PRIVACY POLICY
What we do with your data
De Brigade Contractors values your privacy. This policy explains which personal data we collect when you visit our website or contact us, why, and what your rights are.
1. Who we are
Data controller:
- De Brigade Contractors
- Dijnselburgerlaan 3-B2, 3705 LP Zeist, Netherlands
- CoC: 99562693 · VAT: NL869040789B01
- Email: [email protected]
- Phone: +31 6 42425688
2. What data we process
We collect only the data needed to help you or to make the website function.
Via the contact form
- Name
- Email address
- Phone (optional)
- Subject/service (optional)
- Your message content
Automatically on visit
- IP address (hashed, stored for at most 60 seconds to protect the contact form from abuse)
- Standard server logs from our hosting provider (date, time, page requested, IP) for security and troubleshooting only
3. Purpose and legal basis (GDPR)
| Purpose | Legal basis (GDPR) |
|---|---|
| Contacting you in response to your request | Pre-contractual measures at your request (art. 6(1)(b) GDPR) |
| Protection against spam and abuse (rate limiting) | Legitimate interest (art. 6(1)(f) GDPR) |
| Security and proper operation of the website | Legitimate interest (art. 6(1)(f) GDPR) |
4. Retention
- Contact form messages: at most 12 months, then deleted, unless there is an active or planned assignment.
- Hashed IP addresses for rate limiting: at most 60 seconds.
- Server logs at hosting provider: at most 30 days.
- Cookie preference in your browser: at most 12 months.
5. Sharing with third parties
We do not sell or rent your data. We do engage a few parties to make the website work (processors):
- TransIP B.V.: web hosting and email. Servers in the Netherlands.
- Google Ireland Ltd.: fonts are loaded via Google Fonts when the website loads. Your IP is sent to Google.
- OpenStreetMap Foundation: only on the contact page, and only when you actively load the map, your IP is sent to OpenStreetMap to display the map.
6. Cookies
For a detailed overview see our cookie policy. You can change your preferences at any time via the Change cookie preferences button in the footer.
7. Your rights
Under GDPR you have the following rights:
- Right to access the data we process about you
- Right to rectification if data is incorrect
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interest
- Right to withdraw consent
Send a request to [email protected]. We respond within 4 weeks. To prevent abuse we may ask you to verify your identity.
8. Security
We take appropriate technical and organisational measures. The website is served exclusively over HTTPS, with security headers (HSTS, CSP) and protection against common attack vectors. The contact form has rate limiting and spam protection.
9. Complaint?
You have the right to lodge a complaint with the supervisory authority, the Dutch Data Protection Authority.
10. Changes
This privacy policy may be updated. The latest version is always available on this page.