1. Data Controller Information

Əbrain AI Job Analysis Platform
Contact: privacy@automatedweighting.com
Data Protection Officer: dpo@automatedweighting.com

2. Legal Basis for Processing (GDPR Article 6)

• Contract Performance (Article 6(1)(b)): To provide job analysis services
• Legitimate Interest (Article 6(1)(f)): To improve our AI algorithms and data protection measures
• Consent (Article 6(1)(a)): For marketing communications (opt-in only)

3. Personal Data We Collect

• Account Data: Email address, hashed password, full name
• Company Information: Company name, size, industry, revenue data
• Professional Data: Job titles, descriptions, analysis results
• Technical Data: IP address, browser type, session identifiers

4. Your GDPR Rights

• Right of Access (Article 15): Request copies of your personal data
• Right to Rectification (Article 16): Correct inaccurate personal data
• Right to Erasure (Article 17): Request deletion of your data
• Right to Data Portability (Article 20): Receive your data in structured format
• Right to Object (Article 21): Object to processing based on legitimate interests

5. Data Security & Encryption (GDPR Article 32)

• AES Encryption: All sensitive data encrypted at rest using Fernet encryption
• Secure Transmission: HTTPS/TLS for all data transfers
• Access Controls: Role-based access to personal data
• Regular Backups: Encrypted backup systems with restore procedures

6. Data Retention

• Account Data: Until account deletion + 30 days (right to erasure applies)
• Job Analysis Data: 3 years after last activity with data portability rights
• System Logs: 12 months maximum for data protection monitoring

7. Third-Party Processing

• OpenAI: AI analysis processing (adequate safeguards in place)
• Database Hosting: EU-based servers, GDPR compliant

8. Exercise Your Rights

To exercise your GDPR rights:
1. Email us at privacy@automatedweighting.com
2. Include your account email and specific request
3. We will respond within 30 days (1 month)
4. Identity verification may be required

9. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority. EU citizens can contact your national DPA. We encourage contacting us first for faster resolution.