Gemini (Google)
Business Plan Price
Included in Workspace ($7-22/user/mo)
Enterprise Features
EU regions, Assured Controls, custom retention, DPIA support guide
Last Updated
March 23, 2026
Google Gemini (EU) - GDPR & Data Privacy Overview (March 2026)
Audience: European clients considering Google Gemini across consumer and enterprise offerings.
Date: March 2026
Executive Summary (TL;DR)
- Enterprise products (Workspace with Gemini & Google Cloud / Vertex AI): prompts/outputs are not used for model training by default, and won't be reviewed by human reviewers or used to train models without your permission, with EU data‑region controls available. Best choice for client data. In the EEA/UK/CH, Google applies the Paid Services data-use terms to all AI Studio/Gemini API use (including unpaid quota), which means prompts/outputs aren't used to improve Google products.
- Consumer Gemini (Free, AI Pro, AI Ultra): by default, your chats/attachments may be used to improve Google AI and may be reviewed by humans and retained (anonymised) for up to 3 years unless you change settings. When Keep/Apps Activity is off, new chats still save up to 72 hours for service delivery & feedback. Use only for non‑confidential content.
- Where to store/process in Europe: Use Workspace data regions (EU) and, for developers, Vertex AI EU regions. For stricter needs, combine Assured Controls / EU Data Boundary.
Tiers at a Glance (EU‑centric)
| Tier | Training on your prompts? | Human review? | Default retention | EU data residency | Contract terms | Typical EU price |
|---|---|---|---|---|---|---|
| Gemini app (Free, consumer Google Account) | ⚠️ Yes (to improve Google AI) unless you disable Gemini Apps Activity | ⚠️ Possible (sampled, anonymised) | Up to 3 years for reviewed samples | ❌ N/A (consumer service) | Google Terms (consumer) | Free |
| Google AI Pro (consumer, incl. "Gemini Advanced") | ⚠️ Same as consumer defaults unless you turn it off | ⚠️ Possible (sampled) | Up to 3 years for reviewed samples | ❌ N/A (consumer) | Google One / Google AI Pro terms | ≈ €21.99 / month (NL) |
| Google AI Ultra (consumer, top tier) | ⚠️ Same as consumer defaults unless you turn it off | ⚠️ Possible (sampled) | Up to 3 years for reviewed samples | ❌ N/A (consumer) | Google AI Ultra terms | ~€250-€275 / month (varies by EU market) |
| Workspace with Gemini (Business/Enterprise) | ✅ No (submissions aren't used to train models) | ✅ No | Follows Workspace data handling | ✅ Yes: Workspace EU data regions; advanced sovereignty controls available | Workspace Agreement + Cloud Data Processing Addendum (DPA) | Bundled in all Workspace plans (not a separate add-on; prices rose ~17% in 2025): Starter $7, Standard $14, Plus $22/user/mo |
| Google AI Studio (developer playground / Gemini API via AI Studio) | Unpaid: ⚠️ Yes, used to improve products (outside EEA/UK/CH). Paid or EEA/UK/CH: ✅ No. Paid-terms apply to all Services in EEA/UK/CH. | ⚠️ Possible for Unpaid | API logging: 55 days (abuse monitoring)* | ❌ N/A (consumer infra) | Gemini API Additional Terms | Free (Unpaid) / Pay-as-you-go (when Billing linked) |
| Gemini for Google Cloud / Vertex AI | ✅ No (prompts/outputs not used for training) | ✅ Not for training; operational logging per Cloud terms | As per Google Cloud/Vertex AI logging & retention. Limited retention for policy/abuse monitoring; not used to train. | ✅ Yes: choose EU regions (e.g., europe‑west4) + EU Data Boundary options |
Google Cloud terms + DPAs | Usage‑based (token pricing; billed in EUR via Cloud SKUs) |
- Logging for abuse detection doesn't equal training.
Recommendation: For GDPR‑sensitive workloads, choose Workspace with Gemini or Vertex AI in EU regions. Do not process client personal data via consumer Gemini tiers.
Details by Offering
1) Consumer Gemini (Free, AI Pro, AI Ultra)
- Data use: By default, Gemini may save activity and use chats & uploads to improve Google AI. You can turn off “Gemini Apps Activity / Keep Activity” and delete history. Some reviewed samples may be kept up to 3 years (anonymised) and are not tied to your Google Account.
- When to use: brainstorming, non‑confidential tasks, personal experimentation.
- When not to use: client data, secrets, personal data (GDPR), regulated info.
- EU pricing: AI Pro commonly ≈ €21.99/month in NL; AI Ultra reported ~€249.99 in US and ≈€274.99 in DE. EU price and availability vary by country.
- Controls: Opt‑out by disabling Gemini Apps Activity / Keep Activity; use Temporary chats for non‑retained sessions.
- Temporary chat (personal Google Accounts only) avoids saving to Activity or recent chats.
- With Activity off, some connected-app features are limited/unavailable.
2) Workspace with Gemini (Business/Enterprise)
- Training: Submissions aren't used to train models and are not human‑reviewed.
- Data location: Use Workspace data regions (EU) for data at rest and processing; admins can monitor via Data regions reports. For stricter sovereignty, use Assured Controls / EU Data Boundary with Access Justifications (Enterprise Plus + add‑ons).
- Retention: Admins can set auto-delete (3/18/36 months) or turn history off.
- Contracting: Covered by your Workspace agreement and Cloud Data Processing Addendum.
