Privacy Policy
Effective Date: September 28, 2026 · Data Fiduciary: GAATHA Ventures Sh.P.K. (NIPT: M62118505B), Durana Tech Park, Albania.
1. Regulatory Compliance Framework
GAATHA Ventures Sh.P.K. complies with Republic of Albania Law No. 9887 "On the Protection of Personal Data" (as amended) and adheres to European Union General Data Protection Regulation (GDPR) standards for cross-border enterprise processing.
2. Categories of Processed Data
- Account & Identity Data: Usernames, business email addresses, salted password hashes, organization associations, and granular RBAC role assignments.
- Business & Transaction Records: Invoices, purchase orders, chart of accounts, restaurant receipts, inventory records, and employee rosters entered into Gaatha Suite and Gaatha POS.
- Visual Streams & Event Metadata: RTSP/HLS stream connection URLs, device IP addresses, motion/object detection metadata, timestamps, and alert snapshots captured via Sentira.
- Telemetry & Security Logs: IP addresses, HTTP request methods, session identifiers, TLS negotiation telemetry, and audit event logs.
3. Roles: Controller vs. Processor
For administrative account data and platform telemetry, GAATHA Ventures Sh.P.K. acts as Data Controller. For tenant business records, customer transaction data, and CCTV camera video ingested through Sentira, the subscribing enterprise customer acts as Data Controller and GAATHA Ventures Sh.P.K. acts strictly as Data Processor.
4. Data Subject Rights
Data subjects have the right to request access, rectification, erasure, restriction of processing, data portability, and objection to processing under Law No. 9887. Inquiries and DPO requests should be submitted to nexora.gaatha@gmail.com.