1. Data controller
The controller of personal data collected through this website is:
Company
ERGOWARE LTD
17, Triq il-Modd, Ibragg Swieqi, SWQ 2373, Malta
VAT N° MT24207203
Company Registration Number C 80371
This privacy policy covers ergowareltd.com, the English-language corporate website of Ergoware Ltd. It applies to personal data processed through ergowareltd.com .
2. Scope
This policy describes how personal data is processed when users browse www.ergowareltd.com, complete contact forms, send email enquiries, request demos or interact with the content on its pages.
It does not apply to third-party websites, platforms or services reached through external links. Those parties act as independent controllers under their own privacy policies.
3. Types of data processed
Browsing data and technical logs
Normal browsing may involve collecting technical data whose transmission is inherent in the operation of the Internet. Examples include IP addresses, request date and time, the page visited, server response codes, browsers, operating systems, user agents and technical device information.
Data provided voluntarily by users
When a user completes a form, sends an email or requests information, data such as their name, company, role, email address, telephone number, message and other information they choose to provide may be processed.
Statistical data
The website may use statistical measurement tools, now or in the future, to understand in aggregate how users interact with its pages. Statistical cookies or identifiers that are not strictly necessary are activated only with prior consent where required.
Cookie preference data
When a user accepts, rejects or customises cookie preferences, the website may save a technical preference in the browser so that the banner is not shown again on every visit.
4. Processing purposes and legal bases
Technical operation, security and maintenance
Purpose: to ensure the website operates correctly, prevent abuse and manage security, stability and technical diagnostics.
Legal basis: the controller’s legitimate interests under Article 6(1)(f) GDPR.
Handling contact enquiries
Purpose: to respond to requests for information, quotations, calls, consulting, AI agent development, training or other needs expressed by the user.
Legal basis: taking pre-contractual or contractual steps requested by the data subject, Article 6(1)(b) GDPR.
Statistics and website improvement
Purpose: to analyse traffic, pages visited, content performance and the quality of the user experience, where statistical tools are activated.
Legal basis: the user’s consent, Article 6(1)(a) GDPR, when cookies or identifiers that are not strictly necessary are used.
Legal compliance and protection of rights
Purpose: to meet legal obligations, respond to competent authorities or protect the controller’s rights in disputes.
Legal basis: legal obligation or legitimate interest, as applicable.
5. Processing methods
Data is processed using digital, online and organisational tools consistent with the stated purposes. The controller takes reasonable measures to protect data against unauthorised access, loss, alteration or misuse.
Access to data is limited to those who need it for operational, technical, administrative or legal reasons.
6. Data recipients
Data may be processed by:
- staff, employees or advisers authorised by the controller;
- technical providers needed to operate the website, such as hosting, maintenance, security, email and form management services;
- providers of statistical services, CDNs, fonts, icons, external content or connected tools, where activated and within the preferences expressed by the user;
- competent authorities, where required by law.
External providers act as processors or independent controllers, where necessary, according to their respective roles.
7. Place of processing and transfers outside the EEA
The controller operates within the European Economic Area. Some technical providers or third-party services may also process data outside the European Economic Area.
Where this occurs, transfers use the mechanisms provided for by the GDPR, such as adequacy decisions, standard contractual clauses or other applicable safeguards.
8. Retention periods
- Technical logs and security data: retained for the time needed for technical management and website security, unless an investigation into unlawful activity requires otherwise.
- Contact enquiries: retained for the time needed to respond and manage the relationship, normally up to 12 months, unless a subsequent commercial relationship or legal obligations apply.
- Contractual or administrative data: retained for the periods required by applicable tax, accounting and civil legislation.
- Statistical data: retained according to the settings of any tool used and the preferences expressed by the user.
- Cookie preferences: retained to avoid requesting the choice again on every visit, unless deleted by the user.
9. Provision of data
Technical browsing data is necessary for the website to operate. Providing data through forms or email is optional, but not providing it may prevent us from responding.
Consent to any statistical or non-essential cookies is optional and may be withdrawn at any time.
10. Automated decision-making and profiling
The controller does not use data collected through the website for automated decisions that produce legal effects concerning the user or similarly significant effects.
Any statistical data is used for aggregate analysis of website operation and performance, without individual commercial profiling.
11. Data subject rights
Users may exercise the rights set out in Articles 15–22 GDPR, including access, rectification, erasure, restriction, objection, data portability and withdrawal of consent.
To exercise your rights, write to info@ergowareltd.com.
Users also have the right to lodge a complaint with the competent supervisory authority. As the controller is based in Malta, the relevant authority is Malta’s Information and Data Protection Commissioner.
12. Cookie Policy
What cookies are
Cookies are small text files that a website may save in the user’s browser to support the technical operation of pages, remember preferences or collect usage statistics.
Necessary technical cookies
These support the correct operation of the website and do not require user consent. They may be used, for example, to manage security, navigation and the saving of cookie preferences.
Statistical cookies
The website may use statistical measurement tools to analyse traffic and interactions in aggregate. If those tools use cookies or identifiers that are not strictly necessary, they are activated only with user consent where required.
Marketing and profiling cookies
This version of the website does not use marketing or advertising profiling cookies. If advertising, remarketing or profiling tools are introduced in the future, this policy and the cookie banner will be updated before activation.
| Category | Examples | Purpose | Consent |
|---|---|---|---|
| Necessary technical cookies | Cookie preferences, security and technical navigation | Website operation and remembering the user’s choices | Not required |
| Statistical | Any analytics tools, if activated | Aggregate measurement of website use | Required, except where treated as technical under applicable rules |
| Third-party resources and services | Fonts, icons, CDNs, flags, YouTube or other external links and services | Correct display of pages, external content or links to third-party platforms | Depending on the service and interaction |
Managing or withdrawing consent
Users can manage preferences through the website banner or browser settings. Cookies already saved can be deleted and new ones blocked through the browser’s preferences.
External services and third-party links
The website may contain links, images, icons, fonts, videos or technical resources from external services. Interacting with those services may involve processing directly by their providers under their own privacy policies.
YouTube videos activated on request
On the new Brain Company pages and in the Media archive, preview images are hosted on this website. The embedded player loads from youtube-nocookie.com only after the play control is clicked. Activation connects to YouTube/Google services and transmits the technical information needed for that connection; playback is also subject to theprovider’s privacy policy. This embedding method is not described as eliminating all processing by the external service.
13. Updates
The controller may amend this policy to reflect legal, technical or organisational changes. The updated version will be published on this page.