This privacy notice (hereinafter the „notice“) explains how Brainbase OÜ (hereinafter the „company“ or „us“) collects or processes in any other manner the personal data of its visitors of the website www.brainbase.com hereinafter the „website“) and the representatives of customers of Brainbase platform (hereinafter the “platform”) - all such persons are referred to as “you” or the “data subject”.
This notice describes the processing of personal data (hereinafter the “data”) by the company as a data controller. This means that the company individually or along with others determine the purposes and means of the processing of personal data.
Data controller
Brainbase OÜ
Registry code: 14601476
Address: Lootsi 8, 10151, Tallinn, Estonia
Email: support@brainbase.com
What categories of personal data do we processes?
The personal data we process include, but is not limited to the following:
Identity Data: this includes first name, last name, company name.
Sources of collection of data: we get the data from you when you contact us at our website and/or sign up for our platform.
Contact Data: this includes email address, phone number, country.
Sources of collection of data: we get the data from you when you contact us at our website and/or sign up for our platform.
Profile Data: this includes your username, password, preferences and image.
Sources of collection of data: we get the data from you when you sign up and use our platform.
Website Visit Data: this includes the data which is generated as a result of visiting and using the website (e.g. the data regarding how you use the website, the IP address, your location and browser type). Please see the explanation in section “Cookies and other web technologies” below.
Sources of collection of data: we get the data when you visit and use the website.
Platform Usage Data: this includes the data which is generated as a result of using the platform (e.g. the IP address, your location and browser type).
Sources of collection of data: we get the data when you visit and use the platform.
The purpose and the legal grounds for THE processing of personal data
We rely on the following legal grounds upon processing of your personal data:
Processing necessary for the fulfilment of the contract
We process the personal data on this legal ground if it is necessary for the fulfilment of the contract or for taking measures prior to concluding of such contract based on your request.
Purposes of Processing
Categories of Data
Pre-contractual relations, keeping and development of client relationship (concluding the contract, transferring the information related to fulfilment of the contract, handling of claims) and the provision of platform services.
Identity data, contact data, profile data
Processing necessary for compliance with a legal obligation
We process processes personal data on this legal ground if the legal obligation for processing arises from the law.
Purposes of Processing
Categories of Data
Notification of and response to the information requests of public authorities and government institutions.
Identity data, contact data, profile data, website visit data, platform usage data
Legitimate interest
The legitimate interest means that the company does not have to process your data necessarily for the fulfilment of contract and the company does not have the obligation arising from the law, but processing of personal data is still necessary. This may be necessary, e.g. for development of services and products provided by the company by improving them for you and to protect the property, clients and employees of the company, as well as for making business decisions.
You have the right to ask clarifications from the company regarding the processing based on the legitimate interest by sending the request to support@brainbase.com. You also have the right to send the objection, if you find that processing of your data for the purposes provided below infringes your rights.
The overview below regarding processing of data based on the legitimate interest is not exhaustive. The company may process your personal data for other purposes upon reasonable necessity and to the extent provided by the law.
Purposes of Processing
Categories of Data
Administration of our business, the website and the platform (including troubleshooting, testing, system maintenance, support, reporting and hosting of data).
Identity data, contact data, profile data, website visit data, platform usage data
Keeping and development of client relationship (answering the requests, general customer service, information exchange)
Identity data, contact data, profile data
Consent
In some cases, we need your consent for data processing. We process the personal data based on the consent only for the purpose described below.
You always have the right to withdraw the consent by changing your preferences via our website Withdrawal of the consent does not affect the legality of the processing of your personal data prior to withdrawal.
Purposes of Processing
Categories of Data
Development of products and services - we retain and evaluate information on your recent visits to the website, how you move around different sections of the website for analytics purposes so that we can improve the functionality the website and make it more user-friendly.
Website visit data
Categories of recipients of personal data and transfer of personal data to third countries
In some cases, the company can transfer your personal data to third persons. These are categorized as follows:
Partners who provide the services to the company, e.g.:
Providers of ICT and information society services (including providers website and platform hosting services and other providers of cloud services);
Providers of accounting services;
Auditors.
All persons mentioned above process the personal data on behalf of the company and can use your personal data only for the provision of services agreed with the company and in limited cases.
Public authorities and supervisory bodies, e.g.:
Court;
Law enforcement authorities;
Data protection authorities.
We transfer your data to public authorities and supervisory bodies only if the law requires it.
