Building Better Teams - Brian Graham
Mühlenstraße 8a
14167 Berlin, Germany
Contact
USt-ID: DE354152177 brian@buildingbetterteams.de
+491783212891
Building Better Teams - Brian Graham takes your privacy seriously. We collect only minimal data necessary for our services to function (primarily authentication data for invite-only platforms). We don't track individual users, sell your data, or share it with third parties. Web logs are anonymized and purged after 7 days. Most of our sites don't use cookies, and when they do, it's only for essential functions like maintaining login sessions on our invite-only services. Web abuse and hacking attempts are prevented by a Web Application Firewall instance that is also self-hosted and only holds information about IPs and requests for a few days to prevent server abuse. In short, we respect your privacy and collect as little personal information as possible.
Welcome to Building Better Teams - Brian Graham ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites or use our services.
Our websites include:
This policy DOES NOT cover dashboard.buildingbetterteams.de ("Dashboard") which has its own unique policy as that domain hosts an interactive application with logins.
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.
Building Better Teams - Brian Graham
Mühlenstr. 8a
14167 Berlin, Germany
Email: info@buildingbetterteams.de
Phone: +491783212891
VAT ID: DE354152177
The business is registered ("Gewerbesameldung") at the Bezirksamt Steglitz-Zehlendorf, Berlin.
Company Form: Sole Proprietorship ("Einzelunternehmen")
We collect and process only the minimum amount of personal data necessary to provide our services:
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Under GDPR, we must have a legal basis for processing your personal data. We rely on the following legal bases:
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Web server access and error logs are immediately anonymized and purged after 7 days.
For business continuity and disaster recovery purposes, we create encrypted backups of our servers which are stored offline on encrypted hardware in a secured location. These backups may contain the same data as described in section 3, including logs within their retention period. Backups are retained for a maximum of 7 days, after which they are securely deleted. All backups remain under our direct physical control and are never shared with third parties.
We periodically test our backup restoration process to ensure data recoverability in the event of a system failure or data loss incident.
Our Nginx web server logs use a basic logging format that captures limited information and masks the last octet of an IP address:
# Anonymization map
map $remote_addr $remote_addr_anonymized {
~^(\d+\.\d+\.\d+)\. $1.0; # Mask last octet
default 0.0.0.0;
}
# Anonymize IP addresses in Nginx
log_format anonymized '$remote_addr_anonymized - $remote_user [$time_local] '
'"$request" $status $body_bytes_sent '
'"$http_referer" "$http_user_agent"';
After collection, IP addresses in logs are anonymized by removing the last octet (in IPv4) or the last 80 bits (in IPv6), making it impossible to identify specific individuals. All logs are automatically purged after the 7-day retention period.
We do not share your personal data with any third parties except in the following circumstances:
Your data is stored and processed within the European Economic Area (EEA), ensuring compliance with GDPR standards and regulations.
Beyond our hosting provider (a Hetzner facility located in Finland), we use the following subprocessors:
All data processing activities are conducted either by us directly or through these explicitly named subprocessors. No other third parties have access to your personal data.
Under GDPR, you have the following rights:
To exercise any of these rights, please contact us via email at info@buildingbetterteams.de. Please note that since we collect minimal personal data and anonymize logs after 7 days, we may not have any personal data to provide in response to such requests. We will respond to your request within one month.
To protect your privacy and security, we require verification of your identity before fulfilling data subject access requests. Since we collect minimal personal data, our verification process is simple:
We aim to balance security with convenience, requiring only the minimum verification necessary to protect your rights.
We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the Internet or method of electronic storage is 100% secure.
As part of our security measures, we employ a self-hosted BunkerWeb Web Application Firewall (WAF) that helps detect and block potentially malicious traffic. This self-hosted approach enhances privacy since all security-related data remains under our control and on our infrastructure, rather than being processed by external vendors. The WAF is configured to collect only the minimum data necessary for security purposes, consistent with our overall privacy-focused approach.
Our data protection measures extend to our backup procedures. All server backups are fully encrypted both during transfer and at rest using industry-standard encryption. Backup media is stored in a physically secured location accessible only by authorized personnel. This approach ensures that even in backup form, your data remains protected against unauthorized access.
We use cookies and similar tracking technologies only for essential website functionality such as authentication and session management. These cookies are necessary for the proper functioning of our website. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.
Our services are not intended for individuals under the age of 16. We do not target children with our services and do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us.
We may update our Privacy Policy at any time without prior notice. Any changes will be effective immediately upon posting the updated Privacy Policy on our website. We encourage you to periodically review this Privacy Policy to stay informed about how we protect your personal data.
If you have any questions about this Privacy Policy, please contact us at:
Building Better Teams - Brian Graham
Email: info@buildingbetterteams.de (preferred contact method)
Phone: +491783212891
Address: Mühlenstr. 8a, 14167 Berlin, Germany
If you have a complaint about our use of your personal data or response to your requests regarding your personal data, you may submit a complaint to the data protection regulator in Germany. We would, however, appreciate the opportunity to address your concerns before you approach a data protection authority, and would welcome you contacting us in the first instance.
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstraße 219
10969 Berlin
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Our business email (info@buildingbetterteams.de) is managed through Google Workspace (Gmail). When you contact us via email, your communication, including any personal data you provide, will be processed on Google's servers. Google acts as a data processor in this context.
Email communications may be retained for business continuity and legal purposes. We limit access to emails containing personal data to only those individuals who need such access to perform their job functions. For Google's privacy practices, please refer to Google's Privacy Policy.
In the unlikely event of a data breach affecting personal data, we will:
Given our minimal data collection practices and short retention periods, the impact of any potential breach is significantly limited.