Privacy Policy

This Privacy Policy explains how MNB Solutions processes personal data in connection with the EU AI Act Navigator. The service is intended to support structured self-assessment and documentation workflows.

Depending on how you use the service, we may process:
account data such as name, email address, organisation and login credentials;
contact and request data submitted through access or assessment request forms;
workspace data, including assessment answers, notes, uploaded documents and evidence references entered by users;
technical and security data such as timestamps, device or browser information, session data, logs and service events required to operate and secure the service.

We may process personal data to:
provide, host, secure and maintain the service;
authenticate users and manage accounts;
store and organise documentation created by users;
respond to requests for Documentation Pack access or expert assessment;
detect misuse, protect the service and enforce our terms;
comply with legal obligations.

Depending on the context, processing may be based on performance of a contract, pre-contractual steps at your request, compliance with legal obligations, or legitimate interests in operating, securing and improving the service. Where consent is used, you may withdraw it at any time without affecting prior lawful processing.

Users and their organisations remain responsible for deciding what data is entered into the service, including whether personal data, confidential information or special categories of personal data may lawfully be uploaded.
MNB Solutions provides the software environment and related operational processing, but does not take over the user's responsibility for the legal assessment, accuracy or lawfulness of the documentation content created through the service.
Depending on the implementation and customer relationship, MNB Solutions may process workspace content on behalf of the customer for hosting and operational purposes, while also acting as an independent controller for account administration, security, abuse prevention, service analytics, billing, support and legal compliance.

The service may allow users to upload supporting files, notes and evidence references. Users should not upload material unless they have a lawful basis and an internal need to process and store that material in the service.
If a user uploads personal data, confidential business material or regulated documentation, the user and the user's organisation remain responsible for assessing whether such upload is permitted and for applying any required retention, access-control, confidentiality and data-minimisation policies.

We may share data with service providers that support hosting, storage, authentication, security or customer support, where needed to operate the service. We may also disclose data where required by law or to protect rights, security or the integrity of the service.

If personal data is transferred outside the EEA, MNB Solutions will seek to use appropriate safeguards required by applicable data protection law.

We retain personal data only for as long as reasonably necessary for the purposes described above, including account administration, documentation storage, security, support and legal compliance. Retention may vary depending on account status, workspace use and applicable obligations.
Users and customers remain responsible for determining whether documentation stored in the service should be retained, deleted, exported or archived to satisfy their own legal, contractual, regulatory or internal governance obligations.

Subject to applicable law, individuals may have rights of access, rectification, erasure, restriction, objection, portability and the right to lodge a complaint with a competent supervisory authority.

MNB Solutions uses reasonable technical and organisational measures to protect personal data processed through the service. However, no online service can guarantee absolute security.

The service is intended for professional and business use and is not directed to children.

We may update this Privacy Policy from time to time. Updated versions become effective when published in the service unless a later date is stated.

Questions about privacy or personal data processing in the service can be directed to MNB Solutions through the contact channels made available in the service.