Data Protection

This privacy notice applies to the website ryggo.ai and all subpages operated by TJBERLIN UG under the trading name Ryggo. Ryggo is a B2B platform — our services are directed exclusively at business customers and professionals. We do not knowingly collect data from private individuals or minors.

Contact and order data. When you complete an order form or purchase form on ryggo.ai, we collect your name, company name, email address, phone number, and shipping and billing address. This data is used solely to process your order and communicate with you about it. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Video uploads. If you choose to upload a workplace video via the Ryggo AI advisor, the video is processed to analyse movement patterns and generate an ergonomic assessment. Videos are processed by our ergonomics analysis partner and are not stored permanently on Ryggo's servers after analysis is complete. Legal basis: Art. 6(1)(a) GDPR (consent — you initiate the upload). You may skip the video upload at any time.

Exoskeleton advisor and survey data. When you start the Ryggo AI advisor, we collect the company name and contact name you provide, and — if you choose to give it — an email address. Your survey answers and any video analysis results are linked to this record so we can generate your recommendation. If you provide an email and don't complete the process, we may use it to send you a single link to resume where you left off. Legal basis: Art. 6(1)(f) GDPR (legitimate interest — continuing a service you initiated). If you tick "Keep me posted on Ryggo news and industry insights," we will also send you occasional updates about Ryggo; legal basis: Art. 6(1)(a) GDPR (consent), which you can withdraw at any time by contacting us.

“Talk to us” contact form. If you send us a request through the “Talk to us” form, we collect your name, company, email address and, if you choose to give them, your phone number and message. We use this data only to answer your request and to follow up on it. Legal basis: Art. 6(1)(a) GDPR (your consent, given by ticking the box) and Art. 6(1)(b) GDPR (steps taken at your request before a contract). If you tick the optional box for email updates, we will also send you occasional updates about new devices and guides; legal basis: Art. 6(1)(a) GDPR (consent), which you can withdraw at any time by contacting us.

Form data saved locally. The order and purchase forms save your input locally in your browser's session storage to allow you to resume if you navigate away — this data never leaves your device for those specific forms and is cleared when you close the browser tab. This is separate from the advisor/survey data described above, which is stored on our servers as described.

Usage analytics. We use Plausible Analytics to understand how visitors use ryggo.ai. Plausible is a privacy-respecting, cookieless analytics tool. It does not use cookies, does not collect personal data, and does not track you across websites. No consent is required. Data is aggregated and fully anonymous. You can review Plausible's data practices at plausible.io/privacy.

We do not sell, rent or trade your personal data. We share data only where necessary to operate the platform:

Vendors. When you place a Deploy & Decide order, we share your shipping address and relevant order details with the vendor supplying the device. We do not share your contact or billing data beyond what is required for fulfilment.

Ergonomics analysis partner. Video uploads are processed by our third-party ergonomics analysis provider under a data processing agreement. This provider processes video data solely for the purpose of generating the ergonomic analysis and does not retain or use the data for any other purpose.

Service providers. We use a small number of specialist providers to operate the platform, each processing data on our behalf under a data processing agreement, and none of whom use your data for their own purposes: Supabase (application database — order, contact and survey data; hosted in the EU, Ireland), fly.io (processes uploaded workplace videos for ergonomic analysis; Frankfurt, Germany — see "Ergonomics analysis partner" above), Netlify (hosts the website and the functions that connect these services), and Brevo (manages double opt-in email confirmations and newsletter communications; hosted in the EU — France, Germany and Belgium). All of the above process and store data within the EU. In addition, Pipedrive (customer relationship management — requests from the “Talk to us” form and business correspondence; hosted in Frankfurt, Germany) and Resend (sending transactional and notification emails; hosted in the United States, with transfers covered by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses) process data on our behalf under a data processing agreement.

Advertising. If you have accepted advertising cookies via our cookie banner, we use Google Ads to measure the performance of our advertising campaigns. Google LLC is based in the United States and self-certifies under the EU-U.S. Data Privacy Framework as the basis for this transfer. This only runs if you have accepted advertising cookies; see Cookies below.

Heatmaps and session recordings. If you have accepted cookies via our cookie banner, we use Microsoft Clarity to see how visitors use our pages: where they click and scroll, and where they get stuck. Clarity records your interactions on ryggo.ai (clicks, scrolling, mouse movement and the pages you view) together with technical information such as device, browser, approximate location and referring page, and sets a cookie to recognise your browser across pages. We use this only to improve the site, not to identify you, and we configure Clarity to mask form input fields, so what you type into forms (such as your name, email address or message) is not recorded. Microsoft Corporation is based in the United States and self-certifies under the EU-U.S. Data Privacy Framework as the basis for this transfer. This only runs if you have accepted cookies; if you decline, Clarity is not loaded. Details: privacy.microsoft.com/privacystatement.

Legal obligations. We may disclose data if required by law or court order.

Order and contact data is retained for as long as required to fulfil the contract and comply with statutory retention obligations under German commercial and tax law (typically 6–10 years). Advisor and survey data (company, contact name, optional email, survey answers) is retained for a limited period to allow follow-up on incomplete assessments, after which it is deleted unless you go on to place an order. Video data is deleted after analysis is complete. Analytics data collected by Plausible is fully anonymous and not subject to GDPR retention limits. Requests sent through the “Talk to us” form are retained for as long as needed to handle and follow up on your request, and are deleted at your request unless statutory retention obligations apply.

Under GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. You also have the right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at support@ryggo.ai. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority — in Germany, the relevant authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

ryggo.ai uses a small number of cookies. Plausible Analytics operates without cookies and requires no consent. Our chat widget (Crisp), Google Ads (for advertising measurement) and Microsoft Clarity (heatmaps and session recordings) set cookies — these only load after you click "Accept all" on the cookie banner shown on your first visit. If you decline or close the banner, none of them is loaded and no related cookies are set.

You can change your choice at any time using the "Cookie settings" link in the site footer. Your browser may also store session data locally for certain forms (see Form Data above); this is not a cookie and is not transmitted to our servers.

We may update this privacy notice from time to time. The current version is always available at ryggo.ai/privacy. Material changes will be communicated via the website.