Privacy Policy
BRAINLast updated: July 2026
Controller
The controller responsible for data processing on this website is: BRAIN — Berlin Robotics And Innovation Network [Street and number], [Postal code] Berlin Email: [[email protected]]
Hosting and server logs
This website is hosted on the platform of Railway Corp. (San Francisco, USA). Our application and database run exclusively on servers located in the European Union (Amsterdam, Netherlands). We have concluded a data processing agreement with Railway. When you visit this website, our server automatically collects technical information such as your IP address, browser type, date and time of access, and the requested page. This data is processed to deliver the site reliably and securely (Art. 6 (1)(f) GDPR) and is not merged with other data sources.
Content delivery and security (Cloudflare)
We use Cloudflare (Cloudflare, Inc., USA) as a content delivery network, DNS provider, and protection against attacks. When you visit this website, your requests are routed through Cloudflare's network, which processes technical connection data such as your IP address for delivery and security purposes. Cloudflare processes this data on our behalf under a data processing agreement; any transfer to the USA is safeguarded by the EU standard contractual clauses. The legal basis is our legitimate interest in delivering the site securely and efficiently (Art. 6 (1)(f) GDPR).
Registration and member account
If you create a member account, we process the data you provide: name, email address, and a password stored in hashed form, plus any optional profile details (role, focus, bio, links) and company information you add. This data is processed to provide your account and the member features (Art. 6 (1)(b) GDPR). Profile and company details are only shown publicly if you explicitly enable visibility in your settings. You can delete your account at any time in the settings; this permanently removes your account, profile, and company data.
Sign-in with Google
You can register and sign in via Google OAuth. In that case Google transmits your name, email address, and profile picture to us so we can create and operate your account (Art. 6 (1)(b) GDPR). Google may process additional data under its own privacy policy: https://policies.google.com/privacy
Cookies and sessions
We use technically necessary cookies to keep you signed in (session cookies) and to remember your language preference. These cookies are required to operate the site (Art. 6 (1)(f) GDPR) and are not used for tracking or advertising.
Web analytics (Umami)
We use Umami, a privacy-friendly open-source analytics tool, to understand how our website is used in aggregate. Our Umami instance is self-hosted on Railway on servers located in the European Union — no analytics data is shared with third parties. Umami does not use cookies, does not track you across websites, and stores no personal data: IP addresses are anonymized and never stored. The legal basis is our legitimate interest in analyzing and improving our website (Art. 6 (1)(f) GDPR).
File uploads (AWS S3)
Images you upload, such as profile avatars and company logos, are stored with Amazon Web Services (AWS) in an S3 bucket located in the European Union (region eu-central-1, Frankfurt, Germany). AWS processes this data on our behalf based on a data processing agreement. The legal basis is the provision of your account and the member features (Art. 6 (1)(b) GDPR).
Newsletter and emails (Resend)
If you subscribe to our newsletter — via the newsletter form or the optional checkbox during registration — we process your email address to send you the newsletter, based on your consent (Art. 6 (1)(a) GDPR). Delivery is handled by our email service provider Resend (Resend, Inc., USA), which processes data on our behalf under a data processing agreement; any transfer to the USA is safeguarded by the EU standard contractual clauses. You can withdraw your consent at any time, for example via the unsubscribe link included in every newsletter.
Map content
The company map is rendered using map tiles from an external provider (OpenStreetMap). When the map is loaded, your IP address is transmitted to the tile provider; this is technically necessary to display the map (Art. 6 (1)(f) GDPR).
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection with regard to your personal data (Art. 15–21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information. For any request, contact us at [[email protected]].