Guide
GDPR-compliant drone photogrammetry processing in the EU without subscriptions
EU controller in Lithuania, storage in Finland and paid processing in the EU. How we handle drone imagery for GDPR with pay per job and deletion after 30 days for Basic and 365 days for Full Service.
Bottom line
GIJA HUB MB in Vilnius, Lithuania operates Forresten and GIJA MAPS. Your uploaded images and results are stored in the EU with Hetzner in Finland. Paid processing runs only on temporary servers in the EU with Hetzner and Google Cloud. Data is kept 30 days for Basic and 365 days for Full Service, or deleted earlier on request. Pay per job with no subscription.
Why EU matters for drone data
Drone imagery often shows construction sites, infrastructure, fields and property with precise location. For many EU companies it matters which company is controller, where data is stored, and where processing happens.
An EU controller means your GDPR rights apply directly. Storage and paid processing in the EU means your images and results are not routinely transferred to third countries during photogrammetry itself.
If you process confidential surveys, contact us before upload so we can arrange appropriate delivery and access control for results.
Where your data lives and is processed
We separate paid photogrammetry from the rest of the platform so you can assess transfers concretely.
- Controller: GIJA HUB MB, Polocko g. 4B-20, Vilnius, Lithuania, company code 307210538.
- Storage of images and results: Hetzner in Finland, EU.
- Paid processing: temporary servers in the EU with Hetzner and Google Cloud, only while the job runs.
- We have bare-metal servers in European data centres and a physical server in an EU office. The physical machine is used only for custom jobs with client approval and can provide a better price when the job fits the capacity.
- Platform operation: website, API, database, viewer and CAPTCHA at OVH, outside the EU for some parts. Transfers are assessed under GDPR with the required safeguards, see the Privacy Policy.
- Optional: Google Sign-In involves a transfer of your email address to Google in the USA. You can always use email and password instead.
How long we keep data
Images, job data and results are kept 30 days for Basic and 365 days for Full Service from creation, or until earlier deletion on your request. Write to agne@gijahub.com and we will delete your data early.
Result share links stay active while your data is stored. The link is protected by a unique token without a password. You are responsible for keeping it confidential.
Security logs are kept 90 days. Payment references are kept as required by financial law, typically 5 years. Account deletion on request.
Who can see your data
You retain the rights you have in your images and results. GIJA HUB MB does not claim ownership. To provide the service you grant us and our processors a limited right to host, process and deliver the material, only for purposes described in the Privacy Policy.
Automated processing requires access to the full dataset you submit. We do not routinely inspect images or outputs manually. If a job fails, behaves unexpectedly or needs troubleshooting for security or reliability, authorised personnel may access the smallest relevant portion, such as logs, metadata or a limited sample of files. Full access is used only where necessary.
We do not use your images or results to train models.
Limitations
No monthly image allowance does not mean unlimited capacity. Large or demanding datasets are assessed beforehand based on images, overlap, output, processing time and capacity.
Anonymous, cookieless website analytics at a US provider processes no personal data and is separate from paid photogrammetry. See the Privacy Policy for details.
Frequently asked questions
Is Forresten GDPR-compliant for drone data in the EU?
Forresten is operated by GIJA HUB MB in Vilnius as EU controller. Storage is in Finland, paid processing is in the EU with Hetzner and Google Cloud, and retention is 30 days for Basic and 365 days for Full Service. The Privacy Policy describes legal bases, processors and transfers. Contact us before uploading particularly confidential data.
Where are my images stored and processed?
Images and results are stored in the EU with Hetzner in Finland. Paid processing runs on temporary servers in the EU with Hetzner and Google Cloud. Platform operation at OVH may involve processing outside the EU for website, API, database and viewer, see the Privacy Policy for safeguards.
How long do you keep my data and can I have it deleted early?
30 days for Basic and 365 days for Full Service from creation, or until earlier deletion on your request to agne@gijahub.com. Security logs 90 days, payment references as required by financial law.
Do you take ownership of my images or outputs?
No. You retain the rights you have. We receive only a limited right to process and deliver your material as described in the Terms.
Do you use my images for AI training?
No. We do not use your images or results to train models.
Sources and further reading
Start here if you want to see the legal documents or understand the pay per job model.
Privacy Policy
Controller, retention, processors and transfers.
Terms of Service
Pricing, delivery, intellectual property and liability.
Why we built GIJA MAPS
Why pay per job can be the right model for routine and seasonal work.
Orthophoto without subscription
When pay per job makes sense and what it costs.
Do you have a confidential dataset?
Contact us before upload if you need access-controlled delivery. Otherwise create an account and upload directly.