Privacy policy
This policy explains what personal data we process through the website https://trasabilitate-explozibil.ro, the customer portal and the Explosives Traceability mobile app (Android and iOS), why we process it, how long we keep it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR).
Who we are
The data controller is LECHISOFT SRL, tax ID (CUI) 34324508, Trade Register No. J26/343/2015, with its registered office in Târgu Mureș, Romania. For any question about your data you can write to us at office@trasabilitate-explozibil.ro or call us on 0742 499 429.
What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, phone number, email address and the message sent through the contact form | To reply to you and, if you ask, to send you a quote | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to messages (point (f)) |
| IP address and technical data about the request (browser, page visited) | Operation and security of the website, protection of the form against automated messages | Legitimate interest (Art. 6(1)(f) GDPR) |
| Browsing statistics (Google Analytics) | To understand which pages are read and to improve the website | Legitimate interest / consent, as set out in our cookie policy |
We do not use your data for marketing without your consent and we do not sell it to anyone.
Who else has access to the data
- our hosting and email providers, strictly in order to deliver the service;
- Google (Google Analytics), for traffic statistics;
- the authorities, only where the law requires us to.
How long we keep the data
We keep messages received through the form for as long as needed to reply to you and for any resulting contractual relationship, and then we delete them. Data relating to a contract is kept for the period required by law.
The Explosives Traceability mobile app
The app (Android and iOS) is used by the employees of our customer companies to scan explosives as they enter and leave the warehouse. It has no accounts of its own: a company administrator pairs the phone or terminal with the company account (pairing code / QR code from the portal, or the administrator's own credentials).
| Data | Why | Where it goes |
|---|---|---|
| The unique codes scanned, the type of movement (goods in / goods out), the quantity, the place of use, the date and time | The traceability register required by Directive 2008/43/EC and the national legislation transposing it | Only the server of the company's account (the Explosives Traceability portal) |
| The name of the person making the movement, chosen from the company's list | The register shows who received / released each unit | Only the server of the company's account |
| The installation identifier (generated by the app), the device model, the app version | Recognising the paired device and synchronising correctly | Only the server of the company's account |
| The username / email address and password of an administrator, only during pairing | Verifying that the pairing is done by a company administrator | Sent once to the server; the password is not stored on the device |
| The email address of the Google or Apple account, only if the administrator chooses “Continue with Google” / “Continue with Apple” during pairing | Verifying that the pairing is done by a company administrator (the address must already be a user of the account) | Only the server of the company's account; Google / Apple only confirm the identity and receive no data from the app |
- The camera reads the Data Matrix codes and the pairing QR code. The images are processed only on the device; they are not saved or sent anywhere.
- Notifications are local only, created by the app on the device (for example, a reminder that you have unsent scans). We do not use push notification services.
- No location, no adverts, no analytics or tracking tools. The app does not read the contacts, photos or other files on the device.
- Data travels only in encrypted form (https). Scans made without a signal stay on the device until they are synchronised; those confirmed by the server are deleted from the device after 30 days.
- For the data in the app, the controller is the customer company (the employer); LECHISOFT SRL processes it on the company's behalf, under the contract. We do not sell it or pass it on to anyone else.
- Uninstalling the app deletes everything that was on the device. To have a user or the account deleted, use the Account deletion page; the explosives register is kept for at least 10 years, as the law requires.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent. To exercise any of them, write to us at office@trasabilitate-explozibil.ro. If you are not satisfied, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (www.dataprotection.ro).
Data in the customer portal
The data that customers enter in the Explosives Traceability portal (explosives, movements, people, locations) is processed under the contract concluded with each customer and is kept for at least 10 years, in line with the legal obligations on the traceability of explosives for civil uses.
Last updated: October 27, 2026