Privacy Policy
This Privacy Policy explains how Brainseas LTD, with its registered office at 5-9 Main Street, Gibraltar GX11 1AA (referred to as "we," "us," or "our"), collects, processes, and protects your personal data. As a data controller, we adhere to the Gibraltar Data Processing Act (Act No. 110/2019 Coll.) and the European Union's General Data Protection Regulation (GDPR). It also outlines your rights and how you can exercise them.
If you have any questions or concerns, please contact us at info@brainseas.com.
What is Personal Data?
Personal Data includes any information that can identify an individual, such as your name, date of birth, email address, mailing address, phone number, or online identifiers like IP addresses. Data that cannot be linked to an identifiable person, such as aggregated website statistics, is not considered Personal Data.
Definition of Processing
"Processing" refers to any operation performed on personal data, whether by manual or automated means. This includes actions such as collection, recording, organization, storage, alteration, retrieval, use, disclosure, deletion, and more.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: You have explicitly consented to the processing of your data for one or more specific purposes.
- Contractual Obligation: Processing is necessary to fulfill a contract with you or to take pre-contractual steps at your request.
- Legitimate Interests: Processing is necessary to pursue our legitimate interests or those of a third party, provided your rights and freedoms are not overridden.
Your Rights
Under GDPR and the Gibraltar Data Processing Act, you have the following rights:
- Right to Access: Request information about the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Object: Restrict or object to the processing of your data under certain circumstances.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data unless legal obligations require its retention.
- Right to Data Portability: Obtain and reuse your personal data across different services in a structured, machine-readable format.
- Right to Withdraw Consent: Revoke your consent at any time without affecting the legality of prior processing based on consent.
- Right to Lodge a Complaint: File a complaint with the appropriate supervisory authority if you believe your rights have been violated.
Supervisory Authority
If you have concerns about how we handle your personal data, you may contact the Gibraltar Office for Personal Data Protection (OPDP) via their official website. While we encourage you to reach out to us first, you are entitled to seek assistance from the supervisory authority at any time.
Updating and Accessing Your Data
If you wish to update, correct, or access the personal data we hold about you, please email info@brainseas.com. We aim to process all requests within 30 days and will notify you if additional time is required.
Data Collection and Processing
We collect and process personal data during your use of our website, interactions with us, and the provision of our services. We may share your information with trusted third parties or transfer it outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place to protect your data.
Data Security
We implement robust technical and organizational measures to safeguard your personal data against unauthorized access, misuse, or loss. This includes using HTTPS encryption and regularly reviewing our security practices.
Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, or until you revoke your consent. Some data may need to be retained for up to six years due to statutory requirements.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at info@brainseas.com.