Privacy Policy

Data Controller

Company name: BRAINBOX & CO
Contact email: lina@power-impact.com

Personal Data Collected

When booking an appointment or contacting us via the form, the following data may be collected:

  • First and last name
  • Email address
  • Phone number
  • Information related to your request or project

Purpose of Data Processing

Personal data is collected for the following purposes:

  • Appointment scheduling and client relationship management
  • Communication with prospective or existing clients
  • Responding to inquiries and service-related requests

Legal Basis for Processing

Data processing is based on:

  • Your explicit consent (via a mandatory checkbox when submitting the form)
  • Performance of a contract or pre-contractual measures at your request
  • Our legitimate business interests in managing client relationships and responding to inquiries, where such interests do not override your fundamental rights and freedoms

Recipients of the Data

Personal data may be accessed by:

  • Authorized internal staff of BRAINBOX & CO
  • Calendly (appointment scheduling service – United States)
  • Infomaniak Network SA (hosting provider – Switzerland)

International Data Transfers

Calendly (United States):
We use Calendly for appointment scheduling. This service processes personal data in the United States. Data transfers are protected by:

  • Standard Contractual Clauses (SCCs) approved by the European Commission, and/or
  • Calendly’s participation in the EU-U.S. Data Privacy Framework

These safeguards ensure an adequate level of protection equivalent to that guaranteed by Swiss and European data protection laws.

Infomaniak (Switzerland):
Our hosting provider, Infomaniak Network SA, is based in Switzerland (Geneva) and stores data within Switzerland. No international data transfer occurs for hosting services.

Data Retention Period

Personal data is retained for 3 years from the last contact with you, unless:

  • A longer legal retention obligation applies, or
  • You request deletion earlier

Your Rights

In accordance with applicable data protection laws (including the EU General Data Protection Regulation and the Swiss Federal Act on Data Protection), you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure of your data
  • Restrict processing of your data
  • Object to processing of your data
  • Request data portability (receive your data in a structured, commonly used format)
  • Withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal)

How to Exercise Your Rights

You may exercise your rights at any time by contacting us at:
lina@power-impact.com

We will respond to your request within 30 days of receipt.

Complaints

If you believe your rights have been violated, you may lodge a complaint with the competent data protection authority:

For Swiss residents (primary jurisdiction):
Federal Data Protection and Information Commissioner (FDPIC)
Website: www.edoeb.admin.ch

For EU/EEA residents:
The data protection authority in your country of residence
List of EU data protection authorities: https://edpb.europa.eu/about-edpb/board/members_en