rights

You have the right to access your data, to have them corrected or erased, to restrict or object to processing, and to data portability. To exercise these rights, contact the Municipality.

If you believe your data are not being handled properly, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

12. Minors

Anyone can use the app without an account. Creating an account is intended for persons aged 15 or over.

13. Changes

If the way data are used changes, this text will be updated and the date at the top of the page will change.