[{"data":1,"prerenderedAt":356},["ShallowReactive",2],{"page-en-\u002Fprivacy":3},{"id":4,"title":5,"body":6,"description":348,"extension":349,"meta":350,"navigation":351,"path":352,"seo":353,"stem":354,"__hash__":355},"content_en\u002Fprivacy.md","Privacy \u002F\u002F eramux",{"type":7,"value":8,"toc":344},"minimark",[9],[10,11,17,40,67,86,130,172,188,199,213,256,264,310,318,326,336],"legal-doc",{":toc":12,"eyebrow":13,"lede":14,"title":15,"updated":16},"[{\"label\":\"Data controller\",\"anchor\":\"controller\"},{\"label\":\"Principles\",\"anchor\":\"principles\"},{\"label\":\"Controller & processor\",\"anchor\":\"roles\"},{\"label\":\"Website data\",\"anchor\":\"website\"},{\"label\":\"Service data\",\"anchor\":\"products\"},{\"label\":\"Contact & email\",\"anchor\":\"contact\"},{\"label\":\"Cookies\",\"anchor\":\"cookies\"},{\"label\":\"Processors\",\"anchor\":\"processors\"},{\"label\":\"Retention\",\"anchor\":\"retention\"},{\"label\":\"Security & breaches\",\"anchor\":\"security\"},{\"label\":\"Your rights\",\"anchor\":\"rights\"},{\"label\":\"Children\",\"anchor\":\"children\"},{\"label\":\"Transfers\",\"anchor\":\"transfers\"},{\"label\":\"California notice\",\"anchor\":\"california\"},{\"label\":\"Changes\",\"anchor\":\"updates\"}]","Legal","How eramux UG collects, uses, and protects personal data on this website and across our products and services. Drafted to satisfy the GDPR (Regulation (EU) 2016\u002F679) and the German Federal Data Protection Act (BDSG).","Privacy notice","2026-05",[18,19,23,27,31],"legal-section",{"id":20,"num":21,"title":22},"controller","01","Data controller",[24,25,26],"p",{},"The data controller for this website and our products and services, within the meaning of the GDPR, is:",[28,29],"kv-table",{":rows":30},"[{\"k\":\"Entity\",\"v\":\"eramux UG (haftungsbeschränkt)\\nRichard-Strauss-Straße 31\\n81677 München · Germany\"},{\"k\":\"Contact\",\"v\":\"privacy@eramux.com\",\"href\":\"mailto:privacy@eramux.com\"}]",[24,32,33,34,39],{},"We have assessed whether we are required to appoint a Data Protection Officer under Art. 37 GDPR and § 38 BDSG. Based on our current processing activities, a formal DPO appointment is not currently required; if that changes, we will update this notice. Privacy questions can be sent directly to ",[35,36,38],"a",{"href":37},"mailto:privacy@eramux.com","privacy@eramux.com",".",[18,41,45,48],{"id":42,"num":43,"title":44},"principles","02","Principles",[24,46,47],{},"We treat personal data as a liability, not an asset. In practice:",[49,50,51,55,58,61,64],"ul",{},[52,53,54],"li",{},"We collect the minimum data needed for the feature you are using.",[52,56,57],{},"We do not sell or rent personal data, ever.",[52,59,60],{},"We don't run third-party advertising trackers, social pixels, or behavioural profiling on this site.",[52,62,63],{},"Content you submit to our services is processed only as far as needed and the original is deleted or de-identified promptly (see section 05).",[52,65,66],{},"When we use a processor, we list it (see section 08) and ensure a data processing agreement is in place.",[18,68,72,79],{"id":69,"num":70,"title":71},"roles","03","When we act as controller and when we act for customers",[24,73,74,75,78],{},"For website administration, account creation, billing, support, security, fraud prevention, abuse handling and our own product and service administration, we act as the ",[76,77,20],"strong",{},", and the rest of this notice describes that processing.",[24,80,81,82,85],{},"Where a customer submits content to one of our products or services (for example content sent through our API) and we process that content solely on the customer's documented instructions under a separate customer agreement or data processing agreement, we act as a ",[76,83,84],{},"processor"," for that content. In those cases the customer is the controller: it is responsible for the primary privacy notice to its own users and for the lawful basis of that processing.",[18,87,91,96,99,113,123,127],{"id":88,"num":89,"title":90},"website","04","Website data",[92,93,95],"h3",{"id":94},"server-logs","Server logs",[24,97,98],{},"When you visit this website, our hosting and content-delivery providers process technical connection data so the site can be delivered securely:",[49,100,101,104,107,110],{},[52,102,103],{},"IP address (shortened or otherwise de-identified promptly after collection, where possible)",[52,105,106],{},"Date and time of the request",[52,108,109],{},"Requested URL and HTTP status",[52,111,112],{},"Referrer and user-agent string",[24,114,115,118,119,122],{},[76,116,117],{},"Legal basis:"," Art. 6 (1) (f) GDPR: legitimate interest in operating a secure, stable website. ",[76,120,121],{},"Retention:"," raw logs are kept only as long as necessary for security, troubleshooting and abuse prevention, then deleted.",[92,124,126],{"id":125},"analytics","Analytics",[24,128,129],{},"We do not use third-party, advertising, or