Privacy and Cookie Policy

Privacy and Cookie Policy for ergowareltd.com.

This page contains the privacy and cookie notice for ergowareltd.com, connected to Antonio Di Chiano’s professional activity and to the services provided by Ergoware Ltd. The content is written clearly to explain which data may be processed, for which purposes and with which safeguards.

Last updated: 4 November 2026

1. Data controller

The controller of personal data collected through this website is:

Company

ERGOWARE LTD

17, Triq il-Modd, Ibragg Swieqi, SWQ 2373, Malta

VAT N° MT24207203
Company Registration Number C 80371

Privacy contact

info@ergowareltd.com

Contact person and CEO: Antonio Di Chiano

This privacy policy covers ergowareltd.com, the English-language corporate website of Ergoware Ltd. It applies to personal data processed through ergowareltd.com .

2. Scope

This policy describes how personal data is processed when users browse www.ergowareltd.com, complete contact forms, send email enquiries, request demos or interact with the content on its pages.

It does not apply to third-party websites, platforms or services reached through external links. Those parties act as independent controllers under their own privacy policies.

3. Types of data processed

Browsing data and technical logs

Normal browsing may involve collecting technical data whose transmission is inherent in the operation of the Internet. Examples include IP addresses, request date and time, the page visited, server response codes, browsers, operating systems, user agents and technical device information.

Data provided voluntarily by users

When a user completes a form, sends an email or requests information, data such as their name, company, role, email address, telephone number, message and other information they choose to provide may be processed.

Statistical data

The website may use statistical measurement tools, now or in the future, to understand in aggregate how users interact with its pages. Statistical cookies or identifiers that are not strictly necessary are activated only with prior consent where required.

Cookie preference data

When a user accepts, rejects or customises cookie preferences, the website may save a technical preference in the browser so that the banner is not shown again on every visit.

4. Processing purposes and legal bases

Technical operation, security and maintenance

Purpose: to ensure the website operates correctly, prevent abuse and manage security, stability and technical diagnostics.

Legal basis: the controller’s legitimate interests under Article 6(1)(f) GDPR.

Handling contact enquiries

Purpose: to respond to requests for information, quotations, calls, consulting, AI agent development, training or other needs expressed by the user.

Legal basis: taking pre-contractual or contractual steps requested by the data subject, Article 6(1)(b) GDPR.

Statistics and website improvement

Purpose: to analyse traffic, pages visited, content performance and the quality of the user experience, where statistical tools are activated.

Legal basis: the user’s consent, Article 6(1)(a) GDPR, when cookies or identifiers that are not strictly necessary are used.

Legal compliance and protection of rights

Purpose: to meet legal obligations, respond to competent authorities or protect the controller’s rights in disputes.

Legal basis: legal obligation or legitimate interest, as applicable.

5. Processing methods

Data is processed using digital, online and organisational tools consistent with the stated purposes. The controller takes reasonable measures to protect data against unauthorised access, loss, alteration or misuse.

Access to data is limited to those who need it for operational, technical, administrative or legal reasons.

6. Data recipients

Data may be processed by:

  • staff, employees or advisers authorised by the controller;
  • technical providers needed to operate the website, such as hosting, maintenance, security, email and form management services;
  • providers of statistical services, CDNs, fonts, icons, external content or connected tools, where activated and within the preferences expressed by the user;
  • competent authorities, where required by law.

External providers act as processors or independent controllers, where necessary, according to their respective roles.

7. Place of processing and transfers outside the EEA

The controller operates within the European Economic Area. Some technical providers or third-party services may also process data outside the European Economic Area.

Where this occurs, transfers use the mechanisms provided for by the GDPR, such as adequacy decisions, standard contractual clauses or other applicable safeguards.

8. Retention periods

  • Technical logs and security data: retained for the time needed for technical management and website security, unless an investigation into unlawful activity requires otherwise.
  • Contact enquiries: retained for the time needed to respond and manage the relationship, normally up to 12 months, unless a subsequent commercial relationship or legal obligations apply.
  • Contractual or administrative data: retained for the periods required by applicable tax, accounting and civil legislation.
  • Statistical data: retained according to the settings of any tool used and the preferences expressed by the user.
  • Cookie preferences: retained to avoid requesting the choice again on every visit, unless deleted by the user.

9. Provision of data

Technical browsing data is necessary for the website to operate. Providing data through forms or email is optional, but not providing it may prevent us from responding.

Consent to any statistical or non-essential cookies is optional and may be withdrawn at any time.

10. Automated decision-making and profiling

The controller does not use data collected through the website for automated decisions that produce legal effects concerning the user or similarly significant effects.

Any statistical data is used for aggregate analysis of website operation and performance, without individual commercial profiling.

11. Data subject rights

Users may exercise the rights set out in Articles 15–22 GDPR, including access, rectification, erasure, restriction, objection, data portability and withdrawal of consent.

To exercise your rights, write to info@ergowareltd.com.

Users also have the right to lodge a complaint with the competent supervisory authority. As the controller is based in Malta, the relevant authority is Malta’s Information and Data Protection Commissioner.

13. Updates

The controller may amend this policy to reflect legal, technical or organisational changes. The updated version will be published on this page.