1. Optional website analytics
With your consent, Google Analytics 4, delivered through Google Tag Manager, measures page visits, engagement and scrolling to help us improve this website. Google receives browser/device information, page paths and pseudonymous cookie identifiers. We do not send contact-form content, chat content or URL query parameters to Analytics. Advertising tags and Google signals are not enabled. The legal basis is your consent, which you can withdraw through Cookie settings in the footer without affecting previous lawful processing. Google processes analytics data under its applicable data-processing terms; processing may involve countries outside the EEA. See policies.google.com/privacy and business.safety.google/adsprocessorterms/ for Google information.
2. Who is responsible
Ergonya is operated by GIM Agency. The operator is responsible for the personal data described in this notice. Our contact address is 20 Polyklitou, Ilioupoli 16341, Greece. For privacy enquiries and requests, email hello@ergonya.com. This notice concerns the Ergonya website; individual client projects may require separate privacy information and processing agreements.
3. What we collect
The contact form asks for your name, business email, company or professional activity and a description of your enquiry. You may also provide team size, service interest and information about the frequency or cost of a process. We receive the language and time of submission. Required fields are needed to handle the enquiry; other fields are optional. Please do not include passwords, health information or confidential personal data about other people.
Our hosting infrastructure may process IP addresses, requested URLs, browser information and timestamps for delivery, diagnostics and security. The contact endpoint uses an IP-derived hash and a timestamp to limit repeated submissions. This is server-side processing, not a browser tracking cookie.
4. Why we use it and the legal basis
We use enquiry details to respond, understand your requirements and take steps you request before a possible contract (Article 6(1)(b) GDPR). For enquiries on behalf of an organisation and ordinary business correspondence, we rely on our legitimate interest in communicating with prospective clients (Article 6(1)(f)). Security and abuse prevention also serve our legitimate interest in protecting the website and its users. Where records must be retained to comply with law, the basis is Article 6(1)(c).
Sending a brief does not subscribe you to a newsletter. The form’s permission to contact you about that enquiry is not permission for unrelated marketing. If we request consent for another purpose, it must be specific and can be withdrawn without affecting earlier lawful processing.
5. Who can receive the data
Access is limited to team members and service providers who need the information to handle enquiries, host and maintain the website, or provide email and enquiry-management services. The form supports delivery through an authorised integration and email fallback. Authorities or professional advisers may receive information where required by law or necessary for a legal claim. External links take you to services with their own privacy notices.
If a provider processes personal data outside the European Economic Area, the relevant transfer must have a lawful safeguard, such as an adequacy decision or standard contractual clauses with any necessary additional measures. Contact us for information about the providers and safeguards relevant to your enquiry.
6. How long information is kept
Enquiry correspondence is retained while needed to answer the request, manage an ongoing discussion and deal with related questions or claims. If a relationship develops, contractual and accounting records follow applicable legal retention requirements. Security information is retained according to its operational purpose and any incident or legal preservation needs. We review whether information is still necessary; we do not treat an initial enquiry as permission to retain it indefinitely.
7. Your rights
Depending on the legal basis and circumstances, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Where consent applies, you may withdraw it. We may ask for proportionate information to verify your identity. We normally respond within one month; if a lawful extension is needed, we explain it within that period.
You may complain to the Hellenic Data Protection Authority (dpa.gr), or another competent supervisory authority. Contacting us first is helpful but is not a condition for making a complaint.
8. Security and AI
We use technical and organisational measures appropriate to the information and risk, but no internet service can guarantee absolute security. The website’s enquiry form does not itself make automated decisions with legal or similarly significant effects. Do not send confidential datasets through a public form or an AI demonstration; agree a suitable secure channel with us first.
9. Parev AI voice and text assistant
Parev AI is an optional AI assistant provided through app.parevai.com. You choose voice or text; voice requires browser microphone permission. Audio and conversation text are processed by OpenAI to generate responses. Ergonya stores the conversation text for 30 days, with access limited to its authorised team. Ergonya does not store the audio. This 30-day period concerns our conversation records, not a promise about every provider’s own retention.
If you submit the optional callback form, we receive your name, mobile number and request, together with the source page and any campaign parameters retained by the widget. Callback details in the Parev AI system are retained for 30 days. Delivered notification emails and subsequent correspondence follow the general enquiry-retention practice described above. This does not subscribe you to a newsletter. Browser storage used for conversation continuity, usage limits, microphone choice and campaign attribution is described in the Cookie Policy. You can end the conversation and revoke microphone permission in your browser. The widget loads asynchronously with the page; starting a conversation is optional. Do not share passwords, sensitive personal information or confidential datasets with Parev AI.
10. Changes to this notice
We update this page when the website or relevant processing changes. The date below identifies this version.