Privacy policy

1. Controller

GLATOW & ASSOCIATES (business name registered in Australia, ABN 93 799 195 626), [address], e-mail: contact@ga-advice.com. See also the imprint.

2. Which data we process

your e-mail address,
the drawn or uploaded area (coordinates) and its name,
the chosen framework and the time of the order,
technical access data (IP address, time) in the server logs,
for a test access request: name, e-mail address, optionally company and message, status and validity of the access, time of the last sign-in and the number of orders placed through it,
for a personal access: a log of sign-ins (time, way: link or password), the number of analyses, reports, deforestation maps and image renders (for daily limits and our evaluation; the sign-in log is deleted after 12 months), saved deforestation maps and, if one was issued, your password only as an irreversible hash,
error reports: for server errors technical details (page, error message, role); for a crash in the browser only when you press “report”, plus your optional note,
cookies needed for operation: a session cookie after sign-in (at most 12 hours) and the chosen language. We use no tracking or advertising cookies.

3. Purpose and legal basis

We process the data to produce the requested report, review it professionally and send it to you by e-mail (Art. 6(1)(b) GDPR). Limiting orders per e-mail address and day protects against misuse (Art. 6(1)(f) GDPR). We process the details of an access request to review the request and provide the test access (Art. 6(1)(b) GDPR); limiting requests protects against misuse (Art. 6(1)(f) GDPR).

4. AI assessment and human review

The satellite images of your area are assessed independently by two AI models. Every report is reviewed and released by a qualified person before it is sent. There is no solely automated decision within the meaning of Art. 22 GDPR. The AI models receive the satellite images and facts derived from them about the area, but not your e-mail address.

5. Recipients and processors

netcup GmbH, Germany — hosting of the server.
HoboHost [add company name and address] — web hosting of ga-advice.com; our server hands the e-mails over HTTPS to the mail server of ga-advice.com there (receives your e-mail address, the area name and the download link, not the report itself; for test accesses your name and the sign-in link).
Brevo SAS, France — only if our own mail server is not set up: sending the e-mails with the same details.
Anthropic PBC, USA — AI image assessment and assessment text. Transfer to the USA on the basis of [EU-US Data Privacy Framework / standard contractual clauses — to be checked].
[Amazon Web Services EMEA SARL — AI image assessment via Amazon Bedrock, region [eu-west-1 Ireland] — once active]
Data sources that receive only the coordinates of the area (no e-mail address): Copernicus Data Space Ecosystem (EU), Microsoft Planetary Computer, Global Forest Watch (World Resources Institute, USA), NASA FIRMS (USA), UNEP-WCMC (protected areas, United Kingdom), GBIF.

6. Retention

We keep order and report for [period, e.g. X years] so that a sent report remains traceable. Order and report are currently not deleted automatically; we delete them on request. The download link and the PDF kept for it are deleted automatically when the link expires (default 14 days) or after the last permitted download. Details of access requests and test accesses are currently not deleted automatically; we delete them on request [set a period, e.g. 6 months after expiry]. Server logs are deleted after [period].

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Contact contact@ga-advice.com. You may also lodge a complaint with a data protection supervisory authority, e.g. [competent authority].

Imprint · Terms of use · Privacy · To sign-in