Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
BRCN Group OÜ
INSERT REGISTERED ADDRESS
Estonia
Email: hello@brcn.studio
2. What data we collect and why
Contact and enquiry forms
When you submit a form on this website, we collect the information you provide — typically name, email address, company name and message content. This data is used exclusively to respond to your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to business enquiries).
Server log files
Our hosting provider automatically collects and stores information in server log files that your browser transmits automatically. This includes browser type, operating system, referrer URL, hostname, time of request and IP address. This data is not combined with other data sources. Legal basis: Art. 6(1)(f) GDPR.
Cookies
This website uses technically necessary cookies only. No tracking cookies, advertising cookies or third-party analytics cookies are set without your consent. INSERT DETAILS OF ANY SPECIFIC COOKIES USED
3. How long we keep your data
Enquiry data is retained for as long as necessary to respond to your request and for up to 3 years for documentation purposes, unless a longer retention period is required by law. Server log data is typically deleted after 7–14 days.
4. Who we share data with
We do not sell or share your personal data with third parties for marketing purposes. Data may be shared with:
- Hosting and infrastructure providers (data processors under GDPR)
- Email service providers used to send and receive correspondence
- INSERT ANY OTHER PROCESSORS — e.g. Calendly, CRM, form tools
All processors are bound by data processing agreements.
5. International transfers
BRCN Group OÜ is registered in Estonia (EU). Where data is processed by service providers outside the EU/EEA, appropriate safeguards are in place in accordance with GDPR Chapter V. INSERT SPECIFIC TRANSFER DETAILS IF APPLICABLE
6. Your rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent at any time (Art. 7(3) GDPR)
To exercise any of these rights, contact us at hello@brcn.studio. You also have the right to lodge a complaint with a supervisory authority — in Estonia, this is the Data Protection Inspectorate (AKI).
7. Security
This website uses SSL/TLS encryption for all data transmission. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.
8. Third-party services
INSERT DETAILS OF ALL THIRD-PARTY SERVICES USED — e.g. Google Fonts, Calendly, analytics tools — and their respective privacy policies and data processing implications.
9. Changes to this policy
We may update this privacy policy from time to time. The current version is always available at brcn.studio/privacy-policy. The date at the top of this page indicates when the policy was last updated.
Note: This is a template that must be reviewed and completed by a qualified legal professional before going live. All placeholder fields must be filled in with accurate information. GDPR compliance requires careful attention to the specific tools and services you use.