- Pricing: As of 2025, Google bundled Gemini into all Workspace plans (no longer a separate add-on). Current list prices (USD): Starter $7, Standard $14, Plus $22/user/month. Plan prices rose ~17% vs. 2024. Check your country's Workspace pricing page for EUR/user/month.
3) Gemini for Google Cloud / Vertex AI (incl. Gemini API)
- Training: Prompts/outputs are not used to train Gemini models. Optional programs (e.g., Trusted Tester) may use data for product improvement if you explicitly opt in.
- EU residency: Choose EU regions (for example, Vertex AI in
europe-west4); combine with EU Data Boundary controls if required. - Pricing (tokens): Usage‑based. As of Sept 2025 example list prices (USD, invoiced in EUR via Cloud SKUs):
- Gemini 2.5 Pro: Input $1.25 / 1M tokens; Output $10 / 1M tokens.
- Gemini 2.5 Flash: Input $0.30 / 1M; Output $2.50 / 1M.
- Gemini 2.5 Flash‑Lite: Input $0.10 / 1M; Output $0.40 / 1M.
- Grounding with Google Search: 1,500 RPD free; then $35 / 1,000 requests.
- Pricing tables explicitly show 'Used to improve our products: Yes (Free) / No (Paid)'.
- Developer note: Prefer Vertex AI for enterprise apps (billing, IAM, logging, regional control).
4) Google AI Studio (Gemini API via AI Studio)
- Data use: Unpaid → used to improve (outside EEA/UK/CH); Paid → not used to improve.
- Human review: ⚠️ Unpaid prompts/outputs may be reviewed by human reviewers (outside EEA/UK/CH). Paid tier and EEA/UK/CH: No human review for training purposes.
- EEA rule: Paid-terms apply to all Services (incl. AI Studio & unpaid quota).
- How to ensure Paid: Link a Cloud Billing account and use the API key from that billed project; verify the Paid tier badge in AI Studio.
- Abuse monitoring: limited retention for policy enforcement (does not train models).
Model Families (what’s current as of Sept 18, 2025)
- Gemini 2.5 variants: Pro, Flash, Flash‑Lite (mainline for apps/APIs).
- Gemini 1.5 models are now legacy (migration advised).
- Gemma 3 = Google’s open lightweight models based on Gemini 2.0 tech (not the same as “Gemini 3”).
- Note on “Gemini 3” naming: No official “Gemini 3” line is generally available as of this date. You may see media/speculation; rely on Gemini 2.5 docs for production.
EU Rollout Checklist (practical)
- Choose the right product path
- End‑users: Workspace with Gemini (enable EU data regions).
- Apps/automation: Vertex AI in EU regions + access controls.
- DPA & sovereignty
- Ensure Workspace DPA and Cloud DPA are in place.
- For high‑bar workloads: enable Assured Controls / EU Data Boundary.
- Disable consumer training
- For any consumer use, turn Gemini Apps Activity off (adds a 72-hour transient save); for personal accounts you can use Temporary chats.
- Ensure AI Studio is 'Paid'
- Link a Cloud Billing account to the AI Studio project and use that project's API key; confirm the Paid tier in Usage & Billing.
- Retention & logs
- Confirm Workspace retention policies and Cloud logging to your needs.
- Billing in EUR
- Workspace: local EUR plan pricing.
- Vertex AI: prices listed in USD, but invoiced in EUR per Cloud SKUs; set budgets/quotas.
Regulatory & Compliance Updates (2025-2026)
- DPIA support: Google published a DPIA support guide for Workspace + Gemini (available in the Workspace Admin Help Center). Organisations processing personal data with Gemini should consult this guide.
- DPC inquiry: The Irish Data Protection Commission (DPC) has an ongoing inquiry into Google AI model training practices. Monitor developments as these may affect EU deployment decisions.
- CNIL fine: The CNIL (France) fined Google €325M (Sept 2025) related to consent practices. While this concerns a different legal entity/product line, it signals active EU regulatory scrutiny of Google’s data practices.
- EDPB Work Programme 2026-2027: The EDPB Work Programme includes AI data scraping guidelines that may affect Gemini’s training data practices and EU compliance requirements.
Sources (quick links)
- https://support.google.com/gemini/answer/13594961 - Gemini Apps Privacy Hub
- https://support.google.com/a/answer/13949619 - Gemini for Google Workspace Privacy Hub
- https://cloud.google.com/gemini/docs/discover/data-governance - Gemini for Google Cloud Data Governance
- https://workspace.google.com/intl/en/products/gemini/ - Google Workspace with Gemini (pricing and bundling, 2025)
- https://www.edpb.europa.eu/ - EDPB Work Programme 2026-2027 (AI data scraping guidelines)
Disclaimer
This overview is intended solely as an informative tool. We strongly advise customers to thoroughly review all Data Processing Agreements (DPAs) and privacy documentation before deploying Google Gemini in production environments - especially when personal data or proprietary business information are processed. WAIMAKERS applies this same principle internally; all tools we use have been thoroughly assessed and included in our own privacy and security documentation. Customers should always carefully evaluate the official documentation, terms, and DPAs of each AI provider they use. WAIMAKERS cannot be held legally liable for any mistakes, errors, inaccuracies, or for the accuracy, currency, or completeness of the information in this document; the ultimate responsibility for GDPR compliance rests with the customer.
Prepared and issued by WAIMAKERS B.V. - March 2026.
Always verify latest regional availability & prices before contracting.