Many of our external third parties are based outside the European Economic Area (EEA). Therefore, their processing of your personal data will involve a transfer of data outside the EEA. We do not transfer your personal data outside the EEA, nor to such third country or international organization, the level of data protection of which the European Commission has not considered adequate. If it is still necessary (e.g. for provision of services), such transfer of personal data will take place only upon appropriate legal basis, and we will take appropriate protective measures.
We share your personal data within the Brainbase group. This will involve transferring your data outside the EEA (to the United Stated in particular). To ensure that your personal data is protected when transferred outside the EEA, a data transfer agreement has been put in place between Brainbase OÜ and Brainbase Inc. incorporating the EU’s standard contractual clauses.
You have the right to get additional information about the transfer of your personal data by sending us the request by email at support@brainbase.com.
Retention of personal data
The company keeps your personal data for the period necessary for the achievement of purposes stated in this notice or until the law requires it.
More specific terms of retention can be exercised by accessing your personal data. Please see the explanation in the section “Your rights regarding the personal data”.
Your rights regarding the personal data
Right of access to your data: you have the right to know, whether personal data concerning you are being processed or not, what is the purpose of processing and what are the categories of personal data. Besides, to whom the data is disclosed (especially the recipients in third countries), for how long the data is retained and what are your rights concerning rectification, erasure and restriction of the processing.
Right of rectification: you have the right to demand rectification of the personal data concerning you if the data are inaccurate or incomplete.
Right of erasure: in some cases, you have the right to demand erasure of the personal data concerning you, for example in case when you withdraw your consent and there are no other legal grounds for the processing of the data.
Right to restrict the processing: in some cases, you have the right to restrict processing of the personal data concerning you for a certain time (e.g. if you have objected the processing of personal data).
Right to object: you have the right to object the processing of personal data, which is processed based on the legitimate interest, including profiling. Upon objection, the company will no longer process the personal data unless the company demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms.
Right to data portability: if processing of your personal data is based on your consent or the contract with the company and the data processing is carried out by automated means, then you have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Also, you have the right to claim the company to transmit those data to another service provider if it is technically possible.
Right to turn to the company, supervisory authority or a court: if you want to exercise the above-mentioned rights, please send us an email at support@brainbase.com. If you find that your rights have been breached, you have the right to turn to the Data Protection Inspectorate (Andmekaitse Inspektsioon) and/or court. The contact details of the Data Protection Inspectorate are available at www.aki.ee.
Cookies and other web technologies
For the functioning of the website, as well as the analytical purposes, we can sometimes store small files of data (cookies) to your device.
The cookie is a small text file which is saved by the website to your computer or a mobile device when you visit the website. This allows the website to remember your activities and preferences (e.g. language and other preferences upon displaying the website) for a certain period. This way, you do not have to re-enter them each time you return to the website or browse it.
We use the following cookies:
Cookie name: “_ga”; cookie type: persistent; purpose: used to distinguish users – required by the third-party Google Analytics service; expiration: 2 years;
Cookie name: “_gid”; cookie type: persistent; purpose: required by the third-party Google Analytics service to distinguish users; expiration: 1 day;
Cookie name “intercom-id-qygplgzp”; cookie type: persistent, purpose: Support chat widget provided by Intercom Inc needs this to operate; expiration: 2 weeks;
Cookie name “intercom-session-qygplgzp”; cookie type: persistent, purpose: Support chat widget provided by Intercom Inc needs this to operate; expiration: 2 weeks;
Cookie name “__cfduid”; cookie type: persistent, purpose: CloudFlare cookie to increase page load times; expiration: Infinite
Cookie name „G_ENABLED_IDPS“, cookie type: persistent; purpose: required by the third-party Google+ services; expiration: Infinite.
Our website uses analytical software Google Analytics provided by Google Inc (hereinafter “Google”), which uses cookies. These are text files stored in your computer or a mobile device, which are used to analyze how you use the website. The information received via cookies on how you use the website is transferred to Google. Google can transfer such data to third persons, if the law prescribes it or if these third persons process the data based on the authorization made by Google. In addition to Google Analytics, our website uses the Google Tag Manager operated by Google. Google Tag Manager allows marketed website tags to be managed using an interface.
Our website also uses the support messaging chat offered by Intercom Inc (https://www.intercom.com/). When you use this tool at our website, your data, such as name, email address, an operating system, browser version, IP address, as well as the content of your messages will be transferred to Intercom and stored on their servers in the United States.
You always have the right to withdraw the consent by changing your preferences via our website.
Amendment of this notice
The company has the right to amend this notice unilaterally. The company will notify of amendment of this notice on its website, by email or in other manner.
For additional questions, or to receive a separate copy of this notice, please contact support@brainbase.com.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article