Privacy notice
What this application does with personal data: why, on what legal basis, for how long, who receives it, and the rights of the people it concerns.
Who is responsible
AIA Studio
Data protection officer: AIA Studio
What is processed, and why
| Record | Purpose and legal basis | Data | How long it is kept | Who reads it |
|---|---|---|---|---|
| Demo request | Answer demonstration requests — needed for a contract with you. | Names, email addresses, company names, free text | Kept for 1 month after it became “Processed”, then erased. | Site Owner, Administrator |
| User | Give each person an account to sign in to the application — needed for a contract with you. | Email addresses, names | How long it is kept is not stated yet. | Administrator, Site Owner |
| Auth Credential | Give each person an account to sign in to the application — needed for a contract with you. | Email addresses, secrets | How long it is kept is not stated yet. | No role: only the application itself uses them |
| Diagnostic Event | Find and fix what goes wrong in the application — for the organisation's legitimate interests, weighed against yours. | Kept for 90 days after its creation, then erased. | Administrator | |
| Notification | Tell people about what needs them in the application — needed for a contract with you. | Free text | How long it is kept is not stated yet. | Administrator, Site Owner |
| Tenant | Keep the organisations whose people use the application — needed for a contract with you. | Company names | How long it is kept is not stated yet. | Administrator, Site Owner |
| Privacy request | Answer the requests people make about their personal data — required by law. | Names, email addresses, free text | How long it is kept is not stated yet. | Administrator |
Who processes it for the organisation
The host of the application's servers and data
The email provider the application sends through
Cookies and browser storage
| Name | What it is for | Kind | How long it is kept |
|---|---|---|---|
| oidc.user: | Holds your sign-in while the tab is open. | Session storage | Until the browser or the tab closes |
| oidc. | Carries a sign-in from the application to the sign-in page and back; removed once you are signed in. | Local storage | Until you clear it |
| app.reauth-at | Remembers when the application last asked you to sign in again, so it does not ask in a loop. | Session storage | Until the browser or the tab closes |
| lang | Remembers the language you chose. | Local storage | Until you clear it |
| ui-lang | Sends you the public pages in the language you last read them in. | Cookie | Kept 1 year |
| app-theme | Remembers whether you chose a light or a dark display. | Local storage | Until you clear it |
| ui: | Remembers the display choices you make: theme, font, text size, column widths, folded sections. | Local storage | Until you clear it |
| list-view: | Remembers how you chose to show a list. | Local storage | Until you clear it |
| planning: | Remembers the view you chose on a planning screen. | Local storage | Until you clear it |
| app.identity | Keeps you signed in. It ends when the browser closes, unless you asked to stay signed in. | Cookie | Kept 14 days |
| app.identity.external | Holds a sign-in through an outside provider while it is under way. | Cookie | Kept 10 minutes |
| app.antiforgery | Protects the forms you send against requests made from another site. | Cookie | Until the browser or the tab closes |
| usermanagement.login.rememberMe | Remembers whether you asked to stay signed in. | Local storage | Until you clear it |
| consent | Remembers your choice about trackers from other companies, so you are not asked on every page. | Local storage | Kept 6 months |
What this application keeps in your browser. Each one is needed for it to work, so none asks for your agreement.
Only with your agreement
It uses no tracker from another company: no audience measurement, no advertising.
Your rights
You may ask to see the data about you, to have it corrected or erased, to restrict its use, to receive it in a reusable form, and to object to its use. Where the basis is your consent, you may withdraw it at any time. You may also complain to the data protection authority of the country where you live or work.
To exercise your rights: privacy@aiastudio.eu