Security & TOMs

GEN│RAL is designed for aggregated hotel KPIs. Guest, employee and sensitive personal data are excluded. Access is role-based and trial requests are reviewed manually.

Accounts use individual credentials and technical transmission is encrypted. Administrative access is limited to required people and tasks.

GEN│RAL limits administrative access, separates roles and permissions, logs critical operations and reviews its own access and providers on a risk basis.

IONOS SE – domain management and business email. IONOS DPA · IONOS privacy information

Plus Five Five, Inc. / Resend – necessary account, trial and status emails of the separate GEN│RAL application, not triggered merely by a website visit. Direct emails are handled through the email infrastructure described above. Resend DPA · Resend sub-processors

OpenAI Sites / Cloudflare – public website and GEN│RAL application, including authentication, project-bound data storage and backend functions. No particular data residency is promised. OpenAI and Resend document provider-side measures for access control, encryption, recovery, logging and vulnerability management. ChatGPT Sites privacy guidance · OpenAI sub-processors

When enabled, OpenAI supports evidence-bound interpretation of approved GEN│RAL data. Critical economic calculations follow fixed rules. AI outputs are labelled, are not used as autonomous decisions and require management review.

Report security incidents without undue delay to support@epv-group.com. Send privacy enquiries and requests for data export, rectification or deletion to privacy@epv-group.com.