Brain+ Privacy Policy
Updated: 01. November 2022
This Privacy Policy explains how your personal data is collected and processed by Brain+ ApS (“Brain+”) when you use the CST Assistant.
We update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date of this policy and, depending on the specific changes, we will provide you with additional notice or require a renewed consent. We encourage you to review the Privacy Policy whenever you access the app or website to stay informed about how we process your personal data and how you can protect your privacy.
Collection of information
Account creation: When you create an account, we collect your email address. If you access the app as part of an organizational subscription, we also collect the name of your affiliated organization.
Usage Information: We log information about your use of the App, including the type of device you use, the features you use, and access times.
Use of information – purpose and legal basis
Account creation: We collect information about you during account creation, to manage your access to the service including any access provided by your organizational affiliation. The legal basis for this is our need to fulfil our contract with you, GDPR 6.1(b).
Usage information: We log information about your use of the app, to learn how to improve our offerings. The legal basis for this is our legitimate interest, GDPR 6.1.(f).
Storage of information
Brain+ will store your personal data for as long as you have access to the service by having an account. If your account access is removed, your data will be deleted, unless further storage is required to establish, exercise or defend a legal claim or to comply with applicable law, including accounting rules.
Sharing of information
Brain+ does not share your information with third parties, expect in the following circumstances:
• If you access the service as part of an organizational subscription, we share your name with the relevant organization.
• If we are required to disclose your personal data by applicable law, rule, regulation, or legal process or in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company.
In connection with our processing, we use data processors such as server hosting providers, technical service providers for supporting internal operations, user login services and analytics service providers. Currently, our data processors are:
• Open Telekom Cloud (hosting)
• Matomo (Usage analysis)
Transfer to third countries
Brain+ does not transfer your data to unsafe 3rd countries
Security
Brain+ has put in place organizational and technical measures to protect collected information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction.
Deleting your account
You may request to delete your account at any point. To do so, please follow the steps below:
• Login to either the Android mobile app, iOS mobile app or website.
• Click on the menu icon (top right) and select “Settings”.
• Click on the red text button that says “Delete my account”
• Check the confirmation text and then select the “Delete my account” button.
• Enter in your email address in the text field and click on the confirmation button
You may also contact us directly at support@brain-plus.com to request your account deletion. Please include in your email the email address you use to login to your account.
You will receive a confirmation email after your account has been deleted.
Your rights as a data subject
If you wish to use any of the rights described below, you may contact us at any time by emailing us at support@brain-plus.com.
We process and answer your requests without undue delay and in any event within one month of our receipt of the request unless a longer period is required due to the complexity of the request. In this case, our response time can be up to three months.
Right to request access
You have the right to request access into the data that we are processing on you, including:
the purposes of the processing the categories of personal data concerned the recipients or categories of recipient to whom the personal data have been or will be disclosed the envisaged period for which the personal data will be stored.
Furthermore, you have the right to obtain a copy of the personal data undergoing processing. Please note that the access may be restricted due to intellectual property or trade secrets.
Right to object
You have the right to object to our processing of your personal data on grounds relating to your particular situation when the data are processed. In this case, we will cease the processing unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is necessary for the establishment, exercise or defence of legal claims.
You have the right to object to our processing of your personal data for direct marketing purposes at any time. We will cease the processing of your personal data for this purpose after the objection.
In addition, you have the right, on grounds relating to his or her particular situation, to object to processing of personal data by Brain+ for scientific or historical research purposes, or for statistical purposes, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Please note that if you exercise this right, your user license to use the app will cease automatically.
Right to rectification and erasure
You have the right to have inaccurate personal data rectified.
Furthermore, you have the right to have your personal data erased where one of the following grounds applies:
• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
• If you have withdrawn your consent and there are no other legal grounds for the processing,
• If you have objected to the processing and there are no overriding legitimate grounds for the processing,
• The personal data must be erased for compliance with a legal obligation in Union or Member State law,
• The personal data have been unlawfully processed or
• The personal data have been collected in relation to the offer of information society services.
Please note that your right to erasure may be limited if the data are necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims or if the data is necessary for the performance of a task carried out for reasons of public interest.
The right to restriction
You have the right to obtain restriction of processing in certain circumstances. If you have the right to restriction, we will only process your data with your consent or for the establishment, exercise or defence of a legal claim or to protect a person or important grounds of public interest. Please note that if you exercise this right, your user license to use the App will cease automatically.
The right to withdraw consent
If we have asked for your consent to our processing of your data, you have the right to withdraw your consent at any time.
If you withdraw your consent, we will cease processing of the data for which you have withdrawn consent, unless we have a legal obligation to keep some or parts of your data.
Please note that if you withdraw your consent, your user license to use the App will cease automatically.
The withdrawal of your consent does not affect the lawfulness of processing based on your consent before its withdrawal.
The right to data portability
You have the right to receive the personal data you have provided us with which we process in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller if the processing is based on consent or contract performance.
Contact and complaints
Brain+ has the following contact information:
Brain+ A/S
Adress: Købmagergade 53, 3. sal, 1150 København, Denmark
E-mail: support@brain-plus.com
If you wish to make a complaint over the processing of your personal data, you have the right to lodge a complaint to the relevant supervisory authority.