cross-site analytics, and we run no behavioural profiling or tracking pixels on this website. If we introduce any analytics in future, we will first describe the tool, the data it processes, any device storage it uses, the retention period and the lawful basis here.",[18,131,135,138,164,169],{"id":132,"num":133,"title":134},"products","05","Data from our products and services",[24,136,137],{},"When you use our products and services (web, CLI, or API):",[49,139,140,146,152,158],{},[52,141,142,145],{},[76,143,144],{},"Content you submit"," is processed on our servers to deliver the result you requested, and the original is deleted promptly after processing.",[52,147,148,151],{},[76,149,150],{},"Derived data"," (compact representations from which the original content cannot be reconstructed) may be retained to improve and quality-check our models. We de-identify these as far as possible; where retained data can still be linked to an account or API key by reasonably available means, we treat it as personal data rather than anonymous data. Where our API offers a per-request opt-out (for example a no-retain flag), you can use it.",[52,153,154,157],{},[76,155,156],{},"Processing results"," are retained only as long as needed for diagnostics and abuse prevention.",[52,159,160,163],{},[76,161,162],{},"API key activity"," (request count, timestamps, latency, error rates) is retained for a limited period for billing, support, and rate-limit calibration.",[24,165,166,168],{},[76,167,117],{}," Art. 6 (1) (b) GDPR for delivering the result you requested; Art. 6 (1) (f) GDPR (our legitimate interest in security, abuse prevention, reliability and service improvement) for retained derived data and API-key activity. Where we process customer-submitted content solely on a customer's documented instructions, we act as processor for that content (see section 03).",[24,170,171],{},"We do not make decisions about individuals based solely on automated processing that produce legal or similarly significant effects (Art. 22 GDPR). Our services return a technical result; it is not used to make eligibility decisions about people.",[18,173,177,180],{"id":174,"num":175,"title":176},"contact","06","Contact & email",[24,178,179],{},"When you email us at one of our published addresses (e.g. hello@, beta@, privacy@, legal@, press@, security@) we receive your email address, name (if provided), and message content. We use this to reply to you and, where appropriate, to track waitlist or enquiry requests.",[24,181,182,184,185,187],{},[76,183,117],{}," Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in correspondence). ",[76,186,121],{}," Until the matter is closed plus statutory retention periods.",[18,189,193,196],{"id":190,"num":191,"title":192},"cookies","07","Cookies",[24,194,195],{},"Storage of, or access to, information on your device generally requires your consent under § 25 TDDDG, unless it is strictly necessary to provide a service you have explicitly requested.",[24,197,198],{},"This website uses no tracking cookies and no third-party cookies; in its current form it sets no cookies at all. Where a product requires a strictly necessary cookie (for example a first-party session cookie to keep you logged in, or a first-party preference cookie), it is used only for that purpose and falls within the strict-necessity exemption, so no consent banner is required. If we introduce non-essential cookies or similar technologies, we will ask for your consent before using them.",[18,200,204,207,210],{"id":201,"num":202,"title":203},"processors","08","Processors",[24,205,206],{},"We use the following processors, all under data processing agreements (Art. 28 GDPR):",[28,208],{":rows":209},"[{\"k\":\"Hosting\",\"v\":\"Hetzner Online GmbH · Germany\"},{\"k\":\"CDN & edge security\",\"v\":\"Cloudflare, Inc. · United States, with SCCs \u002F EU–US DPF\"},{\"k\":\"Email\",\"v\":\"Google Ireland Limited · Ireland (EU); Google LLC (US) as sub-processor under EU–US DPF \u002F SCCs\"}]",[24,211,212],{},"Some recipients may act as independent controllers for narrowly defined purposes of their own (for example their own billing and security); for that processing their own privacy terms apply.",[18,214,218,221,253],{"id":215,"num":216,"title":217},"retention","09","Retention",[24,219,220],{},"We keep personal data only as long as necessary for the purpose it was collected for, then delete or anonymise it. In practice:",[49,222,223,229,235,241,247],{},[52,224,225,228],{},[76,226,227],{},"Website security logs:"," a short operational period.",[52,230,231,234],{},[76,232,233],{},"Contact & support correspondence:"," while the matter is active and for a limited period afterwards.",[52,236,237,240],{},[76,238,239],{},"Service input data:"," original uploads deleted promptly after processing; processing results and API-key activity kept only for the limited periods described in section 05; retained derived data only for the