Privacy Policy

Last updated: 13 June 2026

1. Who we are

This website (euaiactkit.com) is published by Lucas Diaz ("we", "our", "us"), based in Paris, France. Contact: lucas@euaiactkit.com.

For all GDPR-related questions, you can use the same contact address. We act as the data controller for the personal data described in this policy.

2. What data we collect

We collect personal data only when you voluntarily provide it:

• Email address — when you submit the form at the end of the Scope & Risk Quiz to receive a PDF summary.
• Quiz answers — the answers you provide are stored alongside your email when you request the PDF summary, in order to generate an accurate report.
• Email correspondence — if you contact us directly, your message and reply are stored in our mailbox.

We do not use third-party analytics, advertising trackers, or session-recording tools. We do not set tracking cookies on our domain.

3. Why we collect it

• Send you the PDF summary you requested (legal basis: your consent — Art. 6(1)(a) GDPR).
• Occasionally inform you of major EU AI Act enforcement updates (legal basis: legitimate interest — Art. 6(1)(f) GDPR; you can opt out at any time).
• Respond to your direct messages (legal basis: legitimate interest).

4. How long we keep it

• Quiz emails and answers: up to 24 months after collection.
• Direct email correspondence: up to 3 years from last interaction.
• Cookie preferences (stored locally in your browser): 13 months.

5. Who sees your data

Your data is processed by the following service providers acting as data processors:

• Zoho Mail (Zoho Corporation, EU data centre) — email hosting.
• Formspree (United States) — form submission backend. Data transfer to the US is covered under Standard Contractual Clauses.
• Vercel (United States / EU edge) — static site hosting.
• Gumroad (United States) — used only when you purchase the toolkit; Gumroad acts as a separate data controller. See Gumroad's privacy policy.

We never sell or rent your personal data.

6. Cookies

We currently set only one strictly-necessary local storage entry to remember your cookie-banner choice. No other cookies are placed unless and until you accept analytics or marketing cookies via the banner — and we currently do not load any.

Google Fonts are loaded from Google's CDN to render the typography. This results in an HTTP request to Google servers (your IP address is transmitted) but does not set cookies on our domain.

7. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time (for processing based on consent).
• Lodge a complaint with the French data protection authority (CNIL — cnil.fr) or your local supervisory authority.

To exercise any of these rights, email lucas@euaiactkit.com. We respond within 30 days.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version.

← Back to home