Privacy Policy

1. Introduction

Inscape Services s.à r.l. ("we", "us", or "our") operates Postura (ergonomy.inscape.lu), a free ergonomic workspace assessment tool. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Information You Provide

• Email Address: Required to access the assessment
• Name: Optional, for personalization
• Company Name: Optional, for B2B purposes
• Assessment Responses: Your answers to the 50 ergonomic questions

2.2 Automatically Collected Information

• Session Data: Temporary session tokens for authentication
• Device Information: Browser type, operating system (for compatibility)
• Usage Data: Pages visited, features used, timestamps

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining our assessment service
• Sending verification codes for secure access
• Generating personalized ergonomic recommendations
• Creating assessment reports (PDF)
• Improving our service based on usage patterns
• Communicating about updates or related services (only if consented)

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent: You explicitly consent when providing your email to access the service
• Legitimate Interest: Improving our service and preventing fraud
• Contract Performance: Delivering the assessment service you requested

5. Data Retention

• Session Data: 24 hours
• Verification Codes: 10 minutes
• Assessment Data: 12 months (for history tracking)
• Email Address: Until you request deletion

You can request deletion of your data at any time by contacting us.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service Providers: Email delivery services (Gmail SMTP)
• Legal Requirements: When required by law or to protect our rights

7. Data Security

We implement appropriate security measures:

• HTTPS encryption for all data transmission
• Secure, HTTP-only session cookies
• Password hashing for verification codes
• Regular security updates
• Access controls on our database

8. Your Rights (GDPR)

As a data subject, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at contact@inscape.lu.

9. Cookies

We use the following types of cookies:

Essential Cookies

• session_token: Authentication cookie (HTTP-only, secure, 24-hour expiry)
• ergonomy_consent: Stores your cookie preferences (localStorage)

Analytics Cookies (Optional)

With your consent, we use Google Analytics to understand how visitors interact with our website:

• _ga: Distinguishes unique users (2 years)
• _gid: Distinguishes unique users (24 hours)

You can manage your cookie preferences at any time:

Manage Cookie Preferences

10. International Transfers

Your data is processed and stored within the European Economic Area (EEA). We do not transfer data outside the EEA.

11. Children's Privacy

Our service is not directed to individuals under 16. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or by posting a notice on our service.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights:

14. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. For Luxembourg:

Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg
https://cnpd.public.lu