GDPR-Oriented Usage

Typically: PII detection (regex and model-based), configurable masking before forwarding to AI models, audit logs of all data-modifying actions, tenant-isolated storage, a DPA per Art. 28 GDPR and a documented deletion/pseudonymisation process after contract end. These tools support your own compliance but do not replace it.

Within technical means: data export in JSON/ZIP format on request, audit trail for traceability, deletion in DB and backups within 30 days after contract end. Responding to access requests from end users remains the controller's (customer's) responsibility.

For standard tenants, the DPA available online at hoviguard.eu/en/avv is deemed accepted upon acceptance of the Terms of Service during registration/checkout. Enterprise customers may request a separately signable PDF version via datenschutz@hoviguard.eu.

HOVIGuard notifies the customer of any personal data breach without undue delay, in any case within 72 hours of becoming aware (target ≤ 24 hours on business-day detection), in text form to the admin address registered in the tenant. The detailed process is documented in the incident response playbook.

No. For a binding assessment of your use case — particularly involving special data categories (Art. 9 GDPR), DPIA obligations or sector-specific rules — we recommend involving your data protection officer or qualified counsel.