> For the complete documentation index, see [llms.txt](https://docs.efento.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.efento.io/efento-cloud/documents/privacy-policy.md). # Privacy policy By using the Efento Cloud platform (“Site” or “Platform”) you provide us with your data. Below we describe what data we collect, how we use it, your legal rights, and how we handle it. ## Data controller and contact information The data controller responsible for your personal data is Efento Sp. z o.o., with its registered office at Przemyslowa 12, 30-701, Krakow, Poland (hereinafter referred to as "Efento", "we", or "us"). If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us at . ## What data we collect, why, and on what legal basis We process your personal data strictly in accordance with the General Data Protection Regulation (GDPR). The table below outlines what we collect, our purpose, and our legal justification: | **Data category** | **Purpose of processing** | **Legal basis (GDPR)** | | ---------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- | |

Account Data


(Name, surname, email, telephone number, language preference, payment info)

| To register your account, manage your subscription, process payments, and send technical/system notifications. | Contractual Necessity (Art. 6(1)(b) GDPR) – Necessary to provide the Efento Cloud service. | |

Device Information


(Serial numbers of sensors and gateways)

| To link hardware to your account and display correct environmental measurements on the Site. | Contractual Necessity (Art. 6(1)(b) GDPR) – Necessary for the core functionality of the service. | |

Usage Data


(IP address, browser type, device identifiers, system logs)

| To maintain network security, diagnose technical bugs, and optimize platform performance. | Legitimate Interest (Art. 6(1)(f) GDPR) – Our interest in maintaining a secure, functional platform. | |

Location Data


(Only if explicitly enabled on your device)

| To map the physical location of your sensors or gateways within the application interface. | Consent (Art. 6(1)(a) GDPR) – You may grant or withdraw this permission via your device settings at any time. | | Cookies & Similar Technologies | To remember your login state, default language, and analyze usage trends to improve the platform. | Consent (Art. 6(1)(a) GDPR) for non-essential cookies; Legitimate Interest for strictly necessary cookies. | ## How we NOT use your data * No Selling or Sharing: We do not sell or share your data with advertisers or third parties for marketing purposes. * No Automated Profiling: We do not use your data for automated decision-making or profiling that produces legal effects. * No Marketing Without Consent: We will never use your data to send advertising or marketing materials unless you have given us explicit, opt-in consent. ## Data retention: How long we keep your data We do not store your data longer than necessary for the purposes it was collected: * Account Data: Retained for the duration of your active subscription. If you delete your account, your personal profile data is permanently deleted within 30 days. * Measurement Data: Sensor and gateway measurement history is securely retained for a standard period of 6 years to provide you with historical reporting, after which it is automatically purged or anonymized. * Technical Logs: Server and security logs (including IP addresses) are automatically overwritten after 90 days unless required for an active security investigation. ## Who has access to the collected data? Your data is strictly protected, but may be accessed by the following parties under specific conditions: * Administrators of the Site: Designated Efento system administrators can view account details (name, email, phone number, device serial numbers) to provide technical support. They cannot see or change your encrypted password. * Users within your Organization: If you belong to a shared team or organization, other authorized users in that team can see your name and email address in system logs (e.g., when you edit a sensor name or send an invite). * Other Applications (API): You can explicitly authorize third-party software to access your data via the Efento API. We will never share this without your active, system-level authorization. * Legal Obligations: We may disclose data to law enforcement or judicial authorities if strictly required by EU or national law to comply with a legal obligation, prevent fraud, or protect Efento's vital legal rights. ## Data localization All personal data, system logs, and environmental measurements are stored exclusively on secure physical or cloud servers located within the European Economic Area (EEA). We do not transfer your personal data outside the EEA. ## Your GDPR rights As a data subject in the EU, you hold the following statutory rights, which you can exercise by emailing us or using your profile settings: * Right of Access (Art. 15): You can request a copy of all personal data we hold about you. * Right to Rectification (Art. 16): You can update inaccurate data directly via your Profile tab. * Right to Erasure / "To Be Forgotten" (Art. 17): You can delete your data by deleting your account via the Profile tab. * Right to Restrict Processing (Art. 18): You have the right to limit how we process your data under certain conditions. * Right to Object (Art. 21): You can object to data processing based on our "legitimate interests." * Right to Data Portability (Art. 20): You can request a machine-readable export of the data you provided to us. * Right to Withdraw Consent: Where processing is based on consent (e.g., location/cookies), you can withdraw it at any time without penalty. * Right to Lodge a Complaint: If you believe Efento is processing your data unlawfully, you have the absolute right to lodge a formal complaint with a supervisory authority. You can contact the local data protection authority in your EU Member State, or our lead supervisory authority: The President of the Personal Data Protection Office (UODO) in Poland (*ul. Stawki 2, 00-193 Warsaw, Poland*). ## Corporate changes and policy updates * Corporate Mergers/Acquisitions: If Efento is involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you well in advance via email, giving you the opportunity to delete your account or object before the transfer takes place. * Policy Updates: We may update this Privacy Policy from time to time. The latest version will always be live on this page, and material changes will be announced to you via an in-app notice or email notification. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.efento.io/efento-cloud/documents/privacy-policy.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.