1. Introduction
EndoMaps ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our GIS solutions, surveying services, and custom programming services.
This policy applies to all data processing activities conducted by EndoMaps and complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller Information
Data Controller: EndoMaps
Address: SidiBishr, Building 12, Alexandria, Egypt 21517
Email: privacy@endomaps.com
Phone: Available upon request for existing clients
Data Protection Officer: legal@endomaps.com
3. Data We Collect
We collect various types of data to provide our services effectively:
Personal Data
- Contact Information: Name, email address, phone number, company name
- Professional Information: Job title, company details, professional background
- Communication Data: Emails, phone calls, meeting notes, project communications
Technical Data
- Usage Data: Website interactions, service usage patterns, access logs
- Device Information: IP address, browser type, operating system, device identifiers
- Location Data: Geographic coordinates, address information (when provided for services)
Project Data
- Spatial Data: GIS datasets, maps, survey measurements, coordinates
- Project Documents: Requirements, specifications, deliverables
- Financial Data: Billing information, payment details, invoices
4. How We Use Your Data
We use your data for the following purposes:
Service Delivery
- Providing GIS mapping and analysis services
- Conducting land surveying and spatial data collection
- Developing custom programming solutions
- Project management and client communication
Administrative Purposes
- Billing and financial administration
- Customer relationship management
- Service improvement and quality control
- Legal and regulatory compliance
Marketing and Communication
- Sending service updates and newsletters (with consent)
- Informing about new services and offers
- Conducting customer satisfaction surveys
- Professional networking and industry engagement
5. Legal Basis for Processing
We process your data based on the following legal grounds under GDPR:
Contractual Necessity
- Processing necessary to perform our service contract with you
- Data required for project delivery and invoicing
Legal Obligation
- Compliance with tax, accounting, and business regulations
- Retention of records for legal requirements
Legitimate Interests
- Direct marketing for similar services (where appropriate)
- Network and IT security monitoring
- Business analytics and service improvement
Consent
- Newsletters and marketing communications
- Analytics cookies and tracking technologies
- Case studies and testimonials
6. Data Sharing and Disclosure
We may share your data in the following circumstances:
Service Providers
- Cloud Services: AWS, Google Cloud for data storage and processing
- Software Tools: GIS software providers, development platforms
- Payment Processors: Stripe, PayPal for payment processing
- Communication Tools: Email providers, project management software
Legal Requirements
- Compliance with legal obligations and court orders
- Protection of our rights, property, and safety
- Prevention of fraud or illegal activities
Business Transfers
- In case of merger, acquisition, or sale of assets
- With proper safeguards and notice to affected individuals
We do not sell your personal data to third parties for marketing purposes.
7. Data Retention
We retain your data for the following periods:
Project Data
- Active Projects: Duration of the project plus 7 years
- Completed Projects: 7 years from completion date
- Client Data: 7 years from last interaction
Financial Data
- Invoices and Payments: 7 years (tax requirement)
- Contracts: 7 years from contract end
Communication Data
- Emails: 3 years from last communication
- Marketing Data: Until consent withdrawal
Data may be retained longer if required by law or for legitimate business purposes with appropriate safeguards.
8. Data Security Measures
We implement comprehensive security measures to protect your data:
Technical Security
- Encryption: AES-256 encryption for data at rest and in transit
- Access Controls: Role-based access, multi-factor authentication
- Network Security: Firewalls, intrusion detection, VPN access
- Regular Updates: Security patches and system updates
Organizational Security
- Staff Training: Regular data protection and security training
- Access Policies: Need-to-know access principles
- Confidentiality Agreements: Staff and contractor agreements
- Incident Response: Data breach procedures and notification
Physical Security
- Secure Facilities: Controlled access to office spaces
- Equipment Security: Encrypted devices, secure disposal
9. Your Data Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You can request a copy of your personal data we hold, including information about how we use it and who we share it with.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You can request deletion of your personal data in certain circumstances, such as when it's no longer necessary for our services.
Right to Restrict Processing
You can request limitation of processing in specific situations, such as when data accuracy is contested.
Right to Data Portability
You can request your data in a structured, machine-readable format for transfer to another service provider.
Right to Object
You can object to processing based on legitimate interests, including direct marketing.
Right to Withdraw Consent
You can withdraw consent at any time for processing based on consent.
How to Exercise Your Rights
To exercise any of these rights, contact us at privacy@endomaps.com. We will respond within 30 days of your request.
10. Cookies and Tracking
Our website uses cookies and similar technologies:
Essential Cookies
- Required for basic website functionality
- Authentication and security features
- Shopping cart and checkout processes
Analytics Cookies
- Google Analytics for website usage analysis
- Performance monitoring and optimization
- User behavior analysis (anonymized)
Marketing Cookies
- Social media integration and sharing
- Personalized content and advertising
- Conversion tracking and attribution
You can control cookies through your browser settings and our cookie consent banner.
10a. Google AdSense & Advertising Cookies
This website uses Google AdSense to display advertisements. Google AdSense uses cookies and tracking technologies (including DoubleClick cookies) to serve ads based on your prior visits to our website and other websites on the internet.
What Google AdSense Does
- Uses the DoubleClick cookie to enable Google and its partners to serve ads based on your visit to this and/or other sites
- May use data collected from your browsing habits to personalize the ads you see
- Collects anonymous statistics about ad performance and user behavior
Your Choices
Google's use of advertising cookies is governed by Google's Advertising Policies and Privacy Policy.
Google Consent Mode
We implement Google Consent Mode v2 on this website. Advertising cookies (ad_storage, ad_user_data, ad_personalization) are set to denied by default and only activated after you explicitly grant consent through our cookie consent banner.
11. International Data Transfers
Your data may be transferred outside of Egypt in the following circumstances:
Cloud Service Providers
- AWS (Amazon Web Services) - data centers in multiple regions
- Google Cloud Platform - global infrastructure
- Microsoft Azure - international data centers
Protection Measures
- Standard Contractual Clauses: EU-approved data transfer agreements
- Adequacy Decisions: Transfers to countries with GDPR adequacy
- Encryption: End-to-end encryption for international transfers
- Data Residency: Option to store data in specific geographic regions
We ensure appropriate safeguards are in place for all international data transfers.
12. Children's Privacy
Our services are not intended for children under 16 years of age:
- We do not knowingly collect personal data from children under 16
- If we discover we have collected such data, we will delete it promptly
- Parents or guardians can contact us regarding children's data concerns
- Age verification may be required for certain services
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time:
- Changes will be posted on our website with the updated date
- Material changes will be communicated via email or website notice
- Continued use of our services constitutes acceptance of changes
- We recommend reviewing this policy periodically