Privacy Notice

Last updated: 2026-06-08

Data Controller

Under applicable data protection law, AION (“we”, “us”) processes your personal data as described below.

Personal Data Processed

We may collect the following categories of personal data:

Identity and contact details (name, job title, corporate email, phone)
Company information (company name, sector, employee count range)
Assessment form responses (compliance questions, free-text descriptions)
Technical data (IP address, browser type via server logs)
Marketing preference (optional consent for updates)

Purposes of Processing

Your data is processed for the following purposes:

Receiving and responding to compliance assessment requests
Managing consulting proposals and discovery calls
Pre-contractual communication
Legal compliance
Marketing communications where you have opted in
Website security and service quality

Legal Bases

Processing is based on one or more of the following:

Performance of a contract or pre-contractual steps
Legitimate interests (lead management, security)
Legal obligation
Consent (optional processing such as marketing)

Transfers

Data may be shared with processors bound by confidentiality (hosting, email, scheduling) only as necessary to deliver our services.

Cross-border transfers, if any, are subject to appropriate safeguards.

Retention

Assessment data is retained for up to 24 months after the request is closed unless a longer period is required by law or an ongoing client relationship.

Server logs are kept for a limited period for security purposes.

Your Rights

Depending on applicable law, you may have the right to:

Access your personal data
Rectify inaccurate data
Request erasure
Restrict or object to processing
Data portability where applicable
Lodge a complaint with a supervisory authority

Contact

To exercise your rights, contact us at the email address published on our website. We respond within the timeframe required by applicable law.

Nothing in this notice constitutes legal advice.