TerraChart Data Privacy Policy

TerraChart Privacy Policy

Last Updated August 3, 2021:

Welcome to the Privacy Policy of the TerraChart Android app. (“TerraChart,” “we,” “us,” or “our App”, “Service”). TerraChart is provided by the Mara Elephant Project as an Android mobile application that helps users collect data on geospatial features to aid in wildlife conservation. This Privacy Policy applies to the following services operated by the Mara Elephant Project (collectively, the “Service”):

The TerraChart Android Mobile application that contains a link to this Privacy Policy

This Privacy Policy explains what Personal Data (defined below) we collect, how we use and share that data, and your choices concerning our data practices.

This Privacy Policy constitutes an integral part of our Terms of Service, accessible at: https://www.maraelephantproject.org/terra-chart-privacy.

Please read this Privacy Policy before using the app or submitting any Personal Data via the app and contact us if you have any questions.

INFORMATION WE COLLECT

When you contact us or interact with our Service we collect information that alone or in combination with other information could be used to identify you (“Personal Data”) as follows:

  • Personal Data You Provide: We collect Personal Data when you sign in to the TerraChart Android app or contact us. The Personal Data collected during these interactions may vary based on what you choose to share with us, but it will generally include:
  • Account Data: When you sign in via ArcGIS Online, the user credentials you use to sign in.
  • Additional Information: To help improve your experience or enable certain features of the Service, you may choose to provide us with additional information, such as your name.
  • Information We Receive From Your Use of Our Service: When you visit, use, interact and register with the Service, we may automatically receive certain information about your visit, use, interactions or registration. For example, we may monitor the number of people that visit our app, peak hours of visits, which page(s) are visited on our our Apps, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), broad geographical information, and our App-navigation pattern. In particular, the following information is created and automatically logged in our systems:
  • Log Data: Information that your browser automatically sends whenever you visit ArcGIS Online to sign in to our App. Log data includes your IP address (so we understand which country you are connecting from when you visit our App), browser type and settings, the date and time of your request, and how you interacted with our App.
  • Cookies Data: We use cookies and similar technologies to operate and administer our App, make it easier for you to use our App during future visits, and gather usage data on our App. For more information about the technologies used and information collected on our App, please refer to our Cookie Policy, which forms part of this Privacy Policy.
  • Device Data: Includes the name of the device, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings. We may also collect data from your device to estimate a variety of metrics like the time, frequency, duration of recording the geographical features for the purpose of calculating your Usage Data (described below).
  • Usage Data: We collect information about how you use our App, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency and distance covered while recording geographical features.
  • Geolocation Data: If you have enabled location services for our App on your mobile device, we may collect your precise location information based on city, state, zip code, country, latitude and longitude. TerraChart may also derive your approximate location from the IP address of your mobile device. Geolocation data is used for purposes of recording geographical features and for offering other relevant content and services.

Information We Receive From Third Parties

If you elect to authenticate to our Service using your account on another service (such as ArcGIS Online), we may receive from the other service information like your external account name as well as other information you may choose to make available to us based on your external account settings, such as contact lists and profile photos (if any). You can stop sharing the information from the other service with us by removing our access to that other service.

HOW WE USE PERSONAL DATA

We use Personal Data to enable your use of our Service, including to create your account, direct you to nearby geographical features of interest, and give you customer support. This processing is necessary to perform our contract with you.

We also use Personal Data as necessary for the following legitimate business interests:

  • To communicate with you and respond to your inquiries, comments, feedback or questions
  • To manage our relationship with you, which includes sending administrative information to you relating to our Service and changes to our terms, conditions, and policies, and asking you to leave a review or take a survey.
  • To analyze how you interact with our Service and provide, maintain and improve the content and functionality of the Service and our customer relationships and experiences, through the use of cookies and similar technologies as described in our Cookie Policy
  • To enable us to enhance and personalize the experience we offer to our users. For example, when you allow us to collect precise location information, we use that information to provide essential features of the Service such as navigation assistance, recording geographical features of interest, and recommending geographical features near you.
  • To administer and protect our business, our App, prevent fraud, criminal activity, or misuses of our App, and to ensure the security of our IT systems, architecture and networks (including troubleshooting, testing, system maintenance, support and hosting of data); and
  • To comply with legal obligations and legal process and to protect our rights, privacy, safety or property, and/or that of our affiliates, you or other third parties, and enforce our terms and policies.

