Privacy policy

This privacy statement informs users about the nature, scope and purposes of the collection and use of personal data by the following provider:

Brain Appeal GmbH
Wildbader Straße 9
68239 Mannheim

Represented by
Jörg Oswald, Managing Director

Contact
Phone: +49 621 637453-0
Fax: +49 621 637453-90
E-mail: info@remove-this.brain-appeal.com

The privacy statement is made in accordance with Article 13 of the EU General Data Protection Regulation (EU GDPR).

Brain Appeal GmbH is not obliged to appoint a data protection officer.

As a visitor to this website, you have the right to obtain information from Brain Appeal GmbH, as the data controller, about the personal data that we use about you.

You have a right to rectification or erasure or to restriction of processing of your personal data. You also have the right to object to the processing.
You have the right to data portability. This means that, upon request, we will provide you with a copy of the personal data that we have stored about you, provided that there is no other legal provision to the contrary.

You have the right to revoke a declaration of consent given to us at any time.

You have the right to lodge a complaint with the supervisory authority. The competent supervisory authority for Brain Appeal GmbH is:

The State Commissioner for Data Protection and Freedom of Information
House address: Lautenschlagerstraße 20, 70173 Stuttgart
Postal address: Postfach 10 29 32, 70025 Stuttgart
Tel.: 0711/615541-0, FAX: 0711/615541-15

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes the name, email address or telephone number. But also data about preferences, hobbies, memberships or which websites were viewed by someone count as personal data.

Personal data is only collected, used and passed on by the provider if this is legally permitted or the users consent to the data collection.

The following sections explain for what purpose which types and categories of personal data are collected and processed by this website. In addition, the legal basis and the duration of storage are indicated. If the data is transferred to other entities, third countries or international organizations, this is also indicated.

The provider (or its web space provider Webhostone, www.webhostone.de) collects data about each access to these web pages (so-called server log files). The access data includes:

• IP address / host name of the accessing computer
• Date and time (time zone) of the server request
• Accessed page or file
• HTTP status code
• Referrer URL

Purpose of processing
The provider uses the log data only for statistical analysis for the purpose of operation, security and optimization of the offer. However, the provider reserves the right to subsequently review the log data if there is a justified suspicion of unlawful use based on concrete indications.

Legal basis
The legal basis for the collection of access data and log files is Article 6 para.1 f)  EU General Data Protection Regulation (to protect the legitimate interests of the responsible party).

Transfer of data
The data will not be transferred - not even to third countries or international organizations.

Duration of data storage
The data will be deleted after 10 days.

Profiling/ automated individual decision-making
No profiling or automated individual decision-making is carried out.

Use of data for other purposes
The data will not be used for other purposes.

When contacting the provider by e-mail or contact form, the user's details are stored for the purpose of processing the request and in the event that follow-up questions arise.

We would like to point out that communication by e-mail is not encrypted, i.e. it is not confidential. If you wish to send us confidential information, please contact us by telephone so that we can arrange a secure means of communication.

If you use the contact form, the transmission of your data is encrypted, as the entire website only allows encrypted access. However, your request will be forwarded to us unencrypted via e-mail. Therefore, if you wish to transmit confidential information, please contact us by telephone so that we can arrange a secure means of communication.

Type and categories of personal data
The personal data processed are those communicated in the e-mail or contact form , for example, name, contact details and the content of the message.

Purpose of processing
Thepurposeof processing is to respond to requests.

Legal basis
The legal basis for responding to inquiries is Article 6 para.1 b) EU-DSGVO (performance of a contract or for the implementation of  pre-contractual measures).

Transfer of data
The data will not be transferred - not even to third countries or international organizations.

Duration of data storage
The data will be deleted as soon as the request has been conclusively processed and no other legal provision requires storage. Other legal regulations are, for example, the retention regulations according to § 257 HGB in connection with § 147 AO. Accounting-relevant data must be retained for 10 years, other tax-relevant data for six years.

Profiling/ automated individual decision-making
No profiling or automated individual decision-making is carried out.

Use of data for other purposes
The data will not be used for other purposes.

We use open source software that is operated on our own servers within the EU. Communication is encrypted (https). Participation in surveys is voluntary.

Type and categories of personal data
The processed data includes the survey responses and technical metadata. In addition, we store data in the background that is related to the respective request. For example, it may be necessary for us to transmit the ticket number from which the survey tool was accessed in order to evaluate our support.

If users provide feedback directly from our software, this input is also recorded and linked to the respective user ID or other personal data. This serves to evaluate feedback in a targeted manner and, if necessary, to respond to specific requests.

Purpose of processing
The data is used to conduct surveys with the aim of improving our products and services, for customer satisfaction surveys, to evaluate events and for feedback on the website or software.

Legal basis
The legal basis for processing is Art. 6 para. 1 a) EU GDPR (consent) or Art. 6 para. 1 f) EU GDPR (legitimate interest).

Transmission of data
The data will not be transmitted - not even to third countries or international organizations.

Duration of data storage
The data collected is stored for 10 years and then deleted or anonymized. Data subjects have the right to information, correction, deletion and objection.

Profiling/automated individual decision-making
No profiling or automated individual decision-making is carried out.

Use of data for other purposes
The data is not used for other purposes.

When users access the offer, one or more cookies are stored on his computer. A cookie is a small file that contains a certain string of characters and uniquely identifies your browser. With the help of cookies, the provider improves the comfort and quality of its service, for example by saving user settings. Cookies do not cause any damage to the user's computer and do not contain viruses.

