Privacy

We are pleased about your visit to our website www.bridge-brain.com and your interest in our company. To provide you with as much transparency as possible, we inform you below in accordance with the requirements of Articles 13, 14, and 21 of the General Data Protection Regulation (hereinafter "GDPR") about the nature, scope, and purpose of the collection, processing, and use of personal data that occurs during your use of our website, as well as your rights in this regard. You can access the complete GDPR document here.

Contents

1. Definitions of Terms
2. Name and Address of the Data Controller
3. Name and Address of the Data Protection Officer
4. Processing of Personal Data
   • 4.1 Informational Use of Our Website
   • 4.2 Contact via Email
   • 4.3 Contact Form
   • 4.4 Processing of Applicant Data
5. Cookies
6. Sharing of Personal Data
   • 6.1 Webflow and Others
   • 6.2 Pirsch
   • 6.3 Vimeo
   • 6.4 Cloudflare
7. Duration of Data Storage and Data Deletion
8. Your Rights
9. Data Security

1. Definitions of Terms

The following terms used in our privacy policy are defined within Article 4 of the GDPR. This is only an excerpt from Article 4 GDPR. All definitions can be viewed in the GDPR (accessible here).

• Personal Data (Art. 4 No. 1 GDPR)
  All information relating to an identified or identifiable natural person ("data subject"); a person is considered identifiable if they can be directly or indirectly identified, especially by reference to an identifier such as a name, identification number, location data, online identifier, or one or more specific characteristics that express the physical, physiological, genetic, psychological, economic, cultural, or social identity of that person.
• Processing (Art. 4 No. 2 GDPR)
  Any operation or set of operations performed with or without automated means concerning personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
• Pseudonymization (Art. 4 No. 5 GDPR)
  Processing personal data in a way that the data can no longer be attributed to a specific data subject without additional information, provided that such additional information is kept separately and subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
• Data Controller (Art. 4 No. 7 GDPR)
  The natural or legal person, authority, agency, or other body that alone or jointly with others determines the purposes and means of processing personal data; where the purposes and means are dictated by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for in Union law or the law of the Member States.
• Processor (Art. 4 No. 8 GDPR)
  A natural or legal person, authority, agency, or other body that processes personal data on behalf of the controller.
• Third Party (Art. 4 No. 10 GDPR)
  A natural or legal person, authority, agency, or other body, other than the data subject, the controller, the processor, and persons authorized to process data under the direct responsibility of the controller or processor.
• Consent (Art. 4 No. 11 GDPR)
  Any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data concerning him or her.
• Company (Article 4 No. 18 GDPR)
  A company is a natural or legal person that carries out an economic activity, regardless of its legal form, including associations or partnerships that regularly carry out an economic activity.

2. Name and Address of the Data Controller

The data controller within the meaning of the GDPR is:

BRIDGEBRAIN GmbH
Ölmühlweg 33
61462 Königstein im Taunus
Phone: +49 6174 2939510
Email: sabine.eich@bridge-brain.com

You can access our full imprint here: https://www.bridge-brain.com/rechtliches/impressum

3. Name and Address of the Data Protection Officer

You can contact our Data Protection Officer, Ms. Sabine Eich, by mail at:

BRIDGEBRAIN GmbH
Ölmühlweg 33
61462 Königstein im Taunus
Germany

With the addition: "z.Hd. der Datenschutzbeauftragte der BRIDGEBRAIN GmbH" (attn: Data Protection Officer of BRIDGEBRAIN GmbH) or by e-mail at: sabine.eich@bridge-brain.com

4. Processing of Personal Data

We process personal data only if there is a legal basis for doing so:

• A contract exists between you and us, for the fulfillment of which the processing is necessary, or the processing is required to carry out pre-contractual measures upon your request (Art. 6(1)(b) GDPR).
• Fulfillment of a legal obligation to which we are subject (Art. 6(1)(c) GDPR).
• Protecting your vital interests or those of another natural person requires processing (Art. 6(1)(d) GDPR).
• The performance of a task carried out in the public interest or in the exercise of official authority requires processing (Art. 6(1)(e) GDPR).
• The processing is necessary to safeguard our legitimate interests or those of a third party, provided that your interests, fundamental rights, or freedoms do not override these interests (Art. 6(1)(f) GDPR).
• You have given your consent to the processing (Art. 6(1)(a) GDPR).

Additionally, the employees of BridgeBrain GmbH and any service providers are obliged, within the framework of legal requirements, to comply with the applicable data protection regulations.

