Privacy policy

Details of the controller responsible for processing data on this website and their contact details are available in the legal notice.

We self-host this website and the contact form API. When you visit the website, we process connection data required for technical purposes. This may include your IP address, date and time, the page accessed, the volume of data transferred, referrer, browser and operating system.

This data is processed to provide the website securely and reliably, based on our legitimate interest under Article 6(1)(f) GDPR. Server logs are stored for no more than 30 days and then deleted.

If you contact us by email or request a trial account through the form, we process your details to handle your enquiry. The form requires a name and email address; a message is optional. These details are transmitted over an encrypted connection to our self-hosted API at api.v1.es4a.com/contact-form. Depending on its content, this is done to take steps prior to entering into a contract under Article 6(1)(b) GDPR or based on our legitimate interest in answering your message under Article 6(1)(f) GDPR. Data from trial account enquiries is deleted within 30 days. Email enquiries are deleted once they have been fully handled and no statutory retention obligations apply.

The website and ES4A sign-in do not use analytics or advertising cookies. The following cookies and local storage support sign-in, your chosen settings and use of the app.

Sign-in cookies: Signing in or registering through auth.es4a.com sets es4a_id (your account ID) and es4a_token (your authentication token). They keep you signed in and allow ES4A services to recognise your account. Both apply to es4a.com and its subdomains and are stored for up to 365 days from when they are set. This website also reads existing sign-in cookies for the account menu; simply visiting it does not set new sign-in cookies.

Website settings: When you change the colour scheme, your choice is saved in your browser’s local storage under es4a-theme, with no fixed expiry date. The language is selected solely through the page address; no cookie is set for this purpose.

App local storage: ES4A Cloud stores items such as the selected system and dashboard, the full-screen setting and cached system, device, room, floor and device package data in your browser’s local storage. The Developer Kit may store the selected project ID. These entries have no fixed expiry date and remain until overwritten or deleted. In the installed app, settings and authentication data are saved in local app storage rather than browser cookies.

Where storage or access is strictly necessary for sign-in or a function you have expressly requested, it takes place without separate consent under Section 25(2), point 2 TDDDG. The associated processing of personal data to provide account features is based on Article 6(1)(b) GDPR. If analytics or advertising services requiring consent are introduced in future, we will obtain consent before using them and update this information.

Deleting data and signing out: Signing out of ES4A removes both sign-in cookies. You can also delete cookies and local data in your browser settings for es4a.com and the subdomains you use. This may remove saved settings and require you to sign in again. Deleting local data does not delete your account or data stored in the cloud.

If you are already signed in to ES4A, this website reads your existing sign-in cookies when the page loads and sends your account ID and authentication token to api.v1.es4a.com. It retrieves your first and last name, username, email address, developer and employee status and, where available, profile picture. This information is used to display the account menu and links appropriate to your account. Processing is based on Article 6(1)(b) GDPR to provide account features.

This website links to separate ES4A services such as Cloud, Account, Developer Kit and Help. Following a link opens the respective service. The cookie information above also describes shared ES4A sign-in and local app storage. Additional privacy information may apply to other features of these services.

Subject to the statutory conditions, you have the right to access, rectify and erase your data, restrict its processing, request data portability and object to processing. You may withdraw any consent you have given at any time with effect for the future.

To exercise your rights, contact us using the contact details provided in the legal notice.

You have the right to lodge a complaint with a data protection supervisory authority. Our competent authority is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Germany). Contact information is available at datenschutz.rlp.de.

We take appropriate technical and organisational measures to protect personal data. This privacy policy will be updated if the website, the services used or legal requirements change.