Privacy Policy in Short

Any information we receive from you will never be given to third parties without your permission and is never sold. We apply the strictest security measures to protect your data. We strive to give transparency at all times.

Users can request to see their data or to have this deleted by using this form.

Who we are 

Our website address is: https://lb-assessments.com

This is run and managed by https://www.leading-brains.com  

leading brains
Bleicherstrasse 4
6003 Lucerne, Switzerland
+41 41 508 76 56
home@leading-brains.com 

 

For those who take leading brains asssessments www.lb-assessments.com 

Assessment Data

 

Privacy Policy Details

We are committed to protecting your privacy. For leading brains, the protection of not only personal but generally all data that flows through our platforms and services is the top priority. As a part of this effort, we process personal data in accordance with the EU’s General Data Protection Regulation (“GDPR”), and in accordance with the data protection regulations applicable to leading brains.

 

7 Key Principles of the GDPR

The GDPR encourages businesses to be responsible about an individual’s data. By ensuring protection and privacy of this data, businesses earn customer trust and they are likely to engage better with the business. GDPR provides a framework for businesses to standardize and regularize real-world security and privacy needs of an individual’s data used for business purposes. The key principles which the GDPR requires businesses to operate on are:

1. Lawful, fair and transparent processing

Emphasizes transparency for all individuals i.e. when data is collected, businesses must be clear as to why data is being collected and what will it be used for.

leading brains uses opt-in only processes. When corporations are the client, individuals have a right to access their individual data at all times.

2. Purpose limitation

Collect data, only for the purpose you need it for. That is, data collected for specific purposes/reasons cannot be further processed in a manner incompatible with those purposes/reasons.

leading brains uses separate systems with separate opt-in processes. For example, assessments require one opt-in and newsletter requires another opt-in.

3. Data minimization

Ensure data captured is adequate, relevant and limited. Based on this principle, organizations must ensure they store minimum amount of data required for their purpose.

leading brains collects a minimum of demographic information for assessments. We only collect name and email address for marketing purposes and limit marketing cookies and data analytics.

4. Accurate and up-to-date processing

Data controllers must ensure information remains accurate, valid and fit for purpose. To comply, organizations must institute processes and policies to address how they maintain data they are processing and storing it.

leading brains runs standardized weekly, monthly and quarterly cleansing and data consolidation processes.

5. Limitation of storage in a form that permits identification

Have control over storage and movement of data within the organization. This includes implementing and enforcing data retention policies and preventing unauthorised movement and storage of data.

leading brains only stores personalized data when this is relevant and necessary to perform our services. Data/statistical/psychometric analytics is run on anonymized data.

6. Confidential and secure

An organization collecting, and processing data is solely responsible for implementing appropriate security measures to protect the individual’s data.

leading brains only uses secure third-party tools that are GDPR compliant and exhibit the highest level of security.

7. Accountability and liability

Organizations must be able to demonstrate adoption of necessary steps to protect an individual’s personal data and be able to pull up every step within the GDPR strategy as evidence.

leading brains documents processes and operations carried out for data protection and security.

 

Data Requests

Users can request to see their data or to have this deleted by using this form.

 

Definitions

• User is a natural or legal person using leading brains website and services.
• GDPR means Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
• Personal data, Processor and Controller will each have the meaning given to them in Article 4 of the GDPR.

Information We Collect

Information you provide to us directly:

Personality Assessments taken by individual users providing limited demographic information and responses to personality items designed to measure personality traits.

Background information on your company or situation – sensitive information is generally only shared after signing a mutual Non-Disclosure Agreement.

Usage information: our assessment tool collects limited usage information such as timestamps.

Opt-in information for marketing purposes.

 

Data Controller

leading brains  is the data controller.

Andy Habermacher andy@leading-brains.com is the Security & Data Officer

 

Data Processers

We use a number of data processors – details of which can be requested from leading brains. These are reputable companies with industry standards in security and data processing in place. These include:

Typeform, for collecting answers from personality surveys.

Microsoft 365 platform, for data storage and documentation.

Brevo, for marketing and newsletter updates.

Freshsales, for managing our sales pipeline.

 

How we protect your data

We have a detailed security policy and customer and personal identifiable data is only accessible for limited administrators who have completed our security audit.

 

What data breach procedures we have in place

We have a detailed security and incident handling policy in place.

 

What third parties we receive data from

We do not receive third-party data.

 

What automated decision making and/or profiling we do with user data

We consolidate your psychometric data into detailed personality reports. We give detail becasue we believe psychometric data should be used in refined ways and without boxing people into limited “types”.

Some of these report on potential for certain leadership positions. Again these are designed to guide awareness and discussion. We do not recommend that critical decisions are made on psychometric reports but used in conjunction with other processes. When used well personality reports provide win-win scenarios with individuals better informed as well as the corporations that mandate these reports.