Privacy Policy (GDPR)

Last updated: February 19, 2026

1. Data controller

IRIX DIGITAL EOOD
Company registered in Bulgaria
Email: contact@irix-digital.eu
Website: https://irix-digital.eu

2. What personal data we collect

• Identification data: name, email, phone — when you contact us or request services.
• Browsing data: IP address, browser type, pages visited, visit duration.
• Communication data: content of messages in the AI chat (Grok).

3. Purposes and legal bases

• Contract performance (Art. 6(1)(b) GDPR): provision of digital services.
• Consent (Art. 6(1)(a) GDPR): AI chat, non-essential cookies.
• Legitimate interest (Art. 6(1)(f) GDPR): site improvement, security.
• Legal obligation (Art. 6(1)(c) GDPR): tax compliance.

4. Data recipients

• xAI Corp. — AI services (Grok).
• Google LLC — Google Fonts.
• Hosting and IT providers.

5. Transfer of data outside the EEA

xAI Corp. and Google LLC may process data in the USA. Transfers are protected by standard contractual clauses (Art. 46 GDPR).

6. Data retention period

• Contractual data: contract duration + 5 years.
• Browsing data: according to Cookie Policy.
• AI chat conversations: up to 30 days.
• Billing data: 10 years (legal obligation).

7. Your rights

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent (Art. 7 para. 3)

Contact: contact@irix-digital.eu

8. Complaints

ANSPDCP — 28-30 General Gheorghe Magheru Blvd., Sector 1, 010336 Bucharest
www.dataprotection.ro | anspdcp@dataprotection.ro

9. Data Security

Appropriate technical and organizational measures: SSL/TLS encryption, access control, system monitoring.

10. Changes

This policy may be updated. Changes will be published on this page.

Back to main page