top of page

Privacy Policy

Brind OÜ

​​

In order to ensure the legality of Brind OÜ’s (hereinafter referred to as the “Company”) internal data management processes, protect the rights of data subjects, and provide clear information to data subjects, the Company has prepared the following data protection notice.

 

  • Name of Data Controller: Brind OÜ

  • Registered Address of Data Controller: Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551

  • Contact Email: info[a]brind.hu

  • Contact Telephone Number: +36205490816

  • Representative: Dr. Dániel Váczi, CEO

​

The Company manages personal data in accordance with applicable laws, primarily Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter “GDPR”). The Company treats personal data confidentially and takes all necessary technical and organizational measures to securely handle and retain such data.

​

This notice has been prepared to comply with the GDPR’s information requirements, and it provides details about the processing of personal data by the Company.

​

Communication via Website, Email and phone

In today’s fast-paced world, our Company communicates primarily electronically (and by phone where appropriate) with our partners and clients. You may contact us via the forms available on https://www.brind.hu or at https://www.linkedin.com/company/brind. We handle your personal data in line with this notice during electronic communication for any matter.

 

Purpose of Data Processing

Your personal data is processed to respond to your inquiry when you contact us. Contact may be made for fulfilling an existing contract, for pre-contractual discussions, or based on general interest.

Categories of Data Processed:

  • First Name, Last Name

  • Email Address

  • Phone Number

  • LinkedIn Profile

  • Employer’s Name, Address, and Tax ID

  • Position

  • Education Institution and Course Name

  • Uploaded CV

  • Country of Residence

  • IP Address

 

Purpose of Processing

To operate the Company’s website and handle client and partner relationships through online communication.

​

Legal Basis for Processing

In the case of potential contract formation, processing is based on GDPR Article 6(1)(b), where data processing is necessary to fulfill a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering a contract. For inquiries, processing is based on consent under GDPR Article 6(1)(a).

​

Special Categories of Data

None.

​

Data Retention Period

The Company processes personal data for as long as the contract or consent is in effect.

​

Recipients

None.

​

Data Source

Directly provided by the data subject.

​

Internal Access

Data access is restricted to the CEO.

​

Our Company considers communication with clients to be related to either a pending contract (agreement) or an existing one.

​

Data Processors Engaged

​

International Data Transfers:

​The Company does not transfer personal data to third countries or international organizations.

​

Duration of Data Processing:

If a contract or agreement is established between the Company and you, the Company will process personal data obtained during the communication up to the statutory limitation period related to the contract. If no contract is established, messages will be deleted after the closure of communication.

​

Automated Decision-Making and Profiling:

None.​

​

****

​

Rights Related to Data Processing

​

Right to Information:

You have the right to be informed about data processing, which the Company fulfills through this notice.

​

Consent-Based Processing:

Where processing is based on your consent (Article 6(1)(a) of the GDPR), you may withdraw that consent at any time. Withdrawal applies only to data processed based on consent without other legal grounds. If no other basis exists, the personal data will be irreversibly deleted following withdrawal.

​

Right of Access:

Upon request, the Company will confirm if your personal data is being processed and provide access to that data and the following information:

a) the purposes of the processing;
b) the categories of personal data concerned;
(c) the recipients or categories of recipients to whom or with which our Company has disclosed or will disclose the personal data, including in particular recipients in third countries or international organisations;
(d) the envisaged period of storage of the personal data or, if this is not possible, the criteria for determining that period;
e) your right to request the Company to rectify, erase or restrict the processing of personal data concerning you and to object to the processing of such personal data;
f) the right to lodge a complaint with a supervisory authority or to institute legal proceedings;
(g) where the data have not been collected directly from you, any available information about their source;
(h) where automated processing is carried out, the fact of such processing, including profiling, and, at least in those cases, the logic used, i.e. the significance of such processing and the likely consequences for the data subject.

