Role of the Parties

For customers subject to the GDPR, Ideation.biz acts as a data processor when processing personal data on your behalf in connection with our AI business validation services. You act as the data controller and determine the purposes and means of processing.

Subject Matter and Duration

The subject matter of the processing is the provision of AI-powered startup and business validation services. We process personal data only for as long as necessary to provide the services, comply with legal obligations, and as described in our Privacy Policy and this Agreement.

Types of Data and Data Subjects

The types of personal data processed may include contact details, startup information, and other data that you submit to the platform. Data subjects may include you, your team members, and individuals referenced in your business materials.

Processor Obligations

• Process personal data only on your documented instructions, except where required by law.
• Implement appropriate technical and organisational security measures.
• Ensure personnel with access to data are bound by confidentiality obligations.
• Assist you, where possible, with responding to data subject requests.
• Notify you without undue delay after becoming aware of a personal data breach.

Sub-processors

We may engage trusted sub-processors, such as hosting, analytics, and AI infrastructure providers, to support the service. Where we do so, we ensure such providers are bound by data protection obligations not less protective than those set out in this Agreement.

International Transfers

Where personal data is transferred outside the European Economic Area or the United Kingdom, we will implement appropriate safeguards, such as Standard Contractual Clauses or other lawful transfer mechanisms.

Return or Deletion of Data

Upon termination of the services or at your request, we will delete or return personal data processed on your behalf, unless we are required to retain it by applicable law.