Privacy Policy
Junktrack Monitoring Application
Last updated: March 4, 2026
1. Data Controller
The data controller for personal data is Nauta Scientific (hereinafter "Controller", "we", "us" or "our").
For any questions regarding this Privacy Policy or the processing of your personal data, you can contact us at: info@nautascientific.com.
2. Application Description
Junktrack Monitoring is a mobile application that is part of the JT (Junk Tracker) integrated system for monitoring microplastic dispersion in marine environments using autonomous GPS-equipped buoys (trackers).
The app allows authorized users to:
- Scan tracker barcodes (IMEI codes) using the device camera
- Record GPS coordinates of tracker release points
- Capture and upload litter photographs with GPS metadata
- Synchronize collected data with the central server
- Monitor tracker status and position in real time
3. Personal Data Collected
The application collects and processes the following categories of personal data:
3.1 Authentication Data
| Data | Purpose |
|---|---|
| Email address | User identification and account access |
| Password | Secure authentication (stored in encrypted form) |
| Role and organization | Access permission management |
3.2 Location Data (Geolocation)
| Data | Purpose |
|---|---|
| GPS coordinates (latitude and longitude) | Recording tracker release points and photo geolocation |
| Location accuracy | Assessing the reliability of collected data |
3.3 Images and Photographs
| Data | Purpose |
|---|---|
| Photos taken or selected by the user | Visual documentation of detected litter |
| Image EXIF metadata (GPS coordinates) | Automatic photo geolocation |
3.4 Technical and Session Data
| Data | Purpose |
|---|---|
| IP address | Security and account protection |
| User agent (device type and operating system) | Security and session management |
| Session identifier | Maintaining the authenticated session |
3.5 Tracker Data
| Data | Purpose |
|---|---|
| Tracker IMEI code | Unique identification of the GPS device |
| Release coordinates and timestamp | Scientific tracking of dispersion |
4. Device Permissions
The application requests the following device permissions:
- Camera: required for scanning tracker barcodes
- Location (GPS): required for recording tracker release coordinates and photo geolocation
- Photo library access: required for saving and selecting images
Each permission is requested only when the corresponding feature is used and can be revoked at any time from your device settings.
5. Purpose and Legal Basis for Processing
Personal data is processed for the following purposes:
- Performance of the service (Art. 6(1)(b) GDPR): authentication, account management, synchronization of field-collected data
- Legitimate interest (Art. 6(1)(f) GDPR): application security, prevention of unauthorized access, activity logging (audit log)
- Scientific research (Art. 6(1)(e) GDPR): environmental monitoring of microplastic and marine litter dispersion
6. Data Retention
Personal data is retained for the following periods:
| Data Type | Retention Period |
|---|---|
| Session data and tokens | 30 days from creation, then automatically deleted |
| Audit logs (activity) | 365 days, then deleted |
| User account data | Until account deletion |
| Location and tracker data | For the duration required for scientific research |
| Photographs and images | For the duration required for scientific research |
Data stored locally on the device (offline) is deleted after synchronization with the server or upon logging out of the application.
7. Third-Party Data Sharing
We do not share your personal data with third parties for commercial or marketing purposes.
The application does not use third-party analytics services, advertising tracking tools, or third-party SDKs that collect personal data.
Collected data is transmitted exclusively to our servers for the purposes stated in this policy. Scientific research data may be shared in aggregated and anonymized form with the scientific community.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Password encryption using the bcrypt algorithm
- Secure storage of authentication tokens on device (Keychain/Keystore)
- Encryption of the application's local database
- Session token rotation mechanism
- Rate limiting to prevent abuse
- Input validation on all data
- HTTP security headers (Helmet)
9. Your Rights
In accordance with the EU General Data Protection Regulation (GDPR), you have the right to:
- Access: obtain confirmation of the processing of your data and access your personal data
- Rectification: obtain correction of inaccurate personal data
- Erasure: obtain deletion of your personal data ("right to be forgotten")
- Portability: receive your data in a structured, machine-readable format (the app supports data export)
- Restriction: obtain restriction of processing
- Objection: object to the processing of your personal data
To exercise your rights, contact us at info@nautascientific.com. We will respond to your request within 30 days.
You also have the right to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority: www.garanteprivacy.it).
10. Data Transfers
Personal data is processed and stored on servers located within the European Union. We do not transfer personal data to third countries outside the European Economic Area.
11. Children's Privacy
The application is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will promptly delete it.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect changes to our practices or for other operational, legal, or regulatory reasons. In case of material changes, we will notify you through the application.
We encourage you to periodically review this page for any updates.
13. Contact Us
Nauta Scientific
Email: info@nautascientific.com