Privacy Policy

1. Controller

The controller of personal data is the respective contracting entity as defined in the Terms and Conditions.

For customers located in the European Union (EU/EEA):
digitLabs Battery Consulting GmbH
Germany

For customers located in the United Arab Emirates (UAE):
digitlabs Battery Consulting Middle East FZ-LLC
United Arab Emirates

Contact for privacy matters:
Click to reveal email

2. Categories of Data Processed

• Account data (name, email address, user roles)
• CRM and business data entered by users
• Billing data (invoices, payment status, usage records)
• Technical metadata (IP address, timestamps, logs)
• Security and fraud prevention data

3. Purposes and Legal Bases (Art. 6 GDPR)

• Provision of services and contract performance (Art. 6(1)(b) GDPR)
• Compliance with legal obligations (Art. 6(1)(c) GDPR)
• Service security and system integrity (Art. 6(1)(f) GDPR)
• Consent where required (Art. 6(1)(a) GDPR)

4. AI Processing & Automated Decision-Making

Adict.ai provides AI-assisted functionality such as summarization, sentiment analysis, and contextual insights. AI outputs are generated based on user-provided data and selected model configurations.

No fully automated decisions with legal or similarly significant effects within the meaning of Art. 22 GDPR are made. All operational and contractual decisions remain under human control.

Users may select AI model providers. Where external providers are used, data processing occurs solely on documented instruction of the Customer.

5. Hosting & International Data Transfers

Core services of Adict.ai are operated within the European Union. Application infrastructure runs in EU data centers (Netherlands), and the primary database is hosted in Germany.

No personal data is transferred outside the EU/EEA unless explicitly configured by the Customer. Where such transfers occur, appropriate safeguards (e.g., Standard Contractual Clauses) are implemented.

6. Security Measures

• Encryption in transit (TLS)
• Role-based access control (RBAC)
• Least-privilege administrative access
• Operational logging and monitoring
• Regular backups and recovery procedures
• Incident response mechanisms

7. Data Retention

8. Personal Data Breach Notification

In the event of a personal data breach, digitLabs will notify affected Customers without undue delay and in accordance with Articles 33 and 34 GDPR where applicable.

9. Data Subject Rights

Data subjects have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Requests can be submitted to Click to reveal email.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

10. Cookies & Analytics

Adict.ai uses strictly necessary cookies for authentication, security, and fraud prevention.

We also use Google Analytics 4 (Google LLC, USA) to collect anonymised data on how visitors use the application (e.g., pages visited, session duration, general device information). This helps us improve the service. Google Analytics sets cookies (_ga, _gid, _ga_*) that persist for up to 2 years. The legal basis is our legitimate interest in understanding and improving service usage (Art. 6(1)(f) GDPR), or your consent where required by applicable law (Art. 6(1)(a) GDPR).

You can opt out at any time using the Google Analytics Opt-out Browser Add-on. Google's privacy practices are described at policies.google.com/privacy.

For full cookie details see the Cookie Policy.

11. UAE Data Protection

For users located in the United Arab Emirates, processing is conducted in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Cross-border transfers are safeguarded under applicable legal mechanisms.

12. Updates to this Policy

This Privacy Policy may be updated to reflect legal, technical, or operational changes. The current version is published on this page.