Privacy Policy

Article 1 — Who are we?

Bramm is an AI-powered information security and compliance platform, developed by Bramm B.V. (i.o.), registered in the Netherlands at Rotterdam, the Netherlands, Chamber of Commerce number [KVK number to be filled in].

We are the data controller for personal data processed via our marketing website (bramm.it). For personal data that customers process through the Bramm application, we act as a data processor. This is governed by a separate Data Processing Agreement (DPA).

Questions about privacy? Contact us at privacy@bramm.it.

Article 2 — What data we collect via the website

Via our marketing website (bramm.it), we collect the following personal data:

• Name and email address — when you sign up for the waitlist or contact us.
• Company name and job title — when you optionally provide these during sign-up.
• IP address and technical browser data — automatically collected via cookies and analytics.
• Website usage data — which pages you visit, how long, and which channel you came from.

Article 3 — Why we use your data

• Waitlist and early access — to inform you about the Bramm launch and grant early access.
• Contact — to respond to questions submitted via the contact form.
• Product improvement — to understand how visitors use our website and improve it.
• Email marketing — to send relevant Bramm updates via email, only if you have given explicit consent. We do not use marketing tracking cookies.

Article 4 — Legal basis for processing

• Consent (Article 6(1)(a) GDPR) — for email newsletters and marketing communications.
• Legitimate interest (Article 6(1)(f) GDPR) — for website analytics and product improvement.
• Performance of a contract (Article 6(1)(b) GDPR) — when you take out a subscription.

Article 5 — How long we retain your data

• Waitlist data — until the waitlist closes or you unsubscribe.
• Contact form data — maximum 2 years after last contact.
• Analytics data — maximum 13 months (Plausible Analytics).
• Customer data after cancellation — maximum 7 years in accordance with statutory retention obligations.

Article 6 — Do we share your data with third parties?

We share personal data with third parties only when necessary for the delivery of our services. We work with the following categories of processors:

• Hosting providers (EU-based).
• Plausible Analytics — cookieless, EU-hosted, no personal data collected or stored
• Email marketing platforms (for the waitlist and newsletter).
• AI model providers — exclusively via the Bramm Privacy Shield, which pseudonymises personal data before it reaches any AI model.

We never sell your personal data to third parties. We do not transfer data outside the European Economic Area (EEA) unless this is legally safeguarded through standard contractual clauses.

Article 7 — Your rights

Under the GDPR, you have the following rights:

• Right of access — you can request what data we hold about you.
• Right to rectification — you can request correction of inaccurate data.
• Right to erasure — you can request deletion of your data ("right to be forgotten").
• Right to restriction of processing — you can request that we limit processing.
• Right to data portability — you can request your data in a structured format.
• Right to object — you can object to processing based on legitimate interest.
• Right to withdraw consent — previously given consent can be withdrawn at any time.

Requests can be sent to privacy@bramm.it. We respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl, or with the supervisory authority in your country of residence.

Article 8 — Security

We take appropriate technical and organisational measures to protect your personal data. This includes encrypted connections (HTTPS), access controls, and the Bramm Privacy Shield, which pseudonymises personal data before it reaches any AI model.

Article 9 — Changes to this policy

We may update this privacy policy from time to time. The most current version is always available at bramm.it/privacy. We will notify you by email of any material changes.