PRIVACY POLICY FOR BRABANTDAM STUDIO (Compliance with the General Data Protection Regulation – GDPR)

This Privacy Policy describes how Brabantdam Studio (the Company, we, us, or our) collects, uses, stores, and protects the personal data of users who visit or interact with our website. Brabantdam Studio complies with the applicable data protection regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), as well as relevant national legislation.

1. Identity and Contact Details of the Data Controller

Data Controller: Brabantdam Studio
Registered Address: Torgny Segerstedts Allé 78A, Uppsala, Sweden
Email: [email protected]
Telephone: +34 621 354 209

2. Personal Data Collected

We may collect the following categories of personal data: identification data (name, surname, ID or passport number), contact details (email address, phone number, postal address), browsing data (IP address, device information such as type, browser version, operating system, pages visited, date and time of access), and any data you voluntarily provide to us (through website forms, emails, or other communication channels). We do not intentionally collect any special categories of personal data (for example, health data, religious beliefs, or other sensitive information) unless strictly necessary and processed under the relevant legal bases.

3. Purposes of Data Processing

We process personal data for the following purposes: handling inquiries and requests (responding to messages received via forms, email, or phone), service provision (managing and executing contracts and providing requested products or services), communication and marketing (sending information about our services or related commercial communications, based on your consent or our legitimate interest), website improvement (analyzing how our website is used to optimize user experience), and legal compliance (complying with legal obligations or responding to lawful requests from public authorities).

4. Legal Bases for Processing

We rely on one or more of the following legal bases to ensure the lawful and transparent processing of personal data: consent (when you have given explicit consent for specific purposes), performance of a contract (when necessary to provide our services and fulfill contractual obligations), compliance with legal obligations (when required by law), or legitimate interest (when processing is required for our legitimate business interests without overriding your rights and freedoms).

5. Data Retention

We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, taking into account legal requirements concerning information retention (such as tax or accounting regulations), statutory limitation periods for any legal claims, and guidance from data protection authorities regarding safe data deletion. Once the data is no longer needed, it will be securely deleted or anonymized.

6. Disclosure of Data to Third Parties

We do not share or transfer personal data to third parties, except in the following cases: service providers that help us deliver our services (such as hosting providers, email marketing platforms, payment processors), subject to data protection agreements; legal obligations that require us to disclose personal data to government authorities, courts, or tribunals; or international transfers of personal data outside the European Economic Area (EEA), for which we will ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or Binding Corporate Rules.

7. International Data Transfers

When transferring personal data to countries that may not offer an equivalent level of data protection as required by the GDPR, we implement additional safeguards to ensure proper protection. These safeguards may include Standard Contractual Clauses approved by the European Commission, Binding Corporate Rules (BCR), or verifying that the recipient is subject to an international agreement guaranteeing an adequate level of data protection.

8. Security Measures

We apply suitable technical and organizational measures to protect the confidentiality, integrity, and availability of personal data, including encrypting data in transit and, where appropriate, at rest, role-based access controls and the principle of least privilege, regular backups and disaster recovery plans, and internal audits and ongoing monitoring to maintain and improve the security of our systems.

9. User Rights

In accordance with the GDPR, you have the right to access your personal data (and obtain a copy of it), rectify inaccurate or incomplete personal data, request erasure of personal data when it is no longer necessary for the purposes for which it was collected or when consent is withdrawn, object to the processing of personal data based on legitimate interests or for direct marketing, restrict processing of personal data in certain circumstances, and receive your personal data in a structured, commonly used, and machine-readable format or request that it be transferred directly to another controller.

To exercise these rights, please send a written request, attaching a copy of your ID or equivalent proof of identity, to our registered address (Torgny Segerstedts Allé 78A, Uppsala, Sweden) or email us at [email protected]. If you believe your data protection rights have been infringed, you have the right to lodge a complaint with a supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY), although you may also contact the data protection authority in your country of residence.

10. Use of Cookies and Similar Technologies

Our website uses cookies and similar technologies (pixels, tags) to enhance user experience, analyze browsing behavior, and deliver personalized content. For more information on the cookies we use and how to manage them, please refer to our Cookie Policy.

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in legislation or in our data processing practices. Any updates will be posted on this page, indicating the date of the latest revision. We encourage you to review this section regularly to stay informed about how we protect your information.

12. Contact Us

If you have any questions, comments, or suggestions regarding this Privacy Policy or the processing of your personal data, please contact us at [email protected], by telephone at +34 621 354 209, or by mail at Torgny Segerstedts Allé 78A, Uppsala, Sweden. Last updated: [12/02/2025]