This Privacy Policy sets out how personal data of users of the Process Auditor service, available at processauditor.automationnex.io, is processed. It fulfils the information obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
1. Data controller
The controller of your personal data is:
- Name: [FILL IN: full company name]
- Registered address: [FILL IN: street, postal code, city, country]
- Company registration numbers: [FILL IN: VAT ID / registration number]
- Data protection contact: office@automationnex.io
The controller has not appointed a Data Protection Officer. For all matters concerning the processing of your data, please contact us directly at the email address above.
2. Purposes, legal bases and retention periods
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Preparing and delivering the audit report | Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract | Up to 12 months from report generation |
| Commercial contact regarding the report results and automation services | Art. 6(1)(a) GDPR — your consent given in the form | Until consent is withdrawn, no longer than 24 months |
| Newsletter (emails with automation tips) — only if you tick a separate consent | Art. 6(1)(a) GDPR — your consent (confirmed via a link in an email) | Until you unsubscribe (link in every email) or withdraw consent |
| Website traffic statistics and analysis (Google Analytics) | Art. 6(1)(a) GDPR — your consent in the cookie banner | Up to 14 months or until consent is withdrawn |
| Establishing, pursuing or defending against claims | Art. 6(1)(f) GDPR — legitimate interest of the controller | Until the limitation period for claims expires |
3. Scope of data processed
Through the audit form we collect:
- first name,
- email address,
- company name and its website address,
- country of operation, currency and declared hourly rate,
- industry, team size, tools in use and selected problem areas,
- optional additional information you enter in the free-text field,
- if you tick it — your newsletter consent (consent text, date, IP address).
In addition, our system retrieves publicly available content from the website you provide. We do not log in to any systems and do not access password-protected content.
Providing the data is voluntary but necessary to prepare and send the report — without it we cannot deliver the service.
4. Automated processing and AI models
The content of the report is generated automatically: your answers and the public content of your website are analysed by language models (AI) and matched against our database of automation scenarios.
This processing does not produce legal effects concerning you and does not significantly affect you within the meaning of Art. 22 GDPR — the report is informational and indicative only. Its conclusions are estimates, not a binding quotation or decision.
You have the right to request human review of the report content — write to office@automationnex.io.
5. Data recipients
Your data may be entrusted to the following categories of processors:
- Website and application hosting provider — [FILL IN: hosting provider name].
- AutomationNex Owner’s Portal system (VPS server, hosting provider: Hostinger International Ltd.) — receiving the request, generating and sending the report, handling contact and the newsletter.
- Apify Technologies s.r.o. — retrieving the public content of the website you provide.
- Language model (AI) provider — [FILL IN: AI provider name], for the content submitted for analysis.
- Email delivery provider used to send the report — [FILL IN: provider name].
- Google Ireland Limited — Google Analytics (only after consent is given) and Google Calendar if you book a consultation.
We do not sell your data and do not share it with third parties for marketing purposes.
6. Transfers outside the EEA
Some of the providers listed above may process data outside the European Economic Area, in particular in the United States. Such transfers take place on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
7. Cookies
The service uses two categories of cookies and related technologies:
- Essential — browser storage holding your cookie decision and — until you submit it — a draft of the audit form (current tab only, deleted when the tab is closed). These are always active and do not require consent.
- Analytics (Google Analytics 4) —
_gaand_ga_*cookies used for anonymous visit statistics. They load only after you give consent in the cookie banner.
You can change or withdraw your consent to analytics cookies at any time — open cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
8. Your rights
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy of it (Art. 15 GDPR),
- rectify your data (Art. 16 GDPR),
- erase your data — the "right to be forgotten" (Art. 17 GDPR),
- restrict processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interest (Art. 21 GDPR),
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR).
To exercise these rights, write to office@automationnex.io. We respond within 30 days.
9. Right to lodge a complaint
If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority. The authority competent for the controller is:
President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl/en
You may also lodge a complaint with the supervisory authority of your own country of residence.
10. Data security
We apply technical and organisational measures appropriate to the risk, including encrypted transmission (HTTPS), access control to our systems, and the data minimisation principle — we collect only the information necessary to prepare the report.
11. Changes to this Privacy Policy
We reserve the right to update this Policy. Any change will be published on this page together with an updated date at the top of the document. In the case of material changes, we will additionally inform you by email if we hold your address.