REG-DIGITAL
Privacy Notice
Privacy Notice
VERSION 1.0 · 12 JUNE 2026 · DEMONSTRATION & EVALUATION ENVIRONMENT
1. Who We Are
REG-DIGITAL is a trading name of IS-Consulting, Slovakia, Company ID: 52157881, D-U-N-S® Number: 496464825 (“REG-DIGITAL”, “we”, “us”).
For the personal data described in this notice, we act as the data controller within the meaning of the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
Contact for privacy matters: privacy@regulations.digital.
Note on platform content: supervisory reviews, positions, and dossiers created in REG-DIGITAL belong to your organisation. To the extent such content contains personal data, your organisation is the controller of that content. Where access is provided for evaluation or demonstration purposes, such content is processed solely to operate the platform experience. Participation in a formal pilot programme may be subject to separate written agreements. This notice covers the personal data we control: your user account and your use of the platform. This notice does not govern personal data processed independently by your organisation outside the platform.
2. What Personal Data We Process, and Why
Account data — your name, username, work email address, role (Administrator or Reviewer), and organisation. Purpose: to create and operate your access to the platform. Legal basis: performance of the contract between us and your organisation, and our legitimate interest in administering authorised access (GDPR Article 6(1)(b) and 6(1)(f)).
Authentication and security data — sign-in and sign-out events, failed sign-in attempts, lockout events, timestamps, and the IP address (Internet Protocol address — the network address your request comes from) of each authentication event. Purpose: securing the platform, detecting misuse, and maintaining the access trail expected of a supervisory traceability product. Legal basis: our legitimate interest in platform security (GDPR Article 6(1)(f)) and compliance with legal obligations applicable to us (Article 6(1)(c)).
Support communications — messages you send to us when requesting help. Purpose: resolving your request. Legal basis: legitimate interest (Article 6(1)(f)).
We do not process special categories of personal data, we do not use your personal data for marketing, we do not sell personal data, and we do not make automated decisions about you that produce legal or similarly significant effects.
3. Cookies and Similar Technologies
The platform uses only what is strictly necessary to keep you signed in: a session token held in your browser for the duration of your session. We use no analytics, advertising, or tracking cookies on the platform. Because only strictly necessary storage is used, no cookie consent banner is required.
4. Who Receives Your Data
Personal data is accessible to authorised personnel of IS-Consulting and to the service providers that host and operate the platform infrastructure: hosting provider Scaleway SAS, with its registered headquarters located at 8 rue de la Ville l'Évêque, 75008 Paris, France. All providers are bound by data processing agreements. Data is hosted within the European Union / European Economic Area: France. We do not transfer personal data outside the EU/EEA; if this changes, appropriate safeguards under GDPR Chapter V will be put in place and this notice updated.
5. How Long We Keep It
Account data: for the duration of the evaluation, demonstration, or pilot access period and 90 days thereafter, unless your organisation instructs deletion earlier or law requires longer retention.
Authentication and security logs: 12 months from the date of the event.
Support communications: 24 months from resolution.
6. Your Rights
Under the GDPR you have the right to access your personal data, to rectification, to erasure, to restriction of processing, to object to processing based on legitimate interest, and to data portability where applicable. To exercise any right, contact privacy@regulations.digital. We respond within one month.
You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.
7. Changes to This Notice
We may update this notice as the platform evolves. Material changes will be notified to your organisation’s administrator. The version and date at the top of this notice identify the current text.