🔒 Privacy Policy GDPR Compliant

GeoTrackFlow EU — Digital Safety Platform for Hikers
Last updated: March 2026 | Version 1.0

  This service is operated by GeoTrackFlow (GTF). We are committed to protecting your
  personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

GeoTrackFlow
Email: privacy@gtf.app
Data Processor: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (EU)

2. What Data We Collect

Data	Purpose	Legal Basis	Retention
Telegram ID & username	User identification	Consent (Art.6.1.a)	Until deletion request
Full name	Emergency identification	Consent (Art.6.1.a)	90 days after hike
GPS location	Safety monitoring & SOS	Vital interests (Art.6.1.d)	Deleted after hike finish
Emergency contact	Emergency notification	Consent (Art.6.1.a)	Until deletion request
Medical information	Emergency services info	Explicit consent (Art.9.2.a)	Until deletion request
Insurance number	SAR coordination	Consent (Art.6.1.a)	Until deletion request

3. How We Use Your Data

Real-time safety monitoring on 24 European hiking routes
Automatic SOS alerts when no heartbeat detected
Notifying Search & Rescue (SAR) services in case of emergency
Cross-border coordination (e.g. Tour du Mont Blanc: France/Italy/Switzerland)

4. Data Sharing

We share your data only with:

SAR Services — only during active SOS alert, only route-specific
Hetzner Online GmbH — hosting provider (EU, DPA signed)

We never sell your data. No advertising. No third-party analytics.

5. Your Rights (GDPR Art. 15–22)

Right	How to exercise
Access your data (Art.15)	Send /my_data in @GTF_Europe_bot
Delete your data (Art.17)	Send /delete_my_data in @GTF_Europe_bot
Withdraw consent (Art.7)	Send /delete_my_data — processed within 24h
Data portability (Art.20)	Email privacy@gtf.app
Lodge a complaint	Your national DPA (e.g. CNIL for France, AEPD for Spain)

6. Cookies & Tracking

The web panel uses no cookies and no tracking. No analytics services (Google Analytics, etc.) are used.

7. Data Security

All data transmitted over HTTPS (TLS 1.3)
Server located in EU (Hetzner, Germany)
PostgreSQL database with encrypted backups
SAR access requires PIN authentication per route

8. Contact

For any privacy-related questions:
📧 privacy@gtf.app
🤖 Telegram: @GTF_Europe_bot → /privacy