Privacy Policy

The controller responsible for data processing on this website within the meaning of the GDPR is:

Baraa Farouq Abdel Rahman Abdelsalam (trading as „Brainted“)
Wimsheimer Str. 15/4, 71292 Friolzheim, Germany
Email: contact@brainted.de
Phone: +49 15679 813710

See also our Impressum for the full legal notice.

When you visit this website, the hosting provider automatically collects technical information transmitted by your browser ("server log files"). This typically includes IP address, browser type and version, operating system, the page requested, referrer URL, and the time of the request.

Hosting provider: [HOSTING PROVIDER NAME AND SERVER LOCATION]

Retention period: [REQUIRES OWNER OR LEGAL REVIEW: confirm with hosting provider]

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website).

If you use our contact form, we process the information you enter (name, email address, and optionally your business name, business type, service of interest, and message) in order to respond to your inquiry.

Submissions are stored in our self-hosted content management system, in a PostgreSQL database. No external form or mailing service is involved.

[REQUIRES OWNER OR LEGAL REVIEW: no automatic deletion is currently configured for submitted inquiries. Decide on a retention period (or the criteria used to determine one) and either implement automatic deletion or a manual review process before this holds real customer data long-term.]

Required fields are marked accordingly; without them we cannot process your request. All other fields are optional. One hidden field exists solely for spam detection (a honeypot) and is never filled in by real visitors.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures taken at your request).

You may also contact us directly by email or phone. In that case we process the data you provide in order to handle your inquiry.

Legal basis: Art. 6(1)(b) or 6(1)(f) GDPR, depending on context.

This site includes a button for booking a free consultation call. It takes you to our booking page on Cal.com, which opens in a new tab.

We do not embed the calendar on this website. No Cal.com script or cookie is loaded on brainted.de. Once you click the button, you leave our site, and Cal.com's own privacy policy and cookie practices apply on the booking page.

[REQUIRES OWNER OR LEGAL REVIEW: confirm Cal.com's current privacy policy / DPA terms and link to Cal.com's privacy policy here once reviewed.]

This site displays a chat interface previewing a planned chatbot feature. Messages you type are processed only locally in your browser, are not transmitted to any server, and are discarded when the page reloads.

[REQUIRES OWNER OR LEGAL REVIEW: once connected to a real AI backend, this section must name the provider, disclose that messages are sent to a third party, state the purpose, legal basis, retention, and any international transfer.]

This website uses the "Space Grotesk" and "Instrument Sans" typefaces. The font files are bundled at build time and served exclusively from our own server. No connection is made to Google's servers or any other external font provider, and no data is transmitted to third parties for this purpose.

This website currently does not use any analytics or marketing tools, tracking pixels, or advertising cookies.

We only use two purely functional, technically necessary storage mechanisms, which do not allow any conclusions about your identity and are not used for tracking:

• A cookie (NEXT_LOCALE) that stores your chosen language (English/German).
• A local storage entry (localStorage) that stores your light/dark mode preference.

As these are technically necessary functions, no consent is required under § 25(2) TTDSG (the German implementation of the ePrivacy Directive), and we deliberately do not display a cookie banner. Should analytics, marketing, or other non-essential services be added in the future, this notice will be updated and consent will be obtained before any such service loads.

This website currently does not use a newsletter signup, customer-facing user accounts, payment providers, applicant/job-application data processing, or embedded maps, videos, or social media widgets.

[REQUIRES OWNER OR LEGAL REVIEW: list any hosting provider, email provider, or other processor once selected, together with confirmation that a Data Processing Agreement (Auftragsverarbeitungsvertrag, Art. 28 GDPR) is in place.]

[REQUIRES OWNER OR LEGAL REVIEW: state whether any processor above is located outside the EU/EEA and, if so, the safeguard relied upon (e.g. adequacy decision, Standard Contractual Clauses).]

[REQUIRES OWNER OR LEGAL REVIEW: retention periods depend on the final backend for the contact form and on hosting provider defaults for server logs. Do not publish generic retention periods without confirming them.]

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing, in particular where based on legitimate interests (Art. 21 GDPR)
• Right to withdraw any consent given, with effect for the future, without affecting the lawfulness of processing before the withdrawal (Art. 7(3) GDPR); we do not currently process any data on the basis of consent
• Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

Providing your data through the contact form is voluntary; however, without the fields marked as required (name, email) we cannot respond to your inquiry.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

[DATE: set when this page is reviewed and published]

This draft was generated technically based on the services actually found in the source code and is not a substitute for legal advice. Please have it reviewed by a lawyer or data protection professional before publishing.