Privacy Policy

1. Introduction

Bright Ideas EU ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our website at brightideaseu.com and our services.

This policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable European privacy laws.

2. Data Controller Information

3. Information We Collect

3.1 Personal Information

We may collect the following types of personal information:

• Name and contact information (email address, phone number)
• Company name and professional details
• Communication preferences
• Information provided in forms, surveys, or communications
• Business-related information for consulting services

3.2 Technical Information

We automatically collect certain technical information when you visit our website:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referral source
• Device information

3.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. For detailed information about our cookie usage, please see our Cookie Policy section below.

4. How We Use Your Information

We process your personal data for the following purposes:

4.1 Service Provision

• Provide consulting and business development services
• Respond to your inquiries and requests
• Process applications and assessments
• Deliver requested information and resources

4.2 Communication

• Send service-related communications
• Provide customer support
• Send marketing communications (with your consent)
• Notify you about changes to our services

4.3 Business Operations

• Improve our website and services
• Conduct analytics and research
• Maintain security and prevent fraud
• Comply with legal obligations

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given explicit consent for specific processing activities
• Contract: When processing is necessary for the performance of a contract with you
• Legitimate Interest: When we have a legitimate business interest that does not override your privacy rights
• Legal Obligation: When processing is required to comply with legal requirements

6. Data Sharing and Disclosure

We may share your personal information in the following circumstances:

6.1 Service Providers

We may share data with trusted third-party service providers who assist us in:

• Website hosting and maintenance
• Email marketing services
• Analytics and performance monitoring
• Customer support systems

6.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or security breaches
• Enforce our terms and conditions

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact Information: Retained for 3 years after last contact
• Service Data: Retained for 7 years for business and legal purposes
• Marketing Data: Retained until consent is withdrawn
• Website Analytics: Retained for 26 months

After the retention period, we will securely delete or anonymize your personal data.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

To exercise any of these rights, please contact us at support@brightideaseu.com. We will respond to your request within 30 days.

9. Cookie Policy

Our website uses cookies to enhance your browsing experience and provide personalized content.

9.1 Types of Cookies We Use

9.2 Managing Cookies

You can control cookies through:

• Our cookie consent banner when you first visit our website
• Your browser settings to block or delete cookies
• Third-party opt-out tools for advertising cookies

Please note that disabling certain cookies may affect website functionality.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication systems
• Employee training on data protection
• Incident response procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any significant data breaches as required by law.

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by GDPR

12. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on our website
• Update the "Last updated" date
• Notify you of significant changes via email or website notice
• Obtain your consent for material changes where required by law

We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. The relevant supervisory authority depends on your location:

• Germany: Federal Commissioner for Data Protection and Freedom of Information
• EU: Your local data protection authority

We encourage you to contact us first so we can address your concerns directly.