brainsData controller
brains.pt is operated by Brains Are Nuts, Unip. Lda, NIF 518264840, Rua do Brasil, n.º 222, A R/C, 3030-775 Coimbra, Portugal. For privacy enquiries and rights requests, contact hello@brains.pt or write to the registered address above.
What happens on this website
No account is required. The brief form processes your name, email, organisation, optional phone number, selected area and message in page memory. Preparing, copying or downloading a brief does not send it to Brains. “Open in email” passes these details to your email application; you decide whether to send them there. Downloaded files remain on your device until you delete them. Avoid unnecessary sensitive or third-party information.
Purposes and legal bases
When you email us, we use the information needed to reply and prepare a proposal, based on steps taken at your request before a contract (GDPR Article 6(1)(b)). For people representing organisations, we rely on our legitimate interest in managing professional relationships (Article 6(1)(f)), subject to your right to object. Statutory and tax duties rely on Article 6(1)(c). Contacting us does not subscribe you to marketing. This website has no newsletter, behavioural advertising or automated decision-making.
Browsing and service providers
The host receives technical data needed to serve the website, including IP address, requested page and browser information. Necessary security logs rely on our legitimate interest in protecting the service. Hosting, email and IT providers may process data on our behalf for their contracted services. Data may be disclosed to authorities where required by law. We do not sell personal data. Website hosting is provided by PTisp (AlmourolTec, Lda).
Retention
The application does not save brief fields between pages; your browser may offer autofill according to your settings. Enquiries that do not lead to a contract are retained for up to 12 months after the last relevant contact, unless needed to establish or defend legal claims. Contractual and tax records follow applicable statutory periods. Security logs, if enabled, have an operational limit of 30 days unless an incident is being investigated.
Transfers and security
This version loads its own files without embedded social media or third-party analytics. Your chosen email provider has its own policy. Any transfers outside the EEA by Brains providers require an adequacy decision or safeguards under GDPR Chapter V; information is available on request. Access is limited to people who need it. No system can guarantee absolute security.
Your rights
You may request access, rectification, erasure, restriction and, where applicable, portability; you may object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Contact hello@brains.pt. We may request only the information needed to verify identity. We respond within one month, with extensions and notice where permitted by the GDPR. You may complain to the Portuguese CNPD without contacting us first.
Scope and changes
This policy covers the website and contact enquiries. Drone operations, filming, training or other services involving personal data require project-specific information and arrangements. Changes are published here with their date.