top of page

Privacy Policy

Last updated: September 12th, 2025

​

This Privacy Policy describes how Sorta ASBL collects, uses, and protects your personal data when you use the Sorta mobile application and related services.

By using the Sorta app or website, you agree to the terms outlined in this Privacy Policy.

1. Who We Are

Company Name: Sorta ASBL
 Registered Office: 6, rue de l’Industrie, L-3843 Schifflange, Luxembourg
 Contact email: contact@sorta.lu
 Website: www.sorta.lu

2. Information We Collect

  • Personal Data: Name, email, language preference, and location (if permissions granted).

  • Usage Data: Pages visited, interaction patterns, device identifiers, and CO₂/waste sorting data for impact tracking.

  • Photos/Scans: If you use the barcode scanner or upload photos of packaging, images may be stored to improve our waste recognition AI.
     

2.1 Cookies & Tracking

​When you visit our website, we may use cookies and similar technologies to enhance your experience, analyze site traffic, and improve our services. Cookies may collect information such as your browser type, device, and pages visited. You can manage or disable cookies through your browser settings.

3. Why We Collect Your Data

We use your data to:

  • Provide sorting instructions and location-specific recycling info

  • Track your environmental impact (e.g., CO₂ saved, waste diverted)

  • Improve our AI-based waste recognition tool

  • Send reminders (e.g., collection days)

  • Analyze how users interact with the app to improve features

Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

• Contract: to provide you with the services you request when using the app or website.

• Consent: for optional features such as location data, push notifications, and barcode/photo uploads.

• Legitimate interest: to analyze and improve our services and user experience.

• Legal obligation: where we must comply with applicable laws or regulatory requirements.

4. Who Has Access to Your Data

We may share anonymized data with:

  • Municipalities and recycling partners

  • Cloud-based infrastructure and analytics providers

  • Public institutions for ESG and circular economy reporting
     

We do not sell your data. All shared data is anonymized and aggregated unless otherwise required by law. If we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries with adequacy decisions.

5. Children’s Privacy

Sorta is not intended for children under 16 years of age. If you are under 16, you may only use Sorta with the consent of your parent or legal guardian. We do not knowingly collect personal data from children. If a parent or guardian becomes aware that a child has submitted personal data without consent, please contact us.

6. Your Rights

Under the EU GDPR, you have the following rights:

  • Access: to request a copy of the personal data we hold about you.

  • Rectification: to correct inaccurate or incomplete data.

  • Erasure: to request deletion of your personal data.

  • Restriction: to request limitation of how we process your data.

  • Portability: to request your data in a structured, commonly used format.

  • Objection: to object to certain types of processing, including direct marketing.

  • Withdraw consent: where processing is based on consent, you can withdraw it at any time.
     

We aim to respond to all requests within 30 days.

You also have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD), the Luxembourg data protection authority.

7. Security

We use industry-standard security measures to protect your personal data. However, no system can guarantee 100% security.

8. Retention

We retain your personal data only for as long as necessary for the purposes described in this Policy or to comply with legal obligations. Specifically:

  • Account information: retained for as long as your account is active, and deleted after 24 months of inactivity.

  • Photos and barcode scans: retained for 6 months to improve AI recognition, then deleted or anonymized.

  • Analytics data: anonymized after 12 months.

  • Communication records (support emails, requests): retained for up to 3 years for accountability and legal compliance.

9. Changes to this Policy

We may update this Privacy Policy from time to time. Major changes will be communicated via app notification or email.

10. Contact Us

If you have any questions or requests regarding this policy, contact us:

Email: contact@sorta.lu
Website: www.sorta.lu

bottom of page