Legal information · Privacy
Privacy Policy
This policy explains in plain language which personal data BRCN Studio processes, why it is needed, who may receive it and which choices and rights you have.
- Controller: BRCN Group OÜ
- GDPR and EEA framework
Who controls your data
BRCN Studio is a commercial operating name of BRCN Group OÜ. BRCN Group OÜ is the data controller for the processing described on this page.
- Legal entity
- BRCN Group OÜ
- Registry code
- 17485929
- Registered office
- Tartu mnt 67/1-13b, 10115 Tallinn, Estonia
- Privacy contact
- hello@brcn.studio
Personal data we collect
Contact form and appointment link
The contact form sends the information to this website’s WordPress processing endpoint. Enquiries are delivered by email through IONOS. We do not use the contact form to create a separate WordPress enquiry archive or HubSpot CRM record. The appointment page links to an external Cal.eu calendar rather than embedding it; following that link opens the provider’s booking service, where you supply any booking data.
Route Fit Check
The Route Fit Check evaluates answers within the page in your browser. The tool does not send answers to BRCN Studio or store them in browser storage. Its contact link does not attach your result. You can choose to copy the summary and send it through the contact form, email or another channel. This does not describe any separate site-wide analytics or hosting logs.
We do not intentionally collect special-category data. Please do not send sensitive personal information unless it is necessary and we have expressly requested it.
Why we use personal data
- Respond to enquiries and assess whether a commercial conversation or mandate is appropriate.
- Arrange meetings, prepare for calls and communicate before and after them.
- Deliver agreed services, administer contracts, maintain commercial records and handle invoices.
- Operate, secure, troubleshoot and improve the website and its forms.
- Keep evidence of privacy choices and comply with legal, accounting and regulatory duties.
- Analyse website usage through HubSpot tracking, subject to the applicable privacy choices and legal requirements. Submitting a contact enquiry does not subscribe you to a newsletter.
Legal bases
The legal basis depends on the interaction and purpose.
| Processing | Legal basis |
|---|---|
| Enquiries and pre-contract discussions | Article 6(1)(b) GDPR where you request steps toward a contract to which you would be a party; otherwise Article 6(1)(f) GDPR for responding to business enquiries. |
| Service delivery and booking | Performance of a contract or steps requested before a contract. |
| Website security and essential operation | Legitimate interests in providing a reliable, secure website and protecting systems. |
| Accounting and statutory records | Compliance with legal obligations. |
| Optional analytics or marketing technologies | Consent under Article 6(1)(a) GDPR where required, including optional HubSpot tracking. Consent can be withdrawn through the consent controls. Optional technologies must not be activated before required consent. |
| Responding to business contacts acting for a company | Legitimate interests in handling the enquiry and managing the business relationship (Article 6(1)(f) GDPR). |
Where processing relies on legitimate interests, BRCN Group OÜ considers the business need, necessity and potential impact on the individual before proceeding.
Who may receive data
Access is limited to people and providers who need the information for the stated purpose. Depending on how you use the site, these may include:
Data may also be disclosed where required by law, to protect legal rights or in connection with a genuine corporate transaction. BRCN Group OÜ does not sell personal data.
International transfers
Providers such as HubSpot, Google, Cal.com and Microsoft may involve processing outside the European Economic Area, including in the United States. The applicable arrangement depends on the service and recipient. GDPR transfer mechanisms include an applicable adequacy decision or Standard Contractual Clauses, with additional safeguards where necessary. Contact hello@brcn.studio for information about the arrangements applicable to your data and how to obtain information about safeguards; the provider notices linked above describe their processing.
The cookie-consent interface provides the available cookie categories and details. You can request further information about specific providers or processing by email.
How long data is kept
| Category | Typical retention approach |
|---|---|
| Enquiries and booking records | Enquiry correspondence is deleted 25 months after the last substantive interaction, unless an engagement follows or continued retention is required for legal obligations or a specific legal claim. Appointment and meeting data are kept for the purpose of organising and following up on the meeting; any retained enquiry correspondence follows the same 25-month rule. |
| Client and contract records | For the relationship and thereafter for applicable limitation, tax and accounting periods. |
| Consent records | For as long as needed to demonstrate the recorded choice and meet legal obligations. |
| Security and server logs | For the shortest period reasonably needed for security, diagnostics and abuse prevention, subject to hosting configuration. |
Data is deleted, anonymised or securely restricted when it is no longer needed, unless continued storage is legally required.
Your privacy rights
Subject to the conditions in applicable law, you may request:
- Access to your personal data and information about how it is used.
- Correction of inaccurate or incomplete data.
- Deletion or restriction of processing.
- Data portability for eligible data.
- Objection to processing based on legitimate interests or to direct marketing.
- Withdrawal of consent at any time, without affecting earlier lawful processing.
Send a request to hello@brcn.studio. BRCN Group OÜ may need to verify your identity before acting on a request.
Right to complain
You may lodge a complaint with the Estonian Data Protection Inspectorate or another competent supervisory authority in the country where you live, work or believe an infringement occurred.
Cookies and similar technologies
Essential technologies may be used to provide security, remember privacy choices and make the site function. We use HubSpot for website tracking and CookieYes to manage privacy choices. Optional tracking requires consent where applicable. Use the consent interface to review categories and withdraw or change your choices. Consent settings must also govern optional third-party resources where required.
You can use the CookieYes consent interface on the site to review or change available choices. You can also limit cookies in your browser, although blocking essential storage may affect functionality. External services opened through links, such as Cal.eu or LinkedIn, process data when you visit them under their applicable privacy terms.
Automated decisions
BRCN Group OÜ does not use the website to make solely automated decisions that produce legal or similarly significant effects. Any Route Fit Check result is informational and is not a binding commercial decision.
Security, updates and contact
Reasonable technical and organisational measures are used to protect personal data against accidental loss, unauthorised access, alteration or disclosure. No internet transmission or storage method can be guaranteed to be completely secure.
This policy may be updated when services, legal requirements or processing activities change. Material changes will be reflected on this page.
Questions, objections or rights requests can be sent to hello@brcn.studio.