Data controller
The data controller is the entity operating the Find New Brands website.
Commercial name: Find New Brands
Address: Tallinn, Estonia - full address to be completed.
Contact: through the contact form available on the Contact page.
The official legal details of the operating entity should be completed before final publication.
Personal data we collect
Find New Brands may collect information that you voluntarily submit through the website forms:
- first name, last name and professional contact details;
- company name, website, product category or business sector;
- information about your project, brand, buyer activity or request;
- technical data required for website operation and security.
Why we use your data
We use personal data to:
- reply to messages submitted through the contact form;
- review brand applications and buyer access requests;
- manage commercial or pre-contractual relationships;
- improve the website, security and user experience;
- comply with applicable legal obligations.
Legal bases
Depending on the context, processing may rely on one of the legal bases provided by the GDPR, including pre-contractual steps, Find New Brands' legitimate interest in responding to professional requests, consent where required, or compliance with legal obligations.
Individuals must be clearly informed about the data processed, the purposes, the recipients, possible transfers and their rights.
Recipients and service providers
Data may be accessed by the Find New Brands team and by technical service providers acting on behalf of Find New Brands, including website hosting, security, form processing and tools required to handle requests.
The website forms use a form submission provider to transmit requests to Find New Brands.
Retention
Data is kept only for as long as necessary to handle the request, follow up on a commercial or pre-contractual relationship, and comply with applicable legal obligations.
As a guideline, inbound requests may be kept for up to three years after the last contact, unless a legal obligation or valid deletion request requires a different retention period.
Your rights
Under the GDPR, you may request access, rectification, erasure, restriction of processing, data portability where applicable, or object to certain processing activities.
You can exercise your rights through the contact form. You may also lodge a complaint with the competent data protection authority.
Updates
This policy may be updated to reflect changes to the website, services or applicable regulation.
Last updated: May 15, 2026.