Privacy policy

This policy explains which personal data sambrain.net processes, why, and what rights you have. SAM BRAIN is a product of OOOX1.

1. Controller

OOOX1 EURL, 127 Rue du Général de Gaulle, 68740 Blodelsheim, France
Represented by Manuel Martorana
Email: service@sambrain.net

2. Hosting

This website runs on a server of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, located in Germany. netcup processes data on our behalf only (Art. 28 GDPR). Legal basis: our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR).

3. Server log files

When you open a page, the web server records the page requested, date and time, the amount of data transferred, the referring page, your browser and operating system, and your IP address. We use these records only to operate the website and to detect and defend against attacks, and do not combine them with other data. They are deleted automatically after 14 days. Legal basis: Art. 6(1)(f) GDPR.

4. Visitor statistics

We count page views on our own server, without any script in your browser, without cookies and without third parties. Your IP address is not stored: to recognise repeated views on the same day we keep only a short hash of IP address, browser identifier and a random value that is replaced every night, so views cannot be linked across days. We also keep the host name of the referring website, never its full address. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is knowing how the website is used.

5. Cookies

Visiting the website sets no cookies. Only when you sign in does the server set one strictly necessary session cookie (ooox1.sid) that keeps you signed in; it is removed when you sign out and expires after 30 days at the latest. If you choose “Trust this device” during sign-in, a second cookie (trusted_device, 5 days) remembers that choice so you are not asked for a code every time; we store only a hash of it. No consent is required for these strictly necessary cookies (Art. 82 Loi Informatique et Libertés).

6. Contact form and email

If you write to us via the contact form or by email, we process your name, email address, company (optional) and message to answer your request. The form is sent by our own mail server to our mailbox service@sambrain.net, which is hosted by Alfahosting GmbH, Edmund-von-Lippmann-Straße 13–15, 06112 Halle (Saale), Germany. We keep your message as long as needed to handle your request and any follow-up. Legal basis: Art. 6(1)(b) GDPR for enquiries about a contract, otherwise Art. 6(1)(f) GDPR.

7. Sign-in and use of SAM BRAIN

Accounts are created only by invitation from a customer organisation. When you sign in, we process your email address, password (stored only as a hash), sign-in times and a one-time code sent by email. The data you and your organisation enter in SAM BRAIN are processed on behalf of your organisation under its contract with OOOX1.

8. Fonts and external content

All fonts, images and scripts are delivered from this server. No content is loaded from third parties, and no data is sent to social networks, advertising networks or analytics providers.

9. Recipients and transfers

Data are processed in the European Union. Apart from the service providers named above, we do not pass personal data to third parties unless we are legally required to.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). You can withdraw a consent at any time with effect for the future. Write to service@sambrain.net.

You also have the right to lodge a complaint with a supervisory authority, in France the CNIL (Commission nationale de l’informatique et des libertés, 3 Place de Fontenoy, 75007 Paris, cnil.fr), or the authority where you live or work.

11. Security

The website is delivered only over encrypted connections (HTTPS).

Last updated: 23 September 2026