Privacy Policy

Who is responsible

The controller for the personal data described here is:

• Eracons doo Novi Sad
• Đorđa Rajkovića 24/18
• 21000 Novi Sad, Serbia
• info@eracons.io

If you have a question about this policy or about your data, write to info@eracons.io and we will answer it ourselves.

What we collect

What you send us through a form. This website has two forms — the free assessment request and the contact form. Between them they ask for your name, your business email address, your company, your role, the system you run, what is coming up, and a message. Every field except the message is there because it changes the answer we can give you; none of them is used for anything else.

Your consent. Both forms have a checkbox you have to tick before the form can be sent. We store the fact that you ticked it, together with the request.

Server logs. Our web server records the usual technical data for every request: the IP address, the time, the page requested, the referring page and the browser's user agent string. This is not linked to the form data and is not used to build a profile.

Usage statistics, only with your consent. When you first visit, a banner at the bottom of the page asks whether we may use Google Analytics and Leadinfo. Only if you click Accept does Google Analytics 4 run: it sets the two cookies listed below and records the pages you view, the page you came from, the approximate location derived from your IP address (the address itself is not stored), and your device, browser and screen size. If you click Reject, or do nothing, Google Analytics does not run, sets no cookies and records nothing about your visit.

Which companies visit, only with your consent. If you click Accept, the site also loads Leadinfo, a tool that shows our sales team which companies visit this website. Leadinfo looks up the IP address your visit comes from in its own database of companies and their IP addresses, and shows us the company's name together with the pages viewed, the page you came from, and the time and length of the visit. It does not tell us who you are. When you are online from home, over mobile data or through a VPN, the address usually belongs to your internet provider and no company is shown. Leadinfo sets no cookies and stores nothing in your browser; to recognise the same browser during one day it computes an identifier from the browser's characteristics (browser, language, screen size). If you type an email address into one of our forms, Leadinfo receives it shortened — only the first and the last letter before the @, and the full domain — so it can match the visit to a company. If you click Reject, or do nothing, Leadinfo is not loaded at all.

Google Analytics and Leadinfo are loaded through Google Tag Manager, a Google script that decides which measurement may run and waits for your choice. Tag Manager is fetched from Google's servers on every page view, so Google receives the technical data every web request carries (IP address, browser user agent); Tag Manager itself sets no cookies.

Cookies and local storage

This is everything this website stores in your browser.

After 12 months, or when we change what we measure, the banner asks again. You can change your choice at any time with Cookie settings at the bottom of every page. If you withdraw consent, the Google Analytics cookies are deleted from your browser at once, and if Leadinfo is running, the page reloads so that it stops.

Why we use it, and on what legal basis

• Form submissions — to answer your request and, if it leads somewhere, to prepare and carry out an engagement. Legal basis: steps taken at your request prior to a contract, GDPR art. 6(1)(b), and our legitimate interest in answering business inquiries, art. 6(1)(f).
• Server logs — to keep the site available and secure and to find faults. Legal basis: our legitimate interest in operating the site securely, GDPR art. 6(1)(f).
• Usage statistics (Google Analytics) — to see which pages are read and how visitors find the site, so we can improve it. Legal basis: your consent, GDPR art. 6(1)(a), which you can withdraw at any time through Cookie settings at the bottom of every page, with effect for the future.
• Which companies visit (Leadinfo) — so our sales team can see which companies visit the site and how often, including companies we are already in touch with. Legal basis: your consent, GDPR art. 6(1)(a), which you can withdraw at any time through Cookie settings at the bottom of every page, with effect for the future.
• Remembering your cookie choice — so the banner does not come back on every page and so we can show that we asked. Legal basis: our legitimate interest in respecting your choice, GDPR art. 6(1)(f); storing it in your browser is strictly necessary and needs no consent.

We do not use your data for automated decision-making, we do not build profiles of individual people, and we do not sell or rent your data to anybody.

Who processes it for us

• Our web partner, DigitalCube [potvrditi: puno pravno ime i sedište], which develops, hosts and maintains this website for us. The server is in the EU [potvrditi: zemlja i provajder].
• Microsoft (Microsoft Ireland Operations Ltd. and its affiliates), for our email and for the Microsoft Bookings page behind the "Book a 30-minute call" button. If you use that button, you leave this website and Microsoft's privacy terms apply to the booking. Microsoft may process data outside the EEA under the European Commission's standard contractual clauses.
• Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), for Google Tag Manager and, only with your consent, Google Analytics 4. Google may transfer the data to Google LLC in the United States; Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision.
• Leadinfo (Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, the Netherlands), only with your consent, for the company identification described above. Leadinfo processes the visit data for us; for its own database of companies and their IP addresses, which it uses to name the company behind a visit, it is a controller in its own right. Leadinfo may share data with parties outside the EEA only where appropriate safeguards are in place. Its privacy policy describes this, and you can object to its processing directly at privacy@leadinfo.com.
• thilo.ai, the project board our web partner operates, which receives each form submission as a work item so the request can be tracked until it is answered. It is an internal tool; the data in it is not public.

Each of them acts on our instructions only, under a data processing agreement; where one of them is also a controller in its own right, this is said above.

How long we keep it

• Form submissions and the correspondence that follows them: 24 months after our last contact about them, unless they become part of a contract, in which case the retention periods of that contract and of Serbian accounting law apply.
• Server logs: 30 days [potvrditi], then deleted.
• Google Analytics data: 14 months, then deleted by Google. The cookies stay in your browser for the times listed in the table above, unless you delete them or withdraw consent.
• Leadinfo data: for as long as we use Leadinfo; when we stop, the data is deleted with our account.

Your rights

Wherever the GDPR applies to you, you have the right to ask us for access to your data, to have it corrected, to have it erased, to have its processing restricted, to receive it in a portable form, and to object to processing that rests on our legitimate interest. Where we rely on consent, you may withdraw it at any time, with effect for the future.

Write to info@eracons.io and we will act on the request. You also have the right to complain to a supervisory authority — in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection; in the EU, the authority of the country you live or work in.

Changes

If this policy changes, the new version is published here with a new date. The date at the top of this page is the version currently in force.