Privacy Policy
Introduction
In this Privacy Policy, you will find answers to who we are, how we collect, store, and use your information, and what rights you have regarding your personal data.
Data Controller
Sp/f Brúsá
Niels Finsensgøta 16
100 Tórshavn
Phone: +298 20 19 00
Email: info@brusa.io
Purpose and Legal Basis for Processing Personal Data
General Customer Communication
When you contact us via email or phone, we collect information about you. The purpose of processing your data is:
- To process and respond to your messages
- To handle and respond to your requests
- To improve the user experience
- To manage offers
- To send automated notifications
- The processing of your data is based on §8, subsection 1, no. 6 of the Data Protection Act.
Contact Form on the Website
When you send us a message via the form on the homepage, we collect information about you. The purpose of processing your data is to respond to your messages submitted through the website.
The processing of your data is based on §8, subsection 1, no. 6 of the Data Protection Act.
Job Applications for Advertised Positions
When we advertise a job position, we provide an application form on the website where we collect information about you. The purpose of processing your data is to assess which candidate is best suited for the position.
The processing of your data is based on §8, subsection 1, no. 2 of the Data Protection Act.
Types of Information Collected
General Customer Communication
- Full Name
- Phone Number
- Job Title
- Other voluntarily provided information
Website Contact Form
- Name
- Phone
- Number
Job Applications
- Full Name
- Phone Number
- Brief description of yourself
- Other voluntarily provided information
Is Data Transferred to Other Countries or Third Parties?
When you send us a message through the website, it is processed via HubSpot, which stores a copy of the message for 90 days. HubSpot is based in Dublin, Ireland. You can read HubSpot’s Privacy Policy here: HubSpot Privacy Policy.
Messages sent via HubSpot and emails are stored on Microsoft’s email system, which operates in the USA, among other locations. You can read Microsoft’s Privacy Policy here: Microsoft Privacy Statement.
Email communication with existing and new customers may also be recorded in our customer management system, which is also integrated with HubSpot.
When you submit a job application, your personal data is stored on Microsoft OneDrive. We refer to the Microsoft Privacy Policy mentioned above.
How Long Do We Store Your Information?
General Customer Communication & Website Contact Form
We store your personal data as long as necessary to fulfill the purpose of processing. If there is no interaction between us for 18 months, your personal data will be deleted.
However, data may be stored for a longer period if required by other legal regulations.
Job Applications for Advertised Positions
If your application is accepted, your personal data will be stored for 12 months after your employment ends.
If your application is rejected, your personal data will be deleted 6 months after the position has been filled.
Your Rights
According to the Data Protection Act, you have several rights regarding the processing of your personal data. You may, for example, request access to your stored data or request deletion under certain conditions.
To exercise any of your rights, please contact us via email at info@brusa.io. We will then contact you to confirm your identity and discuss which rights you wish to exercise.
Right to Access
You have the right to request access to the personal data we process about you, including the purpose of processing.
Right to Object
You have the right to object to specific types of data processing. This means that, although the data may not be deleted, it cannot be used for certain processing activities.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Deletion
You may request deletion of personal data that you believe should not or cannot be stored. However, some data cannot be deleted due to legal requirements or contractual obligations.
Right to Restrict Processing
You may request that the processing of your personal data be restricted. This means the data will not be deleted, but access and further processing will be limited.
Right to Data Portability
In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right Not to Be Profiled
You have the right not to be subject to profiling, unless it is necessary for a contractual agreement.
Right to Withdraw Consent
If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.
If you withdraw your consent, it does not affect the legality of data processing carried out before the withdrawal. The withdrawal only applies to future processing.
Right to File a Complaint
If you have questions about how we process your personal data, you are welcome to contact us at info@brusa.io.
If you are dissatisfied with how we handle your personal data, you can file a complaint with the Data Protection Authority. You can find their contact information here: Data Protection Authority.