Privacy Policy

Last updated: 15 March 2026

1. Data Controller Information

The data controller responsible for your personal data is:

• Company: brightadvisorium AG
• Address: Waldstraße 77, 80556 Munich, Bavaria, Germany
• Registration Number: HRB846923
• VAT Number: DE847563218
• Email: privacy@brightadvisorium.pro
• Phone: +49 891459814

2. Data Collection

We collect personal data when you interact with our website and services. The data we collect includes information you provide directly to us and information automatically collected through your use of our website.

Information You Provide

• Contact Information: Name, email address, phone number when you contact us or book consultations
• Communication Data: Messages, feedback, and correspondence you send to us
• Consultation Data: Information about your laptop requirements, work patterns, and preferences
• Payment Information: Billing details for paid consultations (processed securely through third-party payment providers)

Automatically Collected Information

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, click patterns, referral sources
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

3. How We Use Your Information

We use the personal data we collect for the following purposes, based on legitimate interests, contractual necessity, and your consent where required:

Service Provision

We use your data to provide our services, including responding to inquiries, conducting consultations, and delivering laptop recommendations. This processing is necessary for the performance of our contract with you.

Communication

We use your contact information to communicate with you about our services, respond to your questions, and provide customer support. This is based on our legitimate interest in providing excellent customer service.

Website Improvement

We analyse how visitors use our website to improve its functionality, content, and user experience. This helps us better serve our users and is based on our legitimate interest in improving our services.

Marketing and Analytics

With your consent, we may use your information for marketing purposes and analytics to understand user behaviour and improve our content and services.

4. Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our comprehensive Cookie Policy.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

Service Providers

• Analytics Providers: Google Analytics for website analytics
• Communication Tools: Email service providers for sending communications
• Payment Processors: Secure payment processing for consultation fees
• Hosting Services: Website hosting and content delivery networks

Legal Requirements

We may disclose your information if required by law, regulation, or court order, or to protect our rights, property, or safety, or that of others.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law:

• Contact Inquiries: 3 years from last contact
• Consultation Records: 5 years for business and tax purposes
• Website Analytics: 26 months (Google Analytics default)
• Marketing Data: Until consent is withdrawn or 2 years of inactivity
• Legal Obligations: As required by applicable German and EU law

7. Your Rights

Under the General Data Protection Regulation (GDPR) and German data protection law, you have the following rights regarding your personal data:

Access and Portability

• Right of Access: Request a copy of the personal data we hold about you
• Data Portability: Receive your data in a structured, machine-readable format

Correction and Deletion

• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances

Processing Control

• Right to Restrict Processing: Request limitation of processing in certain situations
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month of receipt.

8. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Certification schemes or codes of conduct

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure hosting and backup procedures

10. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, provide additional notice through our website or email.

12. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

13. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data unlawfully. In Germany, the relevant supervisory authority is: