Intellimark
Loading...
Art. 30 register of processing activities.
Effective date: April 3, 2026. Record of Processing Activities pursuant to GDPR Article 30.
Intellimark Group LLC, Atlanta, GA, USA. Contact: contact@intellimark.net
| Activity | Purpose | Legal Basis | Retention |
|---|---|---|---|
| User authentication | Account access & security | Art. 6(1)(b) Contract | Account lifetime + 30 days |
| Survey response collection | Research & analytics | Art. 6(1)(a) Consent | Per org retention policy (default 3 years) |
| Analytics processing | Aggregated insights | Art. 6(1)(f) Legitimate interest | Same as source data |
| AI processing (Groq) | Smart Desk, Synthetic Data | Art. 6(1)(b) Contract | Not stored by processor |
| Email delivery | Survey invitations, notifications | Art. 6(1)(b) Contract | Logs retained 30 days |
| Usage analytics (Matomo) | Platform improvement | Art. 6(1)(a) Consent | 26 months |
Encryption at rest (AES-256) and in transit (TLS 1.3). Row-Level Security per organization. Audit logging of all data access. Regular access reviews. Backups encrypted and stored in EU data centers (Hetzner, Germany).