Privacy Policy - Barawave

Barawave Privacy Policy

Your Privacy Matters to Barawave

This privacy policy outlines how Barawave, as a data controller, collects, processes, and protects your personal data. Barawave is a global technology company with operations in various countries. When you interact with us through this website or its subdomains, we process your data in accordance with applicable privacy laws and our commitment to transparency and responsibility.

Last Updated: October 10, 2024

What’s New? We’ve updated the details on the types of data we collect and how we use it, especially regarding job applications and product interactions.

How Barawave Uses Personal Data

At Barawave, we leverage the personal data we collect to deliver, improve, and personalize our cloud ERP solutions as well as your overall experience with our brand. Specifically, we use your data to:

Provide and Maintain Our Services
- Host, secure, update, and troubleshoot the Barawave platform and website.
- Fulfill your transactions, such as provisioning new user accounts or modules, and deliver any related documentation or training materials.
- Share necessary information with third-party service providers (e.g., cloud hosting or payment processors) to complete the service you’ve requested.
Customer Support & Inquiry Management
- Respond to your support tickets, help-desk inquiries, and feedback submissions—whether you contact us via email, phone, or live chat.
- Escalate and track open issues to resolution, ensuring we have the right context and history to assist you quickly.
Event Registration & Communications
- Manage registrations for webinars, workshops, and user conferences.
- Send you confirmations, reminders, and follow-up materials (e.g., slide decks, recordings) based on the personal data you submitted at sign-up.
Product Development & Improvement
- Analyze usage patterns, feature adoption, and performance metrics to prioritize new functionality or UX enhancements.
- Conduct A/B tests and pilot programs—drawing on depersonalized user cohorts—to validate product changes before broad rollout.
Personalization & User Experience
- Tailor in-app dashboards, notifications, and help content to your role (e.g., production planner vs. finance analyst) and previous interactions.
- Recommend relevant best practices, integrations, or learning resources based on your industry segment and module usage.
Marketing, Advertising & Outreach
- With your consent, send promotional emails, newsletters, and invitations to Barawave events.
- Use aggregated analytics and cookie-based signals to deliver more relevant ads on third-party sites (e.g., ERP comparison articles or manufacturing trade show banners).
- Respect your opt-out preferences at every step via clear unsubscribe links or preference-center controls.
Business Operations & Compliance
- Combine data across different interactions—such as your website visits, support history, and event attendance—to gain insights on overall service health and customer satisfaction.
- Satisfy our legal obligations (e.g., financial reporting, audit trails) and internal governance requirements.
- Conduct workforce planning and talent-management analyses using depersonalized internal applicant data.

Legal Bases for Processing Your Personal Data

When Barawave acts as a data controller, we rely on the following lawful grounds for processing your personal data:

Consent
- You have affirmatively opted in (e.g., by checking a consent box) to receive marketing communications or to enable non-essential cookies.
Contract Performance
- Processing is necessary to deliver the Barawave services you’ve subscribed to—such as creating your user account, billing, or granting access to modules under your plan.
Legal Obligation
- We must process certain data to comply with applicable laws (e.g., tax reporting, data-protection regulations, employment requirements).
Legitimate Interests
- We process data when it is necessary for our legitimate business interests—like improving platform security, preventing fraud, or analyzing service usage—provided those interests do not override your rights and freedoms.
Research & Analytics (Depersonalized Data)
- We may aggregate and anonymize personal data for statistical research and product-development purposes, which poses minimal privacy risk and cannot be traced back to you.
Data Processor Instructions
- When we process your data on behalf of a customer (e.g., for a hiring assessment), we do so under their documented instructions and rely on their legal basis for that processing.