For information about what we mean by legitimate interests and the rights of individuals in the European Union (“EU”), please see the “EU Users” section below.

In some cases, we process your Personal Data based on your consent, for example when your consent is needed under the applicable law before setting cookies on your computer or other device (pursuant to our Cookie Policy), when you grant us access to your location or as otherwise provided in this Privacy Policy.

HOW WE SHARE AND DISCLOSE PERSONAL DATA

In certain circumstances we may share your Personal Data with third parties without further notice to you, unless required by the law, as set forth below:

  • Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Data with service providers, including hosting, cloud services and other information technology services providers; email communication software providers and email newsletter providers; database and sales services; customer relationship management, customer engagement, and customer feedback services; security services; and analytics services. Pursuant to our instructions, these parties will access, process or store Personal Data in the course of performing their duties to us.
  • Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with legal or regulatory obligations, including to respond to lawful requests from public authorities and to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Site, or the public, or (v) protect against legal liability.

DATA RETENTION

We keep Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a legitimate business need to do so, or as required by law (e.g. for tax, legal, accounting or other purposes), whichever is the longer.

To determine the appropriate retention period for your Personal Data, we will consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we use your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

UPDATE YOUR INFORMATION

If you need to change or correct your Personal Data, please contact us at terrachart@maraelephantproject.org. We will address your request as required by applicable law.

CALIFORNIA PRIVACY RIGHTS DISCLOSURES

Collection, Disclosure, and Use of Personal Data: The categories of Personal Data we have collected in the preceding twelve months are described above in the “Information We Collect” section. The business and commercial purposes for collecting Personal Data are described in the “How We Use Personal Data” section. We collect Personal Data directly from you and from external accounts you use to log-in to the Service.

Privacy Rights: Where provided for by law and subject to any applicable exceptions, California residents may have the following rights under the California Consumer Privacy Act of 2018 (“CCPA”):

  • To know the categories of Personal Data that TerraChart has collected about you, the business purpose for collecting your Personal Data, and the categories of sources from which the Personal Data was collected.
  • To access the specific pieces of Personal Data that TerraChart has collected about you.
  • To know whether TerraChart has disclosed your Personal Data for business purposes, the categories of Personal Data so disclosed, and the categories of third parties to whom we have disclosed your Personal Data
  • To have TerraChart, under certain circumstances, delete your Personal Data; and
  • To be free from discrimination related to the exercise of these CCPA rights.

TerraChart does not sell your Personal Data.

If you would like to exercise any or all of these rights, you may do so by contacting us. Your authorized agent may submit requests in the same manner. Once we receive your request, we will verify your identity by sending an email to the email address you provide to us.

If you have questions about your rights or our disclosures under the CCPA, or to request access to an alternative format of this notice, you may reach us at info@maraelephantproject.org.

CHILDREN

Our Service is not directed to children who are under the age of 13. Mara Elephant Project does not knowingly collect Personal Data from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Data to Mara Elephant Project through the Service please contact us and we will endeavor to delete that information from our databases.

EU USERS

Scope: This section applies to individuals in the EU (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway, the United Kingdom, and, to the extent applicable, Switzerland).

Data Controller: Mara Elephant Project is the data controller for the processing of your Personal Data. You can find our contact information in the “Contact Us” section below.

Legal Bases for Processing. This Privacy Policy (the paragraph “How We Use Personal Data”) describes the legal bases we rely on for the processing of your Personal Data. Please contact us if you have any questions about the specific legal basis we are relying on to process your Personal Data.

