Who processes your data
The data controller is Timișoara City Hall (Primăria Municipiului Timișoara).
- Address
- Bd. C.D. Loga nr. 1, Timișoara, Romania
- Phone
- +40256969
- [email protected]
- Website
- www.primariatm.ro
- Data protection officer
- Simona Drăgoi, appointed by Mayor's Order no. 1237/10.10.2019, [email protected]
This policy covers the mobile app and complements the City Hall's notice on the processing of personal data, which also applies to the services the app opens on cont.primariatm.ro and servicii.primariatm.ro. Data is processed under Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
What data we process and why
As in the notice, we process data to carry out the City Hall's tasks and legal obligations (art. 6(1)(c) and (e) GDPR). The Timi assistant and the phone's permissions (location, camera, photos, microphone, notifications) rely on your consent (art. 6(1)(a) GDPR), which you can withdraw at any time.
| When | What data | Why |
|---|---|---|
| Your City Hall account | What dataPhone number, email address, first and last name, personal numeric code (CNP), home address. When you sign in with ROeID: also your identity document details. | WhyTo identify you and give you access to the City Hall's online services. |
| Signing in | What dataThe code received by SMS (valid for 5 minutes) and the sign-in session, stored encrypted on the phone. | WhyTo confirm that it's you opening the account. |
| Requests, payments, appointments, reports (sesizări) | What dataWhat you enter in forms and the documents you attach, their status, and the City Hall's replies. | WhyTo register and resolve your requests. |
| Card payments and tickets | What dataYou enter card details only on Banca Transilvania's page; the City Hall never sees them. For a saved card we keep the bank's identifier, the last 4 digits, the card network and the expiry date. For tickets: the type, date and ticket code. | WhyTo process payments and show your tickets and receipts. |
| Timi assistant | What dataThe messages you write, the photos you attach and the replies. | WhyTo answer questions about the city and the City Hall's services. |
| Voice mode | What dataYour voice, streamed in real time to the voice provider, and the conversation's transcript. The City Hall doesn't record audio. It keeps the start and end time of each session and, if you use the app with an account, the transcript, in your Timi conversation history. | WhySpoken conversation with Timi, and the 30-day usage allowance. |
| Location | What dataThe phone's precise location, only while the app is open and only if you allow it. We don't store it, except for the place you mark in a report. | WhyNearby stops, routes, the parking zone, the location of a report, the map. |
| Camera, photos, microphone | What dataThe photos and clips you choose to attach; audio only in voice mode. | WhyAttachments to reports and to Timi conversations. |
| Notifications | What dataThe phone's notification identifier, phone type, language, app version, the categories and neighbourhoods you choose, and the history of notifications sent. | WhyTo tell you about your requests and the topics you chose. |
| Device check | What dataAn identifier for the app installation and the result of the check made by Apple (App Attest) or Google (Play Integrity). | WhyTo prevent abuse of SMS codes and of the Timi assistant. |
| Security | What dataIP address, approximate country, a fingerprint of the browser or app, and events such as sign-ins, codes sent, phone number changes and account deletion. | WhyTo detect and investigate unauthorised access and abuse. |
| Error reports | What dataPhone model, system and app version, error details. These can include the content of the request that failed, for example a message to Timi. | WhyTo find and fix errors. |
Reports (sesizări) are public: their description, photos, location (street and number), category, status and dates appear on the map at sesizari.primariatm.ro. Your name and contact details are not published, and only you see the City Hall's reply. Don't include personal data in the description or the photos.
The Timi assistant
- Timi is an AI assistant. Before you first use it, the app asks for your consent.
- Written messages and photos are sent to OpenAI through the Vercel AI Gateway service, and OpenAI processes them in the European Union, for the answers, the conversation's title and classifying messages by topic. Voice conversations are also sent to OpenAI, along with the latest messages in the conversation; for these, the processing region is not fixed. Their transcript, along with the latest messages, reaches OpenAI in the European Union, for the lookups made during them and to tell when they have ended. What you write or say reaches OpenAI as you put it.
- From your account, Timi receives only amounts, statuses, types and dates. Your name, CNP, addresses and company names are shown only to you, on the screen.
- The providers may keep data temporarily under their own terms, for example to prevent abuse.
- Authorised City Hall staff may review and rate conversations to improve the answers, and messages are classified by topic automatically.
