Privacy Policy

Who is responsible

The controller for the personal data described here is:

• Eracons doo Novi Sad
• [potvrditi: ulica i broj]
• [potvrditi: poštanski broj] Novi Sad, Serbia
• info@eracons.io

If you have a question about this policy or about your data, write to info@eracons.io and we will answer it ourselves.

What we collect

What you send us through a form. This website has two forms — the free assessment request and the contact form. Between them they ask for your name, your business email address, your company, your role, the system you run, what is coming up, and a message. Every field except the message is there because it changes the answer we can give you; none of them is used for anything else.

Your consent. Both forms have a checkbox you have to tick before the form can be sent. We store the fact that you ticked it, together with the request.

Server logs. Our web server records the usual technical data for every request: the IP address, the time, the page requested, the referring page and the browser's user agent string. This is not linked to the form data and is not used to build a profile.

This website sets no cookies and runs no analytics or tracking scripts. There is nothing to consent to, which is why you are not being asked to.

Why we use it, and on what legal basis

• Form submissions — to answer your request and, if it leads somewhere, to prepare and carry out an engagement. Legal basis: steps taken at your request prior to a contract, GDPR art. 6(1)(b), and our legitimate interest in answering business inquiries, art. 6(1)(f).
• Server logs — to keep the site available and secure and to find faults. Legal basis: our legitimate interest in operating the site securely, GDPR art. 6(1)(f).

We do not use your data for automated decision-making, we do not profile you, and we do not sell or rent it to anybody.

Who processes it for us

• Our web partner, DigitalCube [potvrditi: puno pravno ime i sedište], which develops, hosts and maintains this website for us. The server is in the EU [potvrditi: zemlja i provajder].
• Microsoft (Microsoft Ireland Operations Ltd. and its affiliates), for our email and for the Microsoft Bookings page behind the "Book a 30-minute call" button. If you use that button, you leave this website and Microsoft's privacy terms apply to the booking. Microsoft may process data outside the EEA under the European Commission's standard contractual clauses.
• thilo.ai, the project board our web partner operates, which receives each form submission as a work item so the request can be tracked until it is answered. It is an internal tool; the data in it is not public.

Each of them acts on our instructions only, under a data processing agreement.

How long we keep it

• Form submissions and the correspondence that follows them: 24 months after our last contact about them, unless they become part of a contract, in which case the retention periods of that contract and of Serbian accounting law apply.
• Server logs: 30 days [potvrditi], then deleted.

Your rights

Wherever the GDPR applies to you, you have the right to ask us for access to your data, to have it corrected, to have it erased, to have its processing restricted, to receive it in a portable form, and to object to processing that rests on our legitimate interest. Where we rely on consent, you may withdraw it at any time, with effect for the future.

Write to info@eracons.io and we will act on the request. You also have the right to complain to a supervisory authority — in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection; in the EU, the authority of the country you live or work in.

Changes

If this policy changes, the new version is published here with a new date. The date at the top of this page is the version currently in force.