Privacy Policy

This is a starting-point privacy policy and must be reviewed by qualified Estonian legal counsel before this site goes live. It does not yet cover every processing activity WareDesk performs.

Who we are

WareDesk is operated by denovalogic ("we"), established in Estonia — see our Impressum for full contact and registration details. We process personal data under the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus, IKS), which supplements the GDPR domestically.

What we collect

All personal data we store about users is anonymized.

  • Account data: name, email address and password hash when you register for the cabinet.
  • Shop data: the domain of any Shopware store you connect, and the settings you configure (bot on/off, escalation threshold, business hours, notification email).
  • Conversation data: when WareDesk's agents handle a customer conversation for a connected shop, the conversation content and outcome are processed to answer the customer and are visible to that shop's owner and invited team members.
  • Usage data: standard web server logs (IP address, browser, timestamp) for security and troubleshooting.
  • Essential cookies: a login-session cookie so the cabinet can recognize you while signed in. This is strictly necessary for the service to function, so — under Art. 5(3) of the ePrivacy Directive as implemented by § 103¹ of the Estonian Electronic Communications Act (Elektroonilise side seadus) — it does not require consent. We do not use analytics or advertising cookies.

Why we process it

  • To provide the cabinet and the support-agent functionality you sign up for (contract performance, Art. 6(1)(b) GDPR).
  • To secure accounts and prevent abuse (legitimate interest, Art. 6(1)(f) GDPR).
  • To respond to messages sent through the contact form (legitimate interest / pre-contractual measures).

Who we share it with

We do not sell personal data. Data may be processed by hosting and email delivery providers acting on our behalf under a data processing agreement.

Your rights

Under the GDPR you have the right to access, correct, delete, or export your data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. Contact us to exercise these rights.

You also have the right to lodge a complaint with a supervisory authority. In Estonia, that is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI) — www.aki.ee — or the supervisory authority of your own EU member state if you are located elsewhere in the EU.

Data retention

Account and shop data is retained for as long as your cabinet account is active. Activity log entries are capped and rotated automatically. You can request deletion of your account and associated data at any time.

Contact

See the Impressum for full contact details.