Privacy Policy
Brind OÜ (hereinafter: the Company) has established the following privacy policy to ensure the lawfulness of its internal data processing procedures, protect the rights of data subjects, and provide them with necessary information.
Data Controller: Brind OÜ
Registered Office: Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551.
Email Address: info[a]brind.hu.
Phone Number: +36205490816.
Representative: Dr. Dániel Váczi, CEO
Please be advised that our Company processes personal data in compliance with relevant legislation, specifically Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: the Regulation or GDPR).
Our Company treats personal data confidentially and takes all necessary IT, technical, and organizational measures related to data storage and processing to ensure secure data management.
The Company fulfills its information obligations under the Regulation through this policy.
In the event of any discrepancy, the English version shall prevail.
Communication via Website, Email, and Phone
In today’s fast-paced world, our Company primarily maintains contact with partners and clients electronically (and via telephone where justified). You may contact us via email, through the forms on the https://www.brind.hu website, or via https://www.linkedin.com/company/brind.
During any electronic communication with you—regardless of the nature of the matter—we process your personal data as described in this section.
Purpose of Data Processing
To perform an already concluded contract.
Prior to concluding a contract (pre-contractual steps).
Based on inquiries/interest.
To operate the Controller's website and manage relationships/online administration through it.
Categories of Processed Data
First and last name
Email address
Phone number
LinkedIn profile
Employer name and address
Employer tax number
Job position
Educational institution and name of training/course
Uploaded CV
Country of residence
IP address
Legal Basis for Data Processing
In case of future contract conclusion: GDPR Article 6(1)(b) – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
In case of inquiries: GDPR Article 6(1)(a) – the data subject has given consent to the processing.
Other Information
Special Categories of Personal Data: None.
Retention Period: The Company processes personal data for the duration of the contract or the existence of the consent.
Recipients: None.
Source of Data: Directly from the data subject.
Authorized Access within the Organization: CEO.
The Company considers communication with consumers as preliminary data processing related to a future contract (agreement) or data processing related to an already concluded contract.
Data Processors Utilized
We utilize the following data processors for our operations:
Google Analytics: Used for measuring website traffic and web analytics. Detailed information: https://support.google.com/analytics/answer/3379636?hl=hu
Wix.com: Data processor for website contact, email, and chat functions. Privacy policy: https://www.wix.com/about/privacy
Pipedrive: Used for contact management and enhancing customer experience. Privacy policy: https://www.pipedrive.com/en/privacy
Data Transfers and Automated Decisions
Transfer to Third Countries: Our Company does not transfer your personal data to third countries or international organizations.
Retention Period (Specific): If a contract/agreement is established, data is processed until the expiry of the statute of limitations. If no contract is established following pre-contractual processing, messages are deleted after the communication is closed.
Automated Decision-Making and Profiling: Neither takes place during data processing.
Your Rights Regarding Data Processing
1. Right to Information
You have the right to receive information about data processing, which the Company fulfills by providing this notice.
2. Right to Withdraw Consent
If the legal basis is consent (GDPR Art. 6(1)(a)), you may withdraw it at any time. Withdrawal only affects data for which there is no other legal basis for processing. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
3. Right of Access
Upon request, we will inform you if your data is being processed and provide access to:
Purposes and categories of data.
Recipients (especially third-country/international).
Planned retention period.
Information on your rights (rectification, erasure, restriction, objection).
Right to lodge a complaint with a subpervisory authority.
Source of data (if not from you).
Existence of automated decision-making/profiling.
4. Right to Rectification
You may request the correction of inaccurate data or the completion of incomplete data without undue delay. Please report any changes in your data to the Company as soon as possible.
5. Right to Erasure ("Right to be Forgotten")
You may request erasure if:
The data is no longer necessary.
Consent is withdrawn and there is no other legal basis.
You object to processing and there are no overriding legitimate grounds.
Processing is unlawful.
Erasure is required by EU or Member State law.
Data was collected in relation to information society services.
Note: Erasure will not be performed if processing is necessary for exercising freedom of expression, legal compliance, public interest in health/archiving, or for legal claims.
6. Right to Restriction of Processing
You may request restriction if:
You contest data accuracy.
Processing is unlawful, but you oppose erasure.
The Company no longer needs the data, but you need it for legal claims.
You have objected to processing (pending verification of legitimate grounds).
7. Right to Object
If the legal basis is a legitimate interest, you may object to processing based on your specific situation. The Company will stop processing unless it demonstrates compelling legitimate grounds that override your interests.
8. Right to Data Portability
You have the right to receive the personal data concerning you in a structured, commonly used, machine-readable format and the right to request the transfer of such data directly to another controller.
Procedure for Exercising Your Rights
You may exercise these rights via email at info@brind.hu or via the telephone number provided above. The Company will begin investigating your request without undue delay and inform you of actions taken within 30 days. If the request is denied, we will provide the reasons and information on your rights to redress within the same 30-day period.
Right to Redress
Supervisory Authority: You may lodge a complaint with a supervisory authority in the EU Member State of your residence, workplace, or the location of the alleged infringement.
Court Proceedings: You may bring a legal action against the Company if you believe your data has been processed in violation of the Regulation. The court proceedings are expedited. In Hungary, you may choose to bring the case before the tribunal (törvényszék) of your place of residence, stay, or the Company’s registered office.
Last Version: October 28, 2024.