This privacy policy is a translation of the Dutch privacy statement. In case of differences, the Dutch version prevails.
Brainpulse IT respects your privacy. This policy explains which personal data we process, why, for how long and what rights you have. Brainpulse IT is the controller for this processing within the meaning of the General Data Protection Regulation (GDPR).
Contact details
Brainpulse IT, registered with the Dutch Chamber of Commerce (KvK) under number 85277517. Questions about privacy can be sent to info@brainpulse.it.
Which data we process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| You fill in the contact form or email us | Name, email address, content of your message | Answering your question | Your request (legitimate interest) |
| You become a client | Name, business contact details, billing details | Carrying out and invoicing the engagement | Performance of the contract |
| Accounting | Invoice and payment details | Statutory retention obligation | Legal obligation |
| You visit the website | IP address and technical data in server logs | Keeping the website secure and available | Legitimate interest |
We do not process special categories of personal data, and the website is not intended for children under 16.
How long we keep data
- Contact requests that do not lead to an engagement: up to 2 years after the last contact.
- Client and engagement data: for as long as the engagement lasts and up to 2 years afterwards.
- Accounting records: 7 years, because the law requires it.
Who we share data with
We never sell your data. We only use service providers that are needed to run the website and our services:
- Microsoft (Azure): hosting of this website and of our business email and files.
- Airform: processes the contact form and forwards your message to our email.
- Google Fonts and Cloudflare (cdnjs): deliver fonts and icons for this website. Your browser connects to their servers for this, and they can see your IP address.
Where necessary, we make agreements with these parties about protecting your data. Some of these parties may process data outside the European Economic Area. If so, this is based on the safeguards the GDPR provides for this.
Cookies and analytics
This website does not use tracking or advertising cookies, and no analytics. Your preference for the light or dark theme is only stored in your own browser.
Client data for the Security Health Check
For the Security Health Check, we process data from clients’ Microsoft environments in Brainpulse IT’s own Azure environment. In doing so, we act as a processor on behalf of the client. We record this processing for each client in a data processing agreement; this privacy policy does not cover it.
Your rights
You have the right to access your data, to have it corrected or erased, to have processing restricted, to object and to have your data transferred. Send your request to info@brainpulse.it. We will respond within four weeks.
Not satisfied with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access, including encrypted connections, multi-factor authentication and limited access rights.
Changes
This policy may be updated. The date at the top shows when it was last changed.