Waitlist privacy notice
This notice covers only the launch waitlist, where parents leave their e-mail address to hear when Brotelo opens.
Who we are
The controller is TOPFED WEB S.R.L., IDNO 1026023125543, s. Pepeni, r-nul Sîngerei, MD-6234, Republic of Moldova. Write to us at [email protected].
Our representative in the European Union (Article 27 GDPR): [TO CONFIRM: the name and address of the EU representative.]
What we keep
- your e-mail address;
- the language of the page where you signed up;
- where you signed up: the page, and the course if any;
- when you gave your consent, to which wording, and when you confirmed it;
- your IP address, hashed with a secret key, as proof of the sign-up.
Why, and on what basis
We use your address only to e-mail you when Brotelo launches and when new courses open. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every e-mail, without affecting the e-mails sent before.
Who helps us
- Brevo (Sendinblue SAS, France) sends the e-mails, from servers in the European Union.
- Hetzner Online GmbH hosts our server in Germany, where the list is stored.
- Cloudflare, Inc. (United States) delivers and protects the site and handles your IP address and your request for us; it is certified under the EU-US Data Privacy Framework, and the European Commission's standard contractual clauses apply to any transfer the framework does not cover.
We do not sell the list or share it with anyone else, unless the law requires it.
How long we keep it
- Until you unsubscribe.
- A sign-up that is never confirmed is deleted after 30 days.
- After you unsubscribe, we keep a record of your sign-up and unsubscription, only so that we never e-mail that address again (our legitimate interest, Article 6(1)(f) GDPR).
No tracking
We commit to sending these e-mails without tracking pixels or link tracking: we do not want to know whether you open them or which links you click.
No children's data
The waitlist is for parents aged 18 and over. We ask nothing about children.
Your rights
You can ask to access, correct or erase your data, to restrict or object to its use, and to receive it in a portable format: write to [email protected], and we answer within one month. You can also complain to a data protection authority, such as the one in your EU country or, in the Republic of Moldova, the National Center for Personal Data Protection (www.datepersonale.md).