4.1. Informational use of our website

If you do not provide us with any data (for example, by using a contact form), only the personal data transmitted from your browser to our server will be collected. This data is technically necessary for us to provide you with the website while ensuring a secure and stable display. This includes the following information, which is derived from a log file line:

• Internet Protocol address (IP address)
• Time and date of each access
• Time zone difference from Greenwich Mean Time (GMT)
• The specific page accessed
• Status of the access / Hypertext Transfer Protocol (http)
• Amount of data transferred in each case
• Website from which our website is accessed (referrer URL)
• Internet browser used (including language and version)
• Operating system used

The legal basis for collecting the listed data is Art. 6 (1) (f) GDPR. We have a legitimate interest in ensuring error-free connection establishment and convenient use of our website, as well as analyzing system stability and security and using the data for related administrative purposes.

Data will not be shared with third parties unless there is a legal obligation to disclose.

4.2. Contact via email

If you contact us via the email address stated in section 2 or other email addresses of our company published on our website, we will store your email address and other contact information contained in your email (e.g., your name or telephone number) in order to process your inquiry. Depending on the reason for sending the email, the legal basis for processing the data is Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR. This means that processing is either necessary to process the contract concluded with you or to fulfill our (pre-)contractual obligations, or based on our legitimate interest in contacting parties interested in our services.

4.3. Contact form

We offer a contact form on our website, the use of which generally requires the provision of personal data that goes beyond the data required for informational use of our website. When you contact us using the contact form on our website, your email address and other data you provide will be stored and processed by us to process your request. Depending on the reason for contact, the legal basis for processing the data is Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR. This means that it is either for the execution of the contract concluded with you or for the fulfillment of our (pre-)contractual obligations, or it is based on our legitimate interest in contacting parties interested in our services.

4.4. Processing of applicant data

For submitted application documents and other data collected during the application process that can be personally attributed to you as an applicant, your personal data will be processed if this is necessary for the decision on establishing an employment relationship or, after the employment relationship has been established, for its implementation or termination (Section 26 (1) BDSG, Article 6 (1) (b) GDPR). The same applies if the data processing is necessary to protect the legitimate interests of the responsible body for purposes other than the employment relationship and there is no reason to assume that your legitimate interest as the data subject in excluding processing or use outweighs this (Article 6 (1) (f) GDPR).

5. Cookies

We use cookies on our website. Cookies are small, browser-specific text files that are stored on your hard drive. This provides the location that sets the respective cookie with certain information, but does not allow programs to be executed or viruses to be transmitted. Cookies are divided into the following categories:

• First, a distinction is made according to who set the respective cookie (website operators in the form of first-party cookies or third parties in the form of third-party cookies).
• Then, a distinction is made regarding the storage duration.
  • There are transient cookies that are automatically deleted when the browser is closed. This primarily applies to so-called session cookies, which store a session ID. These session cookies are used to recognize your computer when you visit our website again within a session using the same browser. When you close the browser or log out, these temporary cookies are deleted.
  • There are also so-called persistent cookies, which are stored for a longer period (up to two years). However, the period until deletion varies from cookie to cookie. You can delete these cookies manually at any time using your browser settings.
  • Another group is the so-called Flash cookies. These are Flash Player-bound cookies that store the technical data required to play video or audio content (e.g., image quality or network speed). There is usually no automatic expiration date, and the cookies store the required data regardless of the browser used. Some browsers (e.g., Firefox) offer the option of deleting Flash cookies along with other cookies.
• Cookies are also differentiated based on their function, which is most relevant from a data protection perspective.
  • Technical (essential) cookies are cookies that are necessary to perform basic website functions (e.g., saving a product that has been added to the shopping cart).
  • Performance cookies collect information about website usage and any errors that occur. This is anonymous information that is used to improve the website.
  • Advertising cookies or targeting cookies make it possible to display customized advertising (including from third parties) to website users and to determine the effectiveness of this advertising.
  • Sharing cookies connect the website with other services (e.g., social media presences).

We automatically only use technical cookies, and thus cookies that are essential for the operation of our website, based on our legitimate interest within the meaning of Art. 6 (1) (f) GDPR, in order to design and continuously improve our website effectively.

Please note that you can prevent cookies from being saved at any time by selecting the appropriate settings in your browser. We have compiled further information on this topic for the most common browsers below, but please note that doing so may limit the functionality of our website.

• Mozilla Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop
• Microsoft Edge: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/chrome/answer/95647
• Opera: https://help.opera.com/de/latest/web-preferences/#cookies
• Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac