Privacy Policy – AI-Automated.eu

This is an English translation provided for convenience. The Romanian version of this document prevails: Romanian version.

Last updated: 17 October 2026

This policy explains what personal data we process when you visit the ai-automated.eu website, fill in the audit form or contact us, why we process it, to whom we disclose it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

1. Who the data controller is

The ai-automated.eu website, including the blog at /blog/, is operated by S.C. Secure IT Solutions S.R.L. (“we”).

For any question or request regarding your data, you can write to us at contact@ai-automated.eu. We are not required to appoint a data protection officer (DPO); all requests regarding personal data should be sent to this email address.

2. What data we process

a) The “Free AI audit” form

Through the form on the home page (/en/#audit) we collect:

your name;
your company’s website (optional);
the area you want to automate;
the main challenge you face;
the estimated number of hours lost per week;
the tools you use (optional);
your email address;
your phone number (optional);
your confirmation that you have read this policy.

If you have accepted marketing cookies, data about the source of your visit is also transmitted together with the form: campaign parameters (utm), Google and Meta click identifiers (gclid, fbclid) and Meta identifiers stored in cookies (_fbp, _fbc). Without your consent to marketing, this data is not transmitted.

On submission, the form is checked by Cloudflare Turnstile, an anti-bot service that analyses technical data about your browser and connection.

We do not ask for, and we ask you not to send us through the form, sensitive data (for example health data), trade secrets or personal data of your customers or employees.

b) Messages sent by email or WhatsApp

Your name, contact details and the content of your message, when you write to us at contact@ai-automated.eu or on WhatsApp at +40 750 293 932.

c) Data collected automatically when you visit the website

IP address, browser and device type, pages visited, source of the visit and interactions with the website. Technical data necessary for security is processed by Cloudflare and by the hosting provider. Analytics and marketing data is collected through cookies only after you give your consent. Details in the Cookie Policy.

3. Why we process the data and on what legal basis

Purpose	Data	Legal basis
Preparing and emailing the AI audit report you requested	form data	steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR)
Contacting you to discuss the report and a possible offer	name, email, phone, form data	Art. 6(1)(b) GDPR and our legitimate interest in responding to requests (Art. 6(1)(f) GDPR)
Recording and prioritising the requests received (including an indicative score calculated automatically)	form data	legitimate interest (Art. 6(1)(f) GDPR)
Statistics on website usage	analytics cookies	consent (Art. 6(1)(a) GDPR and Art. 4(5) of Law no. 506/2004 on electronic communications privacy)
Measuring advertising campaigns and the requests they generate	visit source data, marketing cookies, email and phone in irreversibly encrypted form (hash)	consent (Art. 6(1)(a) GDPR and Art. 4(5) of Law no. 506/2004)
Operation and security of the website, protection of the form against abuse	IP address, technical data	legitimate interest (Art. 6(1)(f) GDPR)
Compliance with legal obligations (accounting, tax), if you become a customer	billing data	legal obligation (Art. 6(1)(c) GDPR)

The audit report and the indicative score

The information in the form is processed by our automation system and analysed with the help of an artificial intelligence model (Claude, developed by Anthropic) in order to generate the personalised report and an indicative score of the automation potential. The score only helps us organise requests: all requests are recorded and receive a response, and no decision producing legal effects or similarly significant effects concerning you is taken solely by automated means.

The internal notifications we receive about a new request contain only the information necessary to handle it.

4. To whom we disclose the data

We do not sell or rent your data. We disclose it only to providers who help us operate the website and services, on a contractual basis and only for the purposes above:

the hosting provider (cPanel), in Romania, where the website is hosted;
Cloudflare, Inc. – content delivery network, protection and anti-bot verification of the form (Turnstile);
our own infrastructure in Romania (servers administered by us, running the n8n automation system and the EspoCRM customer management system);
Anthropic PBC (USA) – processor that analyses the form data to generate the audit report;
the email service provider used to send the report and replies;
Google Ireland Limited / Google LLC – Google Tag Manager, Google Analytics 4 and Google Ads conversion measurement, only with your consent;
Meta Platforms Ireland Limited / Meta Platforms, Inc. – the Meta pixel and the Conversions API, for measuring campaigns on Facebook and Instagram, only with your consent to marketing;
public authorities, only where the law requires us to do so.

5. Transfers outside the European Economic Area

Some providers (Anthropic, Cloudflare, Google, Meta) may process data in the United States of America. In such cases, the transfer is based on the European Commission’s decision on the EU–US Data Privacy Framework (for certified companies) or on the standard contractual clauses approved by the European Commission.

6. How long we keep the data

data from the audit form and messages received: at most 24 months from the last interaction, if no contract is concluded;
customer data: for the duration of the contract and thereafter for the period required by accounting and tax legislation;
technical security data (for example IP addresses in logs): at most 12 months;
visit source data (gclid, fbclid, utm): 90 days in your browser, only with your consent to marketing;
cookies: for the duration indicated in the Cookie Policy.

7. Cookies

We use strictly necessary cookies (security and storing your choice) and, only with your consent, analytics cookies (Google Analytics 4) and marketing cookies (Google Ads, Meta Pixel). Google Tag Manager loads only after you give your consent. You can change your choice at any time via the “Cookie settings” link in the page footer. The full list of cookies is in the Cookie Policy.

8. Your rights

You have the right:

to find out whether we process data about you and to receive a copy of it (right of access);
to request the rectification of inaccurate data;
to request the erasure of data;
to request the restriction of processing;
to receive your data in a structured format or to request its transmission to another controller (portability);
to object to processing based on our legitimate interest, including, at any time, to processing for direct marketing purposes;
to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you;
to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal – ANSPDCP (Romanian Data Protection Authority), B-dul G-ral Gheorghe Magheru nr. 28-30, sector 1, București, www.dataprotection.ro.

To exercise your rights, write to us at contact@ai-automated.eu. We will respond within one month of receiving your request at the latest; in complex cases this period may be extended by a further two months, in which case we will inform you.

9. How we protect the data

We use encrypted connections (HTTPS) for the entire website and for transmitting the form, anti-bot verification and limits on the number of submissions, restricted access to internal systems, authentication for administrative accounts and backups. Data sent to Meta for campaign measurement (email, phone) is irreversibly encrypted (SHA-256 hash) before transmission.

10. Minors

Our services are intended for companies, professionals and individuals. We do not knowingly collect data from persons under 16 years of age.

11. Changes to this policy

We may update this policy when our services, providers or the legislation change. The version in force is always the one published on this page, with the date of the last update shown at the top.