This Data Policy for Dembrane’s Products, hereinafter also referred to as "Data Policy") outlines how Dembrane handles and protects your (personal) data during and after a participation session. At Dembrane, we are committed to safeguarding your data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.
Please note that this Data Policy may be updated periodically. The most recent version can always be found on our website. We recommend reviewing this Data Policy before participating in a session to stay informed about how we manage your data.
This Data Policy was Last updated on: 12 November 2024.
This Data Policy applies to all participants, whether they are part of sessions organised directly by Dembrane or sessions conducted on behalf of Dembrane’s clients.
If you are participating in a session directly organised by Dembrane, Dembrane is considered the "data controller" of your personal data under the GDPR. This means that we determine the purpose ("why") and means ("how") of processing your data. For more information on how we handle your personal data, please refer to our Privacy Statement.
If you are participating in a session conducted by Dembrane on behalf of a third-party client, that client is the "data controller" for any data processed during the session. In this role, Dembrane acts as a "processor" on behalf of the client. When Dembrane is engaged by a client, Dembrane and the client will establish a data processing agreement to govern the handling of personal data.
While this Data Policy provides general guidance on how we process personal data, the actual processing of your data may vary based on the specific needs and instructions of the client. For detailed information on how your personal data is managed, please refer to the client’s privacy statement.
Dembrane’s data processing for participation sessions includes four primary steps:
During participation sessions, audio is recorded to facilitate transcription. These recordings are securely stored on EU-based servers and are deleted within 30 days after the project is completed.
When you participate in a participation session, Dembrane processes your data. This includes personal data such as:
| Categories of personal data | Examples | |
|---|---|---|
| a) | Audio | Recorded audio of the session, which is subsequently processed |
| b) | Session information | All personal information you share during the participation session |