The following sections describe the different data processing activities we conduct on our website. The information particularly reflects the processing purposes, what personal data we process for this purpose as well as the legal basis for the processing.

a) If you visit our website for informational purposes only, i.e. surfing on our website without specifically providing personal data, we will process the following information about you. The information may include a limited amount of personal data:

IP Address: Referrer URL: Browser Information: Device Information: Date and time of the user request

This information is processed to enable you to use our website (e.g. by adapting our website to the needs of your device or browser).

The legal basis for this data processing is performance of contract, Art. 6 para. 1 sentence 1 lit. b GDPR, as we need the information for the effective provision of our website, and for providing you the services of our website at your request. Without the processing of the above-mentioned personal data, we will not be able to carry out the communication over the network and provide you with the required functionalities of our website.

We retain this personal data for 2 years

a) You have the possibility to register for a user account on our website. During registration we will process the following personal data about you:

First Name: Last Name: Email Address: Address: Payment Info

b) The lawfulness of this data processing is "performance of contract" follows from Art. 6 para. 1 sentence 1 lit. b GDPR. The processing is required for the effective provision and the ad-ministration of your user account. Without providing the data required for regis-tration, it is not possible to create a user account on our website.

We retain your personal data till you have a user account with us.

c) You can delete your customer account as follows:

i. Please contact us by reachout at www.brand2g.com/contact-us with your written request for deletion. If you decide to delete your customer account, the account data will be deleted, unless further data retention is required or justified under the applicable law.ii. You can also delete your entire account within your customer account. If you decide to delete data or your customer account, the account data will be deleted, unless further data retention is required or justified under the applicable law.

ii. You can also delete your entire account within your customer account. If you decide to delete data or your customer account, the account data will be deleted, unless further data retention is required or justified under the applicable law.

You can contact us using the contact details provided on the website. If you contact us, we will process the content of your inquiry, your name, your e-mail address or telephone number, if applicable, our answers as well as all information that you voluntarily provide us with in the context of the inquiry in order to be able to adequately handle your request.

You can also contact us via the contact form on our website. In this case, we collect the following personal data:
‍
We will process this data as well as the content of your inquiry, our answers and all information that you voluntarily provide us with in the context of the inquiry in order to be able to adequately handle your request.

The lawfulness of this data processing is "legitimate interests" (results from Art. 6 para. 1 sentence 1 lit. b, f GDPR), as this data processing is necessary to ensure proper contact and the provision of customer service. This provision of adequate customer service is our legitimate interest that requires us to process your personal data.

We will retain your data as long as necessary to adequately process your request. Afterwards, it will be deleted, unless longer storage is required or justified by law.

The retention period for the personal data processed to process your request is
:2 years
Afterwards, it will be deleted, unless longer storage is required or justified by law.

You have a right to object to processing based on our legitimate interests. As a consequence of any valid objection, we will no longer process your data unless we have sufficiently compelling and legitimate grounds for the processing.

We do not knowingly collect or solicit personal data from persons under the age of 13. The website is not directed at children under the age of 13. In the event that we learn that we have collected personal data of a child under the age of 13 without parental consent, we will delete that information as quickly as possible. If you believe that we may have personal data from or about a child under 13, please contact us using the contact details outlined in this policy.

We do not knowingly collect or process sensitive personal data.

We do not knowingly collect or process personal data relating to criminal convictions and offences.

We do not knowingly collect or process personal data for automated individual decision-making including profiling.

Cookies and similar tracking technologies are placed on your computer or mobile device to collect, store, and use information about you when you visit our website.

This website uses cookies or similar technologies ("cookies"). There are different kinds of cookies:

Strictly necessary cookies are cookies that are necessary to provide the services and features available through the websites, e.g. shopping. Without the cookie the service cannot be provided.

Non-necessary cookies Some of the cookies described above are so-called first party cookies where we are responsible for dropping the cookies and processing the personal data. Other cookies we use may be provided by third party (third party cookies). These third parties drop the cookies and process the collected personal data for their own purposes, e.g. to provide you advertisement.

We do not engage with service providers for the processing of personal data in connection with the website and/or functions/services on the website.

There are no data recipients located in countries outside the European Union, and they do not have access to personal data from a country outside the European Union.

No data recipients (service providers or third party recipients) are located in countries outside of the European Union and/or do the data recipients access the personal data from a country outside the European Union.

We do not transfer or provide access to your personal data to data recipients located in countries outside the Federated Republic of Brazil.

Unless otherwise stated in this privacy policy, we retain your personal data only as long as necessary for the respective purpose. Subsequently, we will delete your data, unless we are legally entitled or obliged to further storage.

Please refer to the section on Data Processing Activities to find out the exact retention period for different categories of your personal data and/or different processing purposes.

We implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.

Depending on the circumstances, you may be entitled to exercise some or all of the following rights:

1. Obtain confirmation as to whether or not your personal data is being processed and access to copy of your personal data undergoing processing.1. require (i) access to and/or duplicates of your personal data retained, (ii) receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (iii) to transmit those personal data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller;
2. request rectification, removal or restriction of your personal data;
3. Where the data processing is based on your consent, refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;
4. take legal actions in relation to any potential breach of your rights regarding the processing of your personal data, as well as to lodge complaints before the competent data protection regulators;
5. not to be subject to any automated decision making, including profiling (automatic decisions based on data processing by automatic means, for the purpose of assessing several personal aspects) which produce legal effects on you or affects you with similar significance.
Further, you may be entitled to object, out of grounds relating to your particular situation, at any time to processing of personal data concerning you, including object to direct marketing and automated individual decision-making including profiling. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your personal data or present you our compelling legitimate grounds for an ongoing processing.
You also have a right to lodge a complaint with the supervisory authority. The contact details of your supervisory authority are:
www.brand2g.com/contact-us

BrandtoGo provides users complete rights over their data in accordance with the California Consumer Privacy Act:
Users can request to know PI collected/sold/shared/disclosed by BrandtoGo in the last 12 months.
Users can request BrandtoGo to delete PI collected about them.
Users can request BrandtoGo to correct PI collected and retained about them.
Users can request BrandtoGo not to sell or share PI collected about them.
Users can not be discriminated against by BrandtoGo if they choose to exercise their data rights.
Users can request BrandtoGo to limit the Use of their Sensitive Personal Information.
For more information on how to exercise your rights refer to  Your Rights Section
‍If you are an authorized representative exercising a rights request on behalf on a consumer, the procedure to do so is:
For all CPRA requests, we will verify your requests according to company policy. Refer to Your Rights section to learn more on how to exercise your rights.

We may update this Privacy Policy from time to time. If we modify our Privacy Policy, we will post the revised version here, with an updated revision date. You agree to visit these pages periodically to be aware of and review any such revisions. If we make material changes to our Privacy Policy, we may also notify you by other means prior to the changes taking effect, such as by posting a notice on our websites or sending you a notification. By continuing to use our website after such revisions are in effect, you accept and agree to the revisions and to abide by them.