Privacy Policy

Last updated: March 24, 2026

1. Who we are

AI Act Tools is operated by Erwin Roijakkers, based in Eindhoven, the Netherlands (KvK: 98457071). We are the data controller for the personal data processed through this website.

Contact: hello@aiacttools.com

2. What data we collect and why

Newsletter subscription

If you subscribe to our newsletter, we collect your email address. We use this solely to send you AI Act compliance updates and directory news. Legal basis: your consent (GDPR Article 6(1)(a)). You can unsubscribe at any time by replying to any newsletter email or contacting us.

Tool submission form

If you submit a tool via our form, we collect the information you provide (tool name, website, description, your email). We use this to evaluate and potentially add the tool to our directory. Legal basis: your consent (GDPR Article 6(1)(a)).

Website analytics

We use Cloudflare Web Analytics, a privacy-focused analytics service that does not use cookies, does not track individual users, and does not collect personal data. It provides aggregated page view and performance data only. No consent is required for this type of analytics under the ePrivacy Directive.

Local storage

We use your browser's local storage for functional purposes only: tracking your outbound clicks to vendor websites (aggregated, no personal data) and storing form submissions locally. This data stays on your device and is not transmitted to our servers.

Server logs

Our hosting provider (Cloudflare) may process IP addresses and request metadata in server logs for security and performance purposes. Cloudflare acts as our data processor. Their privacy policy is available at cloudflare.com/privacy.

3. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We use the following service providers who may process data on our behalf:

  • Cloudflare (USA) for website hosting and analytics. Cloudflare participates in the EU-US Data Privacy Framework.
  • Zoho (EU data center) for email.
  • Airtable (USA) for data storage. Newsletter emails and form submissions may be stored in Airtable.

4. International transfers

Some of our service providers (Cloudflare, Airtable) are based in the United States. These transfers are protected by the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs) as appropriate.

5. Data retention

  • Newsletter emails: retained until you unsubscribe
  • Tool submissions: retained for as long as the directory operates
  • Analytics data: aggregated, no personal data retained

6. Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, contact us at hello@aiacttools.com.

7. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

8. Changes to this policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page indicates when the policy was most recently revised.