As used in this Privacy Policy, “legitimate interests” means our interests in conducting our business and developing a business relationship with you. This Privacy Policy describes when we process your Personal Data for our legitimate interests, what these interests are and your rights. We will not use your Personal Data for activities where the impact on you overrides our interests, unless we have your consent or those activities are otherwise required or permitted by law.

Your Rights. Pursuant to the European Union General Data Protection Regulation (“GDPR”), you have the following rights in relation to your Personal Data, under certain circumstances:

  • Right of access: If you ask us, we will confirm whether we are processing your Personal Data and, if so, provide you with a copy of that Personal Data along with certain other details. If you require additional copies, we may need to charge a reasonable fee.
  • Right to rectification: If your Personal Data is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your Personal Data with others, we will tell them about the correction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so you can contact them directly.
  • Right to erasure: You may ask us to delete or remove your Personal Data, such as where you withdraw your consent. If we shared your data with others, we will tell them about the erasure where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data with so you can contact them directly.
  • Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to us processing it (please read below for information on your right to object). We will tell you before we lift any restriction on processing. If we shared your Personal Data with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so you can contact them directly.
  • Right to data portability: You have the right to obtain your Personal Data from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and that is processed by automated means. We will give you your Personal Data in a structured, commonly used and machine-readable format. You may reuse it elsewhere.
  • Right to object: You may ask us at any time to stop processing your Personal Data, and we will do so:
    • If we are relying on a legitimate interest to process your Personal Data — unless we demonstrate compelling legitimate grounds for the processing or we need to process your data in order to establish, exercise, or defend legal claims
    • If we are processing your Personal Data for direct marketing. We may keep minimum information about you in a suppression list in order to ensure your choices are respected in the future and to comply with data protection laws (such processing is necessary for our and your legitimate interest in pursuing the purposes described above)
  • Right to withdraw consent: If we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing of your data before we received notice that you wished to withdraw consent.
  • Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your Personal Data, you can report it to the data protection authority that is authorized to hear those concerns (in the UK, the Information Commissioner’s Office (ICO), who can be contacted at https://ico.org.uk/concerns, and in other EU countries the data protection authority of the country in which you are located).

Please see the “Contact Us” section below for information on how to exercise your rights.

INTERNATIONAL TRANSFERS

Mara Elephant Project is based in the United States. If you are accessing our Service from the EU or other regions with laws governing data collection and use, please note that your Personal Data will be transferred to and stored in the United States as necessary for the purposes described in this Privacy Policy, and the data may be transmitted to our service providers supporting our business operations (described above). The United States may have data protection laws less stringent than or otherwise different from the laws in effect in the country in which you are located.

LINKS TO OTHER WEBSITES

Our App may contain advertisements for or links to other websites, products, or services not operated or controlled by Mara Elephant PRoject, including Social Media Sites (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

SECURITY

You use the Service at your own risk. We comply with industry standards to protect Personal Data both online and offline from loss, misuse, and unauthorized access, disclosure, alteration or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email. Please keep this in mind when disclosing any Personal Data to Mara Elephant Project or our App via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third party websites.

YOUR CHOICES

Whether or not you provide Personal Data to us is completely up to you, but if you choose not to provide information that is needed to use some features of our Service, you may be unable to use those features. You can also contact us to request access to your data or to ask us to update, correct, or delete your Personal Data.

CHANGES TO THE PRIVACY POLICY

The Service, and our business may change from time to time. As a result we may change this Privacy Policy at any time. When we do we will post an updated version on this page, unless another type of notice is required by the applicable law. By continuing to use our Service or providing us with Personal Data after we have posted an updated Privacy Policy, or notified you if applicable, you consent to the revised Privacy Policy and practices described in it.

CONTACT US

If you have any questions about our Privacy Policy or the information practices of the Site, please feel free to contact us at info@maraelephantproject.org or via this form.