Reasons We Share Personal Data

Barawave may share your personal data with the following categories of recipients, only for the purposes outlined below:

Group Companies & Affiliates
- To coordinate international support, billing, and product localization across our global Barawave network.
Service Providers & Vendors
- Cloud-hosting platforms, payment processors, CRM systems, marketing-automation tools, and analytics providers that perform services on our behalf.
- These partners are contractually bound to use your data only as instructed by Barawave and to maintain appropriate security measures.
Event Organizers & Co-Sponsors
- When you register for a Barawave-hosted or co-branded event, we share your registration details (e.g., name, company, email) with the event’s organizing partners to facilitate logistics and communications.
Legal & Regulatory Authorities
- To comply with court orders, subpoenas, or legal processes; to protect Barawave’s rights and property; or to ensure the safety of our employees and customers.
Mergers, Acquisitions & Corporate Restructuring
- In the event Barawave is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to this policy.
Job-Application Processing
- For applications to Barawave roles, we share your CV and assessment data with internal hiring managers.
- For applications to a Barawave customer, we share your information solely with that customer (the data controller) and any third parties they engage for background checks or credential verification—always in accordance with applicable law.

Your Personal Data Rights

You have control over how Barawave collects, uses, and shares your personal data. To exercise any of the rights described below, please contact our Privacy Team at privacy@barawave.com or use our online Privacy Request Form. We will respond in accordance with applicable legal timeframes.

Subject to local law, you may have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Ask us to correct or update inaccurate or incomplete information.
Erasure (“Right to be Forgotten”): Request deletion of your personal data when it’s no longer needed for the purposes described in this policy.
Restriction of Processing: Ask us to limit how we use your data—for example, to suspend processing while we verify a dispute.
Object: Opt out of processing based on our legitimate interests or for direct marketing purposes.
Withdraw Consent: If we rely on your consent, you can revoke it at any time (without affecting the lawfulness of prior processing).
Data Portability: Receive your personal data in a structured, commonly used electronic format and, where technically feasible, have it transmitted to another controller.
Opt-out of Targeted Advertising & Profiling: Stop the use of your data for profiling or tailored advertising.
Complain to a Supervisory Authority: Lodge a complaint with the data protection authority in your jurisdiction if you believe we have infringed your rights.

If you are a California resident, you may also have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of sale of personal information. Visit our California Privacy Notice for more details.

Personal Data Processing for Direct Marketing Purposes

Barawave respects your marketing preferences and will only send you promotional communications if you have opted in or where otherwise permitted by law. You can manage your preferences at any time by:

Clicking the unsubscribe link included in every marketing email.
Visiting our Preference Center here to update your contact and marketing choices.
Contacting us directly at privacy@barawave.com

Please note that while you may opt out of marketing emails, we may still send you important transactional or service-related messages (such as account updates, billing notices, or security alerts) that are necessary to maintain your Barawave account.

International Transfers of Data

Barawave is a global company, and to operate effectively we may transfer your personal data to our affiliates, service providers, and partners located in countries other than your own. Some of these countries may not offer the same level of data protection as your country of residence. To safeguard your information, we implement appropriate transfer mechanisms, such as:

Standard Contractual Clauses (SCCs): We include SCCs approved by the European Commission in our agreements with data importers to ensure your data receives GDPR-level protections.
Binding Corporate Rules (BCRs): Where applicable, we rely on our internal data-handling policies (BCRs) to govern intra-group transfers.
APEC Cross-Border Privacy Rules (CBPR): For transfers within the Asia-Pacific Economic Cooperation region, we adhere to APEC’s CBPR framework.

Whenever local law requires additional safeguards or approvals, we comply before initiating any cross-border transfer. If you would like more information about our specific transfer safeguards or wish to request a copy of the relevant SCCs, please contact our Privacy Team.

Cookies & Tracking Technologies

Our website and applications use cookies and similar technologies (e.g., web beacons, local storage) to deliver and improve services, personalize your experience, and support security functions. We group cookies into the following categories:

Essential Cookies:
- Necessary for core functionality such as login, navigation, and security.
- Always active when you visit our site.
Performance & Analytics Cookies:
- Help us understand how you use Barawave (e.g., page visits, feature usage).
- Enable us to optimize speed, reliability, and user experience.
Functional Cookies:
- Store preferences and settings (e.g., language, date format).
- Enhance usability and remember your choices across sessions.
Marketing & Advertising Cookies:
- Track your activity to deliver relevant ads on third-party platforms.
- Support remarketing and campaign measurement.

