Legal

Privacy Policy

Last updated: May 2026 · GDPR Compliant

1. Data Controller

AI Group LTD is the Data Controller for all personal data processed through the DPP Platform.

Address: Blagoevgrad, zh.k. Elenovo, bl. 95, vh. B, 2700, Bulgaria

EIK: 206987757 | VAT: BG206987757

DPO: dpo@d-pass.eu

2. What Personal Data We Collect

Account Data (Tenants)

  • Name, email address, phone number
  • Company name, VAT number, registration number
  • Billing address and payment information
  • IP address and login timestamps

Automatically Collected Data

  • Browser type, device information, OS
  • Cookies and local storage (see Cookie Policy)

3. Legal Basis for Processing

  • Contract performance (Art. 6(1)(b) GDPR) — Account management, service delivery, billing
  • Legal obligation (Art. 6(1)(c) GDPR) — Tax records, EU ESPR compliance, audit trails
  • Legitimate interest (Art. 6(1)(f) GDPR) — Fraud prevention, platform security, analytics
  • Consent (Art. 6(1)(a) GDPR) — Marketing communications, non-essential cookies

4. Data Retention

  • Account data: Retained while account is active + 2 years after deletion
  • DPP data: Minimum 10 years per EU ESPR Regulation 2024/1781
  • Audit logs: 10 years
  • Access logs: 2 years

5. Your GDPR Rights

Under the GDPR, you have the right to access, rectification, erasure, restriction, data portability, and objection. To exercise your rights, contact our DPO at dpo@d-pass.eu or use the GDPR Export feature in your dashboard.

6. Contact

Data Protection Officer: dpo@d-pass.eu
General legal: legal@d-pass.eu