GDPRData stored in the EU · Worker-controlled

Your data, protected by design.

How we handle worker and customer data: what we store, where it lives, who processes it, and the Data Processing Agreement that governs it.

Read the DPARequest more information
[ 01 ]
Principles

Data protection, built in from line one.

Privacy by Design

Data protection built into every aspect of our system — not bolted on as a policy after the fact.

Your Control

Full control over your data, with transparent access, export, and deletion options at any time.

Transparency

Clear, plain-language information about what data we collect, where it lives, and exactly why.

Security First

Encryption in transit and at rest, role-based access control, and only the data needed for the job.

This website

This website sets no cookies and uses no analytics or tracking. How wergonic.com handles your data is described in our privacy notice.

[ 02 ]
Commitments

What we commit to — in writing, in contract.

01

Data stored in the EU

Customer and worker data is stored in the EU (Frankfurt). Some of our service providers may process data outside the EU/EEA. Where they do, the transfer is covered by the EU Standard Contractual Clauses.

02

Breach notification

We notify affected customers without undue delay after we become aware of a personal-data breach.

03

Impact assessments

We help you with data protection impact assessments when you need them.

04

Audit rights

You can audit our compliance with this DPA, with reasonable notice.

05

Role-based access control

Access to personal data is limited by role, and all personnel are bound by confidentiality.

[ 03 ]
Sub-processors

Every party that touches your data — disclosed in full.

Every provider that processes customer or worker data, and where. We notify customers 30 days before any change.

Provider
What for
Where
DigitalOcean
Hosting, database and file storage
Frankfurt, EU
Google
Company email (Workspace) and app sign-in (Firebase)
EU and US, covered by SCCs
Sentry
Error monitoring
US, covered by SCCs
Cloudflare
DNS and network protection
Global, covered by SCCs
Inleed
Sends the website's form emails
Sweden, EU

Customer and worker data is stored in the EU (Frankfurt). Some of our service providers may process data outside the EU/EEA. Where they do, the transfer is covered by the EU Standard Contractual Clauses.

[ 04 ]
Data Processing Agreement

Data Processing Agreement.

An integral part of the terms of service between Wergonic AB and you, the Controller — ensuring all personal-data processing complies with the GDPR and applicable data-protection laws. Pick a section to read it.

Request a signed copyAsk our DPO

1. Overview and our role

This Data Processing Agreement ("DPA") forms an integral part of the terms of service between Wergonic AB ("Wergonic") and you (the "Controller"). It governs how Wergonic processes personal data on your behalf when you use our ergonomic assessment and monitoring services, establishes clear responsibilities, and ensures the protection of your workers' data.

Personal Data
Any information relating to an identified or identifiable natural person — including the wearer of Wergonic workwear.
Controller
You — the entity determining the purposes and means of processing the workers' data.
Processor
Wergonic AB — processing personal data on your behalf, on your documented instructions.
Processing
Any operation performed on personal data — collection, storage, analysis, transmission, deletion.

Our role as processor

Wergonic acts strictly as a data processor, handling personal data only according to your documented instructions. We do not determine the purposes or means of processing — you remain in control. We commit to:

  • Process data only on your documented instructions
  • Ensure all personnel are bound by confidentiality
  • Implement appropriate technical and organisational safeguards
  • Assist with your GDPR obligations (DSARs, breach notification, DPIAs)
  • Delete or return all personal data upon termination
[ 05 ]
Resources

Compliance documentation, for your security and legal teams.

Our Data Protection Officer is Farhad Abtahi. Privacy, legal or DPO matters: privacy@wergonic.com

Whitepapers

Looking for research-backed guides for your safety team?

Our GDPR whitepaper on ergonomic monitoring downloads directly from the products page. A buyer's guide and a prevention playbook are coming soon.

Browse whitepapers
Ready when you are

Privacy that protects workers, without slowing the floor.

Explore the products built on top of this data-protection model, or sign in to the Cloud Dashboard.