In short
The website is free and has no user accounts, payments or forms that store data. We do not ask for personal data to use it. What you type or upload in the tools is calculated in your browser and does not reach our servers.
Data controller
- Identity: the owner of the Nemorgi project, who will be identified here with name or company name, tax ID and address before any commercial activity.
- Contact: contact@nemorgi.com
What we process
| Processing | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Data you enter in the tools | Figures, assumptions, text and files (CSV, Excel, GeoJSON) that you type or upload | Calculating the result in your own browser. It is not sent to our servers or stored. | They are not kept unless you press “Save” or export the project: then they stay only in your browser or in your file until you delete them. |
| Queries to public data sources | Only what the query needs: the chosen point or country, the energy installation settings, a company's name or LEI code, or the requested data series | Getting the data from the official source (PVGIS (European Commission), NASA POWER, USGS, GLEIF, Eurostat, World Bank, ECB, INE and FRED) through our server, which does not send it your IP address or anything that identifies you. Legitimate interest in providing the function you request (Art. 6(1)(f) GDPR). | The source's response is kept in Cloudflare's cache for between 10 minutes and 30 days, without linking it to any person. |
| Query limit | IP address, as the key of Cloudflare's request counter | Preventing abuse of the query service. Legitimate interest in the security of the service (Art. 6(1)(f) GDPR). | The counter lasts 60 seconds; we do not store the IP address. |
| Technical logs | IP address, date, requested address, browser and result of the request | Serving the website, diagnosing errors and protecting it against abuse. Legitimate interest (Art. 6(1)(f) GDPR). | Pending: period set by Cloudflare |
| Visit statistics (Google Analytics) | Pages visited, how you reach the site, browser, device, language, approximate location (city or country) and a random identifier stored in a cookie. Google Analytics does not log or store your full IP address. | Know which pages and tools are useful in order to improve them. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22(2) LSSI), which you can withdraw at any time from the footer. | Cookies last 2 years at most. Data is kept in Google Analytics for the period set in the account (2 months by default; 14 months at most in the free version). |
| Preferences on your device | Language, light or dark theme, consent choice and the projects you save | Remembering what you choose. They are stored only in your browser. | See the cookie policy. |
| Emails you send us | Your email address and what you write | Replying to your enquiry. Legitimate interest in handling your requests (Art. 6(1)(f) GDPR). | As long as needed to reply, up to 12 months Pending: proposed period, to be validated |
To choose the language when you open the home page we use your browser's language and, if it does not say, the country Cloudflare infers from your connection; we do not store it. We do not build profiles or take automated decisions with legal effects on you.
Recipients and providers
- Hosting, content delivery network, query server and statistics: Cloudflare, Inc. (USA), as data processor. International transfers and safeguards: Pending: confirm with Cloudflare's data processing agreement (DPA).
- Public data sources (PVGIS (European Commission), NASA POWER, USGS, GLEIF, Eurostat, World Bank, ECB, INE and FRED): they receive the query from our server, not from your browser, without your IP address or any data that identifies you.
- Statistics: Google Ireland Limited, as processor for Google Analytics, only with your consent. Google LLC (USA) may access the data; transfers rely on the EU-US Data Privacy Framework, to which it adheres.
We do not sell or share your data with third parties unless required by law. Fonts, maps and libraries are served from our own domain.
Your rights
As there are no accounts, we normally cannot link any data to you. Even so, you can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to contact@nemorgi.com. We will reply within one month, extendable in the cases provided for in the GDPR.
If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Changes
If we add accounts, forms, payments, AI features or new forms of measurement, we will update this policy before turning them on.
Security
We use encrypted connections (HTTPS) and apply the principle of least privilege. No system is infallible; see Security.