BrainRash is committed to protecting your personal data and ensuring your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.

Data Controller

BrainRash Inc. acts as the data controller for the personal information collected through our website and services. We determine how and why your data is processed.

Your Data Protection Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

• Access: You have the right to request copies of your personal data we hold.
• Rectification: You have the right to request that we correct any inaccurate information or complete incomplete information.
• Erasure: You have the right to request that we delete your personal data in certain circumstances.
• Restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Data portability: You have the right to request that we transfer your data to another organization or directly to you.
• Objection: You have the right to object to the processing of your personal data in certain circumstances.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. When your data is no longer needed, we will securely delete or anonymize it.

Data Protection Measures

We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or alteration, including:

• Encryption of sensitive data
• Regular security assessments
• Access controls and authentication
• Staff training on data protection
• Secure data storage and transmission

International Data Transfers

If we transfer your personal data outside of your country or region, we ensure that adequate safeguards are in place to protect your data, such as Standard Contractual Clauses or other approved transfer mechanisms.

Data Breach Procedures

In the event of a data breach that may affect your personal information, we will notify you and the relevant supervisory authorities in accordance with applicable laws and within the required timeframes.

Data Protection Officer

For questions about our data protection practices or to exercise your rights, you can contact our Data Protection Officer at dpo@brainrash.com

Complaints

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority responsible for data protection in your country or region.