What we do with your data in plain terms

This notice explains how openDAQ d.o.o. handles personal data collected through this website. It does not cover the openDAQ SDK itself which you may download and run without giving us any information at all. It also does not cover other websites we link to.

We are the data controller for the processing described here. If you are in the European Economic Area the General Data Protection Regulation (GDPR) applies to it.

Information you send us. When you write to us by email we receive whatever you choose to put in the message. This is typically your name, organisation, email address and a description of what you are working on.

Information you send through the contact form. The form asks for your name, your company, your email address and your message. The website stores none of it. It is relayed to our inbox as one email through our email delivery provider and handled like any other email you send us.

Information you give when booking a call. Our contact page can open a scheduling calendar provided by Calendly. Nothing is sent to Calendly until you choose to open that calendar. From that point Calendly receives your IP address. If you complete a booking it receives your name, email address, time zone and any answers you give and it sets its own cookies in your browser. You can book without loading it into our page by opening the scheduling link directly.

Technical information. Like any web server ours records standard log data when a page is requested. This includes the IP address, browser type, the page requested and the time of the request.

We do not ask for special categories of personal data such as health, political or biometric information and we would rather you did not send them.

This website sets no cookies until you choose to allow them. There are no advertising pixels and no cross-site tracking of any kind whatever you choose.

If you accept we load Google Analytics. It sets cookies to recognise a returning browser and tells us how many people read each page. We have IP anonymisation enabled so addresses are truncated before they are stored. We have not enabled advertising features, data sharing with other Google products or user-ID tracking. We cannot see who you are from it.

If you decline nothing loads and no cookies are set. The site behaves identically. None of it depends on analytics.

There is one exception either way. We store your choice itself in your browser so that we do not ask again on every page. It contains only the word “accepted” or “rejected”. It never leaves your device and is not used for anything else.

Typefaces are served from this website rather than from a third-party font service so viewing a page does not disclose your visit to a font provider.

The scheduling calendar on the contact page works the same way. Its code and cookies come from Calendly and none of it is requested until you click to load it. Simply visiting the contact page contacts nobody but us.

You can change or withdraw your choice at any time using the “Cookie settings” link at the foot of every page. Withdrawing consent stops any further collection. It does not undo what was collected while consent was in place.

Clearing your browser storage for this site also clears the record of your choice and we will ask again on your next visit.

We do not sell personal data and we do not share it for anyone else's marketing. We disclose it only in the following situations:

We keep personal data within the European Economic Area wherever we can. Where a provider processes data outside the EEA we rely on a European Commission adequacy decision or on Standard Contractual Clauses together with any additional safeguards those require. You may ask us for details of the safeguards that apply.

Booking a call involves a transfer to Calendly LLC in the United States. Calendly is certified under the EU–US Data Privacy Framework and Standard Contractual Clauses apply in addition. This transfer happens only if you open the scheduling calendar or book a call.

Google Analytics involves a transfer to Google LLC in the United States. Google is certified under the EU–US Data Privacy Framework which the European Commission has found to provide an adequate level of protection. Standard Contractual Clauses apply in addition. This transfer happens only if you accept analytics cookies.

We keep personal data only as long as we need it for the purpose it was collected for as set out in the table above and then delete it. Where a statutory retention period applies (for example to accounting records) we keep the data for that period and no longer.

Under the GDPR you have the right to:

Write to info@opendaq.com and tell us what you would like us to do. We will respond within one month. If your request is unusually complex we may extend that by a further two months and we will tell you if so.

There is no charge for making a request. We may ask you to confirm your identity before we act on one so that we do not disclose your data to someone else.

If you think we have handled your personal data improperly please tell us first. It is usually the quickest way to put something right.

You also have the right to complain to a supervisory authority. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si. If you live or work in another EEA country you may complain to the supervisory authority there instead.

We do not make decisions about you by automated means and we do not profile you.

We update this notice when what we do with personal data changes. The date at the top shows when it was last revised. Where a change materially affects you we will make that clear rather than amending the text without notice.