Privacy statement

What is a privacy statement?
BBrain protects your privacy and this not only means that your personal data is properly secured, but also that you get a clear insight into what BBrain does with it. This is explained in more detail in this privacy statement.

Who owns this privacy statement?
This privacy statement is from:
BBrain B.V.
Located at Weerhuisweg 4, 6226 NC Maastricht
Chamber of Commerce number: 75772752

We are responsible for the lawful and secure processing of your personal data. In this statement we explain why we collect data, how it is used, with whom it is shared and what control you have over this personal data.

Which personal data is processed by BBrain?
This privacy statement applies to the processing of personal data by BBrain B.V. in the context of the purchase and use of the BBrain products, the subscription associated with the BBrain Family and the BBrain GPS personal alarm, the BBrain Portal (desktop or app) and visiting the website www.bbrain.eu.

Below it is provided per application which personal data BBrain processes for what purpose. It also indicates what the legal basis is for processing that personal data and how long the personal data will be kept by BBrain.

I make use of...

(Personal) data
  • User first and last name
  • WiFi settings: network name and password, network strength
  • Configuration setting (screen type, theme, screen brightness, night mode, wallpaper, time zone, speech rate, sound volumes, speech settings, language, number of photos displayed, calendar settings)
  • BBrain Family license number and validity period
  • Name of the relative(s) for video calling
  • Name and email address of the main relative
  • Posts created by relatives
  • Photos shared by relatives
  • Agenda items created by relatives
  • Log of events (received messages, photos, agenda items and when the user makes video calls with a relative.
PurposeThe software runs locally on the BBrain Family. All data is used to show the currently relevant information to the user of the BBrain Family.
Legal basisExecution of the agreement, art. 6 GDPR
Retention period(Personal) data is stored during the use of the BBrain Family. These will be deleted after resetting the BBrain Family and/or terminating the subscription.
(Personal) data
  • User first and last name
  • User address details: street, house number, zip code, place of residence and country
  • Location data from GPS personal alarm
PurposeAddress details are used to know when the user is home in the event of an alarm.
First and last name to indicate which GPS user is being viewed.
Legal basisExecution of the agreement, art. 6 GDPR
Retention periodLocation data is stored for 30 days. In the event of alarms, the relevant location data is retained until the subscription is terminated.
(Personal) data
  • Portal/app user email address
  • Portal/app user password (encrypted)
  • Portal/app user first and last name
  • Portal/app user phone number
  • Portal/app user profile photo
  • Portal/app master relative address details: street, house number, postal code, city and country
  • Posts created by relatives
  • Photos shared by relatives
  • Agenda items created by relatives
  • Names of relatives
  • BBrain Family license: license number, validity period, activation date and time, last seen date and time, version number, status
  • Log of events (reception of messages, photos of agenda items, when the user makes a video call with a relative, time of logging in, changes to settings)
  • IP Address
PurposeThe BBrain Family Portal / app is used to remotely provide the BBrain Family with content and to manage it remotely.
Legal basisExecution of the agreement, art. 6 GDPR
Retention period
  • Sent e-mails and text messages are kept for 60 days.
  • Agenda items will be deleted 3 years after the appointment date has passed.
  • Synchronization information between Portal and BBrain Family is retained for up to 60 days.
  • All data will be deleted after termination of the subscription.
(Personal) data
  • Employee first and last name
  • Email address
  • Emails sent
  • Language
  • Organization
  • IP Address
  • Phone number (for 2FA)
  • List of contact details created (name, address, country, email address and telephone number)
PurposeLogin and identification within the CarePortal
Legal basisExecution of the agreement, art. 6 GDPR
Retention periodUntil the account is terminated.
Sent emails are deleted after 60 days.
(Personal) data

The Admin dashboard has broader management options and authorizations to support both private and business customers with our services.

  • All personal data as listed at BBrain Family, GPS personal alarm, BBrain Family Portal and CarePortal
  • Name, email address, telephone number and language of linked relatives.
  • Name of linked organization, validity period and type of subscription, payment information and invoices.

Meta information about data sent (messages, calendar, photos) to BBrain Family.

PurposeThe (personal) data is necessary to manage registered BBrain Families, BBrain GPS personal alarm and subscriptions/licenses, and to provide support in case of questions or problems.
Legal basisExecution of the agreement, art. 6 GDPR
Retention periodIn the case of an agreement with a private customer, (personal) data will be deleted after termination of the subscription. In the case of a (care) agreement, the (personal) data will be deleted after termination of the agreement.

At BBrain we are committed to the protection and responsible processing of your personal data. If you place an order via our webshop, we collect and process the following data:

(Personal) data
  • First and last name
  • Delivery and billing address details: street, house number, zip code, place of residence and country
  • Phone number
  • Email address
  • Payment details
  • Order details
  • IP address
  • Username and password (encrypted) if an account is created
PurposeWe only process this data for specific purposes, including processing your payments, delivering ordered goods, calling or e-mailing you if this is necessary to provide our services, informing you about changes to our services. and products, sending our newsletter and analyzing your behavior on our website in order to tailor our offering to your preferences and improve the website.
Legal basisExecution of the agreement, art. 6 GDPR
Retention periodWe do not store personal data longer than necessary. In some cases, a maximum retention period of 20 years applies after an order has been placed. The retention periods may differ per processing. After these periods, (personal) data will be deleted from the systems.

 

Cookies
BBrain strives to provide you with the best possible online experience, while at the same time ensuring your privacy and protection of personal data. We use your IP address and cookies during your website visit. We would like to inform you about our cookie policy and the way we use cookies on our website.