​

Right to Rectification:

You have the right at any time to have inaccurate personal data about you corrected at your request without undue delay. Taking into account the purpose of the processing, you also have the right to request that incomplete personal data be completed, including by means of a supplementary declaration.
Please notify our Company of any changes to your personal data as soon as possible to facilitate lawful processing and the exercise of your rights.

​

Right to erasure

You have the right to have your personal data deleted by our Company without undue delay upon your request if one of the following grounds applies:

(a) the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

b) in the case of processing based on consent, you withdraw your consent on which the processing is based and there is no other legal basis for the processing;

(c) you object to the processing and there is no overriding legitimate ground for the processing or you object to processing for direct marketing purposes;

d) the personal data have been unlawfully processed;

(e) the personal data must be erased in order to comply with a legal obligation under EU or Member State law applicable to our Company;

f) the personal data have been collected in connection with the provision of information society services.

​

Our Company will not comply with your request for erasure if further processing is necessary for one of the following reasons:
a) for the exercise of the right to freedom of expression and information;
(b) to comply with an obligation under Union or Member State law that requires the processing of personal data or to carry out a task carried out in the public interest;
c) on grounds of public interest in the field of public health;
(d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, where deletion would be likely to render impossible or seriously impair such processing; or
(e) for the establishment, exercise or defence of legal claims.

​

The deletion of data is permanent and irreversible.

​

Right to restriction of processing

You have the right to have the Company restrict processing at your request if one of the following conditions is met:

(a) you contest the accuracy of the personal data; in this case, the restriction shall apply for a period of time that allows us to verify the accuracy of the personal data;

(b) the processing is unlawful and you oppose the erasure of the data and request instead the restriction of their use;

c) our Company no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or

d) you have objected to the processing; in this case, the restriction shall apply for a period of time until it is determined whether our legitimate grounds prevail over the legitimate grounds of the data subject.

 

If the processing is subject to restriction, such personal data, with the exception of storage, will only be

a) with your consent,

b) for the establishment, exercise or defence of legal claims,

(c) to protect the rights of another natural or legal person; or

(d) for important public interests of the Union or of a Member State.

​

Right to object

Where the legal basis for the processing of your personal data is our legitimate interest, as in this case, you have the right to object to the processing of your personal data, including profiling based on the aforementioned provisions, at any time on grounds relating to your particular situation.

In such a case, our Company may no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

The Company's legitimate grounds are set out in the sections of this notice concerning the purposes and legal basis for processing.

​

Right to data portability

You have the right to receive the personal data concerning you that you have provided to the Company in a structured, commonly used, machine-readable format and the right to request the transfer of such data to another controller. You therefore have the right to request that the Company send your personal data directly to another controller.

*****

​

The procedure to enforce your rights

You can exercise these rights by sending an email to info@brind.hu or by using the telephone contact details provided above. Our Company will start the examination and execution of your request without undue delay upon receipt. We will inform you of our action on your request within 30 days of receipt. If we are unable to comply with your request, we will inform you within 30 days of the reasons for our refusal and of your rights of appeal.

​

*****

​

Right of redress in relation to data management

If you consider that the processing of personal data relating to you infringes the Regulation, you have the right to lodge a complaint with a supervisory authority, without prejudice to other administrative or judicial remedies. The authority must then investigate your complaint and notify you of the outcome of the investigation. You have the right to lodge a complaint with an authority in any EU Member State, in particular in the Member State where you have your habitual residence, place of work or place of the alleged infringement.
To exercise your right to judicial redress, you may take legal action against our Company if you believe that our Company or a data processor acting on our behalf or at our instructions is processing your personal data in breach of the requirements for the processing of personal data laid down by law or by a legally binding act of the European Union.
The court will rule on the matter out of turn. The court will have jurisdiction to hear the case. The action may also be brought, at your option, in the courts for the place where you reside or are domiciled, or in the courts for the place where our Company has its registered office.

​

Last version: October 2024

bottom of page