Privacy Policy

1. Who we are

This Privacy Policy explains how Ermogon processes personal data when you visit the platform, create an account, use the window configurator, or manage a company tenant. For running the platform, the controller is {{operatorName}}, VAT {{operatorVat}}, registered seat {{operatorSeat}}. It decides why and how this personal data is used. Partners may process data separately when they handle your order or inquiry.

2. Data we collect

Depending on how you use Ermogon, we may process:

• Identity and contact data: name, email, phone number, preferred language.
• Account and security data: password hash, verification status, MFA settings, login history, IP address, and device/session metadata.
• Company data (tenant signup): company name, legal name, VAT/AFM, address, subscription plan.
• Configurator and inquiry data: product configuration, measurements, addresses, notes, and related documents you upload or select.
• Technical and usage data: language preference, essential cookies/local storage flags, and basic operational logs needed to keep the service secure and reliable.

3. Why we process data (legal bases)

We process personal data to create and secure your account (contract / pre-contract steps), verify email and phone, prevent abuse (legitimate interests and legal obligations), provide the configurator and inquiry features you request (contract / consent where required), and comply with accounting or regulatory duties where applicable. Marketing communications, if any, require separate consent.

4. Sharing

We do not sell personal data. We do not share confidential customer data with advertisers. Data may be shared with: the business you choose for an inquiry or order (so they can respond), infrastructure providers strictly necessary to run the platform (hosting, email/SMS delivery, CAPTCHA), and authorities when required by law. Processors act under instructions and appropriate safeguards.

5. Retention

We keep account and inquiry data for as long as your account is active and as needed for the purposes above, then delete or anonymize it according to retention rules and legal requirements. Signup verification sessions expire automatically. Security logs are kept only as long as needed for abuse prevention and incident response.

6. Your rights (GDPR)

Where GDPR or equivalent law applies, you may request:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure (“right to be forgotten”) where legally applicable.
• Restriction of or objection to certain processing.
• Data portability for data you provided, where applicable.

7. Security

We use technical and organizational measures such as encrypted transport, password hashing, tenant isolation, rate limiting, and access controls. No method of transmission or storage is perfectly secure. Please protect your credentials.

8. Cookies in this application

This application uses the following essential cookies and storage. It does not run advertising cookies. Google Analytics processes usage data only after you choose Accept. Essential only sends nothing to Google. See the Cookie Policy for the separate choice used by the public website.