Legal
Privacy Policy
Plain language. We distinguish between data we control as a website operator and data we process on behalf of our enterprise customers.
Last updated: 23 August 2026
Roles at a glance
GDPR distinguishes the "controller" (decides why and how data is processed) from the "processor" (acts on the controller's instructions). Whistle AI plays both roles, in different contexts:
| Context | Role | What this covers |
|---|---|---|
| Website & marketing (this site) | Whistle AI — Controller | Visitor analytics (only if you opt in), contact and demo form submissions, cookies for the site to work. |
| Customer inspection data on the Whistle AI platform | Customer — Controller · Whistle AI — Processor | Photos, asset metadata, GPS, timestamps, and inspection outputs uploaded by your team are processed on your documented instructions under a Data Processing Agreement. |
Part A
Website & marketing data (Whistle AI as Controller)
Who we are
Whistle AI is operated by the Eurokinisi group, based in Bucharest, Romania. For website and marketing purposes we act as the data controller. You can reach our team at contact@whistleai.eurokinisi.com.
Data we collect through this site
Contact details you submit through demo or contact forms (name, work email, company, role, country, message), and strictly necessary technical data needed to deliver and secure the site. We do not currently load any third-party analytics or advertising tags on this site.
How we use that data
To respond to your enquiry, schedule walkthroughs, prepare commercial materials you ask for, and keep the site secure. We do not sell personal data and we do not share it for cross-context behavioural advertising.
Lawful basis (GDPR Art. 6)
We rely on your consent for any optional analytics or preference cookies, on the performance of pre-contractual steps at your request when you submit a demo or contact form, on our legitimate interest in keeping the site safe and operable, and on legal obligations where they apply.
Retention
Demo and contact submissions are kept for up to 24 months from your last interaction unless you ask us to delete them sooner.
Your rights
You have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. To exercise any of these rights, email contact@whistleai.eurokinisi.com. You also have the right to lodge a complaint with your local supervisory authority.
Part B
Customer inspection data on the platform (Customer as Controller, Whistle AI as Processor)
Role on the platform
When your organisation uploads field photos, asset metadata, or inspection records into the Whistle AI platform, your organisation determines the purposes and means of processing that data and is therefore the controller. Whistle AI acts as a processor on your documented instructions under a Data Processing Agreement (Art. 28 GDPR).
Scope of processing
We process customer data only to operate the platform, deliver the inspection and predictive maintenance services you have configured, generate audit-ready reports, secure the service, and meet legal obligations. We do not use customer inspection data to train shared third-party models.
Sub-processors
We engage a small set of vetted sub-processors for cloud hosting and infrastructure within the EU, each bound by written data processing terms. A current sub-processor list and our standard DPA are available on request.
Security
We apply tenant isolation, role-based access, audit logging, encrypted transport, and encrypted storage. Human review gates apply to high-impact decisions inside the platform.
Return and deletion on termination
On termination of the underlying agreement, customer data is returned or deleted on your written instructions, subject to any legal retention requirements that apply to either party.
Assistance with data subject requests
If your end users or staff exercise GDPR rights against you in respect of data held in the platform, we will assist you to respond within statutory timeframes. Forward requests or questions to contact@whistleai.eurokinisi.com.
Changes to this policy
We may update this policy as the product and the legal landscape evolve. Material changes will be communicated to active customers in advance of taking effect.