Cookies are small text files that are stored on your computer / device when you visit a website. We use this information from you to make the website function better, to track your activities and to store login details. There are different types of cookies, which can be distinguished based on their origin, function and lifespan.

We use three types of cookies on our website:

  • Necessary cookies: Necessary cookies enable you to navigate and use our website.
  • Performance cookies: Performance cookies collect data about your use of our website, such as the number of times you visit our website, the time you spend on a page and error messages. We use Google Analytics, among other things, with which we collect your data about the use of our website anonymously. This enables us to compile and analyze visitor statistics to improve the website.
  • Functional cookies: Functional cookies increase user-friendliness by remembering your choices, such as language preferences and login details.

Where is my data stored?
Your data is stored securely on servers of our data center partners TransIP in Amsterdam and Delft and NorthC in Amsterdam. Both TransIP and NorthC are certified for ISO 9001, ISO 27001 and NEN 7510. This assures you that your data security is a top priority and that we are continuously working to improve security.

Who has access to my personal data?
In principle, we do not share your personal data with others. Sharing your personal data only happens when this is necessary for the performance of our services or if we have a legal obligation.

Our employees have access to the data to process orders or to provide support to users of our products and/or the BBrain Portal.

If you have purchased or obtained a BBrain Family or GPS personal alarm through a healthcare provider, we may share your personal data with the healthcare provider who is the rightful owner of your BBrain product. The healthcare provider can use this personal data to provide support in the use of your BBrain product.

BBrain collaborates with a software supplier for the development and management of the BBrain Portal. This supplier processes data solely to support the provision and improvement of our services. We have concluded a processing agreement with this supplier, which stipulates that they may only process personal data as set out in this privacy statement.

BBrain partners with a company that provides customer support by phone and email. This provider processes data solely to support and advise customers and interested parties. A data processing agreement has been concluded with this provider in accordance with the provisions of this privacy statement.

Payments are processed by a payment provider. This means that we and you are assured that payments are made securely.

BBrain uses Google Analytics to analyze user statistics and optimize the user-friendliness of our website. BBrain works with an online marketing partner who has access to user statistics to improve our online marketing campaigns.

We will never sell or otherwise make your personal data available to third parties without your permission.

What measures has BBrain taken to protect my data and how long does BBrain keep my data?
To protect the availability, integrity and confidentiality of data, we have implemented a number of technical and organizational measures:

Technical measures – All resources and systems used by us to process your personal data are designed in such a way that your privacy is optimally guaranteed.

Organizational measures – All our employees who process personal data are regularly trained in privacy protection and handle your data carefully according to established processes.

We ask for your understanding – In order to protect your privacy, it is necessary that we check that we are dealing with the right person. If you contact us, we will check your identity. This happens in different ways. Part of this verification process may involve us asking you a number of questions.

Retention period – We do not store your personal data for longer than necessary. In some cases, BBrain has a maximum retention period of 20 years after you have placed your last order. However, the retention periods also differ per processing. After these periods, your customer data will be deleted from the systems.

Data leaks – If something unexpectedly goes wrong with the protection of your data, we will report this to the Dutch Data Protection Authority where necessary. If the data breach could have any adverse consequences for you, we will also contact you immediately.

Help us – Despite all the measures we have taken to safeguard your data and privacy, it is still possible that a data breach will occur. If you have the feeling that something is not going well with our systems or working methods, we would greatly appreciate it if you let us know.

What are my rights? What can I request, reverse, change or have removed?
Right of access: You have the right to request which data BBrain has stored about you. You must submit your application stating: request for right of access in writing or by e-mail:

Written:
BBrain
Afdeling Klantenservice
Weerhuisweg 4
6226 NC Maastricht
E-mail: info@bbrain.eu 

BBrain will send the requested information to you as soon as possible. A deadline of 4 weeks is always used. BBrain does not charge any costs for this.

Right to change: Based on the documents we send you, you can indicate that certain data needs to be changed. You must therefore always first send a request for inspection. If you identify incorrect personal data in our Portal or App, you can usually adjust this yourself via the 'My profile' option. If you need help with this or are unable to change certain data, please contact our customer service via info@bbrain.eu or 088 – 0080 130.

Right to delete: You can also indicate that we should delete your data. Please note that not all data can always be deleted. Some data is subject to a legal retention obligation. 
Please note that information you have shared with BBrain users in the past (such as agenda items, messages and photos) is still available to them. This can be confusing for them. Your data will remain in backups of our system for approximately 7 days. If you restore this backup, your deleted data will no longer be available. Please note that deleting data from a backup is technically complex. In very exceptional cases, a backup will have to be restored. Your deleted data will not be included.

Right to file a complaint with the supervisory authority: Within the Netherlands, the supervisory authority is the Dutch Data Protection Authority (AP).

Do you need support in carrying out one of the above processes? Please contact BBrain customer service, number +31 (0)88 - 0080 130. Our colleagues are always happy to help you.

Who can I contact with complaints about how BBrain handles your privacy?
Do you have any complaints about how BBrain handles your personal data? Then you can contact the Data Protection Officer:

E-mail: privacy@medireva.nl

Has your complaint not been handled satisfactorily? You can then submit your complaint to the Autoriteit Persoonsgegevens.

Changes to the privacy statement
This privacy statement was amended on 21-05-2024. BBrain may need to change this privacy statement from time to time. After all, everything is subject to change, not only legislation but also us as an organization.

We recommend that you read this privacy statement regularly.