Privacy policy

Operator and contact details

Operator: S.C. FAE DRONES S.R.L., 287 Theodor Pallady Blvd., District 3, Bucharest, Romania, registered with the Trade Register under no. J40/13165/2012, VAT no. RO30887150.

For questions or to exercise your personal-data rights, write to contact@masuram.ro. We may request the information strictly necessary to verify your identity and the subject of the request.

What data can we process

• Contact details and request content: name, email, telephone, organisation, location and project requirements.
• Data entered into the calculator: areas, coordinates, files, technical options, quotation data and contact information.
• Files and parameters used in the free RoConvert tools, plus voluntarily submitted error reports.
• Account, project, access and activity data from the Client Portal, including uploaded technical datasets.
• In the browser, the Portal limits data to orientation-map presentation preferences and, for an authorised anonymous link, to a rotating secondary resume token kept only in the current tab; the link's initial bearer token is not persisted.
• Technical and security data needed for operation, abuse prevention and diagnostics: IP address, timestamps, request type, errors and session identifiers.
• Aggregated offer-journey indicators, designed without names, email addresses, telephone numbers, IP addresses, coordinates or file names.

Purposes and legal bases

We use the data to respond to requests, calculate and validate the offer, provide the tools and Portal, carry out projects, secure the services, resolve incidents and comply with legal obligations.

Depending on the context, the legal basis may be taking pre-contractual steps or performing the contract, complying with a legal obligation, legitimate interest in security and service administration, or consent where required by law. We do not use consent as the default basis for all processing.

Recipients and external services

Access is limited to authorised FAE Drones personnel and providers needed for hosting, email, security and operation of the services. The contact form and calculator form use Google reCAPTCHA as a necessary security measure against abuse. Embedded Google Maps remain blocked until the user explicitly presses the localised load button; only after this action does the browser contact Google. A project may optionally have a Dropbox link configured by the administrator.

We do not publish an unverified contractual list of processors. Legal names, roles, transfers outside the European Economic Area and applicable safeguards are confirmed from the contracts and agreements in force for the service used.

Technically verified retention periods

• RoConvert: downloads and working data for point clouds are scheduled for removal after approximately 30 minutes; viewer data after approximately 60 minutes; technical security records after 14 days.
• Portal: the session expires after 30 minutes of inactivity and no later than 8 hours; incomplete uploads after 24 hours; cart items are recoverable for 7 days; the audit log is limited to 180 days and a technical row cap.
• Aggregated offer-journey indicators are limited to 120 days.
• Editable files associated with a calculator offer are retained for 6 months for subsequent changes or requests.
• Emails, active projects, contractual datasets, offline original archives, and backups are retained only for as long as necessary for the request, contract, legal obligations, or defence of rights. We do not publish an unverified fixed retention period for these categories.

Data subject rights

Under the GDPR, you may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent without affecting prior processing. Some rights depend on the legal basis and context of the processing.

You may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP). We encourage you to write to us first so that we can clarify and resolve the request.

Security and updates

We apply proportionate technical and organisational controls, including separation of private data from the public surface, access control, limited sessions and logs without secrets. No online system can guarantee zero risk.

We update this policy when services, providers or legal requirements change. The date published above indicates the current version.