Last updated 14 October 2026
Privacy Policy
Who is responsible
The controller of your personal data is Business Intelligence Solutions LLC (BIS), the developer of eMondrian, Demetre Tavdadebuli St. 50/48, Batumi, Georgia. For anything about your data, write to [email protected].
Our representative in the European Union (Art. 27 GDPR) is Viachaslau Semiankou, Olimpijska 14/4, 05-082 Latchorzew, Poland, [email protected]. You and data protection authorities can contact them instead of us on any question about your data.
When you visit the site
Every request passes through Cloudflare, which protects and speeds up the site, and reaches our server at Hetzner in Nuremberg, Germany. Both see your IP address, the page you ask for, your browser's user agent and the time. Our server keeps this in access logs for up to 90 days to operate the site and investigate abuse. Fonts and icons are served by the site itself, so nothing is loaded from Google unless you accept analytics.
Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
Visitor statistics without cookies
We count visits to emondrian.com and to the demo at demo.emondrian.com with Umami, which we run on our own server in Poland; no third party receives this data. Umami sets no cookies and stores nothing on your device. It records the page, the referring site, your browser, operating system, device type, screen size, language, and the country and region derived from your IP address, and it counts the license form submissions (not what you entered). Your IP address is not stored: together with your user agent it only forms an anonymous visit identifier that changes every month, so visits cannot be linked beyond that.
Legal basis: our legitimate interest in knowing which pages are used (Art. 6(1)(f) GDPR). To object, write to us, or turn on "Do Not Track" or an ad blocker in your browser.
Cookies and local storage
| Name | Purpose | Kept for |
|---|---|---|
| emondrian-session | Keeps the forms working between requests. Always set; strictly necessary. | 2 hours |
| XSRF-TOKEN | Protects the forms against cross-site request forgery. Always set; strictly necessary. | 2 hours |
| em.analytics-consent | Remembers whether you accepted or declined analytics. Local storage in your browser, never sent to us. | Until you clear it |
| _ga, _ga_* | Google Analytics. Set only after you accept analytics; removed when you withdraw consent. | Up to 2 years |
Google Analytics, only with your consent
If you accept analytics in the cookie banner, we use Google Analytics 4 to see which pages help and how visitors find eMondrian. Until you accept, the Google Analytics script is not loaded at all. Google receives the pages you view, how you reached the site, your approximate location, device and browser, and whether you submitted one of the license forms (not what you entered). Google Analytics 4 does not store IP addresses. Advertising features are off. Analytics data is deleted after 2 months.
Google may process this data in the United States; Google LLC is certified under the EU-US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time under , also at the bottom of every page.
When you request a license key
We use your email address to issue an evaluation license and to send it to you, together with any other unexpired licenses issued to the same address. The address and the licenses issued to it are kept on our license server for the term of each license plus one year, so that we can answer questions about a license and prevent repeated trials. We also send you an email if a license issued to you changes or is revoked. We do not use the address for marketing.
To stop automated requests, the form is protected by Cloudflare Turnstile, which checks signals from your browser and device, and we count requests per email address and per IP address for up to 24 hours. Our application logs record that a request was processed, including the email address, and are kept for 14 days.
Legal basis: the steps you ask us to take before a license agreement (Art. 6(1)(b) GDPR), and our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
When you ask for a longer evaluation or write to us
The extended evaluation form sends your email address, company and the answers you choose to our team's mailbox, and so does any email you write to us. We use them only to reply and to discuss the evaluation or a license with you, and keep the correspondence as long as that conversation, or a resulting license agreement, requires. Legal basis: Art. 6(1)(b) and (f) GDPR.
Who receives your data
- Hetzner Online GmbH (Germany) hosts the site, the license server and their logs.
- Cloudflare, Inc. delivers and protects the site and runs Turnstile on the license forms.
- Spacemail sends our emails, including license keys.
- Google Ireland Ltd. / Google LLC runs Google Analytics, only if you accept analytics.
They process data on our behalf and under their data processing terms. Where a provider handles data outside the EU, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses. We share data with authorities only when the law requires it.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect processing before the withdrawal. Write to [email protected]; we reply within one month.
You also have the right to complain to a data protection authority, in particular where you live or work.
Changes
When what we collect or who receives it changes, we update this page and the date at the top.