model-improvement window.",[52,242,243,246],{},[76,244,245],{},"Account & billing records:"," for the life of the account, then the periods required by German commercial and tax law (§ 257 HGB, § 147 AO, typically 6 or 10 years).",[52,248,249,252],{},[76,250,251],{},"Backups:"," purged on the ordinary backup-rotation cycle.",[24,254,255],{},"Where an exact period is not possible, the criteria we use are operational necessity, contractual duration, statutory retention duties, dispute risk, and security needs.",[18,257,261],{"id":258,"num":259,"title":260},"security","10","Security & data breaches",[24,262,263],{},"We implement technical and organisational measures appropriate to the risks of our processing, including access control, least-privilege access, encryption in transit, logging, secure deletion and incident response. No system is ever completely secure. If we become aware of a personal-data breach, we assess the risk promptly and notify the competent supervisory authority and affected individuals where the law requires (Art. 33 and 34 GDPR).",[18,265,269,272,295,301],{"id":266,"num":267,"title":268},"rights","11","Your rights",[24,270,271],{},"Under the GDPR you have the right to:",[49,273,274,277,280,283,286,289,292],{},[52,275,276],{},"Access the personal data we hold about you (Art. 15)",[52,278,279],{},"Have inaccurate data corrected (Art. 16)",[52,281,282],{},"Have your data erased, subject to legal obligations (Art. 17)",[52,284,285],{},"Restrict processing of your data (Art. 18)",[52,287,288],{},"Receive your data in a portable format (Art. 20)",[52,290,291],{},"Object to processing based on legitimate interest (Art. 21)",[52,293,294],{},"Withdraw consent at any time, where processing is consent-based (Art. 7 (3))",[24,296,297,298,300],{},"To exercise any of these, email ",[35,299,38],{"href":37},". We respond without undue delay and within one month, extendable by up to two further months for complex or numerous requests.",[24,302,303,304,39],{},"You also have the right to lodge a complaint with a supervisory authority: in the EU\u002FEEA member state of your habitual residence, place of work, or the place of the alleged infringement (Art. 77). The lead authority for eramux UG is the ",[35,305,309],{"href":306,"rel":307},"https:\u002F\u002Fwww.lda.bayern.de",[308],"nofollow","Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)",[18,311,315],{"id":312,"num":313,"title":314},"children","12","Children",[24,316,317],{},"Our website, products and services are not directed to children. If we learn that we have collected personal data from a child in a way that requires parental authorisation or is otherwise not permitted, we will delete that data or obtain the required authorisation.",[18,319,323],{"id":320,"num":321,"title":322},"transfers","13","International transfers",[24,324,325],{},"Most of our infrastructure is in Germany or the EU\u002FEEA. Where personal data is transferred to or accessed from outside the EU\u002FEEA (for example to Cloudflare, Inc. for content delivery and edge security, or where a processor such as our email provider relies on a US sub-processor), we rely on an applicable transfer mechanism: an EU adequacy decision (including the EU–US Data Privacy Framework where the recipient is certified) or the EU Standard Contractual Clauses (Commission Decision 2021\u002F914\u002FEU) with supplementary measures where required. Where UK data is in scope, we use the UK Addendum to the EU SCCs or the UK IDTA. You may contact us for information about the safeguard relevant to a particular transfer.",[18,327,331],{"id":328,"num":329,"title":330},"california","14","California privacy notice",[24,332,333,334,39],{},"This section applies only if and to the extent the California Consumer Privacy Act (CCPA\u002FCPRA) applies to our processing. Where it applies, we will describe the categories of personal information collected, the sources, the business and commercial purposes, the categories of recipients, and retention by category or the criteria used. We do not sell or share personal information. Eligible California consumers may exercise rights to know, delete, correct, opt out of sale or sharing, and limit the use of sensitive personal information, and we will honour recognised opt-out preference signals. Requests can be sent to ",[35,335,38],{"href":37},[18,337,341],{"id":338,"num":339,"title":340},"updates","15","Changes to this notice",[24,342,343],{},"When we materially change this notice, we update the \"last updated\" date at the top and, for substantive changes, notify affected users by email. The current version is the one published on this page.",{"title":345,"searchDepth":346,"depth":346,"links":347},"",2,[],"How eramux UG collects, uses, and protects personal data on this website and across our products and services.","md",{},true,"\u002Fprivacy",{"title":5,"description":348},"privacy","aRlhBNrNN5EpDoxFX1YHFgOIbncOzrEAccNkYzlZ7ts",1779798068919]