Rechtliches
Data processing
Processing terms for business customers under Article 28 GDPR.
Effective from 1 November 2026
Dieses Dokument führen wir nur auf Tschechisch und Englisch. Eine juristische Übersetzung ist Sache eines Anwalts, nicht einer Maschine — Sie lesen daher die englische Fassung.
This document is a data processing agreement under Article 28 of Regulation (EU) 2016/679 (GDPR). It applies if you use Brainee as a business for your people and are therefore the controller of their personal data. It does not apply to individual users — there we are the controller and the Privacy document applies.
In that case your organisation is the controller and the processor is Filip Zemánek, Company ID (IČO) 14207893, registered office Prakšice, Czech Republic. The agreement is concluded by accepting the Terms of Service and needs no signature; we will provide a signed copy on request.
If you use Brainee as an individual, this document does not concern you — we are then the controller and the Privacy document applies.
1. Subject matter and duration
We process your users' personal data solely in order to provide you with the Brainee service under the Terms of Service. Processing lasts for the duration of the contract and ends when it ends.
2. Nature, purpose and scope
| Categories of data subjects | Categories of data | Purpose |
|---|---|---|
| The controller's employees and contractors who hold an account | Identification and contact data, content of tasks and notes, recordings and transcripts, usage metadata | Providing the planning service |
We do not intend to process special categories of data under Article 9 GDPR. If your users put such data into the content, we process it only to the extent necessary to provide the service.
3. Our obligations
- We process data only on documented instructions from the controller, including instructions on transfers to a third country, unless EU or Member State law requires otherwise; in that case we will inform you beforehand.
- We bind everyone with access to the data to confidentiality.
- We implement technical and organisational measures under Article 32 GDPR — encryption in transit and at rest, role-based access control, an immutable audit log of access, regular backups.
- We assist you in fulfilling obligations towards data subjects and in data protection impact assessments.
- We notify you of a personal data breach without undue delay after becoming aware of it, at the latest within 48 hours.
- We make available the information needed to demonstrate compliance with Article 28 and allow audits, at most once a year and by prior arrangement.
4. Sub-processors
You grant us general authorisation to engage sub-processors. The current list is below; we will inform you of a change at least 30 days in advance and you may object within that period — in which case you have the right to terminate the agreement.
| Sub-processor | Role | Location |
|---|---|---|
| Soniox, Inc. | Transcribing recordings into text | USA |
| OpenAI, L.L.C. | Turning text into tasks | USA |
We impose on every sub-processor the same obligations we owe you, and we remain responsible to you for their performance.
5. Transfers outside the EU
Transfers to the USA rely on the European Commission's standard contractual clauses, or on an adequacy decision where one applies to the recipient. Supplementary measures include encryption in transit and limiting the transferred data to the necessary minimum.
6. Deletion and return of data
After the agreement ends we delete the data within 30 days, unless you request its return in a machine-readable format beforehand. The exception is data we must keep by law — we retain that only for the necessary period and do not work with it further.
7. Liability
Liability is governed by Article 82 GDPR and by the Terms of Service. The limitation of liability in the Terms does not apply to obligations arising directly from the GDPR.
8. Contact
For matters concerning this agreement write to soukromi@brainee.eu. A signed copy on company letterhead is available on request.
Weitere rechtliche Dokumente