Privacy Policy

1. Who Is Responsible

The data controller for CableParks is Emanuel Borsoi, Italy. You can reach us about anything in this policy at or through the CableParks contact page.

2. Data We Collect

• Account data: your email address, your nickname, your password (stored only as a secure hash, never in readable form), and the profile picture you choose, if any.
• Settings: language, date format, theme, distance, wind and temperature units, and map preferences. If you enable it, the last map position and zoom are also saved.
• Content you add: parks and park changes you suggest, reviews with their rating and earlier versions, the reviews you like, favourites, park subscriptions, and the days you mark yourself as being at a park.
• Security data: when you sign up and when you log in, we record the IP address, device type, app version, an installation ID created by the app, language, time zone, and whether the login succeeded. We also record when you accepted the Terms and Conditions.
• Location: to find parks near you, the app sends the position of the map to our server. It is used for that request only and not stored.
• Contact messages: when you use the contact form, your email, subject, and message are sent to us by email so we can reply.
• Marketplace: the listings you put up (title, description, category, condition, price, brand, size, city, country, and photos), the listings you save, the messages you exchange with other users about listings, the users you block, and the reports you send.

3. Why We Use It

• To provide the service (performance of the contract you accept at signup): creating and running your account, confirming your email, showing parks and reviews, and saving your settings.
• To keep CableParks safe (our legitimate interest): preventing abuse, spam, and unauthorised access to accounts, and checking content added by users. When an admin rejects, corrects, hides, or removes your content, we tell you why by email.
• To answer you (your request): replying to messages you send us.
• To meet legal obligations, where the law requires it.
• To run the marketplace (performance of the contract): publishing your listings once an admin approved them, delivering your messages, and emailing you when someone writes to you. That email names the sender and the listing, not the message.
• To keep the marketplace safe (our legitimate interest): checking every listing before other users see it, and handling reports. When a user is reported, admins may read that conversation; they do not read other conversations.

We do not use your data for advertising or profiling, and we do not sell it or share it with third parties for their own purposes.

4. What Other Users See

Your nickname and profile picture are shown next to the parks you add and the reviews you write, together with the review itself. Your email address, settings, visits, and security data are never shown to other users.

When you like a review, other users see only how many likes it has, not who gave them. You can remove your like at any time.

Your marketplace listings, once approved, are shown to everyone with your nickname and profile picture. Your messages are seen only by the user you write to. Users you block are not told so, but can no longer write to you.

5. Service Providers

We use a few providers to run CableParks. They process data only on our behalf and under data processing agreements:

• Aruba S.p.A. (Italy): website and server hosting, and sending emails.
• Neon: database hosting.
• Google: maps shown in the app (Google Maps), suggesting the address of a new park from its position (Google Geocoding), and looking up a park's timezone (Google Time Zone). When the map loads, Google may process technical data such as your IP address and the map area you view, under Google's Privacy Policy.

Some providers may process data outside the European Union. In that case the transfer is protected by the safeguards required by the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How Long We Keep It

• Account data and settings: until you delete your account, which anonymizes it (see section 7).
• Likes, favourites, subscriptions, and visits: until you remove them. After you delete your account, they stay linked only to a random identifier (see section 7).
• Registrations not confirmed within 30 days, or rejected with the link in the confirmation email, are deleted with all their data.
• Security data: the record of each login attempt for 12 months, also after you delete your account; what was recorded at signup, until you delete your account; anything else, only as long as needed to protect the service and investigate abuse.
• Contact messages: as long as needed to handle your request.
• Marketplace listings, saved listings, and blocks: until you delete them. A deleted listing is kept hidden, so that conversations about it still make sense. When you delete your account, your listings are taken off the marketplace and kept hidden in the same way, and your saved listings and blocks stay linked only to the random identifier.
• Messages: they are not deleted when one of the two users deletes their account, so that the other user keeps the conversation. Reports: as long as needed to handle them; a report you sent stays after your account is deleted.

7. Deleting Your Account

You can delete your account at any time in the app: in your profile, tap "Delete account" and confirm with your password. If you can't use the app, you can also ask us through the contact page, using the email address of your account. Admins can delete accounts too, for example ones that breach the Terms and Conditions.

Deleting an account anonymizes it instead of removing it:

• your email address is replaced by a random identifier, keeping only your email provider's domain (the part after the @); your nickname is replaced by the same identifier, and your password by a random one;
• your profile picture, the details recorded at signup (IP address, device, app version, installation ID, language, and time zone), and your saved map position are deleted;
• nobody can sign in to the account any more, and your email address and nickname are free to be used again.

Your contributions stay: the parks and park changes you added and the reviews you wrote are shown as by a "Deleted user", and your likes still count. Everything else that is kept, such as your favourites, subscriptions, visits, and settings, is linked only to the random identifier.

Your marketplace listings are taken off the marketplace. Your messages stay, shown as sent by a "Deleted user", so that the other user keeps the conversation, but nobody can write to the deleted account any more. Your saved listings and blocks are linked only to the random identifier.

The record of your logins (date and time, IP address, device, and the email address used) is kept for 12 months after each login, as for every account, also after the deletion: to keep CableParks secure, to prevent abuse, and to establish, exercise, or defend legal claims. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR), and we keep it despite the deletion because it may be needed for legal claims (Art. 17(3)(e) GDPR). It is then deleted automatically.

In exceptional cases, for example abuse, an admin can erase an account entirely instead. Then everything linked to it is deleted, except:

• the parks and park changes it added and the reviews it wrote, which stay without an author;
• the marketplace reports it sent, which stay without an author;
• the record of its logins, which is deleted 12 months after each login, as described above.

8. Your Rights

Under the GDPR you have the right to:

• access your personal data and receive a copy of it;
• have it corrected or deleted;
• restrict or object to its processing;
• receive it in a portable format.

Most of your data can be changed directly in the app, where you can also delete your account (see section 7). For anything else, write to us through the contact page. You can also lodge a complaint with a supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

9. Cookies and Device Storage

The CableParks website sets only one cookie, cableparks_lang, and only when you pick a language with the language selector. It stores the chosen language (for example de) so the website keeps showing that language, and expires after one year. It is strictly necessary for the feature you asked for, so it does not need your consent. Without it, the website uses your browser's language. The website does not use local storage, analytics, advertising pixels, or other tracking technologies.

The mobile app does not use cookies. It keeps a small amount of data in your device's secure storage (Android Keystore or iOS Keychain), used only to make the app work:

You can delete the website cookie in your browser settings, and the app's data by clearing it in your device settings or uninstalling the app.

10. Device Permissions

The app asks for permissions only when a feature needs them:

• Location: to show parks near you and centre the map on your position. It is used only while you grant permission.
• Camera and photos: to choose or take a profile picture.
• Camera and photos for the marketplace: to take or choose the photos of your listings.

You can change these permissions at any time in your device settings.

11. Children

CableParks is not directed at children under 14. If you believe a child under 14 has created an account, please contact us and we will delete it.

12. Changes to This Policy

We may update this policy, for example when CableParks adds new features. The updated version is always published on this page. See also the Terms and Conditions.