It is also possible to use the service without cookies. Users can deactivate the storage of cookies in their browser, limit them to certain websites or set their browser to notify them before a cookie is stored. You can delete cookies from your computer's hard drive at any time using the privacy functions of your browser. In this case, the functions and user-friendliness of the offer could be limited.

Purpose of processing
The provider uses the cookies to optimize the offer.

Legal basis
The legal basis for the use of cookies is Article 6 para.1 f)  EU General Data Protection Regulation (for the protection of the legitimate interests of the responsible party).

Transfer of data
The data will not be transferred - not even to third countries or international organizations.

Duration of data storage
The cookies are automatically deleted after the following periods:

• Matomo session cookie (_pk_ses): 30 minutes
• Matomo tracking cookie (_pk_is): 13 months
• Cookie acceptance (brain_cookie_optin_allow_tracking): 3 months

Profiling/ automated individual decision-making
No profiling or automated individual decision-making is carried out.

Use of data for other purposes
The cookies are not used for other purposes.

This website uses Matomo (https://matomo.org) to continuously optimize the offer. Pseudonymous user profiles are created from the collected data. Cookies are used for this purpose.

The data collected with Matomo is not used to personally identify visitors to this website and is not merged with personal data about the person concerned by the pseudonym. If you do not wish to participate in the tracking, you can object to this use by either deactivating the Piwik tracking cookie via your internet browser under user settings or by clicking here.

Purpose of processing
The provider uses Matomo with pseudonymous data in the form of usage statistics for the purposes of advertising, market research and to design the offer in line with requirements.

Legal basis
The legal basis for the use of Matomo is Article 6 para.1 f) EU General Data Protection Regulation (for the protection of the legitimate interests of the responsible party).

Transfer of data
The data will not be transferred - not even to third countries or international organizations.

Duration of data storage
The pseudonymous data collected as part of Matomo is deleted after three months.

Profiling/ automated individual decision-making
No profiling or automated individual decision-making is carried out.

Use of data for other purposes
The data collected using Matomo is not used for other purposes.

Brain Appeal GmbH has a presence in various social media:

• Facebook - de-de.facebook.com/pages/Brain-Appeal-GmbH/111687288901653
• Instagram - www.instagram.com/brainappeal/
• LinkedIn - www.linkedin.com/company/brain-appeal-gmbh
• Pinterest - www.pinterest.de/brainappeal/
• X - x.com/BrainAppealCom
• XING - www.xing.com/companies/brainappealgmbh
• YouTube - youtube.com/@brain-appeal

These websites are used to inform and communicate with customers, interested parties, suppliers and partners.

Type and categories of personal data
The personal data processed is that which is communicated in a message within the social media, for example names, contact details and the content of the message.

Purpose of processing
The purpose of processing is to respond to inquiries.

Legal basis
The legal basis for responding to inquiries is Article 6(1)(b) GDPR (performance of a contract or in order to take steps prior to entering into a contract).

Transfer of data
Brain Appeal does not transfer the data generated in the course of responding to messages - not even to third countries or international organizations.
For information on data transmission by the social media providers themselves, please contact the respective provider. Most of the providers listed above (except Xing) are based in third countries.

Duration of data storage
The data will be deleted as soon as the request has been finally processed and no other legal provision requires storage. Other legal provisions are, for example, the retention regulations pursuant to Section 257 HGB in conjunction with Section 147 AO. Accounting-related data must be stored for 10 years, other tax-related data for six years.

Profiling/automated individual decision-making
No profiling or automated individual decision-making is carried out.

Use of data for other purposes
The data is not used for other purposes.

If a video recording is made as part of training courses, webinars or other internal information and learning formats (e.g. product demos, introductory events, internal workshops or onboarding sessions), this recording is stored exclusively for internal purposes. In particular, it is used for quality assurance, internal knowledge documentation and the further development of our services and training content. The storage does not cause any damage to the participants' devices and is free of malware.

Participation without consent to recording
Participation in the above events is also possible without consent to recording. In this case, neither the image nor the sound of the person concerned will be recorded. The data subject can still follow the event in full, but will not appear in the recording.

Purpose of processing
The provider uses video recordings for internal documentation, to optimize training and information offerings and for quality assurance.

Legal basis
The legal basis for the storage and processing of video recordings is Article 6(1)(f) GDPR to safeguard the legitimate interests of the controller in the efficient, quality-assured provision of training and information services.
If participants are to appear actively in image or sound, this will only take place on the basis of prior consent in accordance with Article 6 (1) a) GDPR.

Transmission of data
The recordings are not transmitted to third parties - not even to bodies in third countries or to international organizations. The videos are used exclusively internally.

Duration of data storage
The video recordings are stored for a maximum of one year and then completely deleted.

Profiling / automated individual decision-making
No profiling or automated individual decision-making is carried out.

Use of data for other purposes
The recordings are not used for other purposes.

We use selected AI technologies to improve our service.

We use ChatGPT for the creation of text, images and graphics on our websites. Our team carefully checks and is responsible for all results. ChatGPT is not directly integrated into our websites. There is therefore no interaction between users and ChatGPT, and no user data is passed on. We have also configured ChatGPT so that the data entered is not used to train the models.

We also use DeepL to translate German-language content on our websites into other languages. The translation is carried out exclusively by us in the background. No user data is passed on to DeepL and no connection is established between users and DeepL, as the translated content is provided directly by us.

Furthermore, we do not use any other AI technologies that visitors to our websites, interested parties, customers or applicants could come into contact with.

Provider ChatGPT: OpenAI, 3180 18th St, San Francisco, CA 94110, USA, openai.com
Provider DeepL: DeepL SE, Maarweg 165, 50825 Cologne, Germany, www.deepl.com

please note the information on data protection for interested parties, customers, suppliers and providers.