This policy explains how [Company name] («we», «the controller») collects and processes your personal data when you use the ASEO + Shield platform («the Platform»).
For questions regarding your personal data: [contact email].
Email address and encrypted password — to create your account and provide access to the Platform.
Organisation name and selected subscription plan — to manage the contractual relationship.
IP address, browser type (User-Agent), date, time and result of the attempt — to protect your account and prevent unauthorised access. Deleted automatically after 90 days.
The URL of your website — for content optimisation and analysis features (ASEO).
Records of actions performed in the Platform (audit trail) — for traceability and compliance with the EU AI Act.
Your prompts (including URL and keywords) are processed by Google LLC via the Gemini API. We do not send personal identification data. All other AI functions run locally within the EU.
| Basis | Application |
|---|---|
| Performance of a contract (Art. 6(1)(b)) | Account management, service provision, content generation |
| Legitimate interest (Art. 6(1)(f)) | Protection and security (login audit), audit trail |
| Legal obligation (Art. 6(1)(c)) | Audit logs under the EU AI Act |
| Category | Retention period |
|---|---|
| Account data | Contract term + 12 months |
| Organisation and contract data | Contract term + 5 years |
| Login audit (IP) | 90 days, then automatic deletion |
| Audit logs (Shield/EU AI Act) | 3 years from generation |
| Gemini API data | In accordance with Google's policy |
The Shield platform generates automated EU AI Act compliance assessments. These assessments may have significant effects on your organisation, as they determine the risk level of your AI systems and the associated regulatory obligations.
You have the right to contest an automated assessment and request a review by our specialist: [contact email].
We do not sell your personal data. We share data only in the following cases:
Requests are submitted to: [contact email]. We respond within 1 month. You have the right to lodge a complaint with the competent supervisory authority.
The Platform uses strictly necessary cookies for session management (JWT tokens). These are mandatory and do not require consent. We do not use tracking or advertising cookies.
We may update this policy periodically. In the event of material changes, we will notify you at least 30 days before they take effect.