Legal
Privacy Policy.
How we handle the personal data you share with us, and the rights you have over it under the General Data Protection Regulation (GDPR).
Last updated: 21 June 2026
This policy explains what personal data Gebrema Metaalwaren B.V. collects through this website, why we collect it, how long we keep it, and the rights you have. We collect only what we need to answer your request and run our business, and we never sell your data.
Who is responsible for your data
The data controller is Gebrema Metaalwaren B.V., Bloemendalerweg 28, 1382 KC Weesp, Netherlands. For any question about this policy or your personal data, contact us at metal [at] gebrema [dot] eu or +31 294 415 151.
What we collect and when
We only receive personal data when you choose to send it to us. Specifically:
- Quote requests: when you use our request-a-quote form, we receive your name, company, email address, estimated annual volume, part type, and your message.
- Job applications: when you apply through our careers form, we receive the contact details and information you submit so we can assess and respond to your application.
- Email and phone: if you contact us directly, we receive whatever you include in that message or call.
- Website analytics: we use Cloudflare Web Analytics to measure aggregate, anonymised usage of the site (such as page views and referring sources). It uses no cookies and does not identify you individually.
Why we use it, and our legal basis
- To answer your quote request and assess technical and commercial fit. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.
- To handle and respond to job applications. Legal basis: taking steps at your request prior to a possible employment relationship, and our legitimate interest in recruitment.
- To understand, in aggregate, how the site is used so we can improve it. Legal basis: our legitimate interest, using analytics that do not identify individuals.
Who processes it for us
We use a small number of trusted service providers, acting as our processors under data-processing agreements. Form submissions are handled by Web3Forms, a form-processing service based in the United States, which forwards your message to us by email. The website is hosted, delivered and protected by Cloudflare, which also provides our cookieless analytics. Because these providers may process data outside the European Economic Area, including in the United States, such transfers rely on the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. We do not sell your data, and we do not share it for advertising.
How long we keep it
We keep quote-request data for the duration of your enquiry and any resulting business relationship, plus the periods we are legally required to observe afterwards (for example, seven years for records that fall under our tax obligations). We keep job-application data for up to four weeks after the application process closes, or up to one year if you give us permission, and we delete it sooner if you ask. Aggregate analytics data contains no personal identifiers.
Cookies
This website uses no advertising or tracking cookies, and our analytics (Cloudflare Web Analytics) are cookieless. Cloudflare, as our security and content-delivery provider, may set strictly necessary cookies to keep the site secure and available. These do not track you across other websites.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you, and receive a copy of it.
- Have inaccurate data corrected, and incomplete data completed.
- Have your data erased where there is no overriding reason for us to keep it.
- Restrict or object to how we process your data.
- Receive your data in a portable format where applicable.
To exercise any of these rights, email us at metal [at] gebrema [dot] eu. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
How we protect your data
Data you submit through our forms is transmitted over an encrypted (HTTPS) connection, and we apply reasonable technical and organisational measures to protect it against loss, misuse and unauthorised access.
Changes to this policy
We may update this policy as our practices or the law evolve. The current version, with its date, is always the one published on this page.