How Gieom collects, uses and protects personal data on gieom.cloud and in Blueprint+. Last updated [date].
[Gieom legal entity name], [registered address], is the controller of personal data collected through this website and, for customer account data, in Blueprint+. For content customers put into Blueprint+ (policies, registers, assessments), the customer is the controller and Gieom is the processor under the Data Processing Agreement.
Website visitors: pages visited, device and browser information, approximate location from IP address, and anything you submit in a form (name, work email, organisation, role, message).
Trial and customer users: name, work email, organisation, role, sign-in records, actions taken in the product (which form the product's audit log), and support correspondence.
Customer content: documents, registers, assessments and other material customers place in Blueprint+. We process it only to provide the service.
Legal bases, where required: performance of a contract, legitimate interests in operating and securing the service, consent for marketing, and legal obligation.
Sub-processors who help us run the service (hosting, email, AI drafting, support tooling), listed with their locations in the DPA. Professional advisers and authorities where the law requires. We do not sell personal data.
Content you place in the Magpie AI co-pilot is processed to produce drafts and suggestions for you. It is not used to train models shared with other customers.
Customer content is hosted in the region chosen at provisioning: [regions]. Website and account data may be processed in [regions]. Transfers between jurisdictions are covered by [mechanism, e.g. standard contractual clauses or adequacy]. See Trust & Security.
Account data for the life of the account plus [period]. Customer content until the customer deletes it or the contract ends, after which it is deleted within [period]. Website form submissions for [period]. Audit logs for [period].
Depending on your jurisdiction you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent. Write to [privacy email]. If you are a user of a customer's Blueprint+ account, we may direct your request to that customer as controller.
The website uses strictly necessary cookies for the site to work, and analytics cookies only with your consent. Blueprint+ uses session cookies for authentication. [Link to cookie settings].
We will post changes here and, for material changes affecting customers, notify account administrators by email.
Privacy questions: [privacy email]. Data protection officer, where appointed: [name and contact].