Your Data Rights

Right of Access

You can obtain confirmation that Eniteo processes data about you and request a copy of all data we hold: account data, company profile, generated content, knowledge base, access logs, consent data.

Timeline: response within 30 days (extendable by a further 60 days in complex cases, with reasoned notification).

Right to Rectification

You can correct inaccurate or incomplete data, e.g. name, email, company profile data.

Right to Erasure ("Right to be Forgotten")

You can request deletion of all your personal data. The account is anonymised immediately; data is permanently deleted within the legally required retention periods (5 years for fiscal obligations; 90 days for technical logs).

Note: Data required for legal obligations (e.g. billing) cannot be deleted before the statutory deadline, but is isolated and no longer used for service delivery.

Right to Restriction of Processing

You can request that processing of your data be temporarily suspended in cases of: disputed accuracy of data, unlawful processing, need for retention to exercise legal claims, or pending verification of an objection.

Restriction does not mean deletion: data is retained but not further processed for the duration of the restriction.

Right to Data Portability

You can receive the data you have provided to us in a structured, commonly used, machine-readable format (JSON), to transfer to another data controller.

The export file includes: account data, company profile, knowledge base, articles, questions, answers, consent logs.

Right to Object

You can object to processing based on legitimate interest (e.g. aggregated analytics for product improvement). Eniteo will then stop processing unless it can demonstrate compelling legitimate grounds that override your interests.

It is not possible to object to processing necessary for contract performance (e.g. authentication, requested content generation).

Withdrawal of Consent

Consent for processing company data by AI sub-processors (Anthropic, OpenAI) is revocable at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Practical consequence: withdrawing AI consent means you will be unable to use content generation features, which are the core of the service.

Automated Decision-Making and Profiling

Eniteo does not carry out automated profiling that produces significant legal effects on users. The AEO score (content quality score) is a technical feature of the service, not an automated decision within the meaning of Art. 22.