Soma1. Public summary
This summarises known marketing processing and categories to document for deployments. It is not the full internal Article 30 record and does not claim unverified processing or compliance work is complete. EUTS UG (haftungsbeschränkt), identified in the Impressum, is the website controller and may be processor for agreed customer services.
2. Controller activities
| Activity | Data and purpose | Basis and retention criteria |
|---|---|---|
| Website delivery and protection | Visitors’ IP and request data; deliver pages, prevent abuse and investigate failures. German hosting provider. | Article 6(1)(f). Requests and necessary infrastructure records; actual operator rotation requires verification. |
| Enquiries | Contact information, messages and supplied attachments; response and follow-up. Authorised personnel and communications suppliers. | Article 6(1)(b) or (f), and (c) for legal retention. Handling, follow-up and applicable record or claims duties. |
| Privacy and security requests | Necessary identity, contact and issue details; fulfil rights and investigate reports. | Article 6(1)(c), and (f) for security. Only as needed to resolve, document and meet applicable duties. |
No visitor analytics, marketing profile, newsletter registration or beta-registration database exists in this site. The privacy policy explains recipients, rights and retention criteria.
3. Customer processing
Where commissioned, the processor record must identify customers, processing categories, locations, recipients, transfers and security measures. Possible scope includes CRM, supplier records, projects, inventory, billing, documents, approved connectors and AI assistance. These are scoping categories, not evidence that every feature is enabled or authorised.
The executed DPA annexes must specify people, data, purposes, duration, sensitive-data safeguards, actual suppliers and retention. Prompts, outputs, embeddings and AI logs need their own minimised scope and deletion rules. Do not assume another product’s fixed log periods.
4. Full records and review
Internal controller and processor records must contain all applicable Article 30 particulars, remain current and be available to supervisory authorities as required. TOMs, the provider register and transfer assessment support rather than replace full records. Contact: contact@euts.ai.
SomaHQ · EUTS UG (haftungsbeschränkt)
contact@euts.ai · Legal hub