Privacy Policy

1. Data Controller

The controller of personal data for this website (aibrandrank.org) and AIBRI-related research services is:

• AI BrandRank Institute (AIBRI)
• Address: Paseo de la Castellana, 259C, Torre de Cristal, 28046 Madrid, Spain
• Email: privacy@aibrandrank.org

2. Data Collection Principles

Under a principle of institutional minimalism, AIBRI collects only the minimum data necessary to maintain audit transparency, website security, and legal compliance. We do not engage in user profiling or the resale of data for commercial marketing.

3. Types of Information We Collect

The information we collect mainly falls into the following categories:

3.1 Automatically Collected Technical Data

When you visit the AIBRI website, our servers automatically record standard log information, including:

This data is used solely to protect the website from DDoS attacks and malicious crawling.

• Access metadata: anonymized IP address, access time, browser type, and operating system.
• Traffic source: referral links that directed you to this site.

3.2 Contact Information

If you contact us by email (for example, contact@aibrandrank.org), we may record your:

This information is used only to respond to your request and is later archived or deleted according to our procedures.

• Name / organization name.
• Email address.
• Contents of the communication.

3.3 Special Note on AI Audit Evidence

Evidence Vault shared links cited in AIBRI audit bulletins may contain AI-generated conversation content. This content is generated by auditors in controlled environments and does not include personal privacy information of external users.

If an original link gives rise to a third-party copyright or compliance dispute, please contact us in accordance with Section 8 of this policy.

4. Purposes of Processing and Legal Bases

Under Article 6 of the GDPR, our processing relies on the following legal bases:

• Performance of a contract / responding to a request: to reply to your research access or cooperation request.
• Legal obligation: to fulfill compliance retention and reporting obligations as an audit institution.
• Legitimate interests: to maintain the security, independence, and academic credibility of the AIBRI website.

5. Data Storage and Cross-Border Transfers

• Storage location: AIBRI's core database is located within the European Economic Area (EEA).
• Global nodes: although we operate distributed probe nodes in locations such as Hong Kong and London, personally identifiable information (PII) is not synchronized to those nodes.
• Security: we use industry-leading encryption technologies (SSL/TLS) to protect all data transmissions.

6. Data Retention Periods

• Access logs: normally retained for 90 days unless a security audit requires longer retention.
• Contact records: retained for 24 months after your request has been handled for possible follow-up research.
• Audit evidence: as part of the research record, anonymized audit evidence is permanently archived in the Evidence Vault.

7. Your Rights

As a data subject under the GDPR, you have the following rights:

• Right of access: to request a copy of the personal information we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure (right to be forgotten): to request deletion of your data where specific legal conditions are met.
• Right to restriction of processing: to request restriction of processing during certain disputes.
• Right to lodge a complaint: to complain to the Spanish Data Protection Agency (AEPD) or the supervisory authority in your country.

8. Appeals and Removal Requests

If you believe evidence links cited in an AIBRI audit report involve your privacy or copyrighted information, please submit a written request to compliance@aibrandrank.org. We will conduct a balanced review under the principles of evidence integrity and personal privacy protection and respond within 7 business days.

9. Cookie Policy

The AIBRI website uses only necessary system cookies, such as those for language preference selection and security verification.

We do not use third-party advertising trackers or analytics cookies. Any analytics configuration, such as Google Analytics, is operated in privacy-enhanced mode.

10. Policy Changes

AIBRI reserves the right to update this Privacy Policy at any time. Any material changes will be announced prominently on the homepage or reflected by revising the last updated date.