Privacy & GDPR

Last updated: July 11, 2026

Who is responsible for your data

Daniel Jansen (ErgoFlow) is the data controller for personal data processed through this website and assessment tool.
Contact: kontakt@ergoflow.dk

What we collect, and why

• Answers about physical discomfort or pain — this counts as data concerning health, a "special category" of data under GDPR Article 9, not ordinary personal data. Before any assessment begins, you're asked for a specific, standalone consent confirming you agree to this being processed to generate your recommendation. Legal basis: explicit consent, Article 6(1)(a) together with Article 9(2)(a). You can decline and the tool won't proceed.
• Other assessment answers (chair, desk, monitor setup, etc.) — ordinary personal data, stored locally in your own browser, not on a central server, unless you explicitly click "Save" to keep a named record for your own future reference — saving still keeps it on your device only, never on a server we control. Legal basis: legitimate interest in providing the tool's core function (Art. 6(1)(f)).
• An optional name/reference you type in — used only to label your own saved assessment, stored the same way (locally). Legal basis: your action of saving it (Art. 6(1)(a)).
• An optional photo of your desk — sent once to an AI model to help pre-fill answers. See "Where photo analysis happens" below for exactly how long it's retained. Legal basis: consent (Art. 6(1)(a)) — you choose to upload it. Please avoid including other people, screens showing personal information, or documents with names in the photo.
• Contact form submissions (name, email, phone number if you choose to provide it, message) — used solely to respond to your enquiry. Legal basis: legitimate interest / pre-contractual steps (Art. 6(1)(b)/(f)).

Confirming "Save" never leaves your device

The tool is built to use your browser's own local storage for everything above — not a database we control. This isn't just a policy promise: if you inspect the tool, saved assessments only ever call your browser's standard storage mechanism, with no network request involved in saving. Clearing your browser's site data removes it completely and permanently, on your end only.

Who we share data with (data processors)

We use a small number of external services to run the tool and site. Each acts as a data processor on our behalf:

• Anthropic (Claude API) — processes uploaded photos for one-time analysis. Anthropic retains API inputs and outputs for a limited period (currently up to 7 days) for abuse and safety monitoring, then deletes them; they are not used to train Anthropic's models. Anthropic is based in the US; data transfers rely on their standard contractual safeguards. See Anthropic's privacy policy for current details — worth re-checking periodically, as retention terms can change.
• Cloudflare — hosts the site, routes photo-analysis requests, handles contact-form submissions, and forwards incoming mail to kontakt@ergoflow.dk. See Cloudflare's privacy policy.
• Resend — delivers contact-form messages to our inbox by email. See Resend's privacy policy.
• Google (Gmail) — receives contact-form messages, since kontakt@ergoflow.dk forwards to a Gmail inbox. See Google's privacy policy.

We don't sell personal data, and we don't use it for advertising.

How long we keep it

Assessment answers and photos: not retained by us at all beyond Anthropic's short-term abuse-monitoring window described above (photos), or retained only on your own device until you delete them (answers/saved assessments) — we have no access to either. Contact form messages: kept only as long as needed to handle your enquiry, typically no longer than 12 months, unless an ongoing client relationship requires otherwise.

Cookies & similar technologies

This site does not use tracking or advertising cookies. Ergo Tool uses your browser's local storage (not a cookie) purely to save your own in-progress answers — this is strictly necessary for the tool to function and falls under the same exemption as essential cookies, so no consent banner is shown for it.

Typefaces are self-hosted on our own server rather than loaded from Google Fonts — your browser never contacts Google's servers just to render this page, so there's no incidental IP-address transfer to disclose here.

Your rights under GDPR

You have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict its processing, including withdrawing consent at any time (for the discomfort-data consent specifically, simply don't proceed past the consent step, or stop using the tool — nothing is retained centrally to withdraw from). Since most assessment data lives only in your own browser, you're already in direct control of it — view, export, or delete it anytime from within the tool. For anything held by us directly (e.g. a contact form message), email the address above; we'll respond within one month, as required by law.

Complaints

If you believe your data has been mishandled, you have the right to lodge a complaint with the Danish Data Protection Agency, Datatilsynet (tel. +45 33 19 32 00).