Managing Your Preferences

On first visit, you’ll see a cookie consent banner where you can accept or decline non-essential cookies.
You can withdraw or modify your consent at any time via our Cookie Settings link in the website footer.
Most browsers allow you to block or delete cookies via their settings—consult your browser’s help menu for instructions.
We do not respond to “Do Not Track” signals in jurisdictions where we are not legally required to do so.

Services Provided by Your Organization

If your employer or another organization grants you access to Barawave products (for example, using a corporate email address or single-sign-on), that organization acts as the data controller for your account. In these cases:

Account Administration: Your organization can manage your user permissions, reset passwords, and access activity logs.
Data Access & Processing: Your employer may view or export certain data you enter into Barawave (e.g., timesheets, production metrics) in accordance with their internal policies.
Support & Compliance: Any privacy inquiries or data-subject requests related to your use of Barawave under your organization’s account should be directed first to your internal administrator.

Barawave is not responsible for the privacy or security practices of your organization. We recommend reviewing your employer’s privacy policies or contacting your administrator for more details on how they handle your information.

Data Retention

Barawave retains your personal data for as long as necessary to fulfill the purposes outlined in this policy and to comply with applicable legal, regulatory, or contractual requirements. Specifically:

Active Relationship: We keep data while you maintain an active account, attend our events, or otherwise engage with Barawave.
Post-Relationship Period: After our direct relationship ends—such as when you close your account or an employment application is closed—we retain your data for a defined period to:
- Comply with statutory retention obligations (e.g., financial records, tax audits)
- Defend against or pursue legal claims
- Resolve any outstanding support issues or complaints
- Conduct historical analysis and improve our services

Once retention periods expire, we either securely delete or anonymize your personal data so it can no longer be associated with you.

How We Protect Your Personal Data

The security of your information is a top priority. Barawave implements a multi-layered security program that includes:

Administrative Controls: Regular staff training, data-protection policies, and role-based access restrictions.
Technical Safeguards: Encryption of data at rest and in transit, intrusion-detection systems, network segmentation, and routine vulnerability assessments.
Physical Measures: Secure data centers with controlled access, surveillance, and environmental protections.

Although we strive to provide robust protection, no system is impervious to every threat. In the unlikely event of a data incident, we will promptly investigate, notify affected individuals and regulators as required, and take corrective action to prevent recurrence.

Personal Data Processed on Behalf of Our Customers

When organizations use Barawave to manage their own end-user relationships—such as distributors logging production data or customers registering for support—those organizations act as the data controllers. In these cases:

Barawave operates solely as a data processor, handling personal data under the controller’s instructions.
Our Data Processing Addendum governs these engagements and ensures that we meet or exceed legal requirements for data handling, security, and confidentiality.
For questions about how your data is used by a Barawave customer, please consult their privacy policy or reach out to their data-protection officer.

Links to Third-Party Websites

Our platform and communications may include links to external sites or services operated by third parties. Barawave is not responsible for the privacy practices or content of those sites. We encourage you to review each site’s privacy policy before providing any personal information.

Updates to Our Privacy Policy

Barawave may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new features. Each version will display a “Last Updated” date at the top. If we make material changes that significantly affect how we process your personal data or your rights, we will:

Post notice of the changes on our website
Where required by law, obtain your consent again or provide you with an opportunity to review and accept the changes

All updates become effective on the date we post the revised policy unless we specify otherwise.

Cross-Border Data Transfer Frameworks

As a global provider, Barawave puts in place appropriate safeguards for any international data transfers, including:

Standard Contractual Clauses (SCCs) for transfers from the EEA or UK
APEC Cross-Border Privacy Rules (CBPR) for transfers within the Asia-Pacific region

Where applicable, Barawave may also adhere to other recognized data-transfer frameworks. If you’d like a copy of the specific safeguards or certifications, please reach out to our Privacy Team.

How to Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data-processing practices, please get in touch:

Barawave Privacy Contact
Email: privacy@barawave.com

Support Email: support@barawave.com

For data-protection inquiries, you can also use our online Privacy Request Form. We aim to respond to all legitimate requests promptly and in accordance with applicable laws.