Privacy Policy
Last updated: 3 August 2026
This Privacy Policy explains how Zorile Energie S.R.L. (societate cu răspundere limitată), the operator of the Drones Restricted Zones RO application (the "Service"), collects and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
1. Data controller
Controller: Zorile Energie S.R.L.
Registered office: comuna Pianu, sat Pianu, DJ 704 A FN, Alba County, Romania
Trade Register no.: J2009000396014 ·
Fiscal code (CUI): 25569428
Contact: office@zorile-energie.ro
Data protection contact: office@zorile-energie.ro (no Data Protection Officer has been designated)
2. What we collect
| Category | Data | Source |
|---|---|---|
| Account | Email address (used for passwordless "magic link" sign-in) and a unique account identifier. | You, at sign-up. |
| Saved flying zones | The geometry (coordinates) you draw, computed area, a snapshot of overlapping restricted zones, the dataset version, and timestamps. | Created by you in the app. |
| Profile & equipment | Operator details (name, address/contact, operator code), remote pilots (name, phone, qualifications) and drones (registration, manufacturer, model, class, category, MTOM, and aerodynamic parameters — aircraft type, cruise speed, characteristic dimension, wind and glide ratio — used by the Volume Planner) that you save to pre-fill official flight-approval requests and plan operations. | Created by you in the app. |
| Saved operational-volume plans | The operational volume you build in the Volume Planner: the drawn geometry (flight geography, contingency volume and ground-risk buffer), pilot and take-off/landing points, and the parameters and assumptions used to compute it. | Created by you in the app. |
| Pilot flight records | The per-pilot flight record you keep (AACR "evidența zborurilor"): the pilot's name, address, phone numbers, date of birth and pilot-certificate number, plus your log of flights (date, category, registration, route and hours). Stored so you can maintain and download your own record; not used to pre-fill requests or shared elsewhere. | Created by you in the app. |
| Billing & invoicing | Your name and billing address, plus subscription status, plan and billing period — collected at checkout to issue the invoices required by Romanian fiscal law. For an individual, your personal numeric code (CNP) is optional — provided only if you choose to add it to your invoice. For a business, we collect your company name and fiscal code (CIF/CUI). We do not receive or store your card details — these are handled directly by Stripe. | You, at checkout; Stripe. |
| Technical | Server logs: IP address, request time, endpoint and basic device/browser metadata, for security and reliability. | Automatically. |
3. Why we process it, and our legal basis
- Providing accounts and saved history — performance of our contract with you (Art. 6(1)(b)).
- Processing subscriptions and payments — performance of the contract (Art. 6(1)(b)) and compliance with accounting/tax obligations (Art. 6(1)(c)).
- Security, fraud prevention and service reliability — our legitimate interests (Art. 6(1)(f)).
4. Processors and third parties
We share data only with service providers acting on our behalf under data-processing agreements:
- Supabase — authentication and database for your account, saved zones, equipment library, operational-volume plans and pilot flight records (hosted within the European Union).
- Render — hosting of the application and its server logs.
- Resend — delivery of transactional emails (such as your passwordless "magic link"); it processes your email address to send them.
- Stripe — payment processing and subscription management. Stripe is the processor of your payment data as an independent controller for its own compliance purposes; see stripe.com/privacy.
- Oblio — issuing the fiscal invoices required by Romanian law (including e-Factura). It receives the billing details above — your name and address, and, where provided, your CNP, or your company name and CIF/CUI — to generate the invoices.
- OpenStreetMap — map tiles are loaded from OpenStreetMap servers, which necessarily receive your IP address to serve the imagery.
- OpenWeather — when you view the weather for a flying zone, our server sends the approximate coordinates of that zone (rounded to about a kilometre) to OpenWeather to retrieve the forecast. The request is made server-side, so your IP address and identity are not shared with OpenWeather, and the result is cached only briefly and not linked to your account.
5. International transfers
Some processors (e.g. Stripe) may process data outside the European Economic Area. Where they do, transfers are protected by adequacy decisions or the European Commission's Standard Contractual Clauses.
6. Retention
Account and saved-zone data are kept for as long as your account is active. You may delete saved zones at any time, and you can delete your account together with all associated data yourself in the app (👤 Profile → Privacy). Deleting your account also cancels any active subscription. Invoices already issued are retained by our invoicing provider (Oblio) for the period required by Romanian fiscal law (10 years). Server logs are kept for a limited period for security purposes.
7. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, portability, and to object to processing, as well as to withdraw consent where processing is based on it.
You can exercise access, portability and erasure yourself at any time in the app under 👤 Profile → Privacy: download all of your data as a JSON file, or permanently delete your account. These options remain available even if you have no active subscription. For any other request, contact us at office@zorile-energie.ro.
You also have the right to lodge a complaint with the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — dataprotection.ro.
8. Cookies and local storage
The Service uses only strictly necessary cookies and browser storage. See our Cookie Policy for details.
9. Changes
We may update this policy; the "last updated" date above reflects the current version. Material changes will be notified in the app.