Date: 2025-03-25

Auditor: AI Audit Assistant

1. Account Holder & Workflow Metadata

Account Holder

• Name: Miquel Colomer
• Role: Fundador (Founder)
• Organization: Killia Technologies SL
• Region: EU (Spain)Workflow
• Name: Custom Deal Recommendations by Email using Forms, Bright Data & GPT-4o-mini
• Version ID: afb7c7d4-39fd-484a-9d52-6ba536ccd88c
• Created At: 2025-03-21T11:44:49.695Z
• Last Updated: 2025-03-25T00:32:23.000Z
• Active: No
• Purpose (inferred):
  1. Collect user preferences (categories) and email via web form (When User Completes Form).
  2. Scrape promotional offers from Mediamarkt (Get MediaMarkt Offers Website).
  3. Extract HTML content (Extract Body and Title from Website).
  4. Generate categorized deal recommendations using GPT-4o-mini (Generate List of Deals by Category).
  5. Format recommendations into HTML (Create HTML for Email).
  6. Send email to user (Notify End User by Email).
  7. Display confirmation page (Show Form Results Page).

2. Personal Data Mapping (GDPR Analysis)

1. Personal Data Processed
   • Email address (collected via When User Completes Form)
   • Category preferences (user-selected options: e.g., “Computers & Tablets”)
   • Implicit identifiers: webhook HTTP headers (IP, user agent)
2. Legal Basis for Processing
   • Consent: Undetermined (no explicit consent node or consent checkbox in the form)
   • Contractual necessity: unlikely (no service contract)
   • Recommendation: add explicit consent field or reference to privacy notice
3. Source of Data
   • Manual user input through form (When User Completes Form)
4. Categories of Data Subjects
   • Prospective customers / leads
5. Third-Party Services Receiving Data
   • BrightData (web scraping proxy)
   • OpenAI (GPT-4o-mini model)
   • SMTP provider (email dispatch)