Privacy Policy

1. Controller

The controller responsible for data processing under the GDPR is:

SERGO GmbH
Georgsplatz 1
20099 Hamburg
Germany
Phone: +49 40 226 373 340
E-mail: info@sergo.de

2. This website

When you visit this website, we only collect what your browser technically transmits (server log files): the requested URL, date and time, amount of data transferred, referrer, browser user agent, operating system and IP address. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the stability and security of the website). This data is not shared with third parties and is deleted automatically.

This website sets no cookies and uses no analytics or marketing tools. There is no cookie banner because there is nothing to consent to. The site is served over TLS (HTTPS).

3. Getting in touch

Every call to action on this site ("Start free trial", "Request a demo") opens a pre-filled e-mail draft addressed to info@sergo.de. There is no automated sign-up form on this website — anything you send is used solely to handle your request (Art. 6(1)(b) GDPR, pre-contractual measure).

4. The Clockoo app

Clockoo is a client for your own Odoo — not a platform that stores time or project data. Time entries, projects and tasks stay exclusively in your Odoo; Clockoo reads and writes them live via the Odoo API, with no intermediate database of its own.

Sign-in uses your existing Odoo SSO (Azure AD or OAuth). The resulting session is stored in your operating system's keychain (macOS Keychain or Windows Credential Manager) — not in a config file, and not on our servers.

5. License server

To bill for the number of active users per Odoo instance, Clockoo reports a hash derived from your Odoo instance identifier and your Odoo user ID to SERGO GmbH's license server, along with a last-used timestamp. No names, e-mail addresses or time data are transmitted or stored. The legal basis is Art. 6(1)(b) GDPR (contract performance).

6. Your rights

Under the GDPR, you have the right to:

• Access your stored data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority — competent authority: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Klosterwall 6 (Block C), 20095 Hamburg, Germany.

Requests to: info@sergo.de.

7. Retention

Website server logs are deleted automatically after a short period. License hashes are kept for as long as the respective Odoo instance is in use and deleted after the contract ends or after prolonged inactivity. Your actual time and project data lives exclusively in your own Odoo — we have no access to it and keep no copy of it.

8. Changes to this notice

We will update this privacy notice as the website or app gain new functionality — for example a self-service checkout or website analytics. The version published here is always the current one.