This service is operated by Gian Marco Solas, EU/Italian qualified lawyer, through 1love.works and eulawscanner.eu. For data protection purposes, Gian Marco Solas is the data controller. Contact: gmsolas@sustainab-law.eu
Free scanner: we do not ask for your name or email address. To apply the monthly limit of free scans, our server keeps a counter linked to a one-way code (HMAC) derived from your connection's internet address. For IPv6 connections only the network part (/64) is used. The address itself is never stored, and the code cannot be turned back into it. Counters are deleted automatically after the end of each calendar month. Legal basis: our legitimate interest in preventing abuse of a free service (Art. 6(1)(f) GDPR).
Paid license (Step 2): At purchase we collect your email address, entity name, country, and payment data. Payment data is processed by Stripe. Email and license data are stored in our database (Supabase, servers in Stockholm, Sweden, EU).
Consultation booking: Bookings are made via Calendly, which collects your name and email as an independent data processor. See Calendly's privacy policy at calendly.com/privacy.
Scan content: Text submitted for analysis is transmitted to the Anthropic API for processing; we do not keep the submitted text. We do store the result of each scan in our database (Supabase, servers in Stockholm, EU), accessible only to our servers: the entity name and document type you enter, the overall verdict, the scores and the number of anomalies found. These results feed the anonymous totals shown on our sites. For licence holders, the full analysis result is also kept in the scan history linked to the licence. The acts analysed are public administrative documents. Any personal data in those documents relates to public officials acting in their official capacity, which constitutes a lawful basis under Article 6(1)(e) GDPR.
License data: performance of a contract (Article 6(1)(b) GDPR). Consultation data: legitimate interest and performance of a contract (Article 6(1)(b) and (f) GDPR). Public act analysis: public interest and exercise of official authority (Article 6(1)(e) GDPR).
License data is retained for the duration of the license and for 3 years thereafter for legal and accounting purposes. Data is not transferred outside the European Economic Area, except as described in section 5.
Stripe, Inc. — stripe.com/privacy
Anthropic, Inc. — anthropic.com/privacy
Calendly, Inc. — calendly.com/privacy
Supabase, Inc. (Stockholm, Sweden, EU) — supabase.com/privacy
Under GDPR you have the right to access, correct, delete your data, object to processing, request restriction and portability. To exercise these rights contact gmsolas@sustainab-law.eu. We will respond within 30 days.
We use only essential technical cookies necessary for the operation of the service. We do not use tracking or advertising cookies.
You have the right to lodge a complaint with the Garante per la protezione dei dati personali (garante.it) or the supervisory authority in your country of residence under Article 77 GDPR.