Legal
Privacy Policy
Last updated: February 2026
1. Introduction
Welcome to Brapua. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website and use our services.
This Privacy Policy is compliant with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
Maximilian Brunner
Schafkofweg 10
82490 Farchant
Germany
Email: info@brapua.com
3. Personal Data We Collect
We may collect and process the following categories of personal data:
3.1 Information You Provide
- Contact Information: Name, email address, phone number, country
- Waitlist Registration: Name, email, role selection, country
- Sponsor Registration: Company name, contact person details, email, phone, country, sponsorship tier, focus areas, and messages
- Contact Form: Name, email, and message content
3.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system
- Usage Data: Information about how you use our website
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
| Purpose | Legal Basis |
|---|---|
| Processing waitlist registrations | Consent (Art. 6(1)(a) GDPR) |
| Processing sponsor applications | Contract performance (Art. 6(1)(b) GDPR) |
| Responding to contact inquiries | Legitimate interest (Art. 6(1)(f) GDPR) |
| Website functionality and security | Legitimate interest (Art. 6(1)(f) GDPR) |
| Legal compliance | Legal obligation (Art. 6(1)(c) GDPR) |
5. How We Use Your Data
- To process and manage your waitlist registration
- To process sponsor applications and manage sponsorship relationships
- To respond to your inquiries and provide customer support
- To send you updates about Brapua's launch and development (with your consent)
- To improve our website and services
- To comply with legal obligations
- To protect our rights and prevent fraud
6. Data Sharing and Recipients
We may share your personal data with the following categories of recipients:
- Service Providers: Third-party service providers who assist us in operating our website (e.g., Netlify for form handling and hosting)
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal data to third parties. Any third-party service providers we work with are contractually obligated to protect your data and may only use it for the purposes we specify.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Binding corporate rules
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
- Waitlist data: Until platform launch and your first login, or until you request deletion
- Sponsor data: For the duration of the sponsorship relationship plus 10 years for legal compliance
- Contact form data: 3 years from the last communication
- Technical logs: 90 days
9. Your Rights Under GDPR
- Right of Access (Art. 15): You can request a copy of your personal data
- Right to Rectification (Art. 16): You can request correction of inaccurate data
- Right to Erasure (Art. 17): You can request deletion of your data ("right to be forgotten")
- Right to Restriction (Art. 18): You can request restriction of processing
- Right to Data Portability (Art. 20): You can request your data in a machine-readable format
- Right to Object (Art. 21): You can object to processing based on legitimate interests
- Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at info@brapua.com. We will respond to your request within 30 days.
10. Right to Lodge a Complaint
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. In Germany, you can contact:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de
11. Cookies and Tracking Technologies
Our website currently does not use cookies for tracking or analytics purposes. We only use essential technical cookies that are strictly necessary for the website to function properly.
If we implement cookies or tracking technologies in the future, we will update this Privacy Policy and implement appropriate consent mechanisms in accordance with GDPR and the ePrivacy Directive.
12. Third-Party Services
Our website uses the following third-party services:
- Netlify: Website hosting and form processing. Netlify may process your IP address and form submissions. For more information, see Netlify's Privacy Policy.
13. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (HTTPS/TLS)
- Secure hosting infrastructure
- Access controls and authentication
- Regular security assessments
However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
14. Children's Privacy
Our Service is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will delete such information.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
16. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: info@brapua.com
Address: Maximilian Brunner, Schafkofweg 10, 82490 Farchant, Germany