Who receives your data
Your data is processed by the City Hall and by the providers below, who act on the City Hall's behalf under contract, only for the purposes above, and ensure at least the same protection of your data as this policy describes.
| Provider | For what | Where |
|---|---|---|
| Amazon Web Services | For whatDatabases, files, emails | WhereEuropean Union (Frankfurt) |
| Vercel | For whatHosting the app's servers | WhereEuropean Union (Frankfurt) |
| Vercel | For whatPassing data to the AI models (AI Gateway) | WhereGlobal network |
| Cloudflare | For whatProtecting and delivering traffic | WhereGlobal network |
| SMSLink | For whatSending SMS codes | WhereRomania |
| Resend | For whatSending emails | WhereUnited States |
| For whatGemini: rephrasing the replies to reports | WhereEuropean Union | |
| For whatAndroid notifications (Firebase), device check (Play Integrity) | WhereUnited States | |
| OpenAI | For whatTimi's answers to written messages and photos, titles of Timi conversations, classifying messages by topic, lookups in voice mode and telling when a voice conversation has ended | WhereEuropean Union |
| OpenAI | For whatTimi's voice mode | WhereNo fixed region; may be outside the European Union |
| Typesafe AI | For whatJev, the model that suggests the category of a report, finds similar reports and judges whether a photo would help, from its description | WhereUnited States |
| Apple | For whatiPhone notifications, device check (App Attest) | WhereUnited States |
| Expo | For whatDelivering notifications, with a general text and no details of the request; delivering app updates | WhereUnited States |
| Sentry | For whatError reports | WhereUnited States |
| Mapbox | For whatAddress search | WhereUnited States |
| OpenStreetMap (Nominatim) | For whatSearching addresses typed in Timi conversations, for reports | WhereUnited Kingdom |
| Upstash | For whatTemporary counters that limit abuse (the account or device identifier, the IP address), which expire on their own | WhereEuropean Union (Frankfurt) |
For providers outside the European Economic Area, transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the standard contractual clauses approved by the European Commission.
Where relevant, data also goes to:
- Banca Transilvania, for card payments, as an independent controller of card data;
- the Timișoara Tax Directorate (Direcția Fiscală a Municipiului Timișoara), for taxes and payments;
- the Timișoara Public Transport Company (STPT), for transport tickets;
- the Romanian Digitalisation Authority (Autoritatea pentru Digitalizarea României, ADR), which operates the national ROeID system, if you sign in with it; ADR processes this data as an independent controller;
- other institutions and authorities, courts or supervisory bodies, as the law provides and as described in the notice.
How long we keep data
| Data | How long |
|---|---|
| Your account | How longUntil you delete it. |
| SMS code | How long5 minutes. |
| Session in the app | How longExpires after 90 days without use, or when you sign out. |
| Submitted requests, payments, appointments, reports | How longAs long as needed to resolve them, then archived under the National Archives Law no. 16/1996, as described in the notice. They stay after the account is deleted. |
| Timi conversations | How longUntil you delete them or delete your account. |
| Timi conversations without an account | How long90 days after the last message. |
| History of notifications sent | How long180 days. |
| Security logs | How long90 days for events that hold an IP address. 24 months for the others and for those linked to a confirmed security incident, which are kept without the full IP address. |
| Error reports | How long90 days. |
Deleting your account
You can delete your account at any time. In the app, go to My account → Delete account (Contul meu → Șterge contul). This opens your account settings page on cont.primariatm.ro, which you can also reach directly at cont.primariatm.ro/stergere-cont. You confirm the deletion with a code sent by SMS to the account's phone number.
Deleted permanently
- your account and its sessions on all devices;
- your Timi conversations and the photos sent in them;
- your notifications and preferences;
- your saved cards, also at Banca Transilvania;
- the link to the Tax Directorate;
- requests and proposals you haven't submitted, with their documents.
Kept by the City Hall
Requests, payments, appointments, reports and feedback you have already submitted stay on record, because the City Hall is legally required to keep them. They are no longer linked to any account, and you can no longer follow them in the app.
When deletion has to wait
- for 7 days after you change your phone number, to protect the account;
- while a card payment is in progress (up to 30 minutes);
- if you have a prepaid balance or an advance payment not yet settled: write to [email protected] and we'll settle it together.
Withdrawing consent and your other rights
- You withdraw the location, camera, photos and microphone permissions in your phone's settings, and notifications in the app's or the phone's settings.
- You can delete your Timi conversations at any time from the conversation history.
- Withdrawing consent doesn't affect processing done before.
For your other GDPR rights (access, rectification, erasure, restriction of processing, portability, objection, and the right not to be subject to an automated individual decision), use the request forms in the City Hall's notice or write to the data protection officer. You can also file a complaint with the Romanian data protection authority (ANSPDCP).
How we protect your data
- All of the app's communication is encrypted (HTTPS).
- Your sign-in session is kept in the phone's secure storage (Keychain on iOS, Keystore on Android).
- Access to data is limited to your own account; sensitive operations require an active session and an SMS code.