CIVUNOPrivacy
Working information before launch. Provider identification, privacy contacts and approved contractual documents will be completed before collecting reports.
What we process
A report includes a photo, location, address, category, description and resolution history. Anonymous submissions collect no name or email. Public submissions require email for contact verification, progress updates and abuse prevention; email is never public. First and last names are optional. Both supplied names appear after contact verification; otherwise the author is a “Verified citizen”. Anonymous authors appear as “Anonymous citizen”. Contact and verification data are restricted to authorised server operations. Municipality staff records contain names, work emails, roles and actions.
Who can access a report
Authorised staff of the relevant municipality, authorised CIVUNO operators and holders of the private tracking link can view the appropriate report details. Internal staff notes are not shown to citizens. There is no public citizen directory or public discussion. Keep your tracking link private.
Photos and sensitive situations
Avoid unnecessary faces, number plates, names and health details about identifiable people. Automatic blurring is not guaranteed at launch. Photos are stored privately. Once approved, they may be available through the public issue page. The browser re-encodes images and removes original file metadata.
Location and maps
The browser requests permission before reading your device location. Geocoding providers may receive coordinates or a searched address to identify the location. Map tiles are supplied by OpenStreetMap and geocoding may be supplied by Photon. Providers receive network information required to deliver the service. Report descriptions and citizen contacts are not sent to them.
Purposes and responsibilities
Processing supports report delivery and resolution, citizen updates, service security and contractual administration. Controller roles and legal bases depend on the processing activity and municipality. The final allocation of responsibilities will be published before launch. Optional email updates can be cancelled on the tracking page.
Storage and retention
CIVUNO is designed for Supabase database, authentication and storage in the EU, with Sites hosting and its underlying infrastructure. A full subprocessor list, international transfers and safeguards must be completed before launch. Retention depends on purpose, legal duties and municipal public records rules; an approved schedule will be published before collection.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability, and object to processing. Legal retention duties may limit deletion. You may complain to the competent data protection authority. Verified controller contact details will be provided before launch.
Human verification
Every report, praise and confirmation requires Cloudflare Turnstile. Cloudflare processes technical browser and network data to assess automated activity. CIVUNO validates tokens server-side and does not publish them. A basic automated text check and staff review precede publication; factual criticism is permitted.
Cookies
Necessary technical storage supports staff sign-in, language and navigation preferences. CIVUNO does not use advertising tracking or marketing cookies. Private report tokens are not sent to advertising services.
Public map and confirmations
Only reviewed descriptions and approved photos are public. Sensitive situations default to municipality-only access. An essential signed cookie limits repeated confirmations from the same browser and is retained for up to 365 days. Each issue stores only a derived protection hash, not a citizen profile. Hashed network identifiers enforce time-limited abuse limits. Confirmations are neither votes nor a guarantee of unique individuals. To request removal of inappropriate content, contact the operator or the relevant municipality. Anonymous submissions collect no name or email. Public submissions require a private email address. Optional names appear only after contact verification. Every submission and confirmation is checked through Cloudflare Turnstile; tokens and IP addresses are never published. Basic automated text checks do not replace human moderation.
Appreciate places, improvements and results. Praise must not promote politicians or parties, advertise, attack people, contain fabricated reviews or spam.
Website traffic
Optional traffic measurement starts only after consent. A random browser identifier lasts 30 days and a visit identifier expires after 30 minutes of inactivity. We remember the consent choice for 180 days. Server identifiers are HMAC hashes; events are deleted after 90 days. We store only allowlisted public page paths without parameters, a referral group, device type and event type. Analytics does not store form content, contacts, full referrer URLs, precise location or raw IP addresses. You can stop measurement in Analytics preferences at any time; this does not erase previously recorded data. We respect Do Not Track and Global